MS-102 Free Practice Questions — Page 10

Question 93

You have a Microsoft 365 E5 subscription that contains Windows 11 devices. All the devices are onboarded to Microsoft Defender for Endpoint. You need to compare the configuration of the devices against industry standard benchmarks. What should you use?

Question 94

HOTSPOT - Your company has offices in Montreal, Seattle, and New York City. You have a Microsoft 365 E5 subscription that contains the users shown in the following table. The offices have the IP addresses shown in the following table. From Microsoft Defender for Cloud Apps, you create the activity policy shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 95

HOTSPOT - You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3. You use Microsoft Entra ID Protection. You configure the Users at risk detected alerts setting to send an alert when a user risk level of low or above is detected. Users are assigned the risk levels shown in the following table. By the end of the day, how many alerts were generated for User1, and how many alerts were generated for User2 and User3? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 96

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create a Standard preset security policy. Does this meet the goal?

Question 97

HOTSPOT - You have a Microsoft 365 E5 subscription that contains a user named User1. User1 has a Windows 11 device named Device1 that is onboarded to Microsoft Defender for Endpoint. User1 reports that various files were deleted from Device1. You need to create a filter to identify which service deleted the files. Which settings should you configure, and which type of filter should you create in the Microsoft Defender portal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 98

HOTSPOT - You have a Microsoft 365 subscription. You integrate Microsoft Defender for Cloud Apps with Microsoft Defender for Endpoint. You need to create a policy to block users from accessing discovered apps that have a risk score of 4 or lower. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

Question 99

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You use Microsoft Entra ID Protection. For the Users at risk detected alerts setting, you configure the following: • Recipient: Admin1 • Alert on user risk level at or above: Medium User1 signs in to Microsoft 365 services and is assigned the detected risk levels shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 100

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: • To reset a user's password, emulate an email message that contains a link. • Track any users that selects the email message link. • Suggest further social engineering training. What should you use in the Microsoft Defender portal?

Question 101

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You integrate Microsoft Defender for Endpoint with Microsoft Intune. You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune. Solution: You configure a device configuration profile. Does this meet the goal?

Question 102

HOTSPOT - You have a Microsoft 365 E5 subscription that contains a Windows 11 device named Device1. Device1 is onboarded to Microsoft Defender for Endpoint. You need to ensure that Device1 is blocked from connecting to IP address 131.107.10.15. What should you configure in the Microsoft Defender Endpoint settings? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.