HOTSPOT -
Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: MCAS integrates with Microsoft security services via the Intelligent Security Graph and contributes signals used by Defender for Identity.
MCAS integrates with Microsoft Secure Score to surface security posture improvements.
Alert automation is handled through Power Automate, not Power BI; Power BI is for reporting and visualization, not response automation.
Question 150
A company is evaluating Microsoft 365.
You need to identify the benefits of an Enterprise Agreement.
What is a benefit of an Enterprise Agreement?
A. Locked-in pricing for the duration of the term.
B. All licenses are perpetual.
C. Simplified non-expiring licensing model.
D. Simplified per-device licensing model.
Show Answer
Correct Answer: A
Explanation: An Enterprise Agreement provides price protection by locking in pricing for the duration of the agreement term (typically three years), which helps organizations budget and plan costs. The other options do not apply because EA licenses are generally subscription-based, not perpetual, and do not focus on non-expiring or per-device licensing models.
Question 151
A company is evaluating Microsoft 365.
You need to determine how you can filter Microsoft 365 roadmap items.
What are three methods to filter items? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Cloud instance
B. Licensing type
C. Product
D. Region
E. Platform
Show Answer
Correct Answer: A, C, E
Explanation: The Microsoft 365 roadmap page supports filtering by Cloud instance, Product, and Platform. Licensing type and Region are not available as roadmap filter options.
Question 152
HOTSPOT -
Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct match is worth one point.
Hot Area:
Show Answer
Correct Answer: 1. No
2. Yes
Explanation: Cloud-only identities are created and managed entirely in Azure AD and are not synchronized from on-premises AD DS, so Azure AD Connect is not used. With hybrid identities, Azure AD Connect can synchronize password hashes from on-premises AD DS to Azure AD, allowing Azure AD accounts to have a password hash from on-premises.
Question 153
DRAG DROP -
A company is migrating to Microsoft 365.
The company is evaluating work management features in Microsoft 365.
You need to recommend the appropriate Microsoft 365 services.
Which services should you recommend? To answer, drag the appropriate services to the correct features. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Track, manage, and organize team appointments and calendars:
Microsoft Bookings
Assign and manage tasks using task cards:
Microsoft Planner
Plan, prioritize, and manage resources:
Microsoft Project
Explanation: Microsoft Bookings is designed for scheduling and managing team appointments and calendars. Microsoft Planner uses task cards (Kanban-style) to assign and track team tasks. Microsoft Project provides advanced project planning, prioritization, and resource management capabilities.
Question 154
You are an IT director that is evaluating the capabilities of Microsoft Endpoint Manager.
You need to present the capabilities to key stakeholders.
Which three capabilities should you present to the stakeholders? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Set up and preconfigure new Windows devices.
B. Monitor on-premises servers.
C. Report on cloud-based security event information.
D. Manage cloud-based mobile devices.
E. Deploy on-premises desktop apps.
Show Answer
Correct Answer: A, D, E
Explanation: Microsoft Endpoint Manager (MEM) combines Microsoft Intune and Configuration Manager, providing end‑to‑end endpoint management capabilities. It can set up and preconfigure new Windows devices using Windows Autopilot (A), manage cloud‑based mobile and desktop devices across platforms through Intune (D), and deploy desktop applications to on‑premises devices via Configuration Manager (E). Monitoring on‑premises servers and reporting on cloud security events are handled by other Microsoft services, not core MEM capabilities.
Question 155
DRAG DROP
-
A company uses Microsoft 365.
The company is evaluating which Zero Trust security policies to implement.
Which Zero Trust security principle should you recommend? To answer, drag the appropriate principles to the correct requirements. Each principle may be used once. more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Monitor all access requests to confirm the context of each access request.
Verify explicitly
Only grant users the environment and device permissions necessary to meet required business goals.
Least privileged access
Monitor, analyze, and automate response to security incidents.
Assume breach
Explanation: Zero Trust is based on three core principles: verify explicitly (evaluate context for every access), use least privileged access (grant only necessary permissions), and assume breach (continuously monitor and respond as if compromise has occurred).
Question 156
HOTSPOT -
A company uses Microsoft 365. The company has an application that runs on a device that does not have internet access.
The device can only be updated manually every two years.
You need to determine how you should update the device.
Select the answer that correctly completes the sentence.
Hot Area:
Explanation: The device has no internet access and can only be updated manually every two years. LTSC is designed for isolated or specialized devices that require infrequent feature updates and long-term stability. It supports long servicing periods without frequent upgrades, unlike the General Availability Channel, Windows Insider Program, or Microsoft Intune, which require regular connectivity and updates.
Question 157
HOTSPOT
-
Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
Yes
Explanation: Cloud App Security alone does not directly block apps; blocking requires integration with Defender for Endpoint.
It includes data loss prevention and information protection to prevent data leakage.
Microsoft handles legal requests for customer data stored in its cloud services, including Cloud App Security.
Question 158
DRAG DROP
-
A company is migrating to Microsoft 365.
The company is evaluating app integrations in Microsoft Teams.
Which app integrations should you recommend? To answer, drag the appropriate integrations to the correct features. Each integration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Allows users to send text-based messages to a company’s web services:
Outgoing webhooks
Enables external services to send messages to Teams channels through an HTTP endpoint:
Incoming webhooks
Allows users to subscribe to receive alerts and information from web services:
Connectors
Explanation: Outgoing webhooks let Teams send messages to external web services. Incoming webhooks expose an HTTP endpoint so external services can post messages into Teams channels. Connectors are used for subscribing to alerts and information from web services into Teams.
$19
Get all 441 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
