Which Microsoft Purview feature allows users to identify content that should be protected?
A. Sensitivity Labels
B. Data loss prevention
C. eDiscovery
D. Insider Risks
Show Answer
Correct Answer: A
Explanation: Sensitivity Labels in Microsoft Purview enable users and organizations to classify and identify sensitive content that should be protected, and can apply protection such as encryption or access restrictions. Data Loss Prevention enforces policies to prevent data leakage, eDiscovery is for investigating and collecting content, and Insider Risk Management detects risky user activities.
Question 12
Which type of identity can be used with an Azure service and will be deleted automatically when the service is deleted?
A. user-assigned managed identity
B. service principal
C. user
D. system-assigned managed identity
Show Answer
Correct Answer: D
Explanation: A system-assigned managed identity is tied directly to the lifecycle of a single Azure resource. When the Azure service/resource is deleted, the system-assigned managed identity is automatically deleted as well. A user-assigned managed identity is a separate Azure resource that persists independently until explicitly deleted.
Question 13
In the shared responsibility model, for what is Microsoft responsible when managing Azure virtual machines?
A. Updating the firmware of the disk controller.
B. Updating installed applications.
C. Configuring the permissions for shared folders.
D. Updating the operating system.
Show Answer
Correct Answer: A
Explanation: Under the Azure shared responsibility model for IaaS virtual machines, Microsoft is responsible for the underlying physical infrastructure and hardware, including firmware for components such as the disk controller. The customer is responsible for the guest operating system, installed applications, and configuration such as shared folder permissions.
Question 14
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
Yes
Explanation: Microsoft Defender for Cloud is not included with Microsoft 365 E5 and is an Azure service with separate pricing. It includes CSPM capabilities, and enhanced Defender plans provide VM vulnerability assessment/scanning features.
Question 15
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Permission classifications
Explanation: The Entra Permissions Management portal includes Permission classifications for categorizing permissions by risk/sensitivity. Microsoft Secure Score and PIM are accessed through other Entra/Microsoft portals, and PCI is a feature within Permissions Management rather than the portal entry being referenced.
Question 16
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: collect and copy data into review sets.
Explanation: Microsoft Purview eDiscovery (Standard) extends Content search by allowing search results to be collected into review sets for review and export. Features such as predictive coding and custodian management are Premium capabilities.
Question 17
HOTSPOT -
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: analytics
Explanation: Microsoft Sentinel uses analytics rules to generate alerts, which are then correlated and grouped into incidents. Hunting, notebooks, and workbooks do not perform alert-to-incident correlation.
Question 18
Which two types of devices can be managed by using Endpoint data loss prevention (Endpoint DLP)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Windows 11
B. Linux
C. iOS
D. macOS
E. Android
Show Answer
Correct Answer: A, D
Explanation: Microsoft Purview Endpoint DLP supports onboarded Windows 10/11 devices and onboarded macOS devices. It does not support Linux, iOS, or Android as Endpoint DLP managed endpoints.
Question 19
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: federation
Explanation: Accessing a partner company's resources using your own organization's credentials requires a federation trust between the organizations so identities are accepted across organizational boundaries.
Question 20
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Access Reviews can evaluate access to groups, apps, and Azure resource roles. They can automatically remove users from groups if configured based on review results. The feature is not available in all Microsoft Entra ID plans; it requires appropriate governance/premium licensing.
$19
Get all 230 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
