HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
No
Explanation: Devices can be registered and have identities stored in Azure AD (Entra ID).
A system-assigned managed identity is tied to a single Azure resource only.
User-assigned managed identities are independent resources and are not deleted when the associated resource is deleted.
Question 53
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Logic Apps in Microsoft Sentinel are used for automation through playbooks, not for anomaly identification.
Alert correlation into incidents is handled by analytics rules, not workbooks.
Sentinel hunting queries and tools are aligned with and mapped to the MITRE ATT&CK framework.
Question 54
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: a security principal
Explanation: Azure AD (Microsoft Entra ID) roles are assigned to security principals, such as users, groups, service principals, or managed identities. Resource groups, management groups, and administrative units are scopes or containers, not role assignees.
Question 55
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: GitHub can act as a cloud-based identity provider using OAuth. Federation enables SSO across multiple service providers. A central identity provider handles authentication and authorization, but auditing is not always fully managed by the identity provider.
Question 56
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
Yes
Explanation: Information Barriers do not restrict email communication in Exchange Online.
Information Barriers can restrict access and collaboration to SharePoint Online sites.
Information Barriers can prevent file sharing and collaboration between users in Microsoft Teams (via SharePoint/OneDrive integration).
Question 57
You have an Azure subscription.
You need to implement approval-based, time-bound role activation.
What should you use?
A. access reviews in Azure AD
B. Azure AD Privileged Identity Management (PIM)
C. Azure AD Identity Protection
D. Conditional access in Azure AD
Show Answer
Correct Answer: B
Explanation: Approval-based, time-bound role activation is provided by Azure AD Privileged Identity Management (PIM), which allows users to activate eligible roles for a limited duration with optional approval and justification. Other options do not provide just-in-time role activation.
Question 58
Which portal contains the solution catalog?
A. Microsoft Purview compliance portal
B. Microsoft 365 Defender portal
C. Microsoft 365 admin center
D. Microsoft 365 Apps admin center
Show Answer
Correct Answer: A
Explanation: The Microsoft 365 Solution Catalog is hosted in the Microsoft Purview compliance portal. Microsoft documentation explicitly states that the solution catalog, which provides an overview of compliance and risk management solutions available in a tenant, is accessed through the Purview compliance portal, not the Defender, Microsoft 365 admin, or Apps admin portals.
Question 59
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Customize navigation
Explanation: The Microsoft Purview compliance portal includes a **Customize navigation** option that lets administrators hide or remove features from the left navigation pane.
Question 60
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Assessments
Explanation: In Microsoft Compliance Manager, assessments group related controls from a specific regulation or requirement and are used to track compliance status.
Question 61
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Security defaults are included at no additional cost, apply tenant-wide (not per user), and enforce MFA for all administrators when enabled.
$19
Get all 224 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
