HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Customize navigation
Explanation: In the Microsoft Purview compliance portal, the Customize navigation option is used to hide or remove features from the left navigation pane for a customized experience.
Question 66
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Assessments
Explanation: In Microsoft Compliance Manager, assessments are used to track compliance against grouped controls for a specific regulation, standard, or requirement.
Question 67
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Security defaults do not require Azure AD Premium licenses, apply tenant-wide rather than to a single user, and require administrators to use MFA.
Question 68
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
No
Explanation: Asymmetric encryption uses a public/private key pair. Symmetric encryption uses a shared secret key, not public/private keys. Hashes are one-way and cannot be decrypted to recover the original content.
Question 69
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: integrity
Explanation: Ensuring retrieved data matches the originally stored data is the security property of integrity, which protects against unauthorized or accidental modification.
Question 70
What should you use to associate the same identity to more than one Azure virtual machine?
A. an Azure AD user account
B. a user-assigned managed identity
C. a system-assigned managed identity
D. an Azure AD security group
Show Answer
Correct Answer: B
Explanation: A user-assigned managed identity is a standalone Azure resource that can be assigned to multiple Azure resources, including more than one virtual machine. A system-assigned managed identity is tied to a single resource and cannot be shared. Azure AD user accounts and security groups are not managed identities for Azure resources.
Question 71
You have an Azure subscription that contains a Log Analytics workspace.
You need to onboard Microsoft Sentinel.
What should you do first?
A. Create a hunting query.
B. Correlate alerts into incidents.
C. Connect to your security sources.
D. Create a custom detection rule.
Show Answer
Correct Answer: C
Explanation: After onboarding Microsoft Sentinel to a Log Analytics workspace, the next foundational step is to connect data sources (security sources) using data connectors so Sentinel can ingest telemetry. Hunting queries, analytics/detection rules, and incident correlation all depend on having data available first.
Question 72
Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?
A. Windows 10 and newer only
B. Windows 10 and newer and Android only
C. Windows 10 and newer and macOS only
D. Windows 10 and newer, Android, and macOS
Show Answer
Correct Answer: C
Explanation: Microsoft Purview Endpoint Data Loss Prevention supports onboarded Windows 10/11 (Windows 10 and newer) and supported macOS devices. It does not support Android for Endpoint DLP, so the option including Windows 10 and newer plus macOS is correct.
Question 73
Which three forms of verification can be used with Azure AD Multi-Factor Authentication (MFA)? Each correct answer presents a complete solution.
NOTE: Each correct answer is worth one point.
A. security questions
B. the Microsoft Authenticator app
C. SMS messages
D. a smart card
E. Windows Hello for Business
Show Answer
Correct Answer: B, C, E
Explanation: Azure AD (Microsoft Entra ID) Multi-Factor Authentication supports verification methods including the Microsoft Authenticator app, SMS messages, and Windows Hello for Business. Security questions are used for self-service password reset rather than MFA, and smart cards are not a standard Azure AD MFA verification method.
Question 74
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Azure DDoS Protection mitigates DDoS attacks (including protocol attacks), not man-in-the-middle attacks, and the Standard tier is not enabled by default; it must be configured.
$19
Get all 235 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
