You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune.

Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender for Endpoint.

You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint.

What should you create first?

Correct Answer: C 🗳️

You have a Microsoft 365 subscription.

You create a retention label named Retention1 as shown in the following exhibit.



You apply Retention1 to all the Microsoft OneDrive content.

On January 1, 2020, a user stores a file named File1 in OneDrive.
On January 10, 2020, the user modifies File1.
On February 1, 2020, the user deletes File1.

When will File1 be removed permanently and unrecoverable from OneDrive?

Correct Answer: B 🗳️

You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1.

You enable Azure AD Identity Protection.

You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

Correct Answer: C 🗳️

HOTSPOT
-

You have a Microsoft 365 E5 tenant.

You have a sensitivity label configured as shown in the Sensitivity label exhibit.



You have an auto-labeling policy as shown in the Auto-labeling policy exhibit.



A user sends an email that contains the components shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have a Microsoft 365 subscription.

You need to implement a passwordless authentication solution that supports the following device types:

• Windows
• Android
• iOS

The solution must use the same authentication method for all devices.

Which authentication method should you use?

Correct Answer: A 🗳️

HOTSPOT
-

You have a Microsoft 365 subscription.

You need to configure an auto-apply policy for sensitivity labels that will protect corporate data. The solution must meet the following requirements:

• Documents containing content that matches a custom regular expression must be classified automatically.
• Contract documents in a standard format must be classified automatically.

What should you configure for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the security groups shown in the following table.



The subscription contains the users shown in the following table.



You have a Conditional Access policy that has the following settings:

• Assignments
o Users
Include: Group1
Exclude: Group2, Group3
o Target resources
Cloud apps
App1
Access controls
Grant
Block access

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Correct Answer:

Your company has a Microsoft Entra tenant named contoso.com and a Microsoft 365 subscription.

All users use Windows 10 devices to access Microsoft Office 365 apps.

All the devices are in a workgroup.

You plan to implement password less sign-in to contoso.com.

You need to recommend changes to the infrastructure for the planned implementation.

What should you include in the recommendation?

Correct Answer: A 🗳️

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2.

You need to enable multi-factor authentication (MFA) for the members of Group1 and Group2. The solution must meet the following requirements:

• The Group1 members must be prompted for MFA only when authenticating to Microsoft Entra ID from Android devices.
• The Group2 members must be prompted for MFA only when accessing Microsoft Exchange Online from outside the corporate network.
• Administrative effort must be minimized.

What should you configure for each group? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

Your network contains an Active Directory domain named adatum.com that is synced to a Microsoft Entra tenant.

The domain contains 100 user accounts.

The city attribute for all the users is set to the city where the user resides.

You need to modify the value of the city attribute to the three-letter airport code of each city.

What should you do?

Correct Answer: D 🗳️