MS-100 Test 2

Question 1

Your company's Microsoft 365 subscription is your responsibility.
The corporation implements a security policy requiring DLP incident reports to be provided to legal department users automatically.
You must set up the reports to be distributed as frequently as possible via email.
Which of the following options should you choose?

Accepted Answer

Weekly

Answer

When configuring Data Loss Prevention (DLP) incident reports in Microsoft 365 to be automatically provided to users via email, the most frequent distribution option available is weekly. While DLP incidents can be monitored in real-time within the compliance center, the scheduled email reports for these incidents are typically limited to a weekly cadence.

Question 2

You used the Security & Compliance admin center to upload a number of archive PST files to Microsoft 365 earlier.
You discover that the PST files have been removed from Microsoft 365 45 days later when you try to run an import job for them.
Which of the following is the amount of days Microsoft 365 keeps PST files before automatically deleting them?

Accepted Answer

30 days

Answer

When PST files are uploaded to Microsoft 365 for import, they are temporarily stored in a secure Azure Storage location. Microsoft 365 automatically deletes these uploaded PST files from this storage location after a period of 30 days. Therefore, if an import job is not initiated or completed within 30 days of the upload, the files will be removed, requiring re-upload if needed.

Question 3

You are a subscriber to Microsoft 365 E5.

When users attempt to access Microsoft SharePoint Online resources, you must guarantee that they are prompted for multi-factor authentication (MFA). When attempting to access other Microsoft 365 services, users should not be requested for MFA.

What are your options?

Accepted Answer

Create a conditional access policy in the Azure Active Directory admin center

Answer

To enforce multi-factor authentication (MFA) specifically for access to Microsoft SharePoint Online resources while allowing access to other Microsoft 365 services without MFA, you should create a Conditional Access policy. These policies, configured in the Azure Active Directory admin center, allow granular control over access based on conditions like the target application, user group, or device state, enabling you to apply MFA only when SharePoint Online is accessed.

Question 4

You're a subscriber to Microsoft 365.

In the subscription, you recently configured a Microsoft SharePoint Online tenant.

You intend to create a policy for alerts.

You must guarantee that an alert is generated only if malware is found in more than five SharePoint Online documents in a 10-minute period.

What should you start with?

Accepted Answer

Deploy Windows Defender Advanced Threat Protection (Windows Defender ATP)

Answer

To generate an alert when malware is found in more than five SharePoint Online documents within a 10-minute period, you need advanced threat protection capabilities for your cloud services. Deploying Windows Defender Advanced Threat Protection (now Microsoft Defender for Endpoint, which integrates with Microsoft Defender for Office 365) provides the necessary security intelligence and alerting mechanisms to detect and respond to such specific malware threats within SharePoint Online.

Question 5

You're a subscriber to Microsoft 365.

A data loss prevention (DLP) policy is set up.

Users are wrongly tagging content as false positive, allowing the DLP policy to be bypassed.

You must prevent users from circumventing the DLP policy.

What should you set up?

Accepted Answer

user overrides

Answer

To prevent users from circumventing a Data Loss Prevention (DLP) policy by wrongly tagging content as a false positive, you need to manage the 'user overrides' setting within the DLP policy. User overrides allow users to bypass a policy if they provide a justification. By configuring or disabling these overrides, you can control whether users have the ability to bypass the DLP policy, thereby preventing unauthorized circumvention.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Test 2