Fundamentals Flashcards

A business employs Microsoft 365. To proactively look for threats across users' devices and applications, the organization needs security experts to use the Microsoft 365 Defender portal. Which remedy ought to be suggested?

Answer: Hunting

In the Microsoft 365 Defender portal, "Hunting" refers to the proactive search for threats and vulnerabilities across an organization's environment. Security experts use hunting capabilities to investigate potential threats that automated systems might have missed, leveraging advanced queries and data to uncover sophisticated attacks. This allows for early detection and mitigation of emerging threats before they cause significant damage.

Microsoft 365 is implemented by a business. The company's security team requires a solution that satisfies the following criteria so they can comprehend threat signals for the Microsoft 365 product and services: ‥ Provide the first line of defense in the stack ‥ Automated investigation and remediation of breaches Provide capabilities for network protection Which solution should you recommend?

Answer: Microsoft Defender for Endpoint

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help corporate networks prevent, detect, investigate, and respond to advanced threats. It provides capabilities like endpoint detection and response (EDR), automated investigation and remediation, and network protection, acting as a crucial first line of defense for devices. This solution directly addresses the need for comprehensive threat protection and automated response on endpoints.

A business employs Microsoft 365. Multiple suspected attacks on staff accounts are reported by the business. The organization needs a solution that offers the following to stop future attacks: ‥ Monitors the behavior of employees ‥ Reduces surface attacks on employee accounts ‥ Identifies and investigates suspicious attacks on employee accounts You need to recommend a solution Which Microsoft Defender service should you recommend?

Answer: Microsoft Defender for Identify

Microsoft Defender for Identity (formerly Azure Advanced Threat Protection) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions. It monitors user behavior, detects suspicious activities like pass-the-hash or golden ticket attacks, and helps reduce the attack surface on identity infrastructure. This makes it ideal for protecting employee accounts from identity-based attacks.

A business is putting Microsoft 365 Defender services into place. An auditor for security wants to look around the Microsoft 365 Defender website. The security auditor needs to be given a role according to the least privilege concept. Which position should you fill?

Answer: Security Reader

The principle of least privilege dictates that users should only be granted the minimum permissions necessary to perform their job functions. A Security Reader role in Microsoft 365 Defender allows an auditor to view security-related information, alerts, and reports without having the ability to make changes or reconfigure settings. This role provides the required visibility for auditing while adhering to security best practices.

Microsoft's virtualization services are being evaluated by the company. What distinguishes Windows 3365 specifically?

Answer: A virtual machine is automatically provisioned after assigning a licensed to a user

Windows 365 is a cloud PC service that provides a personalized, secure, and scalable Windows experience from the Microsoft cloud to any device. A key differentiator is its simplicity: once a user is assigned a Windows 365 license, a Cloud PC (virtual machine) is automatically provisioned for them. This eliminates the complex setup and management typically associated with traditional virtual desktop infrastructure (VDI), offering a streamlined user experience.

A business intends to use Microsoft 365 to develop an insider risk solution. The business must put into practice a solution that satisfies the following criteria: ‥ Uses machine learning to identify email risks ‥ Provides workflows to remediate email risks ‥ Provides a dashboard to display email risks, actions, and trends. You need to identify a solution that meets the requirements. Which solution should you select?

Answer: Communication compliance policies

Microsoft 365 Communication compliance helps organizations detect, capture, and act on inappropriate messages in their organization. It uses machine learning to identify potential risks in communications, including email, Teams, and other platforms, based on defined policies. It provides dashboards for monitoring, and workflows for investigation and remediation, making it an ideal solution for managing insider risks related to email content.

A business introduces Microsoft 365. The business intends to employ sensitivity labeling. You must determine the sensitivity labels' capabilities. What three features do sensitivity labels have? Each right response offers a piece of the answer.

Answer: Sensitivity labels can be customized

Sensitivity labels in Microsoft 365 allow organizations to classify and protect sensitive data across their digital estate. They are highly customizable, enabling organizations to define labels that match their specific data classification schemes. These labels can enforce protective actions like encryption, access restrictions, and visual markings, and can also be configured for automatic application based on content or user actions, ensuring consistent data protection.

Which service in Microsoft 365 allows users to create, edit, and collaborate on documents, spreadsheets, and presentations in real-time?

Answer: OneDrive for Business

OneDrive for Business is Microsoft's cloud storage service for individuals within an organization. It allows users to store, sync, and share their personal work files securely. A key feature is its integration with Office applications, enabling real-time co-authoring and collaboration on documents, spreadsheets, and presentations directly from the cloud.

Which Microsoft 365 app provides a hub for teamwork, communication, and collaboration, offering features such as chat, meetings, and file sharing?

Answer: Microsoft Teams

Microsoft Teams is a unified communication and collaboration platform that combines persistent workplace chat, video meetings, file storage, and application integration. It serves as a central hub for teamwork, allowing groups to communicate, share files, and collaborate on projects in real-time. Its comprehensive feature set makes it essential for modern team collaboration.

Which Microsoft 365 subscription plan includes the full suite of Office applications (Word, Excel, PowerPoint, etc.) for both desktop and online use?

Answer: Microsoft 365 Business Standard

Microsoft 365 Business Standard is designed for small and medium-sized businesses and includes the full suite of desktop Office applications (Word, Excel, PowerPoint, Outlook, Publisher, Access) along with online versions. It also provides business services like Exchange, SharePoint, and Teams. This plan offers a comprehensive set of productivity tools for both installed and web-based use.

What is the purpose of Azure Active Directory in Microsoft 365?

Answer: It manages user identities and access to resources across Microsoft 365 services.

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It provides a central directory for managing user identities, groups, and devices, and controls access to Microsoft 365 services and other cloud applications. Azure AD is fundamental to authentication, authorization, and single sign-on capabilities across the entire Microsoft 365 ecosystem.

Which Microsoft 365 security feature helps protect against phishing attacks by identifying and preventing suspicious links and attachments in emails?

Answer: Advanced Threat Protection (ATP)

Microsoft Defender for Office 365, formerly known as Advanced Threat Protection (ATP), is a cloud-based email filtering service that helps protect against advanced threats like phishing, spoofing, and business email compromise. It uses features like Safe Links to scan URLs and Safe Attachments to detonate suspicious files in a sandbox environment, preventing malicious content from reaching users. This proactive protection is crucial for safeguarding against email-borne threats.

Which Microsoft 365 service allows users to create, manage, and share documents, as well as collaborate on them with others in real time?

Answer: SharePoint Online

SharePoint Online is a cloud-based service that helps organizations share and manage content, knowledge, and applications. It provides a robust platform for creating team sites, intranets, and document libraries, enabling users to store, organize, and collaborate on documents and files. Its features facilitate real-time co-authoring and version control, making it central to collaborative document management.

What is the primary purpose of Microsoft Intune in Microsoft 365?

Answer: It manages and secures devices used by employees.

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Its primary purpose is to manage and secure the devices (laptops, smartphones, tablets) that employees use to access company data and applications. Intune helps enforce security policies, deploy applications, and protect corporate information across various device types.

Which Microsoft 365 service provides a secure and encrypted platform for sending, receiving, and storing emails?

Answer: Microsoft Exchange Online

Microsoft Exchange Online is the cloud-based version of Microsoft's Exchange Server, providing hosted email, calendar, and contacts services. It offers a secure and encrypted platform for sending, receiving, and storing emails, with built-in features for spam filtering, malware protection, and data loss prevention. It is the backbone of email communication within Microsoft 365.

What is the purpose of Microsoft 365 compliance center?

Answer: It helps organizations manage compliance and data protection efforts.

The Microsoft 365 compliance center (now part of the Microsoft Purview compliance portal) is a unified portal that helps organizations manage their compliance and data protection needs. It provides tools for data governance, eDiscovery, insider risk management, data loss prevention, and privacy management. Its purpose is to help organizations meet regulatory requirements and protect sensitive data effectively.