MS-100

MS-100 practice questions, page 17 of 18, with answer review and explanations.

Question 81

From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. You need to reduce the likelihood that the sign-ins are identified as risky. What should you do?

  1. From the Security & Compliance admin center, add the users to the Security Readers role group.
  2. From the Conditional access blade in the Azure Active Directory admin center, create named locations.
  3. From the Azure Active Directory admin center, configure the trusted IPs for multi-factor authentication.
  4. From the Security & Compliance admin center, create a classification label.

Question 82

You have a Microsoft 365 subscription. You have the devices shown in the following table. You need to onboard the devices to Windows Defender Advanced Threat Protection (ATP). The solution must avoid installing software on the devices whenever possible. Which onboarding method should you use for each operating system? To answer, drag the appropriate methods to the correct operating systems. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Question 83

You have a Microsoft 365 subscription. You need to implement Windows Defender Advanced Threat Protection (ATP) for all the supported devices enrolled devices enrolled on mobile device management (MDM). What should you include in the device configuration profile? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 84

You have a Microsoft 365 tenant. You have a line-of-business application named App1 that users access by using the My Apps portal. After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control. You need to be alerted by email if impossible travel is detected for a user of App1. The solution must ensure that alerts are generated for App1 only. What should you do?

  1. From Microsoft Cloud App Security, modify the impossible travel alert policy.
  2. From Microsoft Cloud App Security, create a Cloud Discovery anomaly detection policy.
  3. From the Azure Active Directory admin center, modify the conditional access policy.
  4. From Microsoft Cloud App Security, create an app discovery policy.

Question 85

Your network contains an on-premises Active Directory domain. Your company has a security policy that prevents additional software from being installed on domain controllers. You need to monitor a domain controller by using Microsoft Azure Advanced Threat Protection (ATP). What should you do? More than once choice may achieve the goal. Select the BEST answer.

  1. Deploy an Azure ATP standalone sensor, and then configure port mirroring.
  2. Deploy an Azure ATP standalone sensor, and then configure detections.
  3. Deploy an Azure ATP sensor, and then configure detections.
  4. Deploy an Azure ATP sensor, and then configure port mirroring.