MS-900 Simulado Modulo 4

A company deploys Microsoft Azure AD. You enable multi-factor authentication.

You need to inform users about the multi-factor authentication methods that they can use.

Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items.

Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees.

Employees must not be able to share documents or forward emails that contain sensitive information outside the company.

You need to enforce the file sharing restrictions.

What should you do?

You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users.

You need to implement self-service password reset. You want to achieve this goal while minimizing costs.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

You are a Microsoft 365 administrator for a company.

What are two ways that you can ensure data security? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You are a Microsoft 365 administrator for a company.

You need to identify security vulnerabilities by using the Office 365 Attack Simulator.

Which three attack simulations are available? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Your organization plans to deploy Microsoft 365 in a hybrid scenario.

You need to ensure that employees can use a smart card for authentication.

Which hybrid identity solution should you implement?

You need to ensure that the process by which users sign in to Microsoft 365 confirms the identity of the user.

Which feature should you use?

You are a Microsoft 365 administrator for a company.

You need to ensure that company documents are marked as confidential. You must prevent employees from sharing documents with people outside the company.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You are the Microsoft 365 administrator for a company.

An employee requests personal data under General Data Protection Regulation (GDPR) guidelines.

You need to retrieve data for the employee.

What should you do?

A company has a Microsoft 365 subscription. Employees use personal devices to access company data in the cloud.

You need to restrict employees from copying data to personal OneDrive folders.

What should you use?

You are the network administrator of a company.

The Microsoft 365 tenant contains sensitive information. Employees must verify their identities when they sign into Microsoft 365 by providing information in addition to their Azure AD password.

You need to select the tools that employees can use to verify their identities.

Which two tools should you select? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to move videos to a Microsoft 365 tenant and ensure that the contents are automatically transcribed.

Which Microsoft 365 service should you use?

An organization uses Microsoft 365 Business to secure their data.

Many users install the organization’s data on their personal tablets and phones.

You need to protect the organization’s data stored on users’ devices.

Which three features support device security? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

This question requires that you evaluate the underlined text to determine if it is correct.

You use Microsoft Intune for device management. You must determine how many devices run each operating system.

You must launch Intune and navigate to the Mobile Apps blade.

Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

You are the Microsoft 365 administrator for a company.

You need to ensure that users receive a warning message if they select links in emails that might be unsafe.

What should you do?

A business acquaintance from another company sends you a document that is encrypted by Azure Information Protection (AIP).

You are unable to open the document because the user account cannot be authenticated by the company’s Azure Active Directory.

You need to access the document.

What should you do?

A company deploys Microsoft Azure AD. You enable multi-factor authentication.

You need to inform users about the multi-factor authentication methods that they can use.

Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

You are a Microsoft 365 administrator for a company.

Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicious code.

You need to remove the message from inboxes and disable the PDF threat if an affected document is opened.

Which feature should you implement?

You are the Microsoft 365 administrator for a company.

All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the application.

You need to implement a Microsoft Intune policy to enforce the security requirements.

Which policy should you use?

A company deploys Exchange Online and SharePoint Online.

You must audit and assessment reports for the Microsoft 365 cloud services that the company uses.

You need to provide the required documents.

Which Microsoft site should you use to obtain this information?

A company is planning to use Microsoft Threat Protection.

The company needs to protect Windows 10 client computers from malicious viruses. The company also needs to identify unauthorized cloud apps that are used by end users.

You need to identify the Microsoft Threat Protection solutions that meet the requirements.

Which two solutions should you choose? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A company has Microsoft 365.

The company needs to secure their environment. They start by identifying the highest risks to security according to Microsoft.

You need to identify the security changes that are recommended by Microsoft 365.

Which tool should you choose?

A company uses Microsoft 365.

The company wants users to be prompted for additional verification when they access a federated third-party application. However, users must not be prompted for additional verification when they access Microsoft Outlook.

You need to identify a solution that meets the requirements.

Which solution should you choose?

A company plans to migrate to Microsoft 365.

You need to advise the company about how Microsoft provides protection in a multitenancy environment.

What are three ways that Microsoft provides protection? Each correct answer presents part of the solution. (Choose three.)

NOTE: Each correct selection is worth one point

You are the Microsoft 365 administrator for a company.

Your company plans to open a new office in the United Kingdom.

You need to provide penetration test and security assessment reports for the new office.

Where can you locate the required reports?

You are the Microsoft Office 365 administrator for a company.

You need to perform security and compliance reviews before new updates are distributed to the entire company.

What should you implement?

A company has a Microsoft 365 subscription that includes Office apps.
A user has identified a new issue while working with an app. When the user attempts to create a support request, the following message displays:

You don’t have parmission to access this page or perform this action.

You need to determine the cause of the error message.

What is the cause?

Your company purchases Microsoft 365 E3 and Azure AD P2 licenses.

You need to provide identity protection against login attempts by unauthorized users.

What should you implement?

You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents.

You need to implement document classification and protection by using Microsoft Azure Information Protection.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A company uses Microsoft 365.

The company needs to label emails and documents that contain confidential text.

You need to identify a feature that meets this requirement.

Which feature should you choose?