- (Exam Topic 5)
You have a Microsoft 365 subscription.
All users have their email stored in Microsoft Exchange Online
In the mailbox of a user named User, you need to preserve a copy of all the email messages that contain the word ProjectX.
What should you do first?

1. A. From the Exchange admin center, start a mail flow message trace.
2. B. From the Security & Compliance admin center, start a message trace.
3. C. From the Security & Compliance admin center, create a label and label policy.
4. D. From the Exchange admin center, create a mail flow rule.

Correct Answer: C
When you configure conditions for a label, you can automatically assign a label to a document or email. In this case, we would create a label to label all email messages that contain the word ProjectX. We would then create a label policy to preserve a copy of all message that have the label assigned.
Reference:
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-classification

- (Exam Topic 5)
Your on-premises network hosts an app named App1.
You have a hybrid Microsoft 365 environment that contains 100 users. The users are assigned Microsoft 36S E5 licenses.
You need to enable Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for App1 Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the connect order.

Solution:
Graphical user interface, text, application, email Description automatically generated

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
You have an on-premises Microsoft Exchange Server organization that contains 500 mailboxes and a third-party email archive solution.
You have a Microsoft 365 tenant that contains a user named User1.
You plan to use the User1 account to perform a PST import of the archive mailboxes to the tenant. Which two roles does User1 require to perform the import? The solution must use the principle of least
privilege. Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

1. A. Mail Recipients
2. B. Exchange admin
3. C. Records Management
4. D. Mailbox Import Export
5. E. eDiscovery Manager

Correct Answer: AD
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/importing-pst-files-to-office-365?view=o365-world

- (Exam Topic 5)
You create a SharePoint Framewort (SPFx) web pact and include MSGraphClient by using the following manifest.

Which two actions can the web part perform? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point

1. A. Access the user information of all users.
2. B. Send an email on behalf of the current user.
3. C. Send an email on behalf of another user.
4. D. Access the user information of the current user only.
5. E. Create a file in the current user's Microsoft OneDrive

Correct Answer: BD

- (Exam Topic 5)
You have a Microsoft 365 tenant.
You have a line-of-business application named App1 that users access by using the My Apps portal.
After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control.
You need to be alerted by email if impossible travel is detected for a user of App1. The solution must ensure that alerts are generated for App1 only.
What should you do?

1. A. From Microsoft Cloud App Security, modify the impossible travel alert policy.
2. B. From Microsoft Cloud App Security, create a Cloud Discovery anomaly detection policy.
3. C. From the Azure Active Directory admin center, modify the conditional access policy.
4. D. From Microsoft Cloud App Security, create an app discovery policy.

Correct Answer: A
Impossible travel detection identifies two user activities (is a single or multiple sessions) originating from geographically distant locations within a time period shorter than the time it would have taken the user to travel from the first location to the second.
We need to modify the policy so that it applies to App1 only. Reference:
https://docs.microsoft.com/en-us/cloud-app-security/anomaly-detection-policy