- (Exam Topic 4)
You have a Microsoft 365 tenet named Contoso.com. the tenant contains the users shown in the following table.

You have an eDiscovery case shown in the follow table.

For each of the following statements select yes of the statements is true. Otherwise, select NO. NOTE: each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have a Microsoft 365 tenant that contains the groups shown in the following table.

You plan to create a new Windows 10 Security Baseline profile. To which groups can you assign to the profile?

1. A. Group3 only
2. B. Group1 and Group3 only
3. C. Group2 and Group3 only
4. D. Group1. Group2. and Group3

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/security-baselines-configure#create-the-profile https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide

- (Exam Topic 4)
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You need to provide a user with the ability to sign up for Microsoft Store for Business for contoso.com. The solution must use the principle of least privilege.
Which role should you assign to the user?

1. A. Cloud application administrator
2. B. Application administrator
3. C. Global administrator
4. D. Service administrator

Correct Answer: C
References:
https://docs.microsoft.com/en-us/microsoft-store/roles-and-permissions-microsoft-store-for-business

- (Exam Topic 4)
You have a Microsoft 365 subscription.
You configure a data loss prevention (DIP) policy.
You discover that users are incorrectly marking content as false positive and bypassing the OLP policy. You need to prevent the users from bypassing the DLP policy.
What should you configure?

1. A. incident reports
2. B. actions
3. C. exceptions
4. D. user overrides

Correct Answer: D
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

- (Exam Topic 4)
Your company has a Microsoft 365 E5 tenant that contains a user named User1. You review the company’s compliance score.
You need to assign the following improvement action to User1:Enable self-service password reset. What should you do first?

1. A. From Compliance Manager, turn off automated testing.
2. B. From the Azure Active Directory admin center, enable self-service password reset (SSPR).
3. C. From the Microsoft 365 admin center, modify the self-service password reset (SSPR) settings.
4. D. From the Azure Active Directory admin center, add User1 to the Compliance administrator role.

Correct Answer: D

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-improvement-actions?view=o https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-p