- (Exam Topic 5)
You have a Microsoft 365 E5 subscription that contains 200 Android devices enrolled in Microsoft Intune. You create an Android app protection policy named Policy! that is targeted to all Microsoft apps and assigned to all users.
Policy! has the Data protection settings shown in the following exhibit.

Use the drop-down menus to select 'he answer choice that completes each statement based on the information presented in the graphic.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps. You configure a session control policy to block downloads from SharePoint Online sites. Users report that they can still download files from SharePoint Online sites.
You need to ensure that file download is blocked while still allowing users to browse SharePoint Online sites. What should you configure?

1. A. an access policy
2. B. a data loss prevention (DLP) policy
3. C. an activity policy
4. D. a Conditional Access policy

Correct Answer: A

- (Exam Topic 5)
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

In Microsoft Endpoint Manager, you have the Policies for Office apps settings shown in the following table.

The policies use the settings shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
Graphical user interface, text, application Description automatically generated
Reference:
https://docs.microsoft.com/en-us/deployoffice/overview-office-cloud-policy-service

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
You have an Azure AD tenant.
You have 1,000 computers that run Windows 10 Pro and are joined to Azure AD. You purchase a Microsoft 365 E3 subscription.
You need to deploy Windows 10 Enterprise to the computers. The solution must minimize administrative effort.
What should you do?

1. A. From the Microsoft Endpoinf Manager admin center, create a Windows Autopilot deployment profile.Assign the profile to all the computer
2. B. Instruct users to restart their computer and perform a network restart.
3. C. Enroll the computers in Microsoft Intun
4. D. Create a configuration profile by using the Edition upgrade and mode switch templat
5. E. From the Microsoft Endpoint Manager admin center, assign the profile to all the computers and instruct users to restart their computer.
6. F. From Windows Configuration Designer, create a provisioning package that has an EditionUpgrade configuration and upload the package to a Microsoft SharePoint Online sit
7. G. Instruct users to run the provisioning package from SharePoint Online.
8. H. From the Azure Active Directory admin center, create a security group that has dynamic device membershi
9. I. Assign licenses to the group and instruct users to sign in to their computer.

Correct Answer: B

- (Exam Topic 5)
You have an Azure AD tenant and a Microsoft 365 E5 subscription. The tenant contains the users shown in the following table.

You plan to implement Microsoft Defender for Endpoint.
You verify that role-based access control (RBAC) is turned on in Microsoft Defender for Endpoint. You need to identify which user can view security incidents from the Microsoft 365 Defender portal. Which user should you identify?

1. A. User1
2. B. User2
3. C. User3
4. D. User4

Correct Answer: A