- (Exam Topic 3)
You are evaluating which devices are compliant in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have a Microsoft 365 subscription.
You need to create data loss prevention (DLP) queries in Microsoft SharePoint Online to find sensitive data stored in sites.
Which type of site collection should you create first?

1. A. Records Center
2. B. Compliance Policy Center
3. C. eDiscovery Center
4. D. Enterprise Search Center
5. E. Document Center

Correct Answer: C
Reference:
https://support.office.com/en-us/article/overview-of-data-loss-prevention-in-sharepoint-server-2016-80f907bbb9

- (Exam Topic 4)
You have a Microsoft 365 E5 subscription
You need to ensure that users who are assigned the Exchange administrator role have time-limited permissions and must use multi factor authentication (MFA) to request the permissions.
What should you use to achieve the goal?

1. A. Microsoft 365 user management
2. B. Microsoft Azure AD group management
3. C. Security & Compliance permissions
4. D. Microsoft Azure Active Directory (Azure AD} Privileged Identity Management

Correct Answer: D

- (Exam Topic 4)
You create an Azure Sentinel workspace.
You configure Azure Sentinel to ingest data from Azure Active Directory (Azure AD).
In the Azure Active Directory admin center, you discover Azure AD Identity Protection alerts. The Azure Sentinel workspace shows the status as shown in the following exhibit.

In Azure Log Analytics, you can see Azure AD data in the Azure Sentinel workspace.
What should you configure in Azure Sentinel to ensure that incidents are created for detected threats?

1. A. data connectors
2. B. rules
3. C. workbooks
4. D. hunting queries

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/detect-threats-custom

- (Exam Topic 4)
You have a Microsoft 365 ES subscription linked to an Azure Active Directory (Azure AD) tenant The tenant contains a user named User1 and multiple Windows 10 devices. The deuces are Azure AD joined and protected by using BitLocker Drive Encryption (BitLocker). You need to ensure that User1 can perform tip following actions:
View BitLocker recovery keys.
Configure the usage location for the users in tenant.
The solution must use the principle of least privilege.
Which two roles should you assign to User' in the Microsoft 365 admin center? To answer, select the appropriate roles in the answer area.
Each correct selection is one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A