- (Exam Topic 4)
You have a Microsoft 365 subscription that contains the users shown in the following table.

You need to ensure that User1, User2 , and User3 can use self-service password reset (SSPR). The solution must not affect User 4.
Solution: You create a conditional access policy for User1, User2, and User3, Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

- (Exam Topic 4)
You have a Microsoft Sentinel workspace that has an Azure Active Directory (Azure AD) connector and an Office 365 connector.
From the workspace, you plan to create an analytics rule that will be based on a custom query and will run a security play.
You need to ensure that you can add the security playbook and the custom query to the rule. What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have a Microsoft 365 subscription that contains a Microsoft 365 group named Group1. Group1 contains 100 users and has dynamic user membership.
All users have Windows 10 devices and use Microsoft SharePoint Online and Exchange Online. You create a sensitivity label named Label and publish Label 1 as the default label for Group!. You need to ensure that the users in Group1 must apply Label! to their email and documents. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. Install the Azure Information Protection unified labeling client on the Windows 10 devices.
2. B. From the Microsoft 365 Compliance center, modify the settings of the Label1 policy.
3. C. Install the Active Directory Rights Management Services (AD RMS) client on the Windows 10 devices.
4. D. From the Microsoft 365 Compliance center, create an auto-labeling policy.
5. E. From the Azure Active Directory admin center, set Membership type for Group1 to Assigned.

Correct Answer: DE

- (Exam Topic 4)
You have a Microsoft 365 E5 subscription that contains two users named Adminl and User1. a Microsoft SharePoint Online site named Site1, and a retention label named Retention1. The role assignments for Site1 are shown in the following table.

Site1 includes a file named File1. Rentention1 has the following settings:
• Retain items for a specific period: Retention period: 7 years
• During the retention period: Mark Items as a record
• At the end of the retention period: Delete items automatically Rententon1 is published to Site1.
User1 applies Retention1 to File1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have a Microsoft 365 subscription that includes a user named Admin1.
You need to ensure that Admin1 can preserve all the mailbox content of users, including their deleted items. The solution must use the principle of least privilege.
What should you do?

1. A. From the Microsoft 365 admin center, assign the Exchange administrator role to Admin1.
2. B. From the Exchange admin center, assign the Discovery Management admin role to Admin1.
3. C. From the Azure Active Directory admin center, assign the Service administrator role to Admin1.
4. D. From the Exchange admin center, assign the Recipient Management admin role to Admin1.

Correct Answer: C
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels#what-label-policies-can-do