- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them. When you search the audit log in Security & Compliance to identify who signed in to the mailbox of User1,
the results are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1. You run the Set-Maibox -Identity "User1" -AuditEnabled $true command. Does that meet the goal?

1. A. Yes
2. B. No

Correct Answer: A
References:
https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps

- (Exam Topic 4)
You have a Microsoft 365 tenant.
You need to implement a policy to enforce the following requirements:
• If a user uses a Windows 10 device that is NOT hybrid Azure Active Directory (Azure AD) joined, the user must be allowed to connect to Microsoft SharePoint Online only from a web browser. I he user must be prevented from downloading files or syncing files from SharePoint Online.
• If a user uses a Windows 10 device that is hybrid Azure AD joined, the user must be able connect to SharePoint Online from any client application, download files, and sync files.
What should you create?

1. A. a conditional access policy in Azure AD that has Client apps conditions configured
2. B. a compliance policy in Microsoft Endpoint Manager that has the Device Health settings configured
3. C. a compliance policy in Microsoft Endpoint Manager that has the Device Properties settings configured
4. D. a conditional access policy in Azure AD that has Session controls configured

Correct Answer: A

- (Exam Topic 4)
Your network contains an on-premises Active Directory domain named contoso.local that has a forest functional level of Windows Server 2008 R2.
You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to install Azure AD Connect and enable single sign-on (SSO).
You need to prepare the domain to support SSO. The solution must minimize administrative effort. What should you do?

1. A. Raise the forest functional level to Windows Server 2016.
2. B. Modify the UPN suffix of all domain users.
3. C. Populate the mail attribute of all domain users.
4. D. Rename the domain.

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/prepare-a-non-routable-domain-for-directory-synchro

- (Exam Topic 4)
You have a Microsoft 365 subscription that contains 100 users and a Microsoft 365 group named Group1. All users have Windows 10 devices and use Microsoft SharePoint Online and Exchange Online.
A sensitivity label named Label1 is published as the default label for Group1. You add two sublabels named Sublabel1 and Sublabel2 to Label1.
You need to ensure that the settings in Sublabel1 are applied by default to Group1. What should you do?

1. A. Change the order of Sublabel1.
2. B. Modify the policy of Label 1.
3. C. Duplicate all the settings from Sublabel1 to Label 1.
4. D. Delete the policy of Label! and publish Sublabel1.

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

- (Exam Topic 1)
You need to recommend an email malware solution that meets the security requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A