- (Exam Topic 3)
You need implement the planned changes for application access to organizational data. What should you configure?

1. A. authentication methods
2. B. the User consent settings
3. C. access packages
4. D. an application proxy

Correct Answer: D

- (Exam Topic 3)
You need to resolve the recent security incident issues.
What should you configure for each incident? To answer, drag the appropriate policy types to the correct issues. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that uses conditional access policies.
You plan to use third-party security information and event management (SIEM) to analyze conditional access usage.
You need to download the Azure AD log that contains conditional access policy data. What should you export from Azure AD?

1. A. sign-ins in JSON format
2. B. sign-ins in CSV format
3. C. audit logs in JSON format
4. D. audit logs in CSV format

Correct Answer: C
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-audit-logs

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium Plan 2 license. The tenant contains the users shown in the following table.

You have the Device Settings shown in the following exhibit.

User1 has the devices shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
Box 1: Yes
Users may join 5 devices to Azure AD.
Box 2: Yes
Box 3: No
An additional local device administrator has not been applied Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You configure a new Microsoft 36S tenant to use a default domain name of contosso.com.
You need to ensure that you can control access to Microsoft 365 resource-, by using conditional access policy.
What should you do first?

1. A. Disable the User consent settings.
2. B. Disable Security defaults.
3. C. Configure a multi-factor authentication (Ml A) registration policy1.
4. D. Configure password protection for Windows Server Active Directory.

Correct Answer: B