- (Exam Topic 4)
A user named User1 receives an error message when attempting to access the Microsoft Defender for Cloud Apps portal.
You need to identify the cause of the error. The solution must minimize administrative effort. What should you use?

1. A. Log Analytics
2. B. sign-in logs
3. C. audit logs
4. D. provisioning logs

Correct Answer: B

- (Exam Topic 4)
You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain.
You plan to create an emergency-access administrative account named Emergency1. Emergency1 will be assigned the Global administrator role in Azure AD. Emergency1 will be used in the event of Azure AD functionality failures and on-premises infrastructure failures.
You need to reduce the likelihood that Emergency1 will be prevented from signing in during an emergency. What should you do?

1. A. Configure Azure Monitor to generate an alert if Emergency1 is modified or signs in.
2. B. Require Azure AD Privileged Identity Management (PIM) activation of the Global administrator role for Emergency1.
3. C. Configure a conditional access policy to restrict sign-in locations for Emergency1 to only the corporate network.
4. D. Configure a conditional access policy to require multi-factor authentication (MFA) for Emergency1.

Correct Answer: A

- (Exam Topic 4)
You have an Azure AD tenant.
You deploy a new enterprise application named App1.
When users attempt to provide App1 with access to the tenant, the attempt fails.
You need to ensure that the users can request admin consent for App1. The solution must follow the principle of least privilege.
What should you do first?

1. A. Enable admin consent requests for the tenant.
2. B. Designate a reviewer of admin consent requests for the tenant.
3. C. From the Permissions settings of App1, grant App1 admin consent for the tenant
4. D. Create a Conditional Access policy for Appl.

Correct Answer: A

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant.
You need to review the Azure AD sign-in logs to investigate sign-ins that occurred in the past. For how long does Azure AD store events in the sign-in logs?

1. A. 14 days
2. B. 30 days
3. C. 90 days
4. D. 365 days

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/reference-reports-dataretention# how-long-does-azure-ad-store-the-data

- (Exam Topic 4)
You have the Azure resources show in the following table.

To Which identities can you assign the Contributor role for RG1?

1. A. User1 only
2. B. User1 and Group1 only
3. C. User1 and VW1 only
4. D. User1, VM1, and App1 only
5. E. User1, Group1, Vm1, and App1

Correct Answer: E