MS-101 practice test

1. Question 1 · 1

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are deploying Microsoft Endpoint Manager. You successfully enroll Windows 10 devices in Endpoint Manager. When you try to enroll an iOS device in Endpoint Manager, you get an error. You need to ensure that you can enroll the iOS device in Endpoint Manager. Solution: You add your user account as a device enrollment manager. Does this meet the goal?

   Choose one answer.

   • Yes
   • No

2. Question 2 · 1

   You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 10 • Android • iOS On which devices can you configure the Endpoint DLP policies?

   Choose one answer.

   • Windows 10 only
   • Windows 10 and Android only
   • Windows 10 and iOS only
   • Windows 10, Android, and iOS

3. Question 3 · 1

   DRAG DROP - You have a Microsoft 365 E5 subscription and an on-premises server named Server1. You plan to configure automatic log upload for continuous reports in Microsoft Defender for Cloud Apps. You download a Docker log collector image to Server1. You need integrate Defender for Cloud Apps with the log collector. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   Arrange the options in the correct order.

   

   • On Server1, run the docker run command.
   • From the Microsoft Defender for Cloud Apps portal, add a log collector.
   • From the Microsoft Defender for Cloud Apps portal, create an activity policy.
   • From the Microsoft Defender for Cloud Apps portal, add a data source.
   • On Server1, install the Azure Monitor agent.

4. Question 4 · 1

   HOTSPOT - You have a Microsoft 365 subscription that contains an Endpoint data loss prevention (Endpoint DLP) policy named Policy1 and the devices shown in the following table. For Policy1, the Audit or restrict activities on devices settings are configured as shown in the Activities exhibit. (Click the Activities tab.) For Policy1, the Allow override from Endpoint devices settings are configured as shown in the Devices exhibit. (Click the Devices tab.) Test users discover that they cannot copy data to their network shares while working remotely. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   

   

   

   Users on Device1 can print documents that contain sensitive information.

   • • Yes
   • • No

   Users on Device2 can copy documents that contain sensitive information to USB removable devices.

   • • Yes
   • • No

   Users on Device3 can copy documents that contain sensitive information to network shares.

   • • Yes
   • • No

5. Question 5 · 1

   You have an on-premises network that has several legacy applications. The applications perform LDAP queries against an existing directory service. You are migrating the on-premises infrastructure to a cloud-only infrastructure. You need to recommend an identity solution for the infrastructure that supports the legacy applications. The solution must minimize the administrative effort to maintain the infrastructure. Which identity service should you include in the recommendation?

   Choose one answer.

   • Azure Active Directory (Azure AD) B2C
   • Active Directory Domain Services (AD DS)
   • Azure Active Directory (Azure AD)
   • Azure Active Directory Domain Services (Azure AD DS)

6. Question 6 · 1

   HOTSPOT - You have a hybrid cloud infrastructure. You plan to deploy the Azure applications shown in the following table. What should you use to meet the requirement of each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   

   App1

   • • Azure AD B2B authentication with Conditional Access
   • • Azure AD B2C custom policies with Conditional Access
   • • Azure Application Gateway Web Application Firewall policies
   • • Azure Firewall
   • • Azure VPN Gateway with network security group rules
   • • Azure VPN Point-to-Site connections

   App2

   • • Azure AD B2B authentication with Conditional Access
   • • Azure AD B2C custom policies with Conditional Access
   • • Azure Application Gateway Web Application Firewall policies
   • • Azure Firewall
   • • Azure VPN Gateway with network security group rules
   • • Azure VPN Point-to-Site connections

7. Question 7 · 1

   HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. You have the Azure AD security groups shown in the following table. You have the Windows 10 devices shown in the following table. You deploy Microsoft 365 Apps for enterprise as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   Choose an option for each prompt.

   

   

   

   

   For users on Device1, Microsoft 365 Apps for enterprise is installed automatically.

   • • Yes
   • • No

   For users on Device2, Microsoft 365 Apps for enterprise is available for installation.

   • • Yes
   • • No

   For users on Device3, Microsoft 365 Apps for enterprise is installed automatically.

   • • Yes
   • • No

8. Question 8 · 1

   You have an Azure AD tenant. You have 1,000 computers that run Windows 10 Pro and are joined to Azure AD. You purchase a Microsoft 365 E3 subscription. You need to deploy Windows 10 Enterprise to the computers. The solution must minimize administrative effort. What should you do?

   Choose one answer.

   • From the Microsoft Endpoint Manager admin center, create a Windows Autopilot deployment profile. Assign the profile to all the computers. Instruct users to restart their computer and perform a network restart.
   • Enroll the computers in Microsoft Intune. Create a configuration profile by using the Edition upgrade and mode switch template. From the Microsoft Endpoint Manager admin center, assign the profile to all the computers and instruct users to restart their computer.
   • From Windows Configuration Designer, create a provisioning package that has an EditionUpgrade configuration and upload the package to a Microsoft SharePoint Online site. Instruct users to run the provisioning package from SharePoint Online.
   • From the Azure Active Directory admin center, create a security group that has dynamic device membership. Assign licenses to the group and instruct users to sign in to their computer.

9. Question 9 · 1

   You have a Microsoft 365 E5 subscription that contains 500 users. Two hundred users have personal devices that run either Android, Windows 10, or macOS. Three hundred users have corporate-owned devices that run either Windows 10 or macOS. You plan to configure device enrollment. You need to ensure that you can apply separate policies to the corporate-owned devices and the personal devices. The solution must minimize administrative effort. What should you create first?

   Choose one answer.

   • a dynamic device group
   • a dynamic user group
   • a deployment package
   • a Microsoft 365 group

10. Question 10 · 1

    HOTSPOT - You have a Microsoft 365 E5 subscription that uses Microsoft Intune. The subscription contains the resources shown in the following table. User1 is the owner of Device1. You add Microsoft 365 Apps Windows 10 and later app types to Intune as shown in the following table. On Thursday, you review the results of the app deployments. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

    Choose an option for each prompt.

    

    

    

    Word is installed on Device1.

    • • Yes
    • • No

    App3 is displayed in the Company Portal.

    • • Yes
    • • No

    Excel is installed on Device1.

    • • Yes
    • • No

11. Question 11 · 1

    You have a Microsoft 365 tenant. You plan to implement device configuration profiles in Microsoft Intune. Which platform can you manage by using the profiles?

    Choose all answers that apply.

    • Windows 8.1
    • CentOS Linux
    • Windows 10
    • Android Enterprise

12. Question 12 · 1

    You have a Microsoft 365 E5 tenant that contains the devices shown in the following table. The devices are managed by using Microsoft Intune. You plan to use a configuration profile to assign the Delivery Optimization settings. Which devices will support the settings?

    Choose one answer.

    

    • Device1 only
    • Device1 and Device4
    • Device1, Device3, and Device4
    • Device1, Device2, Device3, and Device4

13. Question 13 · 1

    DRAG DROP - You have a Microsoft 365 subscription that contains the devices shown in the following table. You install Microsoft Word on all the devices. You plan to configure policies to meet the following requirements: • Word files created by using Windows devices must be encrypted automatically. • If an Android device becomes jailbroken, access to corporate data must be blocked from Word. • For iOS devices, users must be prevented from using native or third-party mail clients to connect to Microsoft 365. Which type of policy should you configure for each device? To answer, drag the appropriate policy types to the correct devices. Each policy type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

    Match each destination with an option.

    

    

    Device1

    • • App configuration policy
    • • App protection policy
    • • Compliance policy
    • • Conditional Access policy

    Device2

    • • App configuration policy
    • • App protection policy
    • • Compliance policy
    • • Conditional Access policy

    Device3

    • • App configuration policy
    • • App protection policy
    • • Compliance policy
    • • Conditional Access policy

14. Question 14 · 1

    Your company uses Microsoft Endpoint Configuration Manager and Microsoft Endpoint Manager to co-manage devices. Which two actions can be performed only from Endpoint Manager? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    Choose all answers that apply.

    • Deploy applications to Windows 10 devices.
    • Deploy VPN profiles to iOS devices.
    • Deploy VPN profiles to Windows 10 devices.
    • Publish applications to Android devices.

15. Question 15 · 1

    You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. You have a Microsoft 365 subscription. You need to ensure that administrators can manage the configuration settings for all the Windows 10 devices in your organization. What should you configure?

    Choose one answer.

    • the Enrollment restrictions
    • the mobile device management (MDM) authority
    • the Exchange on-premises access settings
    • the Windows enrollment settings

Paid access to all 257 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.