MS-101 : Microsoft 365 Mobility and Security : Part 03

  1. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q01 041
    MS-101 Microsoft 365 Mobility and Security Part 03 Q01 041

    You enroll all the computers in Upgrade Readiness.

    You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

    Solution: You set the Importance status of App1 to Business critical.

    Does this meet the goal?

    • Yes
    • No

    Explanation:
    Business Critical will prevent the app having a status of Ready to upgrade.

  2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q02 042
    MS-101 Microsoft 365 Mobility and Security Part 03 Q02 042

    You enroll all the computers in Upgrade Readiness.

    You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

    Solution: You set the ReadyForWindows status of App1 to Highly adopted.

    Does this meet the goal?

    • Yes
    • No
    Explanation:
    App1 has a “low install count” (2% or less) so will be Ready to upgrade. We need to change the setting for App2.
  3. HOTSPOT

    You have 100 computers that run Windows 8.1 and are enrolled in Upgrade Readiness.

    Two of the computers are configured as shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 044
    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 044

    From Upgrade Readiness, you view the applications shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 045
    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 045

    You enroll a computer named Computer3 in Upgrade Readiness. Computer3 has the following configurations:

    – 8 GB of memory
    – 64-bit architecture
    – An application named App3 installed

    App3 is installed on Computer3 only.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

     

    Install a certification authority (CA).

    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 046 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 046 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 046 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q03 046 Answer

     
  4. Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD).

    The domain contains two servers named Server1 and Server2 that run Windows Server 2016. Server1 has the File Server Resource Manager role service installed.

    You need to configure Server1 to use the Azure Rights Management (Azure RMS) connector.

    You install the Microsoft Management connector on Server1.

    What should you do next on Server1?

    • Run the GenConnectorConfig.ps1 script.
    • Configure the URL of the AIPMigrated group.
    • Enable BitLocker Drive Encryption (BitLocker).
    • Install a certification authority (CA).
    Explanation:
    If you want to use the server configuration tool for the RMS connector, to automate the configuration of registry settings on your on-premises servers, download and run the GenConnectorConfig.ps1 script.
  5. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

    You sign up for Microsoft Store for Business.

    The tenant contains the users shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q05 047
    MS-101 Microsoft 365 Mobility and Security Part 03 Q05 047

    Microsoft Store for Business has the following Shopping behavior settings:

    Make everyone a Basic Purchaser is set to Off.
    Allow app requests is set to On.

    You need to identify which users can add apps to the Microsoft Store for Business private store.

    Which users should you identify?

    • User1 and User2 only
    • User3 only
    • User1 only
    • User3 and User4 only
  6. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 8.1 and have applications installed as shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q06 048
    MS-101 Microsoft 365 Mobility and Security Part 03 Q06 048

    You enroll all the computers in Upgrade Readiness.

    You need to ensure that App1 and App2 have an UpgradeDecision status of Ready to upgrade.

    Solution: You set the importance status of App2 to Low install count.

    Does this meet the goal?

    • Yes
    • No
    Explanation:
    If an app is installed on less than 2% of the targeted devices, it’s marked Low install count. Two percent is the default value. You can adjust the threshold in the readiness settings from 0% to 10%. Desktop Analytics automatically marks these apps as Ready to upgrade.
  7. You have two conditional access policies named Policy1 and Policy2.

    Policy1 has the following settings:

    Assignments:
    – Users and groups: User1
    – Cloud apps or actions: Office 365 Exchange Online
    – Conditions: 0 conditions selected
    Access controls:
    – Grant: Grant access
    – Session: 0 controls selected
    Enable policy: On

    Policy2 has the following settings:

    Assignments:
    – Users and groups: User1
    – Cloud apps or actions: Office 365 Exchange Online
    – Conditions: 0 conditions selected
    Access controls:
    – Grant: Block access
    – Session: 0 controls selected
    Enable policy: On

    You need to ensure that User1 can access Microsoft Exchange Online only from devices that are marked as compliant.

    What should you do?

    • Modify the Grant settings of Policy2.
    • Disable Policy2.
    • Modify the Conditions settings of Policy2.
    • Modify the Grant settings of Policy1.
  8. You have a Microsoft 365 E5 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.

    You need to ensure that users can enroll devices in Microsoft Endpoint Manager without manually entering the address of Microsoft Endpoint Manager.

    Which two DNS records should you create? Each correct answer presents part of the solution.

    NOTE: Each correct selection is worth one point.

    • a CNAME record for AutoDiscover.contoso.com
    • a CNAME record for EnterpriseEnrollment.contoso.com
    • a TXT record for EnterpriseRegistration.contoso.com
    • an SRV record for _SIP._TLS.contoso.com
    • an SRV record for _SIPfederationTLS.contoso.com
    • a CNAME record for EnterpriseRegistration.contoso.com
    • a TXT record for EnterpriseEnrollment.contoso.com
  9. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

    The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

    You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

    You install the Group Policy Management Console (GPMC) on Server1.

    You need to configure the Windows Update for Business Group Policy settings on Server1.

    Solution: You raise the forest functional level to Windows Server 2016. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

    Does this meet the goal?

    • Yes
    • No
  10. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

    The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

    You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

    You install the Group Policy Management Console (GPMC) on Server1.

    You need to configure the Windows Update for Business Group Policy settings on Server1.

    Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1.

    Does this meet the goal?

    • Yes
    • No
  11. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

    The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

    You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

    You install the Group Policy Management Console (GPMC) on Server1.

    You need to configure the Windows Update for Business Group Policy settings on Server1.

    Solution: You upgrade Server1 to Windows Server 2019.

    Does this meet the goal?

    • Yes
    • No
  12. You have a hybrid Azure Active Directory (Azure AD) tenant and a Microsoft Endpoint Configuration Manager deployment.

    You have the devices shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q12 049
    MS-101 Microsoft 365 Mobility and Security Part 03 Q12 049

    You plan to enable co-management.

    You need to identify which devices support co-management without requiring the installation of additional software.

    Which devices should you identify?

    • Device1 only
    • Device2 only
    • Device3 only
    • Device2 and Device3 only
    • Device1, Device2, and Device3
  13. HOTSPOT

    You have a Microsoft 365 subscription that contains the users shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 050
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 050

    You configure an Enrollment Status Page profile as shown in the following exhibit.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 051
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 051

    You assign the policy to Group1.

    You purchase the devices shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 052
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 052

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 053 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 053 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 053 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q13 053 Answer
  14. HOTSPOT

    You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 054
    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 054

    You integrate Microsoft Intune and contoso.com as shown in the following exhibit.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 055
    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 055

    You purchase a Windows 10 device named Device1.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 056 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 056 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 056 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q14 056 Answer
  15. HOTSPOT

    You have an Azure subscription and an on-premises Active Directory domain. The domain contains 50 computers that run Windows 10.

    You need to centrally monitor System log events from the computers.

    What should you do? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q15 057 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q15 057 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q15 057 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q15 057 Answer
  16. HOTSPOT

    You have a Microsoft 365 subscription that contains the users in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 058
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 058

    In Microsoft Endpoint Manager, you create two device type restrictions that have the settings shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 059
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 059

    In Microsoft Endpoint Manager, you create three device limit restrictions that have the settings shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 060
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 060

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 061 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 061 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 061 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q16 061 Answer
  17. DRAG DROP

    You have a Microsoft 365 E5 subscription.

    Several users have iOS devices.

    You plan to enroll the iOS devices in Microsoft Endpoint Manager.

    You need to ensure that you can create an iOS/iPadOS enrollment profile in Microsoft Endpoint Manager.

    Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q17 062 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q17 062 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q17 062 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q17 062 Answer
  18. HOTSPOT

    You have a Microsoft 365 E5 tenant that contains the users shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 063
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 063

    The tenant contains the devices shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 064
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 064

    You have the apps shown in the following table.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 065
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 065

    You plan to use Microsoft Endpoint Manager to manage the apps for the users.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

    NOTE: Each correct selection is worth one point.

    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 066 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 066 Question
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 066 Answer
    MS-101 Microsoft 365 Mobility and Security Part 03 Q18 066 Answer
  19. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

    The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

    You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

    You install the Group Policy Management Console (GPMC) on Server1.

    You need to configure the Windows Update for Business Group Policy settings on Server1.

    Solution: You raise the domain functional level to Windows Server 2019. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

    Does this meet the goal?

    • Yes
    • No
  20. You have a Microsoft 365 E5 subscription.

    You plan to deploy 100 new Windows 10 devices.

    You need to identify the appropriate version of Windows 10 for the new devices. The version must meet the following requirements:

    – Be serviced for a minimum of 24 months.
    – Support Microsoft Application Virtualization (App-V).

    Which version should you identify?

    • Windows 10 Pro, version 1909
    • Windows 10 Pro, version 2004
    • Windows 10 Enterprise, version 1909
    • Windows 10 Enterprise, version 2004
Subscribe
Notify of
guest
0 Comments
Newest
Oldest Most Voted
Inline Feedbacks
View all comments