Topic 5

Question 1

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• GitHub is a cloud-based identity provider
• Federation provides single sign-on (SSO) with multiple service providers
• A central identity provider manages all modern authentication services, such as authentication, authorization, and auditing

Answer 1

• GitHub is a cloud-based identity provider → Yes
• Federation provides single sign-on (SSO) with multiple service providers → Yes
• A central identity provider manages all modern authentication services, such as authentication, authorization, and auditing → Yes

Question 2

You need to identify which cloud service models place the most responsibility on the customer in a shared responsibility model.

In which order should you list the service models from the most customer responsibility to the least?

-Models-
- platform as a service (PaaS)
- software as a service (SaaS)
- on-premises datacenter
- infrastructure as a service (IaaS)

Answer 2

1) on-premises datacenter
2) infrastructure as a service (IaaS)
3) platform as a service (PaaS)
4) software as a service (SaaS)

Question 3

Select the answer that correctly completes the sentence.

You can assign _________ to an Azure AD role.
↘
- a management group
- a resource group
- a security principal
- an administrative unit

Answer 3

a security principal

Question 4

You have an Azure subscription.

You need to implement approval-based, time-bound role activation.

What should you use?

A. access reviews in Azure AD
B. Azure AD Privileged Identity Management (PIM)
C. Azure AD Identity Protection
D. Conditional access in Azure AD

Answer 4

B. Azure AD Privileged Identity Management (PIM)

Question 5

What should you use in the Microsoft 365 Defender portal to view security trends and track the protection status of identities?

A. Reports
B. Incidents
C. Hunting
D. Secure score

Answer 5

A. Reports

Keywords = trends and track = Reports

Question 6

Select the answer that correctly completes the sentence.

• Azure Application Insights
• Azure Network Watcher
• Log Analytics workspaces
• Microsoft cloud security benchmark
  ↘
  provides baseline recommendations and guidance for protecting Azure services.

Answer 6

Microsoft cloud security benchmark

Question 7

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Microsoft Sentinel uses logic apps to identify anomalies across resources
• Microsoft Sentinel uses workbooks to correlate alerts into incidents
• The hunting search-and-query tools of Microsoft Sentinel are based on the MITRE ATT&CK framework

Answer 7

• Microsoft Sentinel uses logic apps to identify anomalies across resources → No
• Microsoft Sentinel uses workbooks to correlate alerts into incidents → No
• The hunting search-and-query tools of Microsoft Sentinel are based on the MITRE ATT&CK framework → Yes

Question 8

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• You can restrict communication between users in Exchange Online by using Information Barriers
• You can restrict accessing a SharePoint Online site by using Information Barriers
• You can prevent sharing a file with another user in Microsoft Teams by using Information Barriers

Answer 8

• You can restrict communication between users in Exchange Online by using Information Barriers → Yes
• You can restrict accessing a SharePoint Online site by using Information Barriers → Yes
• You can prevent sharing a file with another user in Microsoft Teams by using Information Barriers → Yes

Question 9

Which portal contains the solution catalog?

A. Microsoft Purview compliance portal
B. Microsoft 365 Defender portal
C. Microsoft 365 admin center
D. Microsoft 365 Apps admin center

Answer 9

A. Microsoft Purview compliance portal

Question 10

Select the answer that correctly completes the sentence.

In the Microsoft Purview compliance portal, you can use _____ to remove features from the navigation pane.
↘
- Compliance Manager
- Customize navigation
- Policies
- Settings

Answer 10

• Customize navigation

Question 11

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Communication compliance is configured by using the Microsoft 365 admin center
• Microsoft SharePoint Online supports communication compliance
• Communication compliance can remediate compliance issues

Answer 11

• Communication compliance is configured by using the Microsoft 365 admin center → No
• Microsoft SharePoint Online supports communication compliance → Yes
• Communication compliance can remediate compliance issues → Yes

Question 12

You implement Compliance Manager.
You need to retrieve status information for a control task.
Which two options can you use?

Answer 12

1. Select “Conditions for Collection and Processing”: This option is located in the lower left corner and indicates that 1 out of 7 conditions have been assessed.
2. Select the Export Option: This option is located in the upper right corner and allows you to export the status information.

Question 13

When you enable Azure AD Multi-Factor Authentication (MFA), how many factors are required for authentication?

A. 1
B. 2
C. 3
D. 4

Answer 13

B. 2

Question 14

Select the answer that correctly completes the sentence.

Microsoft Defender for Cloud assesses Azure resources ________ for security issues.
↘
- continuously
- daily
- every 15 minutes
- hourly

Answer 14

continuously

Question 15

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Retention policies assign the same retention settings to all the files in a Microsoft SharePoint Online library
• Retention labels can be assigned to individual files and email messages
• You can assign multiple retention labels to an email message or a document

Answer 15

• Retention policies assign the same retention settings to all the files in a Microsoft SharePoint Online library → Yes
• Retention labels can be assigned to individual files and email messages → Yes
• You can assign multiple retention labels to an email message or a document → No

Question 16

Select the answer that correctly completes the sentence.

• A certificate
• A service principal
• A system-assigned managed identity
• A user-assigned managed identity
  ↘
  is used when Azure web apps must use the same identity

Answer 16

A user-assigned managed identity

Question 17

Select the answer that correctly completes the sentence.

Conditional Access policies are enforced _____ first-factor authentication.
↘
- after
- before
- during
- instead of

Answer 17

after

Question 18

You are the Microsoft 365 administrator for a company.
You need to identify available cloud security features.
Match each feature to the correct description.

-Features-
- Cloud Discovery dashboard (now Microsoft Defender for Cloud Apps)
- Microsoft Azure AD Conditional Access
- Microsoft Azure Security Center (now Microsoft Defender for Cloud)
- Microsoft Azure Information Protection (now Microsoft Purview Information Protection)

-Description-
- Classify and label emails and documents in the organization
- Block users from accessing cloud apps from certain devices
- Provide insight into which apps are being used in the organization and risk levels for the apps
- Manage security policies, monitor attacks against virtual machines, and provide remediation for vulnerabilities

Answer 18

Cloud Discovery dashboard → Provide insight into which apps are being used in the organization and risk levels for the apps.

Microsoft Azure AD Conditional Access → Block users from accessing cloud apps from certain devices.

Microsoft Azure Security Center → Manage security policies, monitor attacks against virtual machines, and provide remediation for vulnerabilities.

Microsoft Azure Information Protection → Classify and label emails and documents in the organization

Question 19

Which Microsoft Purview solution can be used to identify data leakage?

A. insider risk management
B. Compliance Manager
C. communication compliance
D. eDiscovery

Answer 19

A. insider risk management

Question 20

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Conditional Access is implemented by using policies in Microsoft Entra ID
• A Conditional Access policy can block or allow Microsoft Entra ID connections based upon the specific platform of a user’s device
• A Conditional Access policy can be applied to a Microsoft 365 group

Answer 20

• Conditional Access is implemented by using policies in Microsoft Entra ID → Yes
• A Conditional Access policy can block or allow Microsoft Entra ID connections based upon the specific platform of a user’s device → Yes
• A Conditional Access policy can be applied to a Microsoft 365 group → Yes

Question 21

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• You can assign apps to devices that are not enrolled with Microsoft Intune
• You can assign wrapped apps, or apps that incorporate the Intune SDK, only if the device is enrolled with Intune
• You can install available apps from the web-based Company Portal app regardless of whether the device if enrolled with Intune

Answer 21

• You can assign apps to devices that are not enrolled with Microsoft Intune → Yes
• You can assign wrapped apps, or apps that incorporate the Intune SDK, only if the device is enrolled with Intune → No
• You can install available apps from the web-based Company Portal app regardless of whether the device if enrolled with Intune → Yes

Question 22

A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs.
What should the company implement?

The company should implement
↘
- Azure Information Protection P1
- Azure Information Protection P2
- Microsoft 365 E3

Answer 22

Azure Information Protection P2

Question 23

Select the answer that correctly completes the sentence.

Microsoft Entra Permissions Management is
↘
- a cloud infrastructure entitlement management (CIEM) solution
- a cloud security posture management (CSPM) solution
- a security information and event management (SIEM) solution
- an extended detection and response (XDR) solution

Answer 23

a cloud infrastructure entitlement management (CIEM) solution

Question 24

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Microsoft Entra Permissions Management can be managed by using the Microsoft Purview compliance portal
• Microsoft Entra Permissions Management can be used to manage permissions in Amazon Web Services (AWS)
• Microsoft Secure Score can be reviewed from Permissions Management in the Microsoft Entra admin center

Answer 24

• Microsoft Entra Permissions Management can be managed by using the Microsoft Purview compliance portal → No
• Microsoft Entra Permissions Management can be used to manage permissions in Amazon Web Services (AWS) → Yes
• Microsoft Secure Score can be reviewed from Permissions Management in the Microsoft Entra admin center → No

Question 25

Which service includes Microsoft Secure Score for Devices? A. Microsoft Defender for IoT B. Microsoft Defender for Endpoint C. Microsoft Defender for Identity D. Microsoft Defender for Office 365

Answer 25

B. Microsoft Defender for Endpoint

Question 26

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)? A. the Microsoft 365 admin center B. Azure Cost Management + Billing C. Microsoft Service Trust Portal D. the Microsoft Purview compliance portal

Answer 26

C. Microsoft Service Trust Portal

Question 27

Select the answer that correctly completes the sentence. You can ______ the default security rules of a network security group (NSG). ↘ - copy - delete - override

Answer 27

override

Question 28

You have an Azure subscription that contains a Log Analytics workspace. You need to onboard Microsoft Sentinel. What should you do first? A. Create a hunting query. B. Correlate alerts into incidents. C. Connect to your data sources. D. Create a custom detection rule.

Answer 28

C. Connect to your data sources.

Question 29

What is Azure Key Vault used for? A. to deploy a cloud-based network security service that protects Azure virtual network resources B. to protect cloud-based applications from cyber threats and vulnerabilities C. to safeguard cryptographic keys and other secrets used by cloud apps and services D. to provide secure and seamless RDP/SSH connectivity to Azure virtual machines via TLS from the Azure portal

Answer 29

C. to safeguard cryptographic keys and other secrets used by cloud apps and services

Question 30

When a user authenticates by using passwordless sign-in, what should the user select in the Microsoft Authenticator app? A. an answer to a security question B. a number C. an alphanumeric key D. a passphrase

Answer 30

B. a number

Question 31

For each of the following statements, select Yes if the statement is true. Otherwise, select No. - Microsoft Defender for Cloud is a development security operations (DevSecOps) solution - Microsoft Defender for Cloud is a cloud security posture management (CSPM) solution - Microsoft Defender for Cloud is a cloud workload protection platform (CWPP) solution

Answer 31

- Microsoft Defender for Cloud is a development security operations (DevSecOps) solution → Yes - Microsoft Defender for Cloud is a cloud security posture management (CSPM) solution → Yes - Microsoft Defender for Cloud is a cloud workload protection platform (CWPP) solution → Yes

Question 32

Select the answer that correctly completes the sentence. Microsoft provides the _______ as a public site for publishing audit reports and other compliance-related information associated with Microsoft cloud services. ↘ - Azure EA portal - Microsoft Purview compliance portal - Microsoft Purview governance portal - Microsoft Service Trust Portal

Answer 32

Microsoft Service Trust Portal

Question 33

What feature supports email as a method of authenticating users? A. Microsoft Entra ID Protection B. Microsoft Entra Multi-Factor Authentication (MFA) C. self-service password reset (SSPR) D. Microsoft Entra Password Protection

Answer 33

C. self-service password reset (SSPR)

Question 34

What Microsoft Purview feature can use machine learning algorithms to detect and automatically protect sensitive items? A. eDiscovery B. Data loss prevention C. Information risks D. Communication compliance

Answer 34

B. Data loss prevention (DLP)

Question 35

For each of the following statements, select Yes if the statement is true. Otherwise, select No. - eDiscovery (Standard) search results can be exported - eDiscovery (Standard) can be integrated with insider risk management - eDiscovery (Standard) can be used to search Microsoft Exchange Online public folders

Answer 35

- eDiscovery (Standard) search results can be exported → Yes - eDiscovery (Standard) can be integrated with insider risk management → No - eDiscovery (Standard) can be used to search Microsoft Exchange Online public folders → Yes

Question 36

Select the answer that correctly completes the sentence. How to create a virtual network is part of the ______ information in the Microsoft cloud security benchmark (MCSB) ↘ - Azure Guidance - mapping to industry frameworks - recommendation - Security Principle

Answer 36

Azure Guidance

Question 37

Which two actions can you perform by using Azure Key Vault? A. Store secrets. B. Store Azure Resource Manager (ARM) templates. C. Implement network security groups (NSGs). D. Implement Azure DDoS Protection. E. Store keys.

Answer 37

A. Store secrets. E. Store keys.

Question 38

Which feature is included in Microsoft Entra ID Governance? A. Identity Protection B. Privileged Identity Management C. Permissions Management D. Verifiable credentials

Answer 38

B. Privileged Identity Management (PIM)

Question 39

What should you create to search and export content preserved in an eDiscovery hold? A. a Microsoft SharePoint Online site B. a case C. a Microsoft Exchange Online public folder D. Azure Files

Answer 39

B. a case

Question 40

Which Microsoft Purview data classification type supports the use of regular expressions? A. exact data match (EDM) B. fingerprint classifier C. sensitive information types (SITs) D. trainable classifier

Answer 40

C. sensitive information types (SITs)

Question 41

For each of the following statements, select Yes if the statement is true. Otherwise, select No. - Microsoft Entra Access Review evaluates user and group permissions for Azure resources. - A user can be removed from a group automatically after a Microsoft Entra Access Review evaluation. - The Microsoft Entra Access Review feature is available in all Microsoft Entra ID service plans.

Answer 41

- Microsoft Entra Access Review evaluates user and group permissions for Azure resources. → Yes - A user can be removed from a group automatically after a Microsoft Entra Access Review evaluation. → Yes - The Microsoft Entra Access Review feature is available in all Microsoft Entra ID service plans. → No

Question 42

Select the answer that correctly completes the sentence. Using your company credentials to access a partner company's resources requires a ______ solution between the two companies. ↘ - federation - hybrid - multi-factor authentication (MFA) - pass-through authentication

Answer 42

federation

Question 43

Which two types of devices can be managed by using Endpoint data loss prevention (Endpoint DLP)? A. Windows 11 B. Linux C. iOS D. macOS E. Android

Answer 43

A. Windows 11 D. macOS

Question 44

Select the answer that correctly completes the sentence. Microsoft Sentinel uses _______ to correlate alerts into incidents. ↘ - analytics - hunting - notebooks - workbooks

Answer 44

analytics