QUESTION: 217 Exam Topic: Policies and Profiles Questions

DRAG DROP (Drag and Drop is not supported)
You have a Microsoft 365 subscription that contains two users named User1 and User2.
You need to ensure that the users can perform the following tasks:
User1 must be able to create groups and manage users.

-User2 must be able to reset passwords for nonadministrative users.
The solution must use the principle of least privilege.
Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: User Administrator

User admin
Assign the user admin role to users who you want to access and manage user password resets and manage users and groups. They can also open and manage support requests to Microsoft support.

Box 2: Helpdesk Administrator
Assign the Helpdesk admin role to users who want to reset passwords, force users to sign out for any security issues. They can also open and manage support requests to Microsoft support. The Helpdesk admin can only help non-admin users and users assigned these roles: Directory reader, Guest inviter, Helpdesk admin, Message center reader, and Reports reader.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/admin-roles-page

Reveal Solution Next Question

QUESTION: 218 Exam Topic: Policies and Profiles Questions

HOTSPOT (Drag and Drop is not supported)
You have the device configuration profile shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: can access any URL.
Public Browsing (InPrivate): Runs a limited multi-tab version of Microsoft Edge. Users can browse publicly, or end their browsing session.
Box 2: a single Microsoft Edge instance that has multiple tabs
Single app, full-screen kiosk runs only one app on the device, such as a web browser or Store app.

Reference:

https://docs.microsoft.com/en-us/mem/intune/configuration/kiosk-settings-windows

Reveal Solution Next Question

QUESTION: 219 Exam Topic: Policies and Profiles Questions

You have a Microsoft 365 subscription.
You plan to use Conditional Access policies.
You need to identify which scenarios the policies will support.
Which two scenarios should you identify? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Enforce multi-factor authentication (MFA) when users access a Microsoft Office 365 service.
Force users to renew an expired SSL certificate.
Force users to update Windows Defender definition files before they sign in to Microsoft Office 365.
Block users from using legacy authentication when signing in to Microsoft Exchange Online.
Force users to install the latest Windows and Microsoft Office updates before they sign in to Office 365.

Answer(s): A,D

Explanation:

A: Conditional Access allows administrators to control what Office 365 apps users can gain access to based on if they pass/fail certain conditions. These conditions are enforced by building a policy (or multiple policies) to control how users access your Office 365 resources.
Cloud Apps- What apps do you want to control? Conditional Access does not need to apply to all of Office 365, you can be more granular and just control access to specific apps ג€" E.g. Exchange Online.
Access can be allowed to Office 365 with the following conditions:
* Require multi-factor authentication ג€" User is allowed in but will need to complete additional security to log in.
* Etc.
D: The easiest way to block legacy authentication across your entire organization is by configuring a Conditional Access policy that applies specifically to legacy authentication clients and blocks access.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authenticationhttps://docs.microsoft.com/en-us/azure/active- directory/conditional-access/block-legacy-authentication

Reveal Solution Next Question

QUESTION: 220 Exam Topic: Policies and Profiles Questions

HOTSPOT (Drag and Drop is not supported)
You have devices enrolled in Microsoft Intune as shown in the following table.

Intune includes the device compliance policies shown in the following table.

The device compliance policies have the assignments shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: No
Device1 is in Group1. Policy1 is assigned to Group1. Policy2 is also assigned to Group1. Device1 is compliant to Policy1, but not compliant to Policy2 (fails on
Secure Boot).
By default, each device compliance policy includes the action to mark a device as noncompliant if it fails to meet a policy rule.

Box 2: Yes
Device2 is in Group2. Policy2 is assigned to Group2. Device2 is compliant to Policy2 (Secure boot met).

Box 3: Yes
Device3 is in Group 3. Policy3 and Policy4 are assigned to Group3. Policy3 is for Windows 10 so it is disregarded. Device3 is compliant to Policy4.

Reference:

https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

Reveal Solution Next Question

Free MD-101 Exam Braindumps (page: 55)

QUESTION: 217 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 218 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 219 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 220 Exam Topic: Policies and Profiles Questions

Explanation:

Reference: