QUESTION: 221 Exam Topic: Policies and Profiles Questions

You have an Azure Active Directory (Azure AD) tenant that contains the named locations shown in the following table.

You need to create a Conditional Access policy that will have a condition to include only trusted locations.
Which two named locations can be marked as trusted? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Location1
Location2
Location3
Location4
Location5

Answer(s): A,C

Explanation:

Trusted locations
Administrators can name locations defined by IP address ranges to be trusted named locations
A: An IPv4 named location can be marked as trusted.

C: An IPv6 named location can be marked as trusted.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Reveal Solution Next Question

QUESTION: 222 Exam Topic: Policies and Profiles Questions

You have a Microsoft 365 subscription,
You need provide a user the ability to disable Security defaults and create Conditional Access policies. The solution must use the principle of least privilege.
Which role should you assign to the user?

Global Administrator
Conditional Access Administrator
Security Administrator
Intune Administrator

Answer(s): B

Explanation:

To enable or disable security defaults in your directory, sign in to theג€‰Azure portalג€‰as a security administrator, Conditional Access administrator, or global administrator.
Note: Conditional Access Administrator
Users with this role have the ability to manage Azure Active Directory Conditional Access settings.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

Reveal Solution Next Question

QUESTION: 223 Exam Topic: Policies and Profiles Questions

HOTSPOT (Drag and Drop is not supported)
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to create a Conditional Access policy to block users that have a high sign-in risk level.
You need to identify the required license, and what to use to identify the sign-in risk level. The solution must minimize costs.
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Azure AD Premium Plan 2
You will need an Azure AD Premium P1 license to get access to the Microsoft Office 365 conditional access policy feature.
However, need Azure AD Premium Plan 2 to sign-in risk.
Box 2: Azure AD Identity Protection
A sign-in risk represents the probability that a given authentication request isn't authorized by the identity owner. Organizations with Azure AD Premium P2 licenses can create Conditional Access policies incorporating Azure AD Identity Protection sign-in risk detections.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk https://blog.mydock365.com/what-is-conditional-access-in-microsoft-365

Reveal Solution Next Question

QUESTION: 224 Exam Topic: Policies and Profiles Questions

Your on-premises network contains an Active Directory domain named contoso.com.

You perform the following actions:

-Purchase a new Microsoft 365 subscription.
-Create a new user named User1.
-Assign User1 the Security Administrator role.

You need to ensure that User1 can enable Conditional Access policies.

What should User1 do first?

Register for Azure Multi-Factor Authentication (MFA).
Request the Conditional Access Administrator role.
Disable Security defaults.
Implement Azure AD Connect.

Answer(s): C

Reveal Solution Next Question

Free MD-101 Exam Braindumps (page: 56)

QUESTION: 221 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 222 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 223 Exam Topic: Policies and Profiles Questions

Explanation:

Reference:

QUESTION: 224 Exam Topic: Policies and Profiles Questions