QUESTION: 136 Exam Topic: 3 - Question Set 3

Your company has a Microsoft 365 subscription.
You need to identify which users performed the following privileged administration tasks:
Deleted a folder from the second-stage Recycle Bin if Microsoft SharePoint Opened a mailbox of which the user was not the owner

Reset a user password

What should you use?

Microsoft Azure Active Directory (Azure AD) audit logs
Microsoft Azure Active Directory (Azure AD) sign-ins
Security & Compliance content search
Security & Compliance audit log search

Answer(s): A

Explanation:

You can view the required information in the audit logs. The Azure AD audit logs provide records of system activities for compliance. To access the audit report, select Audit logs in the Activity section of Azure Active Directory.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-audit-logs

Reveal Solution Next Question

QUESTION: 137 Exam Topic: 3 - Question Set 3

You have a Microsoft 365 subscription. You have a user named User1.
You need to ensure that User1 can place a hold on all mailbox content.
What permission should you assign to User1?

the User management administrator role from the Microsoft 365 admin center
the eDiscovery Manager role from the Security & Compliance admin center
the Information Protection administrator role from the Azure Active Directory admin center
the Compliance Management role from the Exchange admin center

Answer(s): B

Explanation:

To create a query-based In-Place Hold, a user requires both the Mailbox Search and Legal Hold roles to be assigned directly or via membership in a role group that has both roles assigned. To create an In-Place Hold without using a query, which places all mailbox items on hold, you must have the Legal Hold role assigned. The Discovery Management role group is assigned both roles.

Reference:

https://docs.microsoft.com/en-us/Exchange/permissions/feature-permissions/policy-and-compliance-permissions?view=exchserver-2019

Reveal Solution Next Question

QUESTION: 138 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You have a new Microsoft 365 subscription.
A user named User1 has a mailbox in Microsoft Exchange Online.
You need to log any changes to the mailbox folder permissions of User1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

To enable auditing for a single mailbox use this PowerShell command: Set-Mailbox username -AuditEnabled $true

Reference:

https://support.microsoft.com/en-us/help/4026501/o ce-auditing-in-o ce-365-for-admins https://docs.microsoft.com/en- us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps-ps

Reveal Solution Next Question

QUESTION: 139 Exam Topic: 3 - Question Set 3

You have a Microsoft E5 subscription.
You need to ensure that administrators who need to manage Microsoft Exchange Online are assigned the Exchange administrator role for ve hours at a time.
What should you implement?

a conditional access policy
a communication compliance policy
Azure AD Identity Protection
groups that have dynamic membership
Azure AD Privileged Identity Management (PIM)

Answer(s): E

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings Topic 3

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 23)

QUESTION: 136 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 137 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 138 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 139 Exam Topic: 3 - Question Set 3

Reference: