QUESTION: 76 Exam Topic: 2 - Question Set 2

In Microsoft 365, you con gure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.
Policy1 is con gured as shown in the exhibit.

You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email su x of contoso.com.
What should you con gure?

an action
a group
a condition
an exception

Answer(s): D

Explanation:

You need to add an exception. In the Advanced Settings of the DLP policy, you can add a rule to con gure the Conditions and Actions. There is also an 'Add
Exception' button. This gives you several options that you can select as the exception. One of the options is 'except when recipient domain is'.
You need to select that option and enter the domain name contoso.com.

Reference:

https://docs.microsoft.com/en-us/o ce365/securitycompliance/data-loss-prevention-policies#how-dlp-policies-work

Reveal Solution Next Question

QUESTION: 77 Exam Topic: 2 - Question Set 2

Your company uses on-premises Windows Server File Classi cation Infrastructure 9FCI). Some documents on the on-premises le servers are classi es as
Con dential.
You migrate the les from the on-premises le servers to Microsoft SharePoint Online. You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded les based on the Con dential classi cation.
What should you do rst?

From the SharePoint admin center, create a managed property.
From the SharePoint admin center, con gure hybrid search.
From the Security & Compliance Center PowerShell, run the New-DlpComplianceRule cmdlet.
From the Security & Compliance Center PowerShell, run the New-DataClassi cation cmdlet.

Answer(s): A

Explanation:

Your organization might use Windows Server FCI to identify documents with personally identi able information (PII) such as social security numbers, and then classify the document by setting the Personally Identi able Information property to High, Moderate, Low, Public, or Not PII based on the type and number of occurrences of PII found in the document. In O ce 365, you can create a DLP policy that identi es documents that have that property set to speci c values, such as High and Medium, and then takes an action such as blocking access to those les.
Before you can use a Windows Server FCI property or other property in a DLP policy, you need to create a managed property in the SharePoint admin center.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/protect-documents-that-have-fci-or-other-properties

Reveal Solution Next Question

QUESTION: 78 Exam Topic: 2 - Question Set 2

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You have three applications App1, App2, App3. The Apps use les that have the same le extensions. Your company uses Windows Information Protection (WIP). WIP has the following con gurations:
Windows Information Protection mode: Silent
Protected apps: App1
Exempt apps: App2
From App1, you create a le named File1.
What is the effect of the con gurations? To answer, select the appropriate options in the answer area.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Exempt apps: These apps are exempt from this policy and can access corporate data without restrictions. Windows Information Protection mode: Silent: WIP runs silently, logging inappropriate data sharing, without stopping anything that would've been prompted for employee interaction while in Allow overrides mode. Unallowed actions, like apps inappropriately trying to access a network resource or WIP-protected data, are still stopped.

Reference:

https://docs.microsoft.com/en-us/intune/apps/windows-information-protection-policy-create https://docs.microsoft.com/en- us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure

Reveal Solution Next Question

QUESTION: 79 Exam Topic: 2 - Question Set 2

Your company has 10 o ces.
The network contains an Active Directory domain named contoso.com. The domain contains 500 client computers. Each o ce is con gured as a separate subnet.
You discover that one of the o ces has the following:
Computers that have several preinstalled applications
Computers that use nonstandard computer names
Computers that have Windows 10 preinstalled
Computers that are in a workgroup
You must con gure the computers to meet the following corporate requirements:
All the computers must be joined to the domain.
All the computers must have computer names that use a pre x of CONTOSO.
All the computers must only have approved corporate applications installed. You need to recommend a solution to redeploy the computers. The solution must minimize the deployment time.

a provisioning package
wipe and load refresh
Windows Autopilot
an in-place upgrade

Answer(s): A

Explanation:

By using a provisioning package, IT administrators can create a self-contained package that contains all of the con guration, settings, and apps that need to be applied to a device.
Incorrect Answers:
C: With Windows Autopilot the user can set up pre-con gured devices without the need consult their IT administrator.
D: Use the In-Place Upgrade option when you want to keep all (or at least most) existing applications.

Reference:

https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios https://docs.microsoft.com/en- us/windows/deployment/windows-autopilot/windows-autopilot

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 8)

QUESTION: 76 Exam Topic: 2 - Question Set 2

Explanation:

Reference:

QUESTION: 77 Exam Topic: 2 - Question Set 2

Explanation:

Reference:

QUESTION: 78 Exam Topic: 2 - Question Set 2

Explanation:

Reference:

QUESTION: 79 Exam Topic: 2 - Question Set 2

Explanation:

Reference: