MS-101
FREE EXAM DUMPS QUESTIONS & ANSWERS

Microsoft
MS-101
Microsoft 365 Mobility and Security

Exam Parts/Sections: 11

Total Questions: 414

View MS-101 actual exam questions, answers and explanations for free.

Go To MS-101 Questions

Contains the Following Exam Topics:

Exam Topic: 1 - Question Set 1

This Exam Topic does not have a case study.

Exam Topic: 2 - Question Set 2

This Exam Topic does not have a case study.

Exam Topic: 3 - Question Set 3

This Exam Topic does not have a case study.

Exam Topic: 5 - Testlet 2

Introductory Info
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.

To start the case study
To display the rst question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview
ADatum Corporation is an international nancial services company that has 5,000 employees. ADatum has six o ces: a main o ce in New York and ve branch o ces in Germany, the United Kingdom, France, Spain, and Italy. All the o ces are connected to each other by using a WAN link. Each o ce connects directly to the Internet.

Existing Environment

Current Infrastructure
ADatum recently purchased a Microsoft 365 E5 subscription.
All user les are migrated to Microsoft 365.
All mailboxes are hosted in Microsoft 365. The users in each o ce have email su xes that include the country of the user, for example, user1@us.adatum.com or user2@uk.adatum.com.
Each o ce has a security information and event management (SIEM) appliance. The appliances come from three different vendors.
ADatum uses and processes Personally Identi able Information (PII).

Problem Statements
ADatum enters into litigation. The legal department must be able to place a hold on all the documents of a user named User1 that are in Microsoft 365.

Requirements

Business Goals
ADatum wants to be fully compliant with all the relevant data privacy laws in the regions where it operates. ADatum wants to minimize the cost of hardware and software whenever possible.

Technical Requirements
ADatum identi es the following technical requirements:
Centrally perform log analysis for all o ces.
Aggregate all data from the SIEM appliances to a central cloud repository for later analysis. Ensure that a SharePoint administrator can identify who accessed a speci c le stored in a document library. Provide the users in the nance department with access to Service assurance information in Microsoft 365. Ensure that documents and email messages containing the PII data of European Union (EU) citizens are preserved for 10 years. If a user attempts to download 1,000 or more les from SharePoint Online within 30 minutes, notify a security administrator and suspend the user's user account.
A security administrator requires a report that shows which Microsoft 365 users signed in. Based on that report, the security administrator must be able to create a policy to require multi-factor authentication when a sign-in is high risk. Ensure that the users in the New York o ce can only send email messages that contain sensitive U.S. PII data to other New York o ce users. Email messages must be monitored to ensure compliance. Auditors in the New York o ce must have access to reports that show the sent and received email messages containing sensitive U.S. PII data.

Exam Topic: 6 - Testlet 3

Microsoft Cloud Environment
Litware has a Microsoft 365 subscription that contains a veri ed domain named litware.com. The subscription syncs to the on-premises domain. Litware uses Microsoft Intune for device management and has the enrolled devices shown in the following table.

Litware.com contains the security groups shown in the following table.

Litware uses Microsoft SharePoint Online and Microsoft Teams for collaboration. The veri ed domain is linked to an Azure Active Directory (Azure AD) tenant named litware.com. Audit log search is turned on for the litware.com tenant.

Problem Statements
Litware identi es the following issues:
Users open email attachments that contain malicious content.
Devices without an assigned compliance policy show a status of Compliant.
User1 reports that the Sensitivity option in Microsoft O ce for the web fails to appear. Internal product codes and con dential supplier ID numbers are often shared during Microsoft Teams meetings and chat sessions that include guest users and external users.

Requirements

Planned Changes
Litware plans to implement the following changes:
Implement device con guration pro les that will con gure the endpoint protection template settings for supported devices. Con gure information governance for Microsoft OneDrive, SharePoint Online, and Microsoft Teams. Implement data loss prevention (DLP) policies to protect con dential information. Grant User2 permissions to review the audit logs of the litware.com tenant.
Deploy new devices to the Seattle o ce as shown in the following table.

Implement a noti cation system for when DLP policies are triggered.
Con gure a Safe Attachments policy for the litware.com tenant.

Technical Requirements
Litware identi es the following technical requirements:
Retention settings must be applied automatically to all the data stored in SharePoint Online sites, OneDrive accounts, and Microsoft Teams channel messages, and the data must be retained for ve years.
Email messages that contain attachments must be delivered immediately, and placeholders must be provided for the attachments until scanning is complete.
All the Windows 10 devices in the Seattle o ce must be enrolled in Intune automatically when the devices are joined to or registered with Azure AD.
Devices without an assigned compliance policy must show a status of Not Compliant in the Microsoft Endpoint Manager admin center. A noti cation must appear in the Microsoft 365 compliance center when a DLP policy is triggered. User2 must be granted the permissions to review audit logs for the following activities:
- Admin activities in Microsoft Exchange Online
- Admin activities in SharePoint Online
- Admin activities in Azure AD
Users must be able to apply sensitivity labels to documents by using O ce for the web. Windows Autopilot must be used for device provisioning, whenever possible.
A DLP policy must be created to meet the following requirements:
- Con dential information must not be shared in Microsoft Teams chat sessions, meetings, or channel messages.
- Messages that contain internal product codes or supplier ID numbers must be blocked and deleted.
The principle of least privilege must be used.

Exam Topic: 7 - Testlet 4

Contoso recently purchased a Microsoft 365 E5 subscription.

Existing Environment
The network contains an on-premises Active Directory forest named contoso.com. The forest contains the servers shown in the following table.

All servers run Windows Server 2016. All desktops and laptops run Windows 10 Enterprise and are joined to the domain. The mobile devices of the users in the Montreal and Seattle o ces run Android. The mobile devices of the users in the New York o ce run iOS. The domain is synced to Azure Active Directory (Azure AD) and includes the users shown in the following table.

The domain also includes a group named Group1.

Requirements

Planned Changes
Contoso plans to implement the following changes:
Implement Microsoft 365.

Manage devices by using Endpoint Manager.
Implement Microsoft Defender for Identity.
Update computers in Seattle and Montreal with the fall Semi-Annual Channel feature update. Update computers in the New York o ce with the spring Semi-Annual Channel feature update.

Technical Requirements
Contoso identi es the following technical requirements:
When a Windows 10 device is joined to Azure AD, the device must enroll to Endpoint Manager automatically. Dedicated support technicians must enroll all the Montreal o ce mobile devices in Endpoint Manager. Each dedicated support technician must be assigned only a single Device Enrollment Manager (DEM) account. User1 must be able to enroll all the New York o ce mobile devices in Endpoint Manager. Microsoft Defender for Identity sensors must be installed and must NOT use port mirroring.
Whenever possible, the principle of least privilege must be used.
A Microsoft Store for Business must be created.

Compliance Requirements
Contoso identi es the following compliance requirements:
Ensure that the users in Group1 can only access Microsoft Exchange Online from devices that are enrolled in Endpoint Manager and con gured in accordance with the corporate policy.
Con gure Windows Information Protection (WIP) for the Windows 10 devices.

Exam Topic: 8 - Testlet 5