Free MS-101 Exam Braindumps (page: 6)

Page 5 of 104

You con gure a conditional access policy. The locations settings are con gured as shown in the Locations exhibit. (Click the Locations tab.)



The users and groups settings are con gured as shown in the Users and Groups exhibit. (Click Users and Groups tab.)



Members of the Security reader group report that they cannot sign in to Microsoft Active Directory (Azure AD) on their device while they are in the o ce.
You need to ensure that the members of the Security reader group can sign in in to Azure AD on their device while they are in the o ce. The solution must use the principle of least privilege.
What should you do?

  1. From the conditional access policy, con gure the device state.
  2. From the Azure Active Directory admin center, create a custom control.
  3. From the Endpoint Manager admin center, create a device compliance policy.
  4. From the Azure Active Directory admin center, create a named location.

Answer(s): D


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition



You have computers that run Windows 10 Enterprise and are joined to the domain. You plan to delay the installation of new Windows builds so that the IT department can test application compatibility.
You need to prevent Windows from being updated for the next 30 days.
Which two Group Policy settings should you con gure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  1. Select when Quality Updates are received
  2. Select when Preview Builds and Feature Updates are received
  3. Turn off auto-restart for updates during active hours
  4. Manage preview builds
  5. Automatic updates detection frequency

Answer(s): A,B


Reference:

https://insider.windows.com/en-us/for-business-organization-admin/



HOTSPOT (Drag and Drop is not supported).
You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.



The device compliance policies in Endpoint Manager are con gured as shown in the following table.



The device compliance policies have the assignments shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You need to provide a user with the ability to sign up for Microsoft Store for Business for contoso.com. The solution must use the principle of least privilege.
Which role should you assign to the user?

  1. Cloud application administrator
  2. Application administrator
  3. Global administrator
  4. Service administrator

Answer(s): C


Reference:

https://docs.microsoft.com/en-us/microsoft-store/roles-and-permissions-microsoft-store-for-business






Post your Comments and Discuss Microsoft MS-101 exam with other Community members: