QUESTION: 221

DRAG DROP (Drag and Drop is not supported)
A company uses Microsoft 365.
You need to identify the appropriate report for each definition.

Which report should you choose for each definition? To answer, drag the appropriate reports to the correct definitions. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/cloud-app-security/tutorial-shadow-it

Reveal Solution Next Question

QUESTION: 222

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items.

Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Enable policy to block legacy authentication.
Enable user risk policy.
Require multi-factor authentication for all users.
Delete/block accounts not used in last 30 days.
Do not expire passwords.

Answer(s): A,B,C

Reference:

https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide

Reveal Solution Next Question

QUESTION: 223

A company deploys Microsoft Azure AD. You enable multi-factor authentication.
You need to inform users about the multi-factor authentication methods that they can use.
Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

Receive an automated call on the desk phone that includes a verification code.
Use the Microsoft Authenticator mobile application to receive a notification and authenticate.
Receive a call on a phone.
Enter a Windows 10 PIN code when prompted.

Answer(s): A

Reveal Solution Next Question

QUESTION: 224

You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees.
Employees must not be able to share documents or forward emails that contain sensitive information outside the company.
You need to enforce the file sharing restrictions. What should you do?

Use Microsoft Azure Information Protection to define a label. Associate the label with an Azure Rights Management template that prevents the sharing of files or emails that are marked with the label.
Create a Microsoft SharePoint Online content type named Sensitivity. Apply the content type to other content types in Microsoft 365. Create a Microsoft Azure Rights Management template that prevents the sharing of any content where the Sensitivity column value is set to Sensitive.
Use Microsoft Azure Information Rights Protection to define a label. Associate the label with an Active Directory Rights Management template that prevents the sharing of files or emails that are marked with the label.
Create a label named Sensitive. Apply a Data Layer Protection policy that notifies users when their document contains personally identifiable information (PII).

Answer(s): A

Reveal Solution Next Question

Free MS-900 Exam Braindumps (page: 56)

QUESTION: 221

Explanation:

Reference:

QUESTION: 222

Reference:

QUESTION: 223

QUESTION: 224