MS-101 Free Practice Test

- (Exam Topic 1)
You need to ensure that User1 can enroll the devices to meet the technical requirements. What should you do?

1. A. From the Azure Active Directory admin center, assign User1 the Cloud device administrator rote.
2. B. From the Azure Active Directory admin center, configure the Maximum number of devices per user setting.
3. C. From the Intune admin center, add User1 as a device enrollment manager.
4. D. From the Intune admin center, configure the Enrollment restrictions.

Correct Answer: C

References:
https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/enroll-devices-with-device-enrollment-manager

- (Exam Topic 4)
You have a Microsoft 365 E5 tenant that contains the resources shown in the following table.

To which resources can you apply a sensitivity label by using an auto-labeling policy?

1. A. Mailbox1 and Site1 only
2. B. Mailbox1, Account1, and Site1 only
3. C. Account1 and Site1 only
4. D. Mailbox1, Account1, Site1, and Channel1
5. E. Account1, Site1, and Channel1 only

Correct Answer: E

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide

- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a new Microsoft 365 subscription.
You need to prevent users from sending email messages that contain Personally Identifiable Information (PII). Solution: From the Security & Compliance admin center, you create a data loss prevention (DLP) policy. Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have a Microsoft 365 subscription.
You plan to enable Microsoft Azure Information Protection.
You need to ensure that only the members of a group named PilotUsers can protect content What should you do?

1. A. From the AADRM PowerShell module, run the set-AadrmonboardingControlPolicy cmdlet.
2. B. From Azure Information Protection, create a policy.
3. C. From the AAORM PowerShell module, run the Add-AadrmRoleBasedAdministrator cmdlet.
4. D. From Azure Information Protection, configure the protection activation status.

Correct Answer: B

References:
https://blogs.technet.microsoft.com/kemckinn/2018/05/17/creating-labels-for-azure-information-protection/

- (Exam Topic 4)
You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwid

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A