MS-101 Free Practice Test

- (Exam Topic 4)
Your network contains an Active Directory domain named contoso.com. All client devices run Windows 10 and are joined to the domain.
You update the Windows 10 devices by using Windows Update for Business.
What is the maximum amount of time you can defer Windows 10 updates? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
References:
https://docs.microsoft.com/en-us/windows/deployment/update/waas-manage-updates-wufb

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
The users at your company use Dropbox to store documents. The users access Dropbox by using the MyApps portal.
You need to ensure that user access to Dropbox is authenticated by using a Microsoft 365 identify. The documents must be protected if the data is downloaded to an untrusted device.
What should you do?

1. A. From the Intune admin center, configure the Conditional access settings.
2. B. From the Azure Active Directory admin center, configure the Organizational relationships settings
3. C. From the Azure Active Directory admin center, configure the Application proxy settings.
4. D. From the Azure Active Directory admin center, configure the Devices settings.

Correct Answer: B

- (Exam Topic 4)
You have two conditional access policies named Policy1 and Policy2. Policy1 has the following settings:
Assignments:
Users and groups: User1
Cloud apps or actions: Office 365 Exchange Online
Conditions: 0 conditions selected
Access controls:
Grant: Grant access
Session: 0 controls selected
Enable policy: On
Policy2 has the following settings:
Assignments:
Users and groups: User1
Cloud apps or actions: Office 365 Exchange Online
Conditions: 0 conditions selected
Access controls:
Grant: Block access
Session: 0 controls selected Enable policy: On
You need to ensure that User1 can access Microsoft Exchange Online only from devices that are marked as compliant.
What should you do?

1. A. Modify the Grant settings of Policy2.
2. B. Disable Policy2.
3. C. Modify the Conditions settings of Policy2.
4. D. Modify the Grant settings of Policy1.

Correct Answer: C

- (Exam Topic 4)
Your company has offices in five cities. The company has a Microsoft 365 tenant.
Each office is managed by a local administrator. You plan to deploy Microsoft Intune.
You need to recommend a solution to manage resources in intune that meets the following requirements:
Local administrators must be able to manage only the resources in their respective office.
Local administrators must be prevented from managing resources in other offices.
Administrative effort must be minimized.
What should you include in the recommendation?

1. A. device categories
2. B. scope tags
3. C. configuration profiles
4. D. conditional access policies

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

- (Exam Topic 4)
You have a Microsoft 365 subscription.
You need to view the IP address from which a user synced a Microsoft SharePoint library. What should you do?

1. A. From the SharePoint admin center, view the usage reports.
2. B. From the Security & Compliance admin center, perform an audit log search.
3. C. From the Microsoft 365 admin center, view the usage reports.
4. D. From the Microsoft 365 admin center, view the properties of the user’s user account.

Correct Answer: B
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance