You have a Microsoft 365 subscription that uses a default domain named contoso.com. The domain contains the users shown in the following table.

The domain contains the devices shown in the following table.

The domain contains conditional access policies that control access to a cloud app named App1. The policies are configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Note: Block access overrides Grant access
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/plan-conditional-access

Comment: *

Name: *

Email: *

Verification: *

Your company uses on-premises Windows Server File Classification Infrastructure (FCI). Some documents on the on-premises file servers are classified as Confidential.
You migrate the files from the on-premises file servers to Microsoft SharePoint Online.
You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded file based on the Confidential classification.
What should you do first?

• A.From the SharePoint admin center, configure hybrid search.
• B.From the SharePoint admin center, create a managed property.
• C.From the Security & Compliance Center PowerShell, run the New-DataClassification cmdlet.
• D.From the Security & Compliance Center PowerShell, run the New-DlpComplianceRule cmdlet.

Comment: *

Name: *

Email: *

Verification: *

You need to meet the requirement for the legal department
Which three actions should you perform in sequence from the Security & Compliance admin center? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

References:
https://www.sherweb.com/blog/ediscovery-office-365/

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 tenant that contains 1,000 Windows 10 devices. The devices are enrolled in Microsoft Intune.
Company policy requires that the devices have the following configurations:
Require complex passwords.
Require the encryption of removable data storage devices.
Have Microsoft Defender Antivirus real-time protection enabled.
You need to configure the devices to meet the requirements.
What should you use?

• A.an app configuration policy
• B.a compliance policy

Comment: *

Name: *

Email: *

Verification: *

Your company purchases a cloud app named App1.
You plan to publish App1 by using a conditional access policy named Policy1.
You need to ensure that you can control access to App1 by using a Microsoft Cloud App Security session policy.
Which two settings should you modify in Policy1? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

References:
https://docs.microsoft.com/en-us/cloud-app-security/proxy-deployment-aad

Comment: *

Name: *

Email: *

Verification: *