Your network contains an Active Directory forest named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You use Microsoft System Center Configuration Manager (Current Branch) for device management.
You have the Windows 10 devices shown in the following table.

You configure Configuration Manager co-management as follows:
* Automatic enrollment in Intune: Pilot
* Pilot collection: Collection2
You configure co-management workloads as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Comment: *

Name: *

Email: *

Verification: *

From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the Exhibit tab.)

You need to reduce the likelihood that the sign-ins are identified as risky.
What should you do?

• A.From the Security & Compliance admin center, add the users to the Security Readers role group.
• B.From the Azure Active Directory admin center, configure the trusted IPs for multi-factor authentication.
• C.From the Security & Compliance admin center, create a classification label.
• D.From the Conditional access blade in the Azure Active Directory admin center, create named locations.

Comment: *

Name: *

Email: *

Verification: *

You have a new Microsoft 365 subscription.
A user named User1 has a mailbox in Microsoft Exchange Online.
You need to log any changes to the mailbox folder permissions of User1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

To enable auditing for a single mailbox (in this example, belonging to Holly Sharp), use this PowerShell command: Set-Mailbox username -AuditEnabled $true References:
https://support.microsoft.com/en-us/help/4026501/office-auditing-in-office-365-for-admins
https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps

Comment: *

Name: *

Email: *

Verification: *

You need to configure a conditional access policy to meet the compliance requirements.
You add Exchange Online as a cloud app.
Which two additional settings should you configure in Policy1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
You have an Azure Active Directory (Azure AD) tenant that contains two users named User1 and User2.
On September 5, 2019, you create and enforce a terms of use (ToU) in the tenant. The ToU has the following settings:
* Name: Terms1
* Display name: Terms1 name
* Require users to expand the terms of use: Off
* Require users to consent on every device: Off
* Expire consents: On
* Expire starting on: October 10, 2019
* Frequency: Monthly
User1 accepts Terms1 on September 5, 2019. User2 accepts Terms1 on October 5, 2019.
When will Terms1 expire for the first time for each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: [none]
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/terms-of-use

Comment: *

Name: *

Email: *

Verification: *