カテゴリー MS-102

Q21. Microsoft 365のサブスクリプションをお持ちです。
You have a data loss prevention (DLP) policy that blocks sensitive data from being shared in email messages.
You need to modify the policy so that when an email message containing sensitive data is sent to both external and internal recipients, the message is only prevented from being delivered to the external recipients.
What should you modify?

Q22. You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

ドロップダウンメニューを使用して、図に示されている情報に基づいて、各ステートメントを完成させる回答の選択肢を選択します。
注意：各選択肢の正誤は1点満点とする。

Q23. ホットスポット
You have an Azure AD tenant named contoso.com that contains the users shown in the following table.

Multi-factor authentication (MFA) is configured to use 131.107.5.0/24 as trusted IPs.
テナントには、以下の表に示す名前の場所が含まれる。

以下の設定を持つ条件付きアクセスポリシーを作成します：
以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

Q24. Microsoft 365のサブスクリプションをお持ちです。
次の表に示すデバイスがあります。

You plan to join the devices to Azure Active Directory (Azure AD)
What should you do on each device to support Azure AU join? To answer, drag the appropriate actions to the collect devices, Each action may be used once, more than once, of not at all. You may need to drag the split bar between panes or scroll to view content.
注意：各選択肢の正誤は1点満点とする。

Q25. Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD). The domain contains the servers shown in the following table.

You use Azure Information Protection.
You need to ensure that you can apply Azure Information Protection labels to the file stores on Server1.
順番に実行すべき3つのアクションはどれでしょう？答えるには、アクションのリストから適切なアクションを解答エリアに移動し、正しい順番に並べます。

Q26. You need to configure just in time access to meet the technical requirements.
何を使うべきか？

Q27. You need to meet the technical requirement for the SharePoint administrator. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Q28. Microsoft 365のサブスクリプションをお持ちです。
You need to create two groups named Group! and Group2. The solution must meet the following requirements:
* Group1 must be mail-enabled and have an associated Microsoft SharePoint Online site.
* Group2 must support dynamic membership and role assignments but must NOT be mail-enabled.
Which types of groups should you create? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.

Q29. Microsoft 365のサブスクリプションをお持ちです。
In the Exchange admin center, you have a data loss prevention (DLP) policy named Policy1 that has the following configurations:
Block emails that contain financial data.
Display the following policy tip text: Message blocked.
From the Security & Compliance admin center, you create a DLP policy named Policy2 that has the following configurations:
Use the following location: Exchange email.
Display the following policy tip text: Message contains sensitive data.
When a user sends an email, notify the user if the email contains health records.
What is the result of the DLP policies when the user sends an email? To answer, drag the appropriate results to the correct scenarios. Each result may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
注意：各選択肢の正誤は1点満点とする。

Q30. ホットスポット
あなたのネットワークには、オンプレミスのActive Directoryドメインがある。このドメインには、次の表に示すサーバーが含まれています。

You purchase a Microsoft 365 E5 subscription.
You need to implement Azure AD Connect cloud sync.
What should you install first and on which server? To answer, select the appropriate options in the answer area.
注意：各選択肢の正誤は1点満点とする。

Q31. ホットスポット
Your network contains an on-premises Active Directory domain.
Microsoft 365 E5のサブスクリプションをお持ちです。
You plan to implement directory synchronization.
You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege.
何を使うべきですか？回答するには、回答欄で適切な選択肢を選んでください。
注意：各選択肢の正誤は1点満点とする。

Q32. Your on-premises network contains an Active Directory domain and a Microsoft Endpoint Configuration Manager site.
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You use Azure AD Connect to sync user objects and group objects to Azure Directory (Azure AD) Password hash synchronization is disabled.
You plan to implement co-management.
You need to configure Azure AD Connect and the domain to support co-management.
あなたは何をすべきですか？回答するには、回答エリアで適切な選択肢を選択してください。
注意：各選択肢の正誤は1点満点とする。

Q33. You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

You plan to review device startup performance issues by using Endpoint analytics.
Which devices can you monitor by using Endpoint analytics?

Q34. Microsoft 365のサブスクリプションをお持ちです。
You create a retention label named Retention1 as shown in the following exhibit.

You apply Retention! to all the Microsoft OneDrive content.
On January 1, 2020, a user stores a file named File1 in OneDrive.
On January 10, 2020, the user modifies File1.
On February 1, 2020, the user deletes File1.
When will File1 be removed permanently and unrecoverable from OneDrive?

Q35. 以下の表に示すユーザーを含むAzure ADテナントがあります。

You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.
What information must be configured for each user before the user can perform a self-service password reset?
To answer, select the appropriate options in the answer area.
注意：各選択肢の正誤は1点満点とする。