MS 900 Flashcards
(133 cards)
1
Q
Add-on USLs
A
are for on-premises software customers who want to add Microsoft 365 cloud products & services.
2
Q
Full USLs
A
are new customers who haven’t previously purchased Microsoft products & services.
3
Q
From SA USLs
A
are for on-premises Software Assurance customers that want to transition to the cloud.
4
Q
Step Up USLs
A
are for customers who want to upgrade the level of their service.
5
Q
FastTrack
A
is a service provided by Microsoft that helps customers onboard Microsoft Cloud solutions and drive user adoption. Customers with eligible subscriptions to Microsoft 365, Azure or Dynamics 365 can use FastTrack at no extra cost for the life of their subscription.
6
Q
Pre-sales
A
is a support service provided to help the company with understanding more about Microsoft 365 services before the purchase is made.
7
Q
Community-based support
A
a free support service provided by members of the community.
8
Q
Microsoft Unified support
A
24/7 as-needed technical support, an assigned Customer Success Account Manager, advisory support, cloud assistance, technical training & more.
9
Q
The Cloud Solution Provider pricing model
A
a Microsoft 365 partner providing technical and billing services
10
Q
Microsoft Online Service Program aka The Web Direct Pricing Model
A
pay-as-you-go billing that offers convenience and flexibility.
11
Q
Microsoft Teams Admin Center
A
must be a global administrator or teams administrator,
- add, edit, archive, restore deleted teams, renew an expiring team.
- add or remove members, owners, channels.
- change team and group settings
- change team name, description, privacy, sensitivity label, member permissions, guest permissions, and set whether team members can use giphys, stickers, and memes.
12
Q
SharePoint admin center
A
- view SharePoint communication sites, channel sites and sites that belong to Microsoft 365 groups
- sort, filter, search and create new sites
- all site types expect channel sites, you can add or remove site admins and change the primary admin. For group-connected team sites, you can add and remove group owners.
- change a site’s hub association
- view site details
- view site activity such as the # of files stored and storage usage.
13
Q
Exchange Admin Center (EAC)
A
- reports for mail flow; migration; and priority monitoring.
- Azure cloud shell support
- mailbox management
- create and manage 4 types of groups: Microsoft 365 Groups, Distribution lists, Mail-enabled security groups, and Dynamic distribution lists.
- supports cross-tenant migrations for Merger & Acquistion scenarios, and automation Google Workspace (G-Suite) migrations.
14
Q
Microsoft 365 Admin Center
A
- View invoices and past billing statements.
- Modify the current payment method.
- Update the email notification for billings
- Add users and assign licenses at the same time, Delete or restore users, or reset a user’s password.
- See detailed reports on email use, Microsoft 365 activations
Create or manage a Microsoft 365 group, distribution group, security group, or shared mailbox.
15
Q
Identities (Zero Trust Model)
A
may be users, services, or devices. When an identity attempts to access a resource, it must be verified with strong authentication, and follow least privilege access principles.
16
Q
Devices (Zero Trust Model)
A
create a large attack surface as data flows from devices to on-premises workloads and the cloud. Monitoring devices for health and compliance is an important aspect of security.
17
Q
Applications
(Zero Trust Model)
A
are the way that data is consumed. Includes discovering all applications being used, called Shadow IT because not all applications are managed centrally. Manages permissions and access.
18
Q
Data (Zero Trust Model)
A
should be classified, labeled, and encrypted based on its attributes. Security efforts are about protecting data, and ensuring it remains safe when it leaves devices, applications, infrastructure, and networks that the organization controls.
19
Q
Infrastructure (Zero Trust Model)
A
whether on-premises or cloud based, represents a threat vector. To improve security, you assess for version, configuration, and JIT access, and use telemetry to detect attacks and anomalies. This allows you to automatically block or flag risky behavior and take protective actions.
20
Q
Networks (Zero Trust Model)
A
should be segmented, including deeper in-network micro segmentation. Also, real-time threat protection, end-to-end encryption, monitoring, and analytics should be employed.
21
Q
Azure Virtual Desktop
A
the ability to share the desktop compute resources across multiple users, optimizes the management of user profiles by using the FSLogix container technology, and minimizes the maintenance overhead.
22
Q
Bookings
A
integrates with Outlook, provides automated email and SMS notifications about upcoming appointments, and supports buffer times that automatically adjust staff schedules to account for activities required to prepare for meetings with customers.
23
Q
SaaS
A
the ability to use software without the need for development of custom software-based solutions or managing the underlying networking, storage, and compute services.
24
Q
IaaS
A
consists of infrastructure services (such as networking and storage) and compute offerings that provide full access to the OS running in cloud-hosted virtual machines but imposes extra management and maintenance overhead.
25
PaaS – For developers
Focus on the deployment & management of your apps. Don’t worry about provisioning, configuring or understanding the hardware or OS.
Ex: Heroku, Redhat Openshift, Apprenda, Google App Engine.
26
Microsoft Purview compliance Portal
a portal for organizations to manage their compliance needs using integrated solutions for information protection, data lifecycle management, insider risk management, auditing, and more.
27
Service Trust Portal
how Microsoft cloud services protect company data. Whitepapers, certifications, reports, and other documents are available from the portal.
28
The Exchange admin Portal
manage advanced email settings, such as quarantine, encryption, and mail flow rules.
29
The Microsoft Defender Portal
monitor suspicious activities, mailbox attacks, and breach activities on devices.
30
Microsoft Defender
protect a company against cyberattacks. Each of the services protects against a specific type of attack.
31
Microsoft Defender for Office 365
used to protect Microsoft 365 apps
protect companies from attacks on emails, links, and other collaborative tools like Microsoft Teams, SharePoint, and OneDrive.
32
Microsoft Defender for Identity
leverages Active Directory events to detect cyberattacks targeting users and computers that are part of the Active Directory domain.
+ uses the Active Directory data as signals to identify suspicious activities
a cloud-based security solution that prevents, identifies, protects, and resolves advance threats and attacks against user accounts. Provides the ability to monitor suspicious behavior and patterns of users, reduce surface attacks, and investigate suspicious attacks on user accounts.
33
Microsoft Defender for Endpoint
protects network endpoints such as compute devices.
It provides the first line of defense in the stack, automated investigation, and remediation of breaches and network protection.
+ integrates Microsoft Defender suite, Intune and Microsoft Defender for Cloud.
34
Microsoft Defender for Cloud Apps
+ operates as an intermediary between the cloud user and cloud provider, mediating the requests sent to the cloud providers.
a cross SaaS security solution that combats cyberthreats across Microsoft services and third-party cloud services. Used to protect cloud-based applications, not on-premises applications that rely on Active Directory for authentication.
35
Secure Score
is one of the tools in the Microsoft Defender portal. Shows the company’s current security posture. The higher the Secure Score, the better the company’s security posture.
- Report on the current state of the organization's security posture.
- Improve their security posture by providing discoverability, visibility, guidance, and control.
- Compare with benchmarks and establish key performance indicators (KPIs).
36
Federated Authentication
Microsoft Entra ID hands off the authentication process to a separate trusted authentication system such as on-premises Active Directory Federation Services (AD FS) to validate the user's password. Provides third-party multifactor authentication.
37
Active Directory Federation Service (AD FS)
an identity access solution that provides client computers (internal or external to your network) with seamless SSO access to protected Internet-facing applications or services, even when the user accounts and applications are located in completely different networks or organizations.
38
Password hash synchronization
enables users to sign in to on-premises and cloud applications using the same password. This ensures that the user’s authentication takes place in Microsoft Entra ID rather than the company’s on-premises Active Directory
39
Pass-through authentication
enables users to sign in to on-premises and cloud applications using the same password. This authentication type validates the user’s password against the company’s on-premises Active Directory, not Microsoft Entra ID.
40
Microsoft 365
- a subscription-based service and provides Microsoft apps for employees to use online and offline.
- offers integration with Microsoft Graph 365.
- minimized management overhead
- access to the latest features of its productivity apps.
- Both Office Pro Plus 2019 and Microsoft 365 offer the ability to run Office apps while offline.
- uses Microsoft Entra ID to control access to its resources.
41
Cloud computing
provides high availability of resources.
Provides geo-distribution, which gives the ability to deploy apps and other resources across regions. The service provider has control of the data center, not the company. In cloud computing, data does not reside locally.
42
Productivity score report
provides specific recommendations that help organizations to use Microsoft 365 products more efficiently.
43
Usage report
helps understand how people in the organization use Microsoft 365 services.
44
Endpoint Manager Admin Center
offers insights regarding the Endpoint Manager functionality, allowing for identifying status of devices used by people within the organization.
45
Teams admin center
offers insights regarding the Teams status, including user activity and device usage reports.
46
Viva Personal Insights
Provides the daily briefing email functionality, which includes outstanding commitments and pending follow-ups to emails from other employees as well as documents related to meetings scheduled on that day.
47
Viva Advanced Insights
provides functionality similar to Organizational Insights, but includes advanced data analytics tools, allowing for customizing scope and focus on its view.
48
Viva Organizational Insights
provides additional information intended for business leaders, including a comprehensive view of collaboration efforts across the entire organization.
49
Viva Manager Insights
provides information intended for managers to facilitate management of their teams, helping them, for example, to track the work patterns of their team members.
50
Endpoint Manager admin center
shows Intune reports about device compliance, health, and trends.
51
Microsoft Entra ID
reports show sign-in activity and audit logs.
52
Long-Term Servicing Channel
Designed for specialist systems and devices that don't run Office apps such as medical equipment or ATMs. These devices typically perform a single task and don't need frequent updates compared to other devices in the organization. Receives new features every 2 or 3 years.
53
Viva Connections
Provides access to content curated for individual worker roles within the organization and supports a feed capability for delivery of personalized content through integration with Yammer and Stream.
54
Viva Learning
brings enterprise learning into the flow of work by connecting content from your organization.
55
Viva Insights
gives insights and recommendations to individuals to boost productivity and wellbeing by suggesting focus times, tasks to be completed, and mindful disconnection from work.
56
Viva Topics
delivers a knowledge discovery experience that helps people connect to information and experts across their organization. It brings knowledge to your users in the Microsoft 365 apps they use every day.
57
Viva Goals
is a goal-setting and objectives and key results (OKR) management solution for your entire organization. Allows you to connect your employees to your organization’s goals.
58
Viva Engage
connects leaders and employees to openly share, ideate, problem solve, and contribute across boundaries. These new Viva Engage features will also appear in Yammer web, desktop and mobile apps
59
Viva Sales
uses Microsoft 365 and Microsoft Teams to automatically capture, access, and register data into any customer relationship management (CRM) system. Help sellers boost productivity, lighten workloads, save time, and help salespeople sell more.
60
Standard channels
are open to all team members. Users who are not members of the team cannot be added. Guests can be added.
61
Private channels
are for selected team members. Existing team members can be added to Private channels, but users who are not members of the team cannot be added. Guests can be added.
62
Shared channels
are for people both inside and outside the team. Existing team members and users who are not members of the team can be added to this channel. Guests cannot be added to this channel.
63
OneNote
share a notebook, insert linked files, and real-time editing.
64
SharePoint
an intranet site for sharing files and real-time editing.
65
Microsoft Teams
Collaborate through online meetings, chat, and calls.
66
Yammer internal network
provides secure communication with users across multiple departments in the same company, limits access to company members with a valid email address, supporting communication through dedicated desktop application and playing of videos in-line and for automatic generation of transcriptions with Microsoft Stream.
67
Yammer external network
invited users from outside your organization. A space for you to engage with outside partners, like customers, suppliers, or investors.
68
Yammer
is an enterprise social network that connects leaders, communicators, and employees together to share knowledge
69
OneDrive
a cloud library for file storage and sharing
70
Microsoft Graph
integrates with Microsoft 365 to enhance its capabilities by leveraging cloud-based Artificial Intelligence capabilitie.
71
Azure Virtual Desktop (AVD)
* Modern and secure desktop and app virtualization solution that runs on the cloud.
* Delivers multi- session on Windows
* Access your desktop that is in the cloud from virtually anywhere.
* Dedicated to a single user or used by multiple users, using FSLogix technology
* Bring your existing Remote Desktop Services (RDS) and Windows Server desktops and apps to any computer.
* Virtualize both desktops and apps.
* Azure computing and storage are customer managed with consumption based costs.
* provide the ability to share compute resources across multiple users.
* Optimize the user profile management by using FSLogix container technology.
* Minimize the maintenance effort.
* allow employees to use Microsoft apps and provide access to a personalized Windows desktop OS from any device, this would increase management effort.
72
Windows 365
* needs to be connected to the internet.
* Virtual desktop
* Cloud Machine
* Desktop as a Service
* Stream the full Windows experience including apps, data, and settings from Microsoft cloud to any personal or corporate device.
* Dedicated to a single user
* Simple to deploy and manage from a single console
* Assign a license to a user and Windows 365 is automatically provisioned for that user.
* Available in Windows 365 Business and Windows 365 Enterprise
73
Azure Virtual Desktop on Surface
run Virtual Desktop Infrastructure (VDI) on a Surface device. Blurs the lines between the local desktop experience and the virtual desktop, where touch, pen, ink, and biometric authentication span both physical and virtual environments.
74
Function-as-a-Service (FaaS)
a platform for hosting functions, which usually respond to events, being triggered only for a very specific action and stopped immediately after concluding the task.
75
eDiscovery solutions
are intended to allow searching through application content, being available for Microsoft OneDrive, Teams, SharePoint, and Exchange, among others.
76
Microsoft Purview Insider Risk Management
uses indicators from Microsoft 365 and third parties to detect potentially risky activity. Uses logs from Microsoft 365 and Microsoft Graph, allowing a company to identify risks and take action to mitigate the risks. Protecting against IP theft requires understanding the content of data stored and how it is shared.
77
Priva Privacy Risk Management feature
can detect overexposed data and data transfers but does not block them. It only notifies users who must decide which action to take themselves.
78
Learning hub
is a section inside the Defender portal that shows links to blogs and video streaming channels, in addition to Microsoft Learn documentation.
79
Cloud Discovery
is part of Microsoft Defender for Cloud Apps. Uses traffic logs to discover logs and apps being used.
80
Threat Explorer
is a tool in Defender for Office, which companies can use to identify and analyze recent threats.
81
Authentication
is the process of verifying if the provided credentials are correct.
82
Authorization
occurs after authentication, and defines, for an identity that has already been authenticated, to which resources access should be granted or denied.
83
Zero Trust
is an approach that assumes that all requests come from an open and untrusted network.
84
The Shared responsibility model
a way to shift the security responsibilities between the customer and the cloud provider
85
The monthly uptime percentage and corresponding service credit depend on the service, which is defined in the SLA. The following table describes an example of monthly uptime percentages and corresponding service credits:
Monthly time percentage Service
credit
< 99.9% = 25%
< 99% = 50%
< 95% = 100%
86
Microsoft Customer Agreement (MCA)
a billing account is created when your organization works with a Microsoft representative, an authorized partner, or purchases independently.
87
Microsoft Online Services Program
a billing account is created when you sign up for a Microsoft 365 subscription directly.
88
Microsoft Products & Services Agreement Program (MPSA)
a billing account is created when your organization signs an MPSA Volume Licensing agreement to purchase software and online services.
89
Automated investigation and remediation (AIR):
uses various inspection algorithms and is based on processes that are used by security analysts. Examine alerts and take immediate action to resolve breaches. AIR capabilities significantly reduce alert volume, allowing security operations to focus on more sophisticated threats and other high-value initiatives.
90
Federation trust
allows users authenticated by one identity provider, such as Microsoft Entra ID, to access resources to which access is controlled by other identity providers.
91
Microsoft Entra ID conditional access
support for multi-factor authentication and user-based risk evaluation as part of its gated controls.
92
Microsoft Priva
* Helping employees adopt sound data handling practices and training them to spot and fix issues
* Understanding the potential risks in the amount and type of personal data they store and share
* Fulfilling data subject requests, or subject rights requests, efficiently and on-time
93
Priva Privacy Risk Management
provides visibility into your organization's data and policy templates for reducing risks.
94
Priva Subject Rights Requests
provides automation and workflow tools for fulfilling data requests.
95
Enclaves
use cryptography to create a secure lockbox that protects non-persistent data.
96
Encryption at rest
protects data stored at persistent storage such as disks and databases.
97
Hashing
converts text to an exclusive value with a fixed length. It is used to verify authenticity of files and store passwords.
98
Private key
is a component of public key infrastructure (PKI), used together with a public key. It is often used for encryption in transit such as for HTTPS.
99
Hunting
is part of the Microsoft 365 Defender portal that allows the security professionals to proactively search for undetected threats across the users' devices and applications.
100
Incidents and alerts in the Microsoft 365 Defender portal
represent detected potential threats
101
Threat analytics in the Microsoft 365 Defender portal
provides the interface to identify threat intelligence information analyzed by Microsoft security researchers.
102
Active Directory
provides support for single sign-on, allowing users to use a single set of credentials to sign into multiple computers and access multiple resources.
- provides support to create user objects and computer objects.
103
Microsoft 365 Admin center
displays the company’s productivity score, number of office activations, files stored, and Microsoft’s browser usage for last 7, 30, 90, and 180 days.
103
Windows Autopilot
manages the pre-configuration and setup of new devices. Windows Autopilot is available on Windows 10 and 11 devices and simplifies the lifecycle management of the device. Windows Autopilot also automatically enrolls the devices in Intune and can integrate the devices with Configuration Manager.
103
Network segmentation
used to implement the principle of assumed breach.
104
A defense in depth strategy
uses a series of mechanisms to slow the advancement of an attack that aims to gain unauthorized access to data.
104
Least privilege Access
restricting access to information to only the level that users need to perform their work.
104
distributed denial-of-service (DDoS attack)
attempts to overwhelm and exhaust an application's resources.
105
Perimeter
about protecting an organization's resources from network-based attacks.
106
An Azure RBAC role
is applied to a scope, which is a resource or set of resources that the access applies to.
107
Resource locks
prevent the accidental change or deletion of a resource.
108
Resource Tag
are used to locate and act on resources associated with specific workloads, environments, business units, and owners.
109
Windows 365 Enterprise
provides dedicated desktop compute resources to each individual user, integrates natively with Microsoft Intune and Defender, offers automatic provisioning triggered by a user license assignment, minimizes the maintenance overhead, and supports organizations with more than 300 users
110
Windows 365 Business
preserves user settings across different logon sessions by using a local profile on the Cloud PC, offers automatic provisioning triggered by a user license assignment, and minimizes both the operational and licensing costs for organizations with less than 300 users.
111
Azure Virtual Machine
* share the desktop compute resources across multiple users
* optimize the management of user profiles by using the FSLogix container
* considerably increase the maintenance overhead if use FSLogix container to share desktop compute resources with multiple users.
112
Semi-Annual Enterprise Channel
* receives feature updates every 6 months, in January and July on the second Tuesday of the month.
* include feature, security, and non-security updates.
* Microsoft recommends this channel only for those select devices in your organization where extensive testing is needed before rolling out new Office features.
113
Semi-Annual Enterprise Channel (Preview),
which makes them available in March and September.
114
Current Channel
* receives feature updates as soon as they're ready, but there's no set schedule.
* receives security and non-security updates around 2 or 3 times a month.
115
Monthly Enterprise Channel
makes security and quality updates available as soon as they are released. Feature updates are staggered and made available once per month.
116
Live Events
provide broadcast functionality using Microsoft Stream, Teams, or Yammer. These events can be hosted with up to 20,000 participants. There are dedicated roles for producer, presenter, and organizer. The producer can switch the presenter that shows up in the live feed. Microsoft Teams live events support a moderated Q&A experience for up to 20,000 participants.
117
Webinars
are presentations where only the first 1,000 participants have full interactive capabilities and lack the definition of distinct roles.
118
To Do
gives each employee the ability to create named and repeatable tasks, mark the task as important, schedule reminders on tasks, and view tasks based on the assigned due dates.
119
Audio conferencing
is available for users to dial in to meetings from phones when there is limited internet connectivity. Audio conferencing allows up to 1,000 phone attendees.
120
Meetings in Teams
include audio, video, and screen sharing for up to 1,000 people. View-only capabilities are for participants over 1,000 up to 20,000.
121
Power Apps
is a suite of apps, services, and connectors, as well as a data platform, which provides a rapid development environment to build custom apps for your business needs.
122
Project
allows users to organize shared tasks on Kanban boards, includes support for timeline Gantt charts, as well as integrates with Microsoft Teams and Power BI Desktop.
123
SharePoint team sites
provide secure shared file storage, facilitate collaboration on content authoring among all team members, as well as support integration with Microsoft Teams and Power Automate.
124
SharePoint communication sites
are meant to provide means for communicating information across teams, with a small number of content authors.
125
Microsoft Stream
upload, view, and share videos.
126
Exchange
provides a user with a personalized inbox to deal with emails and captures events in a calendar.
127
Publisher
is a Microsoft 365 app that needs to be installed on a local computer to be used by a licensed user.
128
Planner
provides the team lead and team members the ability to manage tasks in a structured manner by creating a plan and buckets, for organizing assigned tasks. Tasks can be displayed in different views such as Charts and Calendar.
129
Access
is a Microsoft 365 app that needs to be installed on a local computer to be used by a licensed user.
