Topic 5 Flashcards
Question #1
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below.
Each answer is worth one point. After you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear in the review screen.
Your company’s head of IT Security has instructed you to put a continual privileged access review system in place.
He requires that all privileged accounts be reviewed every seven days.
Users with administrative privileges must self-assess their access, however, if an administrator doesn’t respond within three days of receiving such a request, privileged access must be removed.
What tool will you use to implement his requirements?
• B. Azure AD Privileged Identity Management
Question #2
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below.
Each answer is worth one point.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company’s head of IT Security has instructed you to put a continual privileged access review system in place. He requires that all privileged accounts be reviewed every seven days.
Users with administrative privileges must self-assess their access, however, if an administrator doesn’t respond within three days of receiving such a request, privileged access must be removed.
What will you configure as the frequency on the access review?
• B. Weekly
Question #3
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below.
Each answer is worth one point. After you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear in the review screen.
Your company’s head of IT Security has instructed you to put a continual privileged access review system in place. He requires that all privileged accounts be reviewed every seven days.
Users with administrative privileges must self-assess their access, however, if an administrator doesn’t respond within three days of receiving such a request, privileged access must be removed.
What will you select for the Reviewers option of the access review?
• B. Members
Question #4
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below.
Each answer is worth one point. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company’s head of IT Security has instructed you to put a continual privileged access review system in place. He requires that all privileged accounts be reviewed every seven days.
Users with administrative privileges must self-assess their access, however, if an administrator doesn’t respond within three days of receiving such a request, privileged access must be removed.
Where would you configure what happens if a reviewer doesn’t respond to the request?
• A. Upon completion settings
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response(s) to the question or statement below. Each answer is worth one point.
After you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear in the review screen.
Your company’s head of IT Security has instructed you to put a continual privileged access review system in place. He requires that all privileged accounts be reviewed every seven days.
Users with administrative privileges must self-assess their access, however, if an administrator doesn’t respond within three days of receiving such a request, privileged access must be removed.
What would you select for the If reviewers don't respond option?
- B. Remove access
Question #6 Topic 5
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below.
Each answer is worth one point. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a Windows Server 2016 server in your environment that will be a domain controller.
You want to enable the following security products on the new server: Azure ATP - Defender ATP - Azure Sentinel - Which of the following will you download and install on the server?
Each answer is part of the complete solution. (Choose two.)
• A. Microsoft Management Agent
• C. Sensor setup package
Question #7
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response (s) to the question or statement below. Each answer is worth one point.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a Windows Server 2016 server in your environment that will be a domain controller.
You want to enable the following security products on the new server:
Azure ATP - Defender ATP - Azure Sentinel - Which of the following items will you require for the configuration on the server? (Choose all that apply.)
• B. Workspace key from Azure ATP console
• C. Workspace ID from Defender ATP console
• D. Workspace key from Defender ATP console
• E. Workspace ID from Sentinel console
• F. Workspace key from Sentinel console
Question #8
NOTE: This question is a part of a series of questions that present the same scenario.
For each of the following statements, select the best response(s) to the question or statement below. Each answer is worth one point.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a Windows Server 2016 server in your environment that will be a domain controller.
You want to enable the following security products on the new server:
Azure ATP -
Defender ATP -
Azure Sentinel -
How will you configure the Microsoft Management Agent on the server? (Choose all that apply.)
- *• C. Workspace ID from Defender ATP console**
- *• D. Workspace key from Defender ATP console**
- *• E. Workspace ID from Sentinel console**
- *• F. Workspace key from Sentinel console**
Question #9 Topic 5
You are configuring Azure Active Directory and need to synchronize on-premises Active Directory user accounts, but your security officer does not want passwords or their derivatives to be stored in the cloud at all.
Which options are available to you? (Choose two.)
• B. AAD Connect with pass-through authentication (PTA)
• D. AAD Connect with AD federation (AD FS)
Question #10 Topic 5
Which of the following Windows 10 Enterprise features provides biometric identity access control?
• A. Windows Hello
Question #11 Topic 5
You have deployed AIP in your organization.
You are trying to discover, classify and protect existing data in your organization.
You have deployed AIP scanner to a server named Bigbrother1.
Which of the following are valid targets in for your AIP Scanner deployment? (Choose two.)
• A. UNC path over SMB protocol
• B. Local storage on BigBrother1
Question #12
You are the global administrator of your organization’s M365 subscription.
You have created a data subject request case and you are reviewing the search results, but you see the following message in place of the expected results:
You don’t have permissions to preview, ask the administrator to assign them.
Where would you assign yourself the appropriate permissions?
• C. Office 365 Security & Compliance Center
Question #13 Topic 5
What is the maximum number of days you can allow users to remember their MFA sessions?
• C. 60 days
Question #14 Topic 5
The exhibit shows the O365 Security & Compliance Center interface.
Where would you start a Data Subject Request (DSR) search?
• D. Data privacy
Question #15
You’ve deployed WIP in silent mode, what is the user experience?
• D. Sensitive data is not blocked
