AB 900

Q1: You want to view the administrative actions taken by a service administrator in Microsoft 365. Statements: 1. You can use Search & intelligence in the Microsoft 365 admin center. 2. You can use Audit in the Microsoft Defender portal. 3. You can use Audit in the Microsoft Purview portal. Yes / Yes / Yes. Yes / No / Yes. No / Yes / Yes. No / No / No.

Q2: Select the answer that correctly completes the sentence. Microsoft Entra Privileged Identity Management (PIM) provides ________. restricted access to Microsoft 365 services. the lifecycle management of users. the management of enterprise applications. time-bound role activation.

Q3: Your organization has a Microsoft 365 E5 subscription. You need to ensure that a third-party cloud service can authenticate to Microsoft Entra. What should you configure?. a Microsoft 365 Copilot connector. multifactor authentication (MFA). a Conditional Access policy. an app registration.

Q4: Select the answer that correctly completes the sentence. Conditional Access policies ________. are configured by using the Microsoft Defender portal. are applied only to on-premises resources. provide control over how users can access cloud apps. require a Microsoft Exchange mailbox.

Q5: Select the answer that correctly completes the sentence. The Microsoft responsible AI principle of ________ requires the oversight of AI systems to ensure that humans remain in control. accountability. inclusiveness. privacy and security. transparency.

Q6: A user named User5 navigates to https://myapps.microsoft.com. After entering their username and password, User5 receives the message shown on their mobile device. User5 is using ________ for multifactor authentication (MFA). email OTP. the Microsoft Authenticator app. SMS. a Temporary Access Pass.

Q7: Your organization has a Microsoft 365 subscription. You need to evaluate your organization's Identity Secure Score. Which two factors affect the score? Each correct answer presents part of the solution. the SharePoint site permissions. the number of global administrators. passwords that are never expired. the location of the users.

Q8: Your organization has a Microsoft 365 subscription. You need to review the impact of a recent phishing incident that targeted email users. What should you use?. the Microsoft Defender portal. the Microsoft 365 admin center. the Microsoft Entra admin center. the Microsoft Exchange admin center.

Q9: For each of the following statements, select Yes if the statement is true. Otherwise, select No. Statements: 1. Microsoft Defender for Office 365 provides protection from phishing and malware attacks. 2. Microsoft Defender for Identity monitors identities in Active Directory domains. 3. Microsoft Defender Vulnerability Management provides protection for software as a service (SaaS) applications. Yes / Yes / No. Yes / No / No. No / Yes / No. Yes / Yes / Yes.

Q10: Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. The permissions for Site1 are configured as shown in the following exhibit. You create a new user named User1 in the subscription. Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic. User 1 is _______ Site1. a site visitor of. a site owner of. a site member of. prevented from accesing.

Q11: Your organization has a Microsoft 365 subscription. You create a security group named Group1 and assign a Microsoft 365 E3 license to the group. You discover that a user named User1 does NOT have access to the Microsoft 365 E3 features. You need to ensure that User1 can access all the Microsoft 365 E3 features. Which two actions can you perform? Each correct answer presents a complete solution. Add User1 to Group1. Assign a Conditional Access policy to Group1. Assign a Conditional Access policy to User1. Assign a license to User1.

Q12: Select the answer that correctly completes the sentence. From the SharePoint admin center, you can create a ________. server. user. site. role.

Q13: Your organization has a Microsoft 365 subscription. You discover that some users cannot sign in to Microsoft 365. You need to view the failed Microsoft 365 sign-in attempts. What should you use?. the Microsoft Defender portal. the Microsoft Entra admin center. the Microsoft Purview portal. the Microsoft 365 admin center.

Q14: Select the answer that correctly completes the sentence. In Microsoft Entra Privileged Identity Management (PIM), an administrator has made you eligible for the User Administrator role. Before you can create a user account, you must ________. activate the role. install the Microsoft Authenticator app. request a license. update your location information.

Q15: Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. You need to prevent users from sharing the content of Site1 to external users. What should you use?. the Site1 content. the SharePoint admin center. the Microsoft 365 admin center. the Microsoft Entra admin center.

Q16: Select the answer that correctly completes the sentence. ________ is a unified enterprise suite that coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. Microsoft Defender XDR. Microsoft Entra Conditional Access. Microsoft Entra ID Protection. Microsoft Purview.

Q17: You open the Microsoft Entra admin center as shown in the following exhibit. Select the answer that correctly completes the sentence. Resolving the ________ recommendation will improve the Identity Secure Score the most. Do not expire passwords. Use least privileged administrative roles. Enable policy to block legacy authentication. Require multifactor authentication for administrative roles.

Q18: What can you use to block a user account automatically when a risky sign-in is detected?. Microsoft Defender for Identity. Microsoft Entra ID Protection. Microsoft Defender for Office 365. Microsoft Entra Privileged Identity Management (PIM).

Q19: Your organization has a Microsoft 365 subscription. A user named John is assigned an admin role as shown in the following exhibit. John can ________. view all the users in the Microsoft Entra tenant. view all the content in Microsoft SharePoint sites. read all the content in Microsoft Exchange mailboxes. perform eDiscovery of Microsoft 365 Copilot prompts.

Q20: For each of the following statements, select Yes if the statement is true. Otherwise, select No. Statements: 1. You can use a Microsoft Entra security group to assign permissions to Microsoft Entra ID resources. 2. You can use a Microsoft Entra security group to assign Microsoft 365 licenses. 3. You can use a Microsoft Entra security group to assign permissions to Microsoft Exchange mailboxes. Yes / Yes / Yes. Yes / Yes / No. Yes / No / Yes. No / Yes / Yes.