Microsoft MS-101 Microsoft 365 Mobility and Security Free Practice Test — 30 Questions

Question 1

A company is implementing a new mobile application management (MAM) solution to enhance security and control over its corporate applications. The IT department is tasked with ensuring that only authorized users can access sensitive applications while maintaining a seamless user experience. Which approach should the IT department prioritize to achieve these objectives effectively?

Accepted Answer

Implementing conditional access policies based on user location and device compliance status

Question 2

A company is implementing a new security management framework to protect its sensitive data from unauthorized access. They are considering various access control models to ensure that only authorized personnel can access specific resources. Which access control model would best support the principle of least privilege while allowing for dynamic adjustments based on user roles and responsibilities?

Accepted Answer

Role-Based Access Control (RBAC)

Question 3

A financial institution is implementing a Data Loss Prevention (DLP) strategy to protect sensitive customer information, including Social Security Numbers (SSNs) and credit card details. The DLP policy is configured to monitor and restrict the sharing of this sensitive data across various channels, including email, cloud storage, and instant messaging. During a routine audit, the security team discovers that a significant number of alerts have been triggered due to employees attempting to share sensitive data via a third-party file-sharing service. What is the most effective approach for the institution to enhance its DLP strategy in this scenario?

Accepted Answer

Implement a policy that blocks the use of unauthorized third-party file-sharing services and educates employees on the risks of data sharing.

Question 4

A company is implementing a new user management policy for its Microsoft 365 environment. The policy requires that all users must have multi-factor authentication (MFA) enabled, and that user roles must be assigned based on the principle of least privilege. The IT administrator is tasked with reviewing the current user roles and permissions. After analyzing the user roles, the administrator finds that several users have been assigned roles that grant them more permissions than necessary for their job functions. What is the most effective approach the administrator should take to align user roles with the principle of least privilege while ensuring compliance with the MFA requirement?

Accepted Answer

Reassign user roles to ensure that each user has only the permissions necessary for their job functions and enforce MFA for all users.

Question 5

In a corporate environment, the IT security team is tasked with assessing the risk indicators associated with the use of mobile devices for accessing sensitive company data. They identify several key risk indicators, including the number of devices that are not compliant with security policies, the frequency of unauthorized access attempts, and the percentage of employees who have completed security training. If the company has 200 mobile devices, 30 of which are non-compliant, and there have been 50 unauthorized access attempts in the last month, what is the percentage of non-compliant devices and how does this relate to the overall risk assessment?

Accepted Answer

15% non-compliance, indicating a significant risk factor

Question 6

A company is implementing Microsoft 365 Mobility and Security to enhance its data protection and compliance posture. The IT administrator is tasked with configuring Conditional Access policies to ensure that only compliant devices can access sensitive company resources. Which of the following configurations would best achieve this goal while minimizing user disruption and maintaining security?

Accepted Answer

Configure Conditional Access to require multi-factor authentication (MFA) for all users accessing sensitive resources from any device, regardless of compliance status.

Question 7

A company has implemented a device compliance policy that requires all mobile devices accessing corporate resources to meet specific security standards. The policy mandates that devices must have a minimum operating system version, encryption enabled, and a password complexity requirement. If a device fails to meet any of these criteria, it will be marked as non-compliant. During an audit, it was found that 15 out of 100 devices did not meet the encryption requirement, while 10 devices were running an outdated operating system. Additionally, 5 devices had weak passwords. If the company wants to calculate the overall compliance rate of the devices, what percentage of devices are compliant with the policy?

Accepted Answer

0.7

Question 8

In a corporate environment, a company has implemented an Insider Risk Management program to mitigate potential threats from employees who may inadvertently or intentionally misuse sensitive information. The program includes various policies and procedures to identify, assess, and respond to insider risks. If an employee is found to be accessing sensitive data without a legitimate business need, which of the following actions should be prioritized to ensure compliance with the company\'s Insider Risk Policy and protect sensitive information?

Accepted Answer

Conduct a thorough investigation to determine the intent behind the access and implement corrective actions based on findings.

Question 9

A company has implemented a Data Loss Prevention (DLP) policy that monitors sensitive information across its Microsoft 365 environment. The DLP reports indicate that there were 150 incidents of sensitive data exposure over the past month. The company has categorized these incidents into three types: unauthorized sharing (60 incidents), accidental sharing (70 incidents), and intentional sharing (20 incidents). If the company wants to reduce the total number of incidents by 30% in the next month, how many incidents should they aim to achieve?

Accepted Answer

105 incidents

Question 10

A company is implementing a new security management framework to protect sensitive data across its Microsoft 365 environment. The framework includes various security controls such as identity protection, data loss prevention (DLP), and threat protection. The security team is tasked with evaluating the effectiveness of these controls. If the company experiences a data breach where 10% of its sensitive data is compromised, and the estimated cost of recovery is $500,000, what would be the total financial impact if the DLP system could have prevented 70% of this breach?

Accepted Answer

$350,000

Question 11

A company has recently implemented Microsoft 365 Safe Links to enhance its email security. During a security audit, the IT team discovers that some users are still clicking on links that lead to potentially harmful sites. To address this issue, the team decides to configure Safe Links policies to ensure that all links in emails are scanned in real-time. Which of the following configurations would best ensure that users are protected from malicious links while still allowing legitimate links to function properly?

Accepted Answer

Configure Safe Links to rewrite all URLs in emails and apply the policy to all users, ensuring that links are scanned in real-time when clicked.

Question 12

A company is planning to deploy Windows Autopilot to streamline the provisioning of new devices for its employees. The IT department needs to ensure that the devices are configured with specific settings, applications, and policies upon first boot. They have decided to use a combination of user-driven and self-deploying modes. What are the key considerations the IT team must take into account when configuring Windows Autopilot profiles for these deployment modes?

Accepted Answer

The need for user authentication and the requirement for a network connection during the provisioning process.

Question 13

A financial services company is implementing an insider risk policy to mitigate potential threats from employees who may misuse sensitive information. The policy includes monitoring user behavior, establishing clear guidelines for data access, and providing training on data security. After a month of implementation, the company notices an increase in flagged activities related to data access. Which of the following actions should the company prioritize to enhance its insider risk policy effectively?

Accepted Answer

Conduct a comprehensive review of the flagged activities to identify patterns and potential vulnerabilities in user behavior.

Question 14

A company has recently implemented Microsoft 365 with Safe Attachments to enhance its email security. An employee receives an email with an attachment that is flagged by Safe Attachments as potentially harmful. The employee is unsure whether to open the attachment or not. What should the employee do to ensure the security of the company\'s data while handling this situation?

Accepted Answer

The employee should not open the attachment and report the email to the IT department for further investigation.

Question 15

In a corporate environment, a company is implementing a records management policy to ensure compliance with data protection regulations. The policy mandates that all employee records must be retained for a minimum of five years after termination of employment. However, the company also needs to consider the implications of data minimization principles under GDPR. If an employee leaves the company on January 1, 2020, what is the latest date by which the company can securely dispose of their records while remaining compliant with both the retention policy and GDPR principles?

Accepted Answer

45658

Question 16

In a corporate environment, a company is evaluating the implementation of Microsoft 365 Mobility and Security features to enhance its data protection and compliance posture. The IT team is particularly interested in understanding how the integration of Microsoft Intune and Azure Active Directory (Azure AD) can facilitate secure access to corporate resources while ensuring compliance with regulatory standards. Which of the following best describes the key benefits of using Microsoft Intune in conjunction with Azure AD for managing mobile devices and applications?

Accepted Answer

It enables conditional access policies that restrict access based on user identity, device compliance, and location, thereby enhancing security and compliance with regulations such as GDPR and HIPAA.

Question 17

In a corporate environment, a company implements Role-Based Access Control (RBAC) to manage user permissions across its various departments. The IT department has a role that allows users to create, read, update, and delete (CRUD) user accounts, while the HR department has a role that allows users to read and update employee records but not delete them. If an employee from the IT department is temporarily assigned to assist the HR department, which of the following scenarios best illustrates the principle of least privilege in this context?

Accepted Answer

The IT employee retains their full CRUD permissions while assisting the HR department.

Question 18

A company has recently implemented a new security policy that requires all employees to use multi-factor authentication (MFA) for accessing sensitive data. After a month of implementation, the security team generates a report analyzing the effectiveness of this policy. The report indicates that there were 50 attempted unauthorized access incidents before the implementation of MFA, and only 5 incidents after. If the company had 200 employees, what is the percentage reduction in unauthorized access attempts due to the implementation of MFA?

Accepted Answer

0.9

Question 19

A company has implemented Self-Service Password Reset (SSPR) for its employees to enhance security and reduce helpdesk workload. The IT department has configured SSPR to require users to verify their identity using two out of three methods: email verification, SMS verification, and security questions. During a security audit, it was found that 70% of employees prefer SMS verification, 20% prefer email verification, and 10% prefer security questions. If 1,000 employees use SSPR, how many employees are likely to choose SMS verification as their primary method of identity verification?

Accepted Answer

700

Question 20

A company is implementing Microsoft Intune to manage its mobile devices and applications. The IT administrator needs to ensure that only compliant devices can access corporate resources. To achieve this, the administrator configures a compliance policy that checks for specific criteria, including operating system version, device encryption status, and whether the device has a password set. If a device fails to meet any of these criteria, it should be marked as non-compliant. What is the best approach for the administrator to enforce this compliance policy effectively across all devices in the organization?

Accepted Answer

Configure conditional access policies that restrict access to corporate resources based on compliance status.

Question 21

A multinational corporation is implementing a new records management policy to comply with both local and international regulations. The policy includes a retention schedule that specifies how long different types of records must be kept before they can be disposed of. The company has identified three categories of records: financial records, employee records, and customer data. Financial records must be retained for 7 years, employee records for 5 years after termination, and customer data for 3 years after the last transaction. If the company has 1,000 financial records, 500 employee records, and 2,000 customer data records, what is the total number of records that must be retained for the maximum duration specified in the retention schedule?

Accepted Answer

1,500 records

Question 22

A company has implemented a Data Loss Prevention (DLP) policy to protect sensitive information across its Microsoft 365 environment. The DLP reports indicate that during the last month, there were 150 incidents of sensitive data being shared externally, with 60% of these incidents involving personal identifiable information (PII). If the company wants to reduce the number of PII-related incidents by 30% in the next month, how many PII-related incidents should they aim to achieve?

Accepted Answer

63

Question 23

A company is implementing an Attack Surface Reduction (ASR) strategy to minimize potential vulnerabilities in its Microsoft 365 environment. The IT security team has identified several applications that are critical for business operations but also present significant risks. They are considering various ASR rules to apply, including blocking credential theft, restricting executable content, and controlling access to sensitive data. Which combination of ASR rules would most effectively reduce the attack surface while maintaining operational efficiency?

Accepted Answer

Block credential stealing, restrict executable content, and allow only trusted applications

Question 24

A company is migrating its on-premises Active Directory to Azure Active Directory (Azure AD) to enhance its identity management capabilities. The IT administrator needs to ensure that users can access both cloud and on-premises applications seamlessly. Which of the following strategies should the administrator implement to achieve a hybrid identity solution that allows for single sign-on (SSO) across both environments?

Accepted Answer

Implement Azure AD Connect with password hash synchronization and enable Seamless SSO.

Question 25

A financial services company is implementing a Data Loss Prevention (DLP) strategy to protect sensitive customer information, including Social Security Numbers (SSNs) and credit card details. The DLP policy is configured to monitor and restrict the sharing of this sensitive data across various channels, including email, cloud storage, and instant messaging. During a routine audit, the security team discovers that a significant number of employees are still able to share sensitive information via personal email accounts, which are not covered by the DLP policy. What is the most effective approach the company should take to enhance its DLP strategy and ensure compliance with data protection regulations?

Accepted Answer

Implement a comprehensive DLP solution that includes monitoring and controlling data transfers to personal email accounts and other external platforms.

Question 26

In a corporate environment, a company is transitioning to Microsoft 365 to enhance its mobility and security posture. The IT department is tasked with implementing a Zero Trust security model. Which of the following strategies best exemplifies the principles of Zero Trust in this context?

Accepted Answer

Continuously verifying user identities and device health before granting access to resources, regardless of their location.

Question 27

A company is implementing Microsoft 365 Compliance Center to manage its data governance and compliance requirements. The compliance officer needs to ensure that the organization adheres to various regulations, including GDPR and HIPAA. To achieve this, they plan to set up data loss prevention (DLP) policies that will monitor and protect sensitive information across Microsoft 365 services. Which of the following actions should the compliance officer take first to effectively configure DLP policies in the Compliance Center?

Accepted Answer

Identify and classify sensitive information types relevant to the organization’s compliance needs.

Question 28

In a corporate environment, a company is considering the implementation of a new cloud-based security solution that utilizes artificial intelligence (AI) to enhance threat detection and response capabilities. The IT team is tasked with evaluating the potential impact of this technology on their existing security infrastructure. Which of the following outcomes is most likely to occur as a result of integrating AI-driven security solutions into their operations?

Accepted Answer

Improved detection of advanced persistent threats (APTs) through machine learning algorithms that analyze patterns in network traffic.

Question 29

A company has recently deployed Microsoft Defender for Endpoint across its organization to enhance its security posture. The IT security team is analyzing the telemetry data collected from various endpoints to identify potential threats. They notice a pattern where certain endpoints are frequently communicating with a known malicious IP address. To mitigate this risk, the team decides to implement a network isolation policy for these endpoints. What is the primary benefit of using network isolation in this context, and how does it relate to the overall security strategy of Microsoft Defender for Endpoint?

Accepted Answer

It prevents the endpoints from communicating with external networks, thereby containing potential threats and minimizing the risk of lateral movement within the network.

Question 30

A company is implementing Microsoft Intune to manage its mobile devices and ensure compliance with security policies. The IT administrator needs to enroll a mix of corporate-owned and employee-owned devices. The administrator is considering the best enrollment method for each type of device to ensure that security policies are enforced effectively. Which enrollment method should the administrator choose for corporate-owned devices to maximize security and management capabilities while also allowing for a seamless user experience?

Accepted Answer

Windows Autopilot

Microsoft MS-101 Microsoft 365 Mobility and Security Free Practice Test — 30 Questions

A lot more is already mapped out

About the Microsoft MS-101 Microsoft 365 Mobility and Security Certification