Topic 6

Question 1

In the shared responsibility model, for what is Microsoft responsible when managing Azure virtual machines?

A. Updating the firmware of the disk controller.
B. Updating installed applications.
C. Configuring the permissions for shared folders.
D. Updating the operating system.

Answer 1

D. Updating the operating system.

Question 2

Select the answer that correctly completes the sentence.

Microsoft Purview eDiscovery (Standard) builds on the basis search and export functionality of Content search by enabling you to ______ ↓
- collect and copy data into review sets.
- create cases.
- create predictive coding models.
- manage custodians.

Answer 2

• create cases.

Question 3

Which type of identity can be used with an Azure service and will be deleted automatically when the service is deleted?

A. user-assigned managed identity
B. service principal
C. user
D. system-assigned managed identity

Answer 3

D. system-assigned managed identity

Question 4

Which Microsoft Purview feature allows users to identify content that should be protected?

A. Sensitivity Labels
B. Data loss prevention
C. eDiscovery
D. Insider Risks

Answer 4

A. Sensitivity Labels

Question 5

Select the answer that correctly completes the sentence.

Microsoft Defender for Cloud plans can be enabled from the _______ ↓
- Azure portal.
- Microsoft 365 admin center.
- Microsoft Defender portal.
- Microsoft Entra admin center.

Answer 5

• Azure portal.

Question 6

Select the answer that correctly completes the sentence.

• Microsoft Secure Score
• Permission classifications
• Privileged Identity Management (PIM)
• The Permission Creep Index (PCI)
  ↓
  can be accessed from the Entra Permissions Management portal.

Answer 6

• The Permission Creep Index (PCI)

Question 7

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

• Microsoft Defender for Cloud is included in a Microsoft 365 E5 subscription.
• Microsoft Defender for Cloud has cloud security posture management (CSPM) features.
• Microsoft Defender for Cloud with enhanced security features can perform vulnerability scans of virtual machines.

Answer 7

• Microsoft Defender for Cloud is included in a Microsoft 365 E5 subscription. → No
• Microsoft Defender for Cloud has cloud security posture management (CSPM) features. → Yes
• Microsoft Defender for Cloud with enhanced security features can perform vulnerability scans of virtual machines. → Yes

Question 8

You are comparing features between Microsoft Defender for Office 365 Plan 1 and Plan 2.

Which feature is only available in Defender for Office 365 Plan 2?

A. Attack simulation training
B. zero-day malware detection
C. anti-phishing protection
D. volume-based attack protection

Answer 8

A. Attack simulation training

Question 9

Select the answer that correctly completes the sentence.

Vulnerability articles from Microsoft Defender Threat Intelligence (Defender TI) include ______ ↓
- a priority score.
- Intel profiles.
- Intel projects.
- Microsoft Secure Score.

Answer 9

• a priority score.