Question 1

You have a Microsoft 365 E5 subscription.

You need to create a Microsoft Defender for Cloud Apps session policy.

What should you do first?

Options :

A : From the Microsoft Defender for Cloud Apps portal, select User monitoring

B : From the Microsoft Defender for Cloud Apps portal, select App onboarding/maintenance

C : From the Azure Active Directory admin center, create a Conditional Access policy.

D : From the Microsoft Defender for Cloud Apps portal, create a continuous report.

Answer: C

Question 2

You have an Azure subscription that contains a storage account named storage1 and a web app named WebApp1. WebApp1 uses a system-assigned managed identity. You need to ensure that WebApp1 can read and write files to storage1 by using the system-assigned managed identity. What should you configure for storage1 in the Azure portal?

Options :

A : the File share settings

B : the Access control (1AM) settings

C : a shared access signature (SAS)

D : data protection

E : access keys

Answer: B

Question 3

You have an Azure AD tenant that contains the users shown in the following table.

You need to compare the role permissions of each user. The solution must minimize administrative effort. What should you use?

Options :

A : the Microsoft 365 Defender portal

B : the Microsoft 365 admin center

C : the Microsoft Entra admin center

D : the Microsoft Purview compliance portal

Answer: D

Question 4

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named

Site1.

You need to ensure that users can request access to Site. the solution must meet the following

requirements.

Automatically approve requests from users based on their group membership.

Automatically remove the access after 30 days

What should you do?

Options :

A : Create a Conditional Access policy.

B : Create an access package.

C : Configure Role settings in Azure AD Privileged Identity Management.

D : Create a Microsoft Defender for Cloud Apps access policy.

Answer: B

Question 5

You have an Azure Active Directory (Azure AD) tenant that contains the objects shown in the

following table.

Which objects can you add as members to Group3?

Options :

A : User2 and Group2 only

B : User2, Group1, and Group2 only

C : User1, User2, Group1 and Group2

D : User1 and User2 only

E : User2 only

Answer: E