You have a Microsoft 365 E5 tenant that contains a user named User1.
You plan to implement insider risk management.
You need to ensure that User1 can perform the following tasks:
Review alerts.
Manage cases.
Create notice templates.
Review user emails by using Content explorer.
The solution must use the principle of least privilege.
To which role group should you add User1?

• A.Insider Risk Management
• B.Insider Risk Management Analysts
• C.Insider Risk Management Investigators
• D.Insider Risk Management Admin

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription.
All users have Mac computers. All the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).
You need to configure Microsoft Defender ATP on the computers.
What should you create from the Endpoint Management admin center?

• A.a device configuration profile
• B.an update policy for iOS
• C.a Microsoft Defender ATP baseline profile
• D.a mobile device management (MDM) security baseline profile

Comment: *

Name: *

Email: *

Verification: *

Your company is based in the United Kingdom (UK).
Users frequently handle data that contains Personally Identifiable Information (PII).
You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

References:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.
You plan to attack surface reduction (ASR) rules for the Windows 10 devices.
You configure the ASR rules in audit mode and collect audit data in a Log Analytics workspace.
You need to find the ASR rules that match the activities on the devices.
How should you complete the Kusto query? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/demystifying-attack-surface-reduction-rules-part-3/ba-p/1360968

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription that contains 500 users.
You have several hundred computers that run the 64-bit version of Windows 10 Enterprise and have the following configurations:
* Two volumes that contain data
* A CPU that has two cores
* TPM disabled
* 4 GB of RAM
All the computers are managed by using Microsoft Intune.
You need to ensure that you can turn on Windows Defender Application Guard on the computers.
What should you do first?

• A.Modify the edition of Windows 10.
• B.Create an additional volume.
• C.Replace the CPU and enable TPM.
• D.Replace the CPU and increase the RAM.

Comment: *

Name: *

Email: *

Verification: *