Your on-premises network contains an Active Directory domain and a Microsoft Endpoint Configuration Manager site.
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You use Azure AD Connect to sync user objects and group objects to Azure Directory (Azure AD) Password hash synchronization is disabled.
You plan to implement co-management.
You need to configure Azure AD Connect and the domain to support co-management.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.
You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory.
What should you configure in the profile?

• A.BitLocker Drive Encryption (BitLocker)
• B.Microsoft Defender
• C.Microsoft Defender Credential Guard
• D.Microsoft Defender Exploit Guard

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 tenant that contains a Windows 10 device named Device1 and the Microsoft Endpoint Manager policies shown in the following table.

• A.no settings
• B.only the settings of Policy2
• C.only the settings of Policy!
• D.only the settings of Policy3

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription.
You need to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra. Eligible users must meet the following requirements:
* Always be able to request the User Administrator role.
* Must provide a reason when requesting the User Administrator role
* Must require multi-factor authentication (MFA} when activating the User Administrator role The solution must minimize administrative effort.

Correct Answer:

Explanation:
Always be able to request the User Administrator role: Setting "Allow permanent eligible assignment to Yes" ensures that users can always request the User Administrator role when needed.
Must provide a reason when requesting the User Administrator role: Selecting "Require justification on activation" ensures that users must provide a reason each time they activate the User Administrator role, which adds a layer of accountability and tracking.
Must require MFA when activating the User Administrator role: Setting "Require Azure Multi-Factor Authentication on active assignment to Yes" ensures that users must perform MFA to activate the User Administrator role, enhancing security.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure AD tenant that contains the users shown in the following table

You need to compare the permissions of each role. The solution must minimize administrative effort.
Which portal should you use?

• A.the Microsoft Entra admin center
• B.the Microsoft 365 Defender portt1
• C.the Microsoft Purview compliance portal
• D.the Microsoft 365 admin center

Comment: *

Name: *

Email: *

Verification: *