Exam MS-900 All Questions

View all questions & answers for the MS-900 exam

Exam MS-900 topic 1 question 237 discussion

Actual exam question from Microsoft's MS-900

Question #: 237
Topic #: 1

HOTSPOT -
You are a Microsoft 365 administrator.
You need to implement the appropriate features for each scenario.
What should you implement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

by satnam1811 at June 10, 2021, 8:59 a.m.

Comments

Submit Cancel

Laura2022

Highly Voted 2 years, 11 months ago

The correct answer for the option Secure Members of the Global Administrators group by using dynamic risk profiles, isn’t Microsoft Azure AD Privilege Identity Management? And the correct answer for the option Secure administrative roles by requiring approval, isn´t Microsoft Azure AD Identity Protection?

upvoted 7 times

...

syu31svc

Highly Voted 3 years, 6 months ago

https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android: "ensures that apps are protected with a PIN" "introduces advanced data protection mechanisms, enhanced PIN configuration, and APP Mobile Threat Defense" https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection Azure AD Identity Protection for securing members by risk https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure: "Organizations want to minimize the number of people who have access to secure information or resources" Azure AD Privileged Identity Management to secure administrative roles Answer is correct

upvoted 7 times

...

NoursBear

Most Recent 10 months ago

The tricky part about the second oneis thatyou use conditional access to configure user risk but this feature of CA comes under Identity protection so my take on this, the feature is Identity Protection and CA is the tool

upvoted 2 times

...

NickMt

1 year, 9 months ago

Question #25 says the use of dynamic risk profiles makes it privileged identity protection. Would love some clarity.

upvoted 3 times

atommo999

1 year, 6 months ago

Had a look myself and found this article: https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa Seems like this really is under 'identity protection' but I agree, clear as mud with the naming they've chosen for all these features.

upvoted 2 times

bigelmo_elmo

1 year, 5 months ago

isn't the 2nd 1 supposed to be Conditional acces then? can someone clairfy please?

upvoted 3 times

NoursBear

9 months, 1 week ago

my take on this is that they are asking "which feature" as opposed to "which tool" so for the second one yeah you use CA to configure it but it falls under Identity Protection so on this one it's going to be 50/50 for the point. Have my test today and maybe will go for Identity Protection if I get this question.

upvoted 1 times

...

jim85

1 year, 11 months ago

2nd is CA https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies and https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk

upvoted 3 times

...

satnam1811

3 years, 7 months ago

first part of the question didn't state it was for iOS and android devices?

upvoted 3 times

yeban

3 years, 7 months ago

iOS and android devices use PINs when a user is presented with a lock screen; the desktop or web version of outlook will ask for a user's password.

upvoted 4 times

...