Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 3 question 42 discussion

Actual exam question from Microsoft's MS-101

Question #: 42
Topic #: 3

HOTSPOT -
Your network contains an Active Directory domain named contoso.com. The domain contains the file servers shown in the following table.

A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2. Three apps named App1, App2 and App3 are installed on a Windows 10 device named Device1. All three apps open files that have the .abc file extension.
You implement Windows Information Protection (WIP) by creating a policy named Policy1 that has the following configuration:
✑ Exempt apps: App2
✑ Protected apps: App1
✑ Windows Information Protection mode: Block
✑ Network boundary: IPv4 range of: 192.168.1.1-192.168.1.255
You ensure that Policy1 applies to Device1.
You need to identify the apps from which you can open File1.abc.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure

by Chris_Rock at June 28, 2021, 1:46 p.m.

Comments

Submit Cancel

Chris_Rock

Highly Voted 3 years, 11 months ago

Answer is correct Y-Y-N File1 on Device 1 = same APP = allowed so Y File 1 on Device 2 = exempt APP = allowed so Y File 1 on Device 3 = Blocked app = not allowed so N

upvoted 21 times

AlexBa

3 years, 6 months ago

Here we speak app1 app2 and app3 not dev2 or dev3...

upvoted 3 times

...

ZuluHulu

Highly Voted 3 years, 8 months ago

I really don't understand this question

upvoted 10 times

Turak64

3 years, 7 months ago

Then you need to study more. Start with the link provided - https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure

upvoted 7 times

PL1313

2 years, 1 month ago

The best answer in the real world is typically a question and not an assumption. Maybe you need more experience and less time reading links.

upvoted 1 times

...

chewitt

2 years, 5 months ago

Please tell me what subnet Device 1 is on and how you found that answer? To me it looks like bits of information are missing in the question...

upvoted 1 times

...

JimboJones99

Most Recent 1 year, 12 months ago

Probably a defunct question now: Starting in July 2022, Microsoft is deprecating Windows Information Protection (WIP). Microsoft will continue to support WIP on supported versions of Windows. New versions of Windows won't include new capabilities for WIP, and it won't be supported in future versions of Windows. For more information, see Announcing sunset of Windows Information Protection.

upvoted 1 times

...

AlexBa

3 years, 6 months ago

For me is N Y Y No because we are a block for subnet Yes because app 2 is exempt and Yes because app 3 not include in the "rule"

upvoted 3 times

Velda

3 years, 6 months ago

From the first view i had a same thoughts. But this is not how WIP works. Do some research. All apps that are not included in the policy as protected apps or listd as exempt from the policy cannot be used to open the file. You can open File1.abc in App1, yes because App1 is protected and File1.abc resides in Server 1 with 192.168.1.10 inside the protected range. You can open File1.abc in App2, yes because App2 is exempted app meaning restriction does not apply. You can open File1.abc in App3, No because App3 is not a protected app. Cannot access corporate data.

upvoted 20 times

...

Chris_Rock

3 years, 11 months ago

Device = APP

upvoted 2 times

...