Exam MS-101 topic 3 question 109 discussion

Actual exam question from Microsoft's MS-101

Question #: 109
Topic #: 3

HOTSPOT -
You have a Microsoft 365 tenant that has Enable Security defaults set to No in Azure Active Directory (Azure AD).
The tenant has two Compliance Manager assessments as shown in the following table.

The SP800 assessment has the improvement actions shown in the following table.

The Data Protection Baseline assessment has the improvement actions shown in the following table.

You perform the following actions:
✑ For the Data Protection Baseline assessment, change the Test status of Establish a threat intelligence program to Implemented.
✑ Enable multi-factor authentication (MFA) for all users.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-assessments?view=o365-worldwide#create-assessments https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide#action-types-and-points

by ercluff at June 8, 2022, 6:57 p.m.

Comments

Submit Cancel

ercluff

Highly Voted 3 years ago

Establish a threat intelligence program will appear as ‘Implemented’ in the SP800 assessment: NO - ‘Implemented’ is not an option under ‘Test Status’, Test status has to be set to 'Tested', ‘Implementation status’ has to be set to ‘Implemented’ The SP800 assessment score will increase by 54 points: YES - “27 points for MFA for Admins, 27 points for MFA for non-admins” The Data Protection Baseline score will increase by 9 points: NO - ‘ Test status’ has to be set to 'Tested', ‘Implementation status’ has to be set to ‘Implemented’

upvoted 9 times

...

ercluff

Highly Voted 3 years ago

NO, YES, NO Comments by JT19760106: “To clarify, they are talking about two different assessment templates, one is the SP800 and the other is the Data Protection Baseline. The improvement action of "Establish a threat intelligence program" is in both assessments, so if you completed it in one it would get points in both. For Question 1, you would have two options. Under Implementation status you have to set to "Implemented" and then under Testing, you have to set to "Tested". BOTH have to be completed in order to get the points, so "Implemented" isn't an option on the Testing status and the Testing status cannot be set until the "Implementation" is set to "Implemented" reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-score-calculation?view=o365-worldwide#action-types-and-points

upvoted 6 times

...