Topic 4: Misc. Questions
You have a Microsoft 365 tenant.
You currently allow email clients that use Basic authentication to conned to Microsoft
Exchange Online.
You need to ensure that users can connect t to Exchange only run email clients that use
Modern authentication protocols.
What should you implement?
You need to ensure that use Modern authentication.
A. a compliance policy in Microsoft Endpoint Manager
B. a conditional access policy in Azure Active Directory (Azure AD)
C. an application control profile in Microsoft Endpoint Manager
D. an OAuth policy in Microsoft Cloud App Security
You have an Azure Active Directory (Azure AD) tenant that uses conditional access
policies.
You plan to use third-party security information and event management (SIEM) to analyze
conditional access usage.
You need to download the Azure AD log that contains conditional access policy data.
What should you export from Azure AD?
A. sign-ins in JSON format
B. sign-ins in CSV format
C. audit logs in JSON format
D. audit logs in CSV format
You have a Microsoft 365 E5 subscription and an Azure subscription. You need to meet the
following requirements:
- Ensure that users can sign in to Azure virtual machines by using their Microsoft 365 credentials.
- Delegate the ability to create new virtual machines.
You may need to drag the split bar between panes or scroll to view content.

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com.
The company is developing a web service named App1.
You need to ensure that App1 can use Microsoft Graph to read directory data in
contoso.com.
Which three actions should yon perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them In the correct order.
You have an Azure AD tenant that contains multiple storage accounts.
You plan to deploy multiple Azure App Service apps that will require access to the storage
accounts.
You need to recommend an identity solution to provide the apps with access to the storage
accounts. The solution must minimize administrative effort.
Which type of identity should you recommend, and what should you recommend using to
control access to the storage accounts? To answer, select the appropriate options in the
answer area.
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it as a result,
these questions will not appear in the review screen.
You have an Amazon Web Services (AWS) account, a Google Workspace subscription,
and a GitHub account.
You deploy an Azure subscription and enable Microsoft 365 Defender.
You need to ensure that you can monitor OAuth authentication requests by using Microsoft
Defender for Cloud Apps.
Solution: From the Microsoft 365 Defender portal, you add the Google Workspace app
connector.
Does this meet the goal?
A. Yes
B. No
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some
question sets might have more than one correct solution, while others might not have a
correct solution.
After you answer a question in this section, you will NOT be able to return to it as a result,
these questions will not appear in the review screen.
You have an Amazon Web Services (AWS) account, a Google Workspace subscription,
and a GitHub account.
You deploy an Azure subscription and enable Microsoft 365 Defender.
You need to ensure that you can monitor OAuth authentication requests by using Microsoft
Defender for Cloud Apps.
Solution: From the Microsoft 365 Defender portal, you add the Microsoft Azure app
connector.
Does this meet the goal?
A. Yes
B. No
You have an Azure AD tenant named contoso.com that has Email one-time passcode for
guests set to Yes.
You invite the guest users shown in the following table.
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

A. User1, User2, and User3
B. User3 only
C. User1 only
D. User1 and User2 only
You have a Microsoft 365 tenant and an Active Directory domain named adatum.com.
You deploy Azure AD Connect by using the Express Settings.
You need to configure self-service password reset (SSPR) to meet the following
requirements:
When users reset their password, they must be prompted to respond to a mobile
app notification or answer three predefined security questions.
Passwords must be synced between the tenant and the domain regardless of
where the password was reset.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
| Page 13 out of 36 Pages |