Windows Services and Microsoft Cloud GSEC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization uses Microsoft 365 and wants to protect against phishing emails that contain malicious links. They have already enabled Microsoft Defender for Office 365. Which additional feature should they configure to provide real-time link protection?

   • AInformation Rights Management (IRM)
   • BData Loss Prevention (DLP) policy
   • CSafe Links policy
   • DMail flow rules
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the principle of least privilege as applied to Windows services?

   • AGranting services access to all network resources
   • BRunning services with administrative privileges to ensure they work
   • CRunning services with the minimum permissions required to function
   • DUsing the same account for all services to simplify management
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company uses Microsoft 365 and wants to ensure that sensitive documents are not shared externally without approval. They have implemented DLP policies, but employees are still sharing files via external links. What should they do to strengthen protection?

   • ADisable external sharing entirely for all sites.
   • BUse Microsoft Defender for Office 365 to block external links.
   • CRely on DLP policies alone to block external sharing.
   • DConfigure SharePoint Online sharing settings to require sign-in for external sharing and set expiration dates for links.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is migrating its on-premises file server to Microsoft 365 SharePoint Online. The security team is updating the incident response plan and needs to clarify who is responsible for patching the underlying operating system of the SharePoint service. Based on the shared responsibility model, which statement is correct?

   • AThe customer and Microsoft share responsibility equally for OS patching.
   • BThe customer is responsible for patching the operating system because they manage the SharePoint site collection.
   • CMicrosoft is responsible for patching the operating system that runs SharePoint Online.
   • DThe customer is responsible for patching only if they use a custom domain.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An organization uses Microsoft Entra ID and has a Conditional Access policy that requires MFA for all users. They also have a policy that blocks access from countries where they have no business operations. A user traveling to a blocked country needs temporary access to email. Which approach is most appropriate?

   • ATell the user to use a VPN from the blocked country.
   • BCreate a temporary Conditional Access policy exclusion for that user, with a defined expiration and approval process.
   • CAdd the user to a group that is excluded from the policy permanently.
   • DDisable the country-blocking policy for all users while the user travels.
   Reveal Solution Discussion Select an answer first