Manage Security and Compliance Settings for Teams MS-700 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A healthcare organization wants to ensure that Teams is only accessed from compliant devices. They also want to block access from outside the corporate network unless multi-factor authentication (MFA) is used. The organization has Microsoft 365 E5 licenses. What should you configure?

   • ACreate a Teams messaging policy that requires MFA, and assign the Teams Administrator role to the security team
   • BCreate a security alert policy for non-compliant devices, and assign the Security Administrator role
   • CCreate a DLP policy for device compliance, and assign the Compliance Administrator role
   • DCreate a Conditional Access policy requiring compliant devices and MFA for external networks, and assign the Conditional Access Administrator role to the security team
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A small company has a single IT administrator who needs to manage Teams security alert policies, compliance alert policies, and information barriers. They do not want to grant full global admin rights. Which built-in role should they assign?

   • ATeams Administrator
   • BGlobal Administrator
   • CCompliance Administrator
   • DSecurity Administrator
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A manufacturing company suspects that an employee is planning to leave and take proprietary design documents. They want to detect unusual access to Teams files and also monitor for any communication about the departure. The legal team needs to review the evidence but should not have access to modify policies. What should you configure?

   • ACreate a DLP policy for design documents, enable audit logging, and assign the legal team the Compliance Administrator role
   • BEnable insider risk management for data theft, create a communication compliance policy for departure-related keywords, and assign the legal team the Insider Risk Management analyst role
   • CCreate a security alert policy for file access, enable eDiscovery, and assign the legal team the Security Reader role
   • DCreate an information barrier policy for the employee, enable retention policies, and assign the legal team the Teams Administrator role
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company uses Microsoft 365 E3 and wants to protect Teams chat from malicious links and attachments. They have a limited budget and cannot upgrade to E5. What is the most cost-effective way to meet this requirement?

   • AUpgrade all users to Microsoft 365 E5 to get Defender for Office 365 included.
   • BPurchase the Microsoft Defender for Office 365 add-on license and configure Safe Links and Safe Attachments policies for Teams.
   • CConfigure Teams to block all external links and attachments.
   • DUse Microsoft Purview DLP to block malicious links and attachments.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Where in the Microsoft 365 Defender portal would an administrator create a security alert policy that monitors for Teams-related threats?

   • ACompliance > Information governance
   • BData classification > DLP policies
   • CThreat management > Policy
   • DEmail & collaboration > Policies & rules > Alert policy
   Reveal Solution Discussion Select an answer first