Evaluate Solutions for Securing Microsoft 365 SC-100 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has a mix of corporate-owned and personal devices. They want to protect corporate data in Microsoft 365 while respecting user privacy on personal devices. They are considering Intune. Which approach should they use?

   • AEnroll all devices in Intune with full management.
   • BDo not enroll any devices and rely on conditional access.
   • CEnroll corporate devices in Intune with full management, and use app protection policies on personal devices.
   • DUse app protection policies on all devices, including corporate devices.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A law firm uses Microsoft 365 E5 and allows partners to access SharePoint Online from personal devices. The security team suspects that sensitive client documents are being exfiltrated to a personal Dropbox account via the browser. Defender for Office 365 is already enabled. Which Defender for Cloud Apps capability should the team configure first to detect and stop this specific activity?

   • AEnable the built-in anomaly detection policy for impossible travel.
   • BCreate an access policy that blocks downloads from SharePoint to unmanaged devices.
   • CDeploy the Dropbox connector and create a file policy that triggers when a file with a sensitivity label is shared or uploaded to Dropbox.
   • DUse the Defender for Office 365 Safe Attachments policy to block Dropbox links in emails.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   A security architect wants to protect users from malicious links and attachments in email messages. Which Microsoft 365 security feature provides real-time protection against these threats?

   • AMicrosoft Defender for Office 365 Safe Links and Safe Attachments
   • BMicrosoft Entra ID Protection
   • CMicrosoft Intune App Protection Policies
   • DMicrosoft Purview Data Loss Prevention
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   A security architect wants to use Microsoft Secure Score to identify which security improvements would have the greatest impact on the tenant's score. Which element of Microsoft Secure Score provides this information?

   • AThreat analytics
   • BIdentity secure score
   • CImprovement actions
   • DCompliance manager
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A company uses Microsoft 365 and has a large number of third-party cloud apps. The security team wants to gain visibility into these apps and control data sharing. They are considering Microsoft Defender for Cloud Apps. Which deployment approach should they use to get the most comprehensive protection?

   • AOnly use Conditional Access App Control for all apps.
   • BOnly use Cloud Discovery to identify shadow IT.
   • CUse Cloud Discovery to identify apps, then connect app connectors for sanctioned apps, and use Conditional Access App Control for real-time controls.
   • DOnly use app connectors for all discovered apps.
   Reveal Solution Discussion Select an answer first