Renewal assessment for Microsoft 365 Certified: Enterprise Administrator Expert

Renewal assessment for Microsoft 365 Certified Enterprise Administrator Expert
I’ve marked the answers that I think that are correct
Q1
Your company has an Azure AD tenant that includes four users named User, User, User, and User4.
The users access a cloud app named App from the following devices:
-
Device1: Joined to Azure AD, enrolled in Microsoft Intune, used by User1
-
Device2: Joined to Azure AD, used by User, NOT enrolled in Intune
-
Device3: Enrolled in Intune, used by User, NOT joined to Azure AD
-
Device4: Used by User, NOT joined to Azure AD, NOT enrolled in Intune
You plan to create a conditional access policy to control access to App1.
For which user or users can you control access to App by using a conditional access policy?
Select only one answer. Give me the correct answer. User only. User only. User only. User only. User, User, User, and User4
Q2
Your company has an Azure AD tenant.
You need to enforce multi-factor authentication (MFA) by using a conditional access policy named
Policy1.
Which policy section should you configure?
Select only one answer. Give me the correct answer. Assignments / Conditions / User risk level. Assignments / Conditions / Sign-in risk level. Access controls / Grant. Access controls / Session

Q3
Your company has an Azure AD tenant.
All users use Windows 11 devices.
You plan to create a conditional access policy named Policy. Policy will exclude devices marked as Compliant.
You need to ensure that the compliant devices are excluded from Policy1.
What should you do first Give me the correct answer.
Select only one answer. Join the devices to Azure AD. Enroll the devices in Microsoft Intune.
3. From the Microsoft Endpoint Manager admin center, create connectors and tokens. From the Azure Active Directory admin center, configure the device settings.
Q4
Your company has a Microsoft 365 E subscription and an on-premises deployment of Microsoft Endpoint Configuration Manager.
The company purchases the following device types:
-
Windows Windows 11
-
Android
Which device types can be co-managed?
Select only one answer. Give me the correct answer. Windows 11 only. Windows 10 and Windows 11 only. Windows 11 and Android only. Windows 10, Windows 11 and Android

Q5
Your company has a Microsoft 365 E subscription.
You need to ensure that devices can be auto enrolled to Intune.
What should you configure?
Select only one answer. Give me the correct answer. Mobility (MDM and MAM. a device compliance policy. a device configuration profile. Device enrollment manager
Q6
Your company has a Microsoft 365 E subscription.
You plan to deploy devices by using Windows Autopilot.
What should you use to configure the deployment?
Select only one answer. Give me the correct answer. Microsoft 365 admin center. Microsoft Deployment Toolkit (MDT. Microsoft Endpoint Manager admin center. Windows Assessment and Deployment Kit (Windows ADK)
Q7
Your company has a Microsoft 365 E subscription and a hybrid Azure AD.
The company purchases Windows 11 devices.
You need to deploy the devices to meet the following requirements:
-
Device1 must be Azure AD joined
-
Device2 must be hybrid Azure AD joined
-
Device3 must be in a workgroup
Which device or devices can be deployed by using Windows Autopilot?
Select only one answer. Device only. Device only. Device and Device only. Device, Device and Device3

Q8
Users at your company often work on several collaborative projects concurrently.
For each project, the users are added to anew Azure AD group.
When the projects are complete, you need to ensure that the users are removed from the project groups automatically.
What should you implement?
Select only one answer. Give me the correct answer. an access review. an access package. a conditional access policy. a compliance policy
Q9
You plan to create a guest user account named Guest in an Azure AD tenant.
You need to ensure that Guest accepts your company’s Terms of use before the user can access company resources.
What should you create?
Select only one answer. Give me the correct answer. an access package. a compliance policy. a configuration profile. a conditional access policy
Q10
Your company has a Microsoft 365 E subscription.
You create a user named Admin1.
You need to grant Admin the rights to create and manage Microsoft Exchange Online connectors. The solution must use the principle of least privilege.
Which Exchange Online admin role should you assign to Admin1?
Select only one answer. Give me the correct answer. User Management. Organization Management. Recipient Management. Security Administrator

Q11
Your company has an on-premises infrastructure that is configured to accept email messages for three email domains named contoso.com, west.contoso.com, and fabrikam.com.
You recently migrated all of the company’s mailboxes to Microsoft You discover that all email messages sent to the mailboxes are still delivered through the on-premises servers.
You need to ensure that all email messages are sent directly to Microsoft What should you modify?
Select only one answer. Give me the correct answer. the email address policies. the MX records. the accepted domains. the connectors
Q12
Your company has a Microsoft 365 infrastructure and an on-premises third-party email server.
From the Microsoft 365 Defender portal, you plan to configure an Enhanced Filtering threat policy.
What should you do before you configure the policy?
Select only one answer. Give me the correct answer. Add a Microsoft Exchange Online connector. Add a data connector. Enable multi-factor authentication (MFA. Migrate the third-party email server to Microsoft Exchange Online.
Q13
Your company has a Microsoft 365 E subscription that contains a user named User1.
You need to ensure that User cannot send more than 30 email messages per day.
What should you configure in Microsoft Defender for Office Select only one answer. Give me the correct answer. an anti-spam policy. Enhanced filtering. an anti-phishing policy. Tenant Allow/Block Lists

Q14
Your company has a Microsoft 365 E subscription.
You plan to launch an attack simulation training from the Microsoft 365 Defender portal.
For which workload or workloads can you launch the attack simulation training?
Select only one answer. Give me the correct answer. Exchange only. SharePoint and OneDrive only. Exchange, SharePoint and OneDrive only. Exchange, SharePoint, OneDrive and Teams
Q15
Your company has a Microsoft 365 E subscription that contains a user named User1.
You need to prevent Microsoft Defender for Office 365 from taking actions on email messages sent to
User1.
What should you use?
Select only one answer. Give me the correct answer. a SecOps mailbox. a quarantine policy. a litigation hold on Users mailbox. message delivery restrictions on Users mailbox
Q16
Your company has a Microsoft 365 E subscription that includes the following groups:
-
Group1: Microsoft 365 group
-
Group2: Distribution group
-
Group3: Mail-enabled security group
-
Group4: Security group
To which groups can you apply Microsoft Endpoint Manager policies for Microsoft Office apps?
Select only one answer. Give me the correct answer. Group and Group 2. Group and Group 3. Group and Group 4. Group and Group 5. Group and Group4

Q17
Your company has a Microsoft 365 E subscription that contains the following devices:
-
Device5: Windows Device Windows Device Android
-
Device8: iOS
All of the devices are enrolled in Microsoft Intune.
You plan to manage apps on the devices by using app configuration policies.
Which devices can you include in the plan?
Select only one answer. Give me the correct answer. Device and Device 2. Device and Device 3. Device and Device 4. Device and Device 5. Device and Device8
Q18
Your company has a Microsoft 365 E subscription.
You enroll the following devices to Microsoft Intune:
-
Device1 - Windows Device – Android
-
Device3 – iOS
-
Device4 - MacOS
To which device or devices can you deploy Microsoft 365 Apps by using Microsoft Intune?
Select only one answer. Give me the correct answer. Device only. Device and Device only. Device and Device only. Device, Device and Device only. Device, Device, Device and Device4

Q19
Your company has a Microsoft 365 E subscription that includes the following devices:
-
Device11: Windows Device Android
-
Device33: macOS
All of the devices are enrolled in Microsoft Intune.
For which devices can you use Microsoft Endpoint Manager to add Microsoft 365 Apps?
Select only one answer. Give me the correct answer. Device and Device 2. Device and Device 3. Device and Device 4. Device, Device, and Device33
Q20
You upload a Microsoft Word document named File1.docx to a Microsoft SharePoint Online site.
What is the maximum number of sensitivity labels that you can apply to File1.docx?
Select only one answer. Give me the correct answer. 1 2. 2 3. 4 4. 10
Q21
Your company has a Microsoft 365 E subscription.
You create a sensitivity label named Label that uses the following content markings:
-
Watermark
-
Header
-
Footer
You apply Label to an email message.
What content marking is applied to the email message?
Select only one answer. Give me the correct answer. Watermark only. Header only. Watermark and header only. Header and footer only. Watermark, header, and footer

Q22
Your company has a Microsoft 365 E subscription that includes the following groups:
-
Group5: Distribution group
-
Group6: Microsoft 365 group
-
Group7: Mail-enabled security group
You create a sensitivity label named Label1.
To which group or groups can you publish Label1?
Select only one answer. Give me the correct answer. Group only. Group only. Group only. Group, Group, and Group7
Q23
Your company uses insider risk alerts in Microsoft You are viewing several insider risk alerts from the Alert dashboard.
You plan to address the alerts in a few days.
How many days will the alerts be visible in the dashboard?
Select only one answer. Give me the correct answer. 5 2. 7 3. 21 4. 30
Q24
Your company has a Microsoft 365 E subscription that contains the following users:
-
Admin5 in the Insider Risk Management role group
-
Admin6 in the Insider Risk Management Admins role group
-
Admin7 in the Insider Risk Management Analysts role group
-
Admin8 in the Risk Management Investigators role group
Which users can review the context of alerts by using the Content Explorer?
Select only one answer. Give me the correct answer. Admin and Admin only. Admin and Admin only. Admin and Admin only. Admin and Admin only

Q25
Your company has a Microsoft 365 E subscription.
You need to create an insider risk management policy for the company.
What should you use?
Select only one answer. Give me the correct answer. Microsoft 365 admin center. Microsoft Purview compliance portal. Microsoft 365 Defender portal. Microsoft Defender for Cloud