You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
The subscription has the following two anti-spam policies:
AntiSpam1
Name: AntiSpam1
Priority: 0
Include these users, groups and domains
Users: User3
Groups: Group1
Exclude these users, groups and domains
Groups: Group2
Message limits
Set a daily message limit: 100
AntiSpam2
Name: AntiSpam2
Priority: 1
Include these users, groups and domains
Users: User1
Groups: Group2
Exclude these users, groups and domains
Users: User3
Message limits
Set a daily message limit: 50
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that uses Microsoft Exchange.
The subscription contains a licensed user mailbox named Mailbox1 that has a primary SMTP address of support@contoso.com. Mailbox1 is 72 GB.
Mailbox1 will no longer be used by a single user. Three support users must manage the existing support email sent to Mailbox1.
You need to configure Mailbox1 access for the support users. The solution must meet the following requirements:
Enable the support users to open Mailbox1.
Preserve all the existing content in Mailbox1.
Configure replies to appear as sent from support@contoso.com.
What should you do?
You have a Microsoft 365 subscription that uses B2B collaboration in Microsoft Entra ID.
Member users can invite guest users, and teams collaborate with external users from multiple partner domains.
You plan to limit future guest invitations to two domains named fabrikam.com and adatum.com, while keeping the existing guest accounts in the subscription.
You need to enforce the domain restriction for new guest invitations across the subscription.
What should you configure?
You have a Microsoft 365 subscription that has at least one paid Microsoft 365 Copilot license.
Microsoft 365 Copilot is configured as shown in the following table.
The subscription contains the users shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Your company has an office in London.
You have a Microsoft 365 subscription.
You need to create a Conditional Access policy named Policy1 that meets the following requirements:
Only FIDO2 passkeys, Windows Hello for Business, and certificates must be supported for authentication.
The London office must be marked as a trusted location and excluded from Policy1.
How should you configure Authentication strength in Policy1 and what should you use to define named location for the London office? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that contains 1,000 Microsoft SharePoint sites, including a site named Site1 that contains confidential files.
Users are assigned Microsoft 365 Copilot licenses and use Microsoft 365 Copilot Search.
You need to prevent the files in Site1 from appearing in organization-wide search and Microsoft 365 Copilot responses. The solution must NOT affect search results from other SharePoint sites.
Which should you configure?
You have a Microsoft 365 subscription that uses Microsoft 365 Copilot.
Your company allows only Microsoft-operated AI services.
You need to block external model providers, while keeping Microsoft 365 Copilot available.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription.
You create a data loss prevention (DLP) policy named DLP1.
You need to ensure that endpoint rule actions are available in the advanced DLP rules for DLP1.
To which location should you apply DLP1?
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. Strict protection is enabled for all recipients.
The subscription contains a group named Group1 that contains all the mailboxes for your company’s marketing department.
Several marketing department mailboxes recently sent high volumes of external email after a credential was compromised.
You need to enforce a lower external message limit for Group1. The solution must automatically restrict senders that reach the limit.
What should you do?
You have a Microsoft 365 subscription.
The following agent compliance gaps are identified in Microsoft Agent 365:
Agents flagged by aggregated security and compliance signals
Agents that lack accountable lifecycle management
You need to resolve the gaps.
Which action card should you use for each gap? To answer, drag the appropriate action cards to the correct gaps. Each action card may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that uses Microsoft 365 Copilot agents in Microsoft SharePoint. The subscription contains two SharePoint sites named Site1 and Site2 and a security group named Group1.
You need to apply controls for each site. The solution must meet the following requirements:
Site1: Prevent Microsoft 365 Copilot from discovering content in the site without affecting user access to the content.
Site2: Allow only the users in Group1 with site permissions to access the site content. Block all other users, including users that have direct permissions or sharing links to the site content.
What should you configure for each site? To answer, drag the appropriate options to the correct sites. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that contains three users named User1, User2, and User3.
The subscription has Conditional Access policies assigned to all users. The policies are configured as shown in the following table.
The users report that they fail to access Microsoft 365 resources as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft 365 subscription that uses Microsoft Agent 365. The subscription contains an agent named Agent1.
The compliance team reports that confidential project information might appear in prompts submitted to Agent1 and in responses generated by Agent1.
You need to identify agent interactions that include confidential information in prompts or responses.
Solution: From the agent registry, you open the Data & tools tab for Agent1.
Does this meet the goal?
You have a Microsoft 365 subscription that contains an agent named Agent1. Agent1 uses a Model Context Protocol (MCP) server named MCP1.
An MCP server named MCP2 has Status set to Available. MCP2 exposes procurement data but has NOT completed a security review.
You need to prevent Agent1 from invoking MCP2. The solution must ensure that MCP1 and Agent1 remain available.
What should you do in Microsoft Agent 365?
You have a Microsoft 365 subscription.
You need to monitor a Microsoft SharePoint Online site named Site1. The solution must meet the following requirements:
Track the number of unique pages on Site1 that were visited by users.
Monitor the collection storage quotas of Site1.
What should you do for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription that contains a Microsoft 365 group named Marketing. The subscription does NOT have a default organization theme configured.
You need to configure organization themes to meet the following requirements:
All users must be able to see the company logo in the Microsoft 365 top navigation bar.
Only the users in Marketing must be able to see a custom color scheme on the top navigation bar.
The solution must use the fewest number of themes.
What should you do?
You have a Microsoft 365 subscription.
You need to create a Conditional Access policy that blocks sign-ins for the following scenarios:
Activity from anonymous IP address.
Impossible travel between two geographical locations.
Which condition should you configure for the policy?
You have a data loss prevention (DLP) policy.
You need to increase the likelihood that the DLP policy will apply to data that contains medical terms from the International Classification of Diseases (ICD-9-CM). The solution must minimize the number of false positives.
Which two settings should you modify? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft Entra tenant that contains the groups shown in the following exhibit.
For each of the following statements, select the appropriate option in the answer area.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the
graphic.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription.
From Microsoft Entra Privileged Identity Management, you configure Role settings for the Global Administrator role as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
You need to implement the planned change for Group4.
Which cmdlet should you run?
You need to implement the planned change for web search.
Which users can perform the configuration, and which portal should the user use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to meet the technical requirements for Agent1.
What should you use?
You need to evaluate the configuration of AU1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
You need to meet the technical requirements for the project documents.
What should you create in Microsoft Purview?
User1 has requested to use the AI Administrator role.
Which users can approve the request, and how long will User1 be an AI administrator after the role is approved? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to implement CAPolicy1. The solution must meet the technical requirements.
Which two Conditional Access settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
You need to implement the planned change for Site1. The solution must minimize false positives.
Which type of classifier should you create for each document type? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
