Question 76
You have a Microsoft 365 tenant.
Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure Active Directory (Azure AD).
You need to receive an alert if a registered application gains read and write access to the users' email.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure Active Directory (Azure AD).
You need to receive an alert if a registered application gains read and write access to the users' email.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Question 77
Hotspot Question
You have a Microsoft Entra tenant that contains the identities shown in the following table.
Group1 has the following configurations:
- Owners: User1, User4
- Members: User1, Managed2, Group2
You create an access review that has the following settings:
- Name: Review1
- Review scope: Select Teams + Groups
- Group: Group1
- Scope: All users
- Select reviewers: Group owner(s)
The Fallback reviewers setting is NOT configured.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
You have a Microsoft Entra tenant that contains the identities shown in the following table.
Group1 has the following configurations:
- Owners: User1, User4
- Members: User1, Managed2, Group2
You create an access review that has the following settings:
- Name: Review1
- Review scope: Select Teams + Groups
- Group: Group1
- Scope: All users
- Select reviewers: Group owner(s)
The Fallback reviewers setting is NOT configured.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Question 78
You have a Microsoft 365 E5 subscription.
You need to be able to create a Microsoft Defender for Cloud Apps session policy.
What should you do first?
You need to be able to create a Microsoft Defender for Cloud Apps session policy.
What should you do first?
Question 79
Your company purchases a Microsoft 365 E5 subscription.
A user named User1 is assigned the Security Administrator role.
You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies.
What should you do first?
A user named User1 is assigned the Security Administrator role.
You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies.
What should you do first?
Question 80
You have an Azure AD tenant and an Azure web app named App1.
You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:
* Guest users must be able to sign up by using a one-time password.
* The users must provide their first name, last name, city, and email address during the sign-up process.
What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer are a.
NOTE: Each correct selection is worth one point.
You need to provide guest users with self-service sign-up for App1. The solution must meet the following requirements:
* Guest users must be able to sign up by using a one-time password.
* The users must provide their first name, last name, city, and email address during the sign-up process.
What should you configure in the Azure Active Directory admin center for each requirement? To answer, select the appropriate options in the answer are a.
NOTE: Each correct selection is worth one point.
