Your company has a Microsoft 365 E5 subscription.
The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online.
You need to recommend a solution to identify documents that contain sensitive information.
What should you include in the recommendation?

• A. eDiscovery
• B. data loss prevention (DLP)
• C. Information Governance
• D. data classification content explorer

Your company has an on-premises network and an Azure subscription.
The company does NOT have a Site-to-Site VPN or an ExpressRoute connection to Azure.
You are designing the security standards for Azure App Service web apps. The web apps will access Microsoft SQL Server databases on the network.
You need to recommend security standards that will allow the web apps to access the databases. The solution must minimize the number of open internet-accessible endpoints to the on-premises network.
What should you include in the recommendation?

• A. hybrid connections
• B. virtual network NAT gateway integration
• C. a private endpoint
• D. virtual network integration

You have a Microsoft 365 E5 subscription.
You need to recommend a security solution that meets the following requirements:
* Automatically identifies and stops external, brute force attacks against accounts in the subscription
* Automatically identifies and stops external attacks that use an internal account to exfiltrate data from Microsoft SharePoint Online sites in the subscription What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Your company has a Microsoft 365 E5 subscription.
The company plans to deploy 45 mobile self-service kiosks that will run Windows 10. You need to provide recommendations to secure the kiosks. The solution must meet the following requirements:
* Ensure that only authorized applications can run on the kiosks.
* Regularly harden the kiosks against new threats.
Which two actions should you include in the recommendations? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Onboard the kiosks to Azure Monitor.
• B. Onboard the kiosks to Microsoft Intune and Microsoft Defender for Endpoint.
• C. Implement threat and vulnerability management in Microsoft Defender for Endpoint.
• D. Implement Privileged Access Workstation (PAW) for the kiosks.
• E. Implement Automated Investigation and Remediation (AIR) in Microsoft Defender for Endpoint.

You have an Azure subscription and an on-premises datacenter. The datacenter contains 100 servers that run Windows Server. AJI the servers are backed up to a Recovery Services vault by using Azure Backup and the Microsoft Azure Recovery Services (MARS) agent.
You need to design a recovery solution for ransomware attacks that encrypt the on-premises servers. The solution must follow Microsoft Security Best Practices and protect against the following risks:
* A compromised administrator account used to delete the backups from Azure Backup before encrypting the servers
* A compromised administrator account used to disable the backups on the MARS agent before encrypting the servers What should you use for each risk? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point