Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 1:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains two users named User1 and User2 and the groups shown in the following table.

  You have a Microsoft Intune enrollment policy that has the following settings:

  MDM user scope: Some

  uk.co.certification.simulator.questionpool.PList@1b5b2df0 MAM user scope: Some uk.co.certification.simulator.questionpool.PList@1b5b2e60

  You purchase the devices shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 2:

  You have a Microsoft 365 E5 subscription and use Microsoft Purview. The subscription contains the devices shown in the following table.

  

  All the devices are onboarded to Microsoft Defender for Endpoint. You plan to deploy Endpoint data loss prevention (Endpoint DLP) policies.

  Which devices can be protected by using the DLP policies?

  A. Device1 only
  B. Device1 and Device2 only
  C. Device1, Device2, and Device 3 only
  D. Device1, Device3, and Device 4 only
  E. Device1, Device2, Device3, and Device4
  B. Device1 and Device2 only

• Question 3:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You have an Azure AD tenant named contoso.com that contains the following users:

  1. Admin1
  2. Admin2
  3. User1

  Contoso.com contains an administrative unit named AIM that has no role assignments. User1 is a member of AU1.

  You create an administrative unit named AU2 that does NOT have any members or role assignments.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 4:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

  

  User2 fails to authenticate to Azure AD when signing in as [email protected].

  You need to ensure that User2 can access the resources in Azure AD.

  Solution: From the Microsoft Entra admin center, you assign User2 the Security Reader role. You instruct User2 to sign in as [email protected].

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  This is not a permissions issue so you do not need to assign the Security Reader role. The on-premises Active Directory domain is named contoso.com. User2 could sign on as [email protected] but you would first need to change the UPN of User2 to [email protected].

• Question 5:

  HOTSPOT

  You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 6:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  User1 exceeds the default daily limit of allowed email messages and is on the Restricted entities list.

  You need to remove User1 from the Restricted entities list.

  What should you use?

  A. the Exchange admin center
  B. the Microsoft Purview compliance portal
  C. the Microsoft 365 admin center
  D. the Microsoft 365 Defender portal
  E. the Microsoft Entra admin center
  D. the Microsoft 365 Defender portal

  ---

  Explanation

  Admins can remove user accounts from the Restricted entities page in the Microsoft 365 Defender portal or in Exchange Online PowerShell. Remove a user from the Restricted entities page in the Microsoft 365 Defender portal In the Microsoft 365 Defender portal at

  https://security.microsoft.com,

  go to Email & collaboration > Review > Restricted entities. Or, to go directly to the Restricted entities page, use

  https://security.microsoft.com/restrictedentities.

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam

• Question 7:

  You have a Microsoft 365 E5 tenant that contains four devices enrolled in Microsoft Intune as shown in the following table.

  

  You plan to deploy Microsoft 365 Apps for enterprise by using Microsoft Endpoint Manager.

  To which devices can you deploy Microsoft 365 Apps for enterprise?

  A. Device1 only
  B. Device1 and Device3 only
  C. Device2 and Device4 only
  D. Device1, Device2. and Device3 only
  E. Device1, Device2, Device3, and Device4
  B. Device1 and Device3 only

  ---

  Explanation

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-add

• Question 8:

  HOTSPOT

  As of March, how long will the computers in each office remain supported by Microsoft? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://support.microsoft.com/en-gb/help/13853/windows-lifecycle-fact-sheet

  March Feature Updates: Serviced for 18 months from release date

  September Feature Updates: Serviced for 30 months from release date

  References:

  https://www.windowscentral.com/whats-difference-between-quality-updates-and-featureupdates-windows-10

• Question 9:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain.

  You deploy an Azure AD tenant.

  Another administrator configures the domain to synchronize to Azure AD.

  You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

  You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to Azure AD.

  Solution: You run idfix.exe and export the 10 user accounts.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The question states that "all the user account synchronizations completed successfully". If there were problems with the 10 accounts that needed fixing with idfix.exe, there would have been synchronization errors in Azure AD Connect Health.

  It is likely that the 10 user accounts are being excluded from the synchronization cycle by a filtering rule.

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering

• Question 10:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to configure threat protection for Microsoft 365 to meet the following requirements:

  1. Limit a user named User1 from sending more than 30 email messages per day.

  2. Prevent the delivery of a specific file based on the file hash.

  Which two threat policies should you configure in Microsoft Defender for Office 365? To answer, select the appropriate threat policies in the answer area.

  NOTE: Each correct selection is worth one point.