Microsoft Microsoft 365 Administrator MS-102 Questions & Answers

• Question 1:

  You implement Microsoft Azure Advanced Threat Protection (Azure ATP). You have an Azure ATP sensor configured as shown in the following exhibit.

  

  How long after the Azure ATP cloud service is updated will the sensor update?

  A. 20 hours

  B. 12 hours

  C. 7 hours

  D. 48 hours

  Correct Answer: B

• Question 2:

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1.

  Does this meet the goal?

  A. yes

  B. No

  Correct Answer: A

• Question 3:

  You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

  You need to create a detection exclusion in Azure ATP.

  Which tool should you use?

  A. the Security and Compliance admin center

  B. Microsoft Defender Security Center

  C. the Microsoft 365 admin center

  D. the Azure Advanced Threat Protection portal

  E. the Cloud App Security portal

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is https://docs.microsoft.com/en-us/defender-for-identity/excluding-entities-from-detections

• Question 4:

  You have a Microsoft 365 tenant that contains 500 Windows 10 devices and a Microsoft Endpoint Manager device compliance policy.

  You need to ensure that only devices marked as compliant can access Microsoft Office 365 apps.

  Which policy type should you configure?

  A. conditional access

  B. account protection

  C. attack surface reduction (ASR)

  D. Endpoint detection and response

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 5:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You plan to implement attack surface reduction (ASR) rules. Which devices will support the ASR rules?

  A. Device 1, Device2, and Device3 only

  B. Device3 only

  C. Device2 and Device3 only

  D. Device1, Device2, Devices and Device4

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-attack- surface-reduction?view=o365-worldwide#requirements

• Question 6:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User1 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 7:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

  

  User2 fails to authenticate to Azure AD when signing in as [email protected].

  You need to ensure that User2 can access the resources in Azure AD.

  Solution: From the on-premises Active Directory domain, you set the UPN suffix for User2 to @contoso.com. You instruct User2 to sign in as [email protected].

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The on-premises Active Directory domain is named contoso.com. You can enable users to sign on using a different UPN (different domain), by adding the domain to Microsoft 365 as a custom domain. Alternatively, you can configure the user account to use the existing domain (contoso.com).

• Question 8:

  You have a Microsoft 365 subscription.

  You have an Azure AD tenant that contains the users shown in the following table.

  

  You configure Tenant properties as shown in the following exhibit.

  

  Which users will be contacted by Microsoft if the tenant experiences a data breach?

  A. Used only

  B. User2 only

  C. User3 only

  D. Used and User2 only

  E. User2 and User3 only

  Correct Answer: B

  Microsoft 365 is committed to notifying customers within 72 hours of breach declaration. The customer's tenant administrator will be notified.

  Reference:

  https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-breach-office365

• Question 9:

  You have a Microsoft 365 E5 subscription.

  You plan to implement records management and enable users to designate documents as regulatory records.

  You need to ensure that the option to mark content as a regulatory record is visible when you create retention labels.

  What should you do first?

  A. Configure custom detection rules.

  B. Create an Exact Data Match (EDM) schema.

  C. Run the Sec-RegulacoryComplianceUI cmdlet.

  D. Run the Sec-LabelPolicy cmdlet.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/declare-records?view=o365- worldwide

• Question 10:

  You purchase a new computer that has Windows 10, version 21H1 preinstalled.

  You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.

  What should you do on the computer?

  A. Install all the feature updates released since version 21H1 and the latest quality update only.

  B. Install the latest feature update and all the quality updates released since version 21H1.

  C. Install the latest feature update and the latest quality update only.

  D. Install all the feature updates released since version 21H1 and all the quality updates released since version 21H1 only.

  Correct Answer: C