Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 141:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two users named [email protected] and [email protected] and a Microsoft SharePoint site named Site1.

  You create a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.

  

  DLP1 is applied to Site1.

  You have the files shown in the following table.

  

  You copy the files to Site1.

  How many notifications will each user receive? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 142:

  You have a Microsoft 365 E5 subscription. The subscription contains a Microsoft SharePoint Online site named Site1.

  Site1 contains the following files:

  1. File.docx

  2. ImportantFile.docx

  3. File_Important.docx

  From Microsoft Defender Cloud Apps, you create a file policy named Policy that has the filter shown in the following exhibit.

  

  To which files will Policy1 apply?

  A. File.docx, ImportantFile.docx, and File_Important.docx
  B. File_Important.docx only
  C. ImportantFile.docx and File_Important.docx only
  D. File.docx only
  E. ImportantFile.docx only
  B. File_Important.docx only

• Question 143:

  You have a Microsoft 365 E5 subscription that uses Microsoft intune.

  in the Microsoft Endpoint Manager admin center, you discover many stale and inactive devices,

  You enable device clean-up rules What can you configure as the minimum number of days before a device a removed automatically?

  A. 10
  B. 30
  C. 45
  D. 90
  D. 90

• Question 144:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You create a Conditional Access policy named Policy1 and assign Policy1 to all users.

  You need to configure Policy1 to enforce multi-factor authentication (MFA) if the user risk level is high.

  Which two settings should you configure in Policy1? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 145:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User1 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 146:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the administrative units shown in the following table.

  

  The groups contain the members shown in the following table.

  

  The users are assigned the roles shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  N - user1 is not a direct member of AU1

  N - user 4 is not a member of AU1

  Y - user 3 is a license admin for the Org.

  Adding a group to an administrative unit brings the group itself into the management scope of the administrative unit, but not the members of the group

  https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units#groups

• Question 147:

  You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.

  

  Azure AD Connect has the following settings:

  Password Hash Sync: Enabled

  Pass-through authentication: Enabled

  You need to identify which users will be able to authenticate by using Azure AD if connectivity between on-premises Active Directory and the internet is lost.

  Which users should you identify?

  A. none
  B. Used only1
  C. User1 and User2 only
  D. User1. User2, and User3
  B. Used only1

• Question 148:

  You have a Microsoft 365 E5 tenant.

  You need to be notified when emails with attachments that contain sensitive personal data are sent to external recipients.

  Which two policies can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a data loss prevention (DLP) policy
  B. a sensitivity label policy
  C. a Microsoft Cloud App Security file policy
  D. a communication compliance policy
  E. a retention label policy
  A. a data loss prevention (DLP) policy
  D. a communication compliance policy

• Question 149:

  HOTSPOT

  Your company has a Azure AD tenant named comoso.onmicrosoft.com that contains the users shown in the following table.

  

  You need to identify which users can perform the following administrative tasks:

  1. Reset the password of User4.
  2. Modify the value for the manager attribute of User4.

  Which users should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 150:

  You have a Microsoft 365 tenant.

  You plan to implement Endpoint Protection device configuration profiles.

  Which platform can you manage by using the profile?

  A. Ubuntu Linux
  B. macOS
  C. iOS
  D. Android
  B. macOS

  ---

  Explanation

  Intune device configuration profiles can be applied to Windows 10 devices and macOS devices

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  Windows 10

  macOS

  Other incorrect answer options you may see on the exam include the following:

  Android Enterprise

  Windows 8.1 Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure