Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 151:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to enable password less authentication for all users.

  Which authentication method and portal should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 152:

  You have a Microsoft 365 subscription that uses Microsoft Defender XDR

  From Automatic remediation in the Microsoft Defender portal, you set Automation level to Semi - require approval for non-temp folders for the endpoints.

  You need to identify the impact of the Automation level setting on the endpoints.

  Which two actions will occur based on the remediation settings? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Devices will be remediated automatically if a threat is detected in the \windows\ folder.
  B. Devices will be remediated automatically if a threat is detected in the \program files (X86) \" folder.
  C. Devices will be remediated automatically if a threat is detected in the \users\"\downloads\" folder.
  D. Devices will be remediated only after end-user approval.
  A. Devices will be remediated automatically if a threat is detected in the \windows\ folder.
  B. Devices will be remediated automatically if a threat is detected in the \program files (X86) \" folder.

• Question 153:

  HOTSPOT

  You are evaluating the use of multi-factor authentication (MFA).

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 154:

  You have a Microsoft 365 E5 subscription that contains the resources shown in the following table.

  

  You create a sensitivity label named Label1.

  To which resource can you apply Label1?

  A. Group1 only
  B. Group2 only
  C. Sitel only
  D. Groupl and Group2 only
  E. Group1, Group2, and Site1
  E. Group1, Group2, and Site1

  ---

  Explanation

  Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory Azure Active Directory (Azure AD), part of Microsoft Entra, supports applying sensitivity labels published by the Microsoft Purview compliance portal to Microsoft 365 groups.

  In addition to using sensitivity labels to protect documents and emails, you can also use sensitivity labels to protect content in the following containers: Microsoft Teams sites, Microsoft 365 groups (formerly Office 365 groups), and SharePoint sites.

  When you configure a label policy, you can:

  Choose which users and groups see the labels. Labels can be published to any specific user or email-enabled security group, distribution group, or Microsoft 365 group (which can have dynamic membership) in Azure AD.

  https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-teams-groups-sites

  https://learn.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-

  worldwide

• Question 155:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.

  You have the policies shown in the following table.

  

  All the policies are configured to send malicious email messages to quarantine.

  Which policies support a customized quarantine retention period?

  A. Policy1 and Policy2 only
  B. Policy2 and Policy4 only
  C. Policy3 and Policy4 only
  D. Policy1 and Policy3only
  A. Policy1 and Policy2 only

• Question 156:

  DRAG DROP

  Your company has a Microsoft 365 E5 tenant.

  Users access resources in the tenant by using both personal and company-owned Android devices. Company policies requires that the devices have a threat level of medium or lower to access Microsoft Exchange Online mailboxes.

  You need to recommend a solution to identify the threat level of the devices and to control access of the devices to the resources.

  What should you include in the solution for each device type? To answer, drag the appropriate components to the correct devices. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 157:

  You have a Microsoft 365 E5 tenant.

  The Microsoft Secure Score for the tenant is shown in the following exhibit.

  

  You plan to enable Security defaults for Azure Active Directory (Azure AD).

  Which three improvement actions will this affect?

  A. Require MFA for administrative roles.
  B. Ensure all users can complete multi-factor authentication for secure access
  C. Enable policy to block legacy authentication
  D. Enable self-service password reset
  E. Use limited administrative roles
  A. Require MFA for administrative roles.
  B. Ensure all users can complete multi-factor authentication for secure access
  C. Enable policy to block legacy authentication

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

• Question 158:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  The subscription has the following two anti-spam policies:

  Name: AntiSpam1

  Priority: 0

  Induce these users, groups and domains

  Users: User3

  Groups: Group!

  Exclude these users, groups and domains

  Groups: Group2

  Message limits

  Set a daily message limit 100

  Name: AntiSpam2

  Priority: 1

  Include these users, groups and domains

  Users: User! o Groups: Group2

  Exclude these users, groups and domains

  Users: User3

  Message limits

  Set a daily message limit 50

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 159:

  You have a Microsoft 365 E5 subscription.

  You create a user named Admin1.

  You need to ensure that Admin1 can view Endpoint security policies from the Microsoft Defender portal.

  The solution must follow the principle of least privilege.

  Which Microsoft Entra role should you assign to Admin1?

  A. Security Administrator
  B. Cloud Device Administrator
  C. Global Reader
  D. Security Reader
  E. Security Operator
  D. Security Reader

• Question 160:

  You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1.

  You enable Azure AD Identity Protection.

  You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

  To which role should you add User1?

  A. Compliance Administrator
  B. Security Administrator
  C. Service Administrator
  D. User Administrator
  B. Security Administrator