Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 161:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

  

  User2 fails to authenticate to Azure AD when signing in as [email protected].

  You need to ensure that User2 can access the resources in Azure AD.

  Solution: From the on-premises Active Directory domain, you set the UPN suffix for User2 to @contoso.com. You instruct User2 to sign in as [email protected].

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The on-premises Active Directory domain is named contoso.com. You can enable users to sign on using a different UPN (different domain), by adding the domain to Microsoft 365 as a custom domain. Alternatively, you can configure the user account to use the existing domain (contoso.com).

• Question 162:

  You have a Microsoft 365 subscription.

  You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

  Solution: From the Endpoint Management admin center, you create a device configuration profile.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to create a trusted location and a conditional access policy.

• Question 163:

  You have a Microsoft 365 tenant that contains two groups named Group1 and Group2.

  You need to prevent the members or Group1 from communicating with the members of Group2 by using Microsoft Teams. The solution must comply with regulatory requirements and must not affect other user in the tenant.

  What should you use?

  A. information barriers

  B. communication compliance policies

  C. moderated distribution groups

  D. administrator units in Azure Active Directory (Azure AD)

  Correct Answer: A

• Question 164:

  You purchase a new computer that has Windows 10, version 21H1 preinstalled.

  You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.

  What should you do on the computer?

  A. Install all the feature updates released since version 21H1 and the latest quality update only.

  B. Install the latest feature update and all the quality updates released since version 21H1.

  C. Install the latest feature update and the latest quality update only.

  D. Install all the feature updates released since version 21H1 and all the quality updates released since version 21H1 only.

  Correct Answer: C

• Question 165:

  You have a Microsoft 365 E5 subscription.

  You plan to implement records management and enable users to designate documents as regulatory records.

  You need to ensure that the option to mark content as a regulatory record is visible when you create retention labels.

  What should you do first?

  A. Configure custom detection rules.

  B. Create an Exact Data Match (EDM) schema.

  C. Run the Sec-RegulacoryComplianceUI cmdlet.

  D. Run the Sec-LabelPolicy cmdlet.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/declare-records?view=o365- worldwide

• Question 166:

  You have a Microsoft 365 subscription.

  You have an Azure AD tenant that contains the users shown in the following table.

  

  You configure Tenant properties as shown in the following exhibit.

  

  Which users will be contacted by Microsoft if the tenant experiences a data breach?

  A. Used only

  B. User2 only

  C. User3 only

  D. Used and User2 only

  E. User2 and User3 only

  Correct Answer: B

  Microsoft 365 is committed to notifying customers within 72 hours of breach declaration. The customer's tenant administrator will be notified.

  Reference:

  https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-breach-office365

• Question 167:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

  

  User2 fails to authenticate to Azure AD when signing in as [email protected].

  You need to ensure that User2 can access the resources in Azure AD.

  Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as [email protected].

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  This is not a permissions issue.

  The on-premises Active Directory domain is named contoso.com. To enable users to sign on using a different UPN (different domain), you need to add the domain to Microsoft 365 as a custom domain.

• Question 168:

  You purchase a new computer that has Windows 10, version 2004 preinstalled.

  You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.

  What should you do on the computer?

  A. Install all the feature updates released since version 2004 and all the quality updates released since version 2004 only.

  B. install the West feature update and the latest quality update only.

  C. install all the feature updates released since version 2004 and the latest quality update only.

  D. install the latest feature update and all the quality updates released since version 2004.

  Correct Answer: B

• Question 169:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. You have the policies shown in the following table.

  

  All the policies are configured to send malicious email messages to quarantine. Which policies support a customized quarantine retention period?

  A. Policy1 and Policy2 only

  B. Policy2 and Policy4 only

  C. Policy3 and Policy4 only

  D. Policy1 and Policy3only

  Correct Answer: A

• Question 170:

  Your network contains an on-premises Active Directory domain named contoso.com.

  For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours.

  You plan to sync contoso.com to an Azure AD tenant.

  You need to recommend a solution to ensure that the logon hour restrictions apply when synced users sign in to Azure AD.

  What should you include in the recommendation?

  A. pass-through authentication

  B. conditional access policies

  C. password synchronization

  D. Azure AD Identity Protection policies

  Correct Answer: A

  Reference: https://nickblog.azurewebsites.net/2016/10/17/azure-ad-pass-through-authentication/