Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 181:

  You have a Microsoft 365 E5 subscription.

  The subscription contains users that have the following types of devices:

  1. Windows 11

  2. Android

  3. iOS

  To which devices can you apply Endpoint DLP policies?

  A. Windows 11 only
  B. Windows 11 and Android only
  C. Windows 11 and iOS only
  D. Windows 11, Android, and iOS
  A. Windows 11 only

• Question 182:

  DRAG DROP

  You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant.

  All users sync from Active Directory Domain Services (AD DS) to the tenant by using Express Settings in Microsoft Entra Connect.

  You plan to implement self-service password reset (SSPR).

  You need to ensure that when a user resets or changes a password, the password syncs with AD DS.

  Which actions should you perform in sequence? To answer, drag the appropriate actions to the correct order. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 183:

  You have a Microsoft 365 E5 subscription.

  You create an account tor a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Administrator role.

  Does this meet the goal?

  A. Yes
  B. no
  B. no

• Question 184:

  Your network contains an Active Directory forest.

  You deploy Microsoft 365.

  You plan to implement directory synchronization.

  You need to recommend a security solution for the synchronized identities.

  The solution must meet the following requirements:

  1. Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

  2. User passwords must be 10 characters or more.

  Solution: Implement pass-through authentication and configure Microsoft Entra Password protection.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 185:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You plan to implement identity protection by configuring a sign-in risk policy and a user risk policy. Which type of risk is detected by each policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks#sign-in-risk-detections

• Question 186:

  Your network contains an Active Directory domain.

  You deploy an Azure AD tenant.

  Another administrator configures the domain to synchronize to Azure AD.

  You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

  You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to Azure AD.

  Solution: From Azure AD Connect, you modify the Azure AD credentials.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  The question states that "all the user account synchronizations completed successfully". Therefore, the Azure AD credentials are configured correctly in Azure AD Connect. It is likely that the 10 user accounts are being excluded from the synchronization cycle by a filtering rule.

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering

• Question 187:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You plan to provide User4 with early access to Microsoft 365 feature and service updates.

  You need to identify which Microsoft 365 setting must be configured, and which user can modify the setting. The solution must use the principle of least privilege.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 188:

  You have a Microsoft 365 E5 subscription.

  You plan to implement records management and enable users to designate documents as regulatory records.

  You need to ensure that the option to mark content as a regulatory record is visible when you create retention labels.

  What should you do first?

  A. Configure custom detection rules.
  B. Create an Exact Data Match (EDM) schema.
  C. Run the Sec-RegulacoryComplianceUI cmdlet.
  D. Run the Sec-LabelPolicy cmdlet.
  C. Run the Sec-RegulacoryComplianceUI cmdlet.

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/declare-records?view=o365-

  worldwide

• Question 189:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You have the named locations shown in the following table.

  

  You create a conditional access policy that has the following configurations:

  Users or workload identities:

  Include: Group1

  Exclude: Group2

  Cloud apps or actions: Include all cloud apps

  Conditions:

  Include: Any location

  Exclude: Montreal

  Access control: Grant access, Require multi-factor authentication

  User1 is on the multi-factor authentication (MFA) blocked users list.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 190:

  You have a Microsoft 365 subscription.

  You configure a data loss prevention (DLP) policy.

  You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

  You need to prevent the users from bypassing the DLP policy.

  What should you configure?

  A. actions
  B. incident reports
  C. exceptions
  D. user overrides
  D. user overrides

  ---

  Explanation

  A DLP policy can be configured to allow users to override a policy tip and report a false positive.

  You can educate your users about DLP policies and help them remain compliant without blocking their work. For example, if a user tries to share a document containing sensitive information, a DLP policy can both send them an email notification and show them a policy tip in the context of the document library that allows them to override the policy if they have a business justification. The same policy tips also appear in Outlook on the web, Outlook, Excel, PowerPoint, and Word.

  If you find that users are incorrectly marking content as false positive and bypassing the DLP policy, you can configure the policy to not allow user overrides.

  https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-

  policies