Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 191:

  Your on-premises network contains an Active Directory domain.

  You have a Microsoft 365 E5 subscription.

  You plan to implement a hybrid configuration that has the following requirements:

  Minimizes the number of times users are prompted for credentials when they access Microsoft 365 resources Supports the use of Azure AD Identity Protection

  You need to configure Azure AD Connect to support the planned implementation.

  Which two options should you select? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Password Hash Synchronization
  B. Password writeback
  C. Directory extension attribute sync
  D. Enable single sign-on
  E. Pass-through authentication
  A. Password Hash Synchronization
  D. Enable single sign-on

• Question 192:

  HOTSPOT

  You plan to implement the endpoint protection device configuration profiles to support the planned changes.

  You need to identify which devices will be supported, and how many profiles you should implement.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 193:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  The devices are managed by using Microsoft Intune.

  You plan to use a configuration profile to assign the Delivery Optimization settings.

  Which devices will support the settings?

  A. Device1 only
  B. Device1 and Device4
  C. Device1, Device3, and Device4
  D. Device1, Device2, Device3, and Device4
  A. Device1 only

• Question 194:

  HOTSPOT

  You need to configure the Office 365 service status notifications and limit access to the service and feature updates. The solution must meet the technical requirements.

  What should you configure in the Microsoft 365 admin center? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 195:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the Exchange admin role.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  You need to assign the Security Administrator role.

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 196:

  HOTSPOT

  You have a Microsoft 365 subscription.

  From Azure AD Privileged Identity Management (PIM), you configure Role settings for the Global Administrator role as shown in the following exhibit.

  

  You make a user named [email protected] eligible for the Global Administrator role.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 197:

  Which report should the New York office auditors view?

  A. DLP policy matches
  B. DLP false positives and overrides
  C. DLP incidents
  D. Top Senders and Recipients
  C. DLP incidents

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-preventionpolicies

  This report also shows policy matches over time, like the policy matches report. However, the policy matches report shows matches at a rule level;

  for example, if an email matched three different rules, the policy matches report shows three different line items. By contrast, the incidents report shows matches at an item level;

  for example, if an email matched three different rules, the incidents report shows a single line item for that piece of content.Because the report counts are aggregated differently, the policy matches report is better for identifying matches with specific rules and fine tuning DLP policies. The incidents report is better for identifying specific pieces of content that are problematic for your DLP policies.

• Question 198:

  You have a Microsoft 365 E5 tenant.

  You need to ensure that when a document containing a credit card number is added to the tenant, the document is encrypted.

  Which policy should you use?

  A. a retention policy
  B. a retention label policy
  C. an auto-labeling policy
  D. an insider risk policy
  C. an auto-labeling policy

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 199:

  HOTSPOT

  Your company has an Azure AD tenant that contains the users shown in the following table.

  

  The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts. External collaboration settings have default configuration.

  You need to identify which users can perform the following administrative tasks:

  1. Create guest user accounts.

  2. Add User3 to Admin1.

  Which users should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 200:

  You need to review the exposure score of the devices.

  Which portal should you use?

  A. the Microsoft Intune admin center
  B. the Microsoft Purview portal
  C. the Microsoft Defender portal
  D. the Microsoft 365 admin center
  C. the Microsoft Defender portal

  ---

  Explanation

  Comprehensive and Detailed Explanation From Exact Extract of Microsoft 365 Admin documents guides:

  The correct answer is the Microsoft Defender portal

  Exposure Score is a security metric provided by Microsoft Defender for Endpoint . It measures an organization's overall security posture by evaluating device configuration, vulnerabilities, and security controls across endpoints.

  Microsoft documentation defines Exposure Score as part of the Microsoft Defender Vulnerability Management experience, which is accessed through the Microsoft Defender portal .

  The Exposure Score helps administrators:

  Understand how vulnerable devices are across the organization

  Track improvements to security posture over time

  Prioritize remediation actions based on risk

  Microsoft explicitly states that Exposure Score is viewed and managed within the Microsoft Defender portal , which serves as the central dashboard for Defender for Endpoint, Defender for Office 365, and related security services.

  Why the other options are incorrect

  A. the Microsoft Intune admin center Intune focuses on device management, compliance, and configuration profiles. While it provides device health and compliance reporting, it does not display the Defender Exposure Score.

  B. the Microsoft Purview portal Microsoft Purview is used for data governance, compliance, insider risk, and information protection. It has no functionality related to endpoint exposure scoring.

  D. the Microsoft 365 admin center The Microsoft 365 admin center is designed for tenant-wide administration such as users, licenses, and services. It does not provide detailed endpoint security metrics like Exposure Score.