Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 211:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You have the devices shown in the following table.

  

  You plan to join the devices to Azure Active Directory (Azure AD)

  What should you do on each device to support Azure AU join? To answer, drag the appropriate actions to the collect devices, Each action may be used once, more than once, of not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 212:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.

  You notice that it takes several days to notify email recipients when an incoming email message is marked as spam, and then quarantined.

  You need to ensure that the email recipients are notified within 24 hours.

  What should you do?

  A. Modify the default inbound anti-spam policy.
  B. Modify the DefaultFullAccessPolicy quarantine policy.
  C. Add a custom quarantine policy.
  D. Modify the global settings for quarantine policies.
  D. Modify the global settings for quarantine policies.

  ---

  Explanation

  Quarantine policy, Global Settings (Defender portal -> Email & Collaboration -> Policies & rules -> Threat policies -> Quarantine policy). Change 'Send end-user spam notifications' to Daily.

• Question 213:

  HOTSPOT

  Your company has a Microsoft 365 subscription.

  That contains the domains shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE; Each correct selection is worth one point.

  

  

• Question 214:

  You have a Microsoft 365 E5 subscription.

  You create a data loss prevention (DLP) policy named DLP1.

  You need to ensure that endpoint rule actions are available in the advanced DLP rules for DLP1.

  To which location should you apply DLP1?

  A. Instances
  B. OneDrive accounts
  C. On-premises repositories
  D. Devices
  D. Devices

• Question 215:

  You have a Microsoft 365 E5 subscription.

  You define a retention label that has the following settings:

  Retention period: 7 years - Start the retention period based on: When items were created

  You need to prevent the removal of the label once the label is applied to a file.

  What should you select in the retention label settings?

  A. Retain items even If users delete
  B. Mark items as a record
  C. Mark items as a regulatory record
  D. Retain items forever
  C. Mark items as a regulatory record

• Question 216:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to create a Conditional Access policy named Policy1 that meets the following requirements:

  1. Applies to high-risk users

  2. Requires multifactor authentication (MFA)

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 217:

  Which role should you assign to User1?

  Available Choices (select all choices that are correct)

  A. Hygiene Management
  B. Security Reader
  C. Security Administrator
  D. Records Management
  B. Security Reader

  ---

  Explanation

  A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

  Users with the Security Reader role have global read-only access on security-related features, including all information in Microsoft 365 security center, Azure Active Directory, Identity Protection, Privileged Identity Management, as well as the ability to read Azure Active Directory sign-in reports and audit logs, and in Office 365 Security & Compliance Center.

  https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directoryassign-admin-roles

• Question 218:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You plan to create the data loss prevention (DLP) policies shown in the following table.

  

  You need to create DLP rules for each policy.

  Which policies support the sender is condition and the file extension is condition? To answer select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 219:

  You have a Microsoft 365 E5 tenant.

  You plan to create a custom Compliance Manager assessment template based on the ISO 27001:2013 template.

  You need to export the existing template.

  Which file format should you use for the exported template?

  A. CSV
  B. XLSX
  C. JSON
  D. XML
  B. XLSX

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-templates?view=o365-worldwide#export-a-template

• Question 220:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  The subscription contains users that have devices onboarded to Microsoft Defender for Endpoint. Defender for Endpoint is configured to forward signals to Microsoft Defender for Cloud Apps.

  Cloud Discovery identifies a risky web app named App1.

  You need to block users from connecting to Appl from Microsoft Edge. Users must be able to bypass the restriction.

  Which type of app tag should you use. and what should you configure to integrate Defender for Endpoint with Defender for Cloud Apps? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.