Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 251:

  HOTSPOT

  Your company has a Microsoft 365 E5 tenant.

  Users at the company use the following versions of Microsoft Office:

  1. Microsoft 365 Apps for enterprise
  2. Office for the web
  3. Office 2016
  4. Office 2019

  The company currently uses the following Office file types:

  1. docx
  2. xlsx
  3. doc
  4. xls

  You plan to use sensitivity labels. You need to identify the following:

  1. Which versions of Office require an add-in to support the sensitivity labels.
  2. Which file types support the sensitivity labels.
  3. What should you identify?

  To answer, select the appropriate options in the answer area, NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 252:

  You have a Microsoft 365 subscription.

  You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role.

  Which type of group should you use to assign the Reports Reader role and to access App1?

  A. a Microsoft 365 group that has assigned membership
  B. a Microsoft 365 group that has dynamic user membership
  C. a security group that has assigned membership
  D. a security group that has dynamic user membership
  C. a security group that has assigned membership

  ---

  Explanation

  To grant permissions to assignees to manage users and group access for a specific enterprise app, go to that app in Azure AD and open in the Roles and Administrators list for that app. Select the new custom role and complete the user or group assignment. The assignees can manage users and group access only for the specific app.

  Note: You can add the following types of groups:

  Assigned groups - Manually add users or devices into a static group.

  Dynamic groups (Requires Azure AD Premium) - Automatically add users or devices to user groups or device groups based on an expression you create.

  Note:

  Security groups

  Security groups are used for granting access to Microsoft 365 resources, such as SharePoint. They can make administration easier because you need only administer the group rather than adding users to each resource individually.

  Security groups can contain users or devices. Creating a security group for devices can be used with mobile device management services, such as Intune.

  Security groups can be configured for dynamic membership in Azure Active Directory, allowing group members or devices to be added or removed automatically based on user attributes such as department, location, or title; or device attributes such as operating system version.

  Security groups can be added to a team.

  Microsoft 365 Groups can't be members of security groups.

  Microsoft 365 Groups

  Microsoft 365 Groups are used for collaboration between users, both inside and outside your company. With each Microsoft 365 Group, members get a group email and shared workspace for conversations, files, and calendar events, Stream, and a Planner.

  https://learn.microsoft.com/en-us/azure/active-directory/roles/custom-enterprise-apps

  https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?

  https://learn.microsoft.com/en-us/mem/intune/apps/apps-deploy

• Question 253:

  You purchase a new computer that has Windows 10, version 2004 preinstalled.

  You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.

  What should you do on the computer?

  A. Install all the feature updates released since version 2004 and all the quality updates released since version 2004 only.
  B. install the West feature update and the latest quality update only.
  C. install all the feature updates released since version 2004 and the latest quality update only.
  D. install the latest feature update and all the quality updates released since version 2004.
  B. install the West feature update and the latest quality update only.

• Question 254:

  HOTSPOT

  You have a Microsoft 365 tenant.

  You need to create a custom Compliance Manager assessment template.

  Which application should you use to create the template, and in which file format should the template be saved? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 255:

  You have a Microsoft 365 tenant that contains a Windows 10 device named Device1 and the Microsoft Endpoint Manager policies shown in the following table.

  

  A. only the settings of Policy1
  B. only the settings of Policy2
  C. only the settings of Policy3
  D. no settings
  C. only the settings of Policy3

• Question 256:

  HOTSPOT

  You have Microsoft 365 subscription.

  You create an alert policy as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic

  NOTE: Each correct selection is worth one point.

  

  

• Question 257:

  You have a Microsoft Azure Active Directory (Azure AD) tenant named Contoso.com.

  You create a Microsoft Defender for identity instance Contoso.

  The tenant contains the users shown in the following table.

  

  You need to modify the configuration of the Defender for identify sensors.

  Solutions: You instruct User4 to modify the Defender for identity sensor configuration.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

• Question 258:

  Your company has offices in Seattle and Denver.

  You have a Microsoft 365 subscription. You plan to create a Conditional Access policy named Policy1 that will enforce multifactor authentication (MFA).

  You need to ensure that users at the Seattle office are excluded from MFA. Users at the Denver office must always be prompted for MFA.

  What should you configure for Policy1?

  A. Authentication strengths
  B. a named location that has IP ranges location set to the Seattle office
  C. a named location that has Countries location set to United States
  D. VPN connectivity from the Seattle office
  B. a named location that has IP ranges location set to the Seattle office

• Question 259:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You have devices enrolled in Intune as shown in the following table.

  

  You create the device configuration profiles shown in the following table.

  

  Which profiles will be applied to each device? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 260:

  You have a Microsoft 365 subscription.

  You view the Service health Overview as shown in the following exhibit.

  

  You need to ensure that a user named User1 can view the advisories to investigate service health issues.

  Which role should you assign to User1?

  A. Message Center Reader
  B. Reports Reader
  C. Service Support Administrator
  D. Compliance Administrator
  C. Service Support Administrator

  ---

  Explanation

  Service Support admin

  Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role: - Open and manage service requests

  - View and share message center posts

  - Monitor service health Incorrect:

  * Message center reader

  Assign the Message center reader role to users who need to do the following:

  - Monitor message center notifications

  - Get weekly email digests of message center posts and updates

  - Share message center posts

  - Have read-only access to Azure AD services, such as users and groups

  * Reports reader

  Assign the Reports reader role to users who need to do the following: - View usage data and the activity reports in the Microsoft 365 admin center

  - Get access to the Power BI adoption content pack

  - Get access to sign-in reports and activity in Azure AD

  - View data returned by Microsoft Graph reporting API

  https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide