Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 291:

  You are implementing Microsoft Defender for Cloud Apps.

  You need to ensure that you can create OAuth app policies.

  Solution: You configure Conditional Access app control.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Comprehensive and Detailed Explanation From Exact Extract of Microsoft 365 Admin documents guides:

  OAuth app policies are a feature of Microsoft Defender for Cloud Apps (MDCA) that allow you to:

  Monitor OAuth-connected apps

  Control app permissions

  Detect risky or overprivileged OAuth applications

  Microsoft documentation clearly states that OAuth app policies are created and managed directly within Microsoft Defender for Cloud Apps , under Control # Policies # OAuth app policies .

  Why Conditional Access app control does NOT meet the goal

  Conditional Access app control is a different capability that:

  Integrates Microsoft Defender for Cloud Apps with Microsoft Entra Conditional Access

  Provides real-time session control for cloud apps

  Is used to control user actions (download, upload, copy, etc.) during app sessions Microsoft documentation explicitly distinguishes these features:

  Conditional Access app control is for session-based access control OAuth app policies are for app governance and permission monitoring

  Configuring Conditional Access app control does not enable or affect the ability to create OAuth app policies .

• Question 292:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You need to review reports to identify the following:

  1. The storage usage of files stored in Microsoft Teams

  2. The number of active users per team

  Which report should you review for each requirement? To answer, drag the appropriate reports to the correct requirements. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  Select and Place:

  

  

  ---

  

• Question 293:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365 and contains a user named User1.

  User1 emails a product catalog in the PDF format to 300 vendors. Only 200 vendors receive the email message, and User1 is blocked from sending email until the next day.

  You need to prevent this issue from reoccurring.

  What should you configure?

  A. anti-spam policies
  B. Safe Attachments policies
  C. anti-phishing policies
  D. anti-malware policies
  A. anti-spam policies

• Question 294:

  HOTSPOT

  You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

  

  The device compliance policies in Endpoint Manager are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement Is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 295:

  You have a Microsoft 365 E5 subscription.

  You create a Conditional Access policy that blocks access to an app named App1 when users trigger a high-risk sign-in event.

  You need to reduce false positives for impossible travel when the users sign in from the corporate network.

  What should you configure?

  A. exclusion groups
  B. multi-factor authentication (MFA)
  C. named locations
  D. user risk policies
  C. named locations

• Question 296:

  You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint.

  You integrate Microsoft Defender for Endpoint with Microsoft Intune.

  From Microsoft Defender Vulnerability Management, you review the top security recommendations and discover a recommendation to update Microsoft Edge (Chromium) to a later version.

  You need to ensure that a security task is added to Intune to address the recommendation.

  What should you do?

  A. From the Microsoft Intune admin center, configure a security baseline.
  B. From the Microsoft Intune admin center, configure Windows Autopatch.
  C. From the Microsoft Defender portal add an incident notification rule.
  D. From the Microsoft Defender portal, select Request remediation.
  D. From the Microsoft Defender portal, select Request remediation.

• Question 297:

  HOTSPOT

  You need to configure a conditional access policy to meet the compliance requirements.

  You add Exchange Online as a cloud app.

  Which two additional settings should you configure in Policy1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/intune/create-conditional-access-intune

• Question 298:

  You have a Microsoft 365 tenant that uses Microsoft Endpoint Manager for device management. You need to add the phone number of the help desk to the Company Portal app.

  What should you do?

  A. From Customization in the Microsoft Endpoint Manager admin center, modify the support information for the tenant.
  B. From the Microsoft Endpoint Manager admin center, create an app configuration policy.
  C. From the Microsoft 365 admin center, modify Organization information.
  D. From the Microsoft 365 admin center, modify Help desk information.
  A. From Customization in the Microsoft Endpoint Manager admin center, modify the support information for the tenant.

  ---

  Explanation

  https://systemcenterdudes.com/intune-company-portal-customization/

• Question 299:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You integrate Microsoft Defender for Cloud Apps with Microsoft Defender for Endpoint. You need to create a policy to block users from accessing discovered apps that have a risk score of 4 or lower.

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 300:

  You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.

  You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory.

  What should you configure in the profile?

  A. Microsoft Defender Credential Guard
  B. BitLocker Drive Encryption (BitLocker)
  C. Microsoft Defender
  D. Microsoft Defender Exploit Guard
  A. Microsoft Defender Credential Guard