Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 311:

  HOTSPOT

  Your network contains an Active Directory domain named contoso.com. The domain contains the objects shown in the following table:

  

  You configure Microsoft Entra Connect to synchronize only the OU1 organizational unit.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  

  

• Question 312:

  You have a Microsoft 365 E5 subscription.

  On Monday, you create a new user named User1.

  On Tuesday, User1 signs in for the first time and perform the following actions:

  Signs in to Microsoft Exchange Online from an anonymous IP address

  Signs in to Microsoft SharePoint Online from a device in New York City.

  Establishes Remote Desktop connections to hosts in Berlin and Hong Kong, and then signs in to SharePoint Online from the Remote Desktop connections Which types of sign-in risks will Azure AD Identity Protection detect for User1?

  A. anonymous IP address only
  B. anonymous IP address and atypical travel
  C. anonymous IP address, atypical travel, and unfamiliar sign-in properties
  D. unfamiliar sign-in properties and atypical travel only
  E. anonymous IP address and unfamiliar sign-in properties only
  A. anonymous IP address only

• Question 313:

  You have a Microsoft 365 E5 subscription.

  The subscription contains users that have the following types of devices:

  1. Windows 10
  2. Android
  3. OS

  On which devices can you configure the Endpoint DLP policies?

  A. Windows 10 only
  B. Windows 10 and Android only
  C. Windows 10 and macO Sonly
  D. Windows 10, Android, and iOS
  A. Windows 10 only

  ---

  Explanation

  A.Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10/11 and macOS (the three latest released major versions) devices. Once devices are onboarded into the Microsoft Purview solutions, the information about what users are doing with sensitive items is made visible in activity explorer. You can then enforce protective actions on those items via DLP policies.

  https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about

• Question 314:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You need to identify all users that have an Enterprise Mobility + Security plan, and then provide a list of the users in the CSV format.

  Which settings should you use in the Microsoft 365 admin center, and which option should you select? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 315:

  You need to configure Azure AD Connect to support the planned changes for the Montreal Users and Seattle Users OUs.

  What should you do?

  A. From the Microsoft Azure AD Connect wizard, select Customize synchronization options.
  B. From PowerShell, run the Add-ADSyncConnectorAttnbuteinclusion cmdlet.
  C. From PowerShell, run the start-ADSyncSyncCycle cmdlet.
  D. From the Microsoft Azure AD Connect wizard, select Manage federation.
  A. From the Microsoft Azure AD Connect wizard, select Customize synchronization options.

• Question 316:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You are implementing Microsoft Defender for Endpoint.

  You need to enable role-based access control (RBAC) to restrict access to the Microsoft 365 Defender portal.

  Which users can enable RBAC, and which users will no longer have access to the Microsoft 365 Defender portal after RBAC is enabled? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 317:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

  When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

  

  You need to enable user access to the partner company's portal.

  Which Microsoft Defender for Endpoint setting should you modify?

  A. Alert notifications
  B. Alert suppression
  C. Custom detections
  D. Advanced hunting
  E. Indicators
  E. Indicators

  ---

  Explanation

  

  This Website Is Blocked By Your Organization

  Custom indicators will block malicious IPs, URLs, and domains. Then, they will display the above message for the user.

  https://jadexstrategic.com/web-protection/

• Question 318:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to use Microsoft Graph PowerShell to assign a Microsoft 365 E5 license to a new user named user1 @contoso.com.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 319:

  You have a Microsoft 365 E5 tenant that uses Microsoft Intune. You need to ensure that users can select a department when they enroll their device in Intune.

  What should you create?

  A. scope tags
  B. device configuration profiles
  C. device categories
  D. device compliance policies
  C. device categories

  ---

  Explanation

  https://docs.microsoft.com/en-us/mem/intune/enrollment/device-group-mapping

• Question 320:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager. To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-enrolled in Microsoft Intune. You need to add Device1 to the Device Collection so that it auto-enrols in Microsoft Intune. You will then be able to manage

  Device1 using Microsoft Intune.

  https://docs.microsoft.com/enus/configmgr/comanage/how-to-enable