Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 321:

  HOTSPOT

  You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

  

  The device compliance policies in Endpoint Manager are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement Is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 322:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint.

  All the devices in your organization are onboarded to Microsoft Defender for Endpoint.

  You need to ensure that an alert is generated if malicious activity was detected on a device during the last 24 hours.

  What should you do?

  A. From the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.

  B. From Alerts queue, create a suppression rule and assign an alert.

  C. From Advanced hunting, create a query and a detection rule.

  D. From the Microsoft Purview compliance portal, create an audit log search.

  Correct Answer: C

• Question 323:

  Your network contains an Active Directory forest.

  You deploy Microsoft 365.

  You plan to implement directory synchronization.

  You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

  Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

  User passwords must be 10 characters or more.

  Solution: implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 324:

  You have a Microsoft 365 subscription that uses Microsoft 365 Defender.

  You need to compare your company's security configurations to Microsoft best practices and review improvement actions to increase the security posture.

  What should you use?

  A. Microsoft Secure Score

  B. Cloud discovery

  C. Exposure distribution

  D. Threat tracker

  E. Exposure score

  Correct Answer: A

• Question 325:

  You have a Microsoft 365 E5 subscription.

  You onboard all devices to Microsoft Defender for Endpoint

  You need to use Defender for Endpoint to block access to a malicious website at www.contoso.com.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct answer is worth one point.

  A. Create a web content filtering policy.

  B. Configure an enforcement scope.

  C. Enable Custom network indicators.

  D. Create an indicator.

  E. Enable automated investigation.

  Correct Answer: CD

• Question 326:

  Your network contains an Active Directory domain.

  You deploy a Microsoft Entra tenant.

  Another administrator configures the domain to synchronize to the Microsoft Entra tenant. You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to the Microsoft Entra tenant. All the other user accounts

  synchronized successfully.

  You review Microsoft Entra Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to the Microsoft Entra tenant.

  Solution: From Microsoft Entra Connect, you modify the filtering settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 327:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  Which users can review the Adoption Score in the Microsoft 365 admin center?

  A. User! only

  B. User2onry

  C. User1 and User2 only

  D. User! and User3 only

  E. User1, User2. and User3

  Correct Answer: E

• Question 328:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

  From Microsoft Defender for Endpoint you turn on the Allow or block file advanced feature.

  You need to block users from downloading a file named File1.exe.

  What should you use?

  A. an indicator

  B. a suppression rule

  C. a device configuration profile

  Correct Answer: A

• Question 329:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

  You plan to perform device discovery and authenticated scans of network devices.

  You install and register the network scanner on a device named Device1.

  What should you do next?

  A. Connect Defender for Endpoint to Microsoft Intune.

  B. Apply for Microsoft Threat Experts - Targeted Attack Notifications.

  C. Create an assessment job.

  D. Download and run an onboarding package.

  Correct Answer: C

• Question 330:

  Your network contains an Active Directory forest named Contoso. Local.

  You have a Microsoft 365 subscription.

  You plan to implement a directory synchronization solution that will use password hash synchronization.

  From the Microsoft 365 admin center, you successfully verify the contoso.com domain name.

  You need to prepare the environment for the planned directory synchronization solution.

  What should you do first?

  A. From Active Directory Domains and Trusts, add contoso.com as a UPN suffix.

  B. From the Microsoft 365 admin center verify the Contoso. Local domain name.

  C. From the public DNS zone of contoso.com, add a new mail exchanger (MX) record.

  D. From Active Directory Users and Computers, modify the UPN suffix for all users.

  Correct Answer: A