Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 321:

  DRAG DROP

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  You need to onboard the devices to Microsoft Defender for Endpoint. The solution must minimize administrative effort.

  What should you use to onboard each type of device? To answer, drag the appropriate onboarding methods to the correct device types. Each onboarding method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 322:

  Your company has three main offices and one branch office. The branch office is used for research.

  The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

  You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

  What should you include in the recommendation?

  A. Azure AD password protection
  B. a Microsoft Intune device configuration profile
  C. a Microsoft Intune device compliance policy
  D. Azure AD conditional access
  D. Azure AD conditional access

• Question 323:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that includes the following active eDiscovery case:

  Name: Case1

  Included content: Group1, User1, Site1

  Hold location: Exchange mailboxes, SharePoint sites, Exchange public folders

  The investigation for Case1 completes, and you close the case.

  What occurs after you close Case1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 324:

  You have a Microsoft 365 E5 tenant.

  Users store data in the following locations:

  1. Microsoft Teams
  2. Microsoft OneDrive
  3. Microsoft Exchange Online
  4. Microsoft SharePoint Online

  You need to retain Microsoft 365 data for two years.

  What is the minimum number of retention policies that you should create?

  A. 1
  B. 2
  C. 3
  D. 4
  A. 1

  ---

  
  

• Question 325:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  From Azure AD Privileged Identity Management (PIM), you configure Role settings for the Global Administrator role as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 326:

  You have a Microsoft 365 subscription.

  You have a data loss prevention (DLP) policy that blocks sensitive data from being shared in email messages.

  You need to modify the policy so that when an email message containing sensitive data is sent to both external and internal recipients, the message is only prevented from being delivered to the external recipients.

  What should you modify?

  A. the policy rule exceptions
  B. the DLP policy locations
  C. the policy rule conditions
  D. the policy rule actions
  D. the policy rule actions

• Question 327:

  You have a Microsoft 365 E5 tenant.

  You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be applied.

  You need to deploy the policy.

  What should you do first?

  A. Review the sensitive information in Activity explorer
  B. Turn on the policy
  C. Run the policy in simulation mode
  D. Configure Azure Information Protection analytics
  C. Run the policy in simulation mode

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

• Question 328:

  HOTSPOT

  You configure an anti-phishing policy as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 329:

  You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune.

  Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender for Endpoint.

  You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint.

  What should you create first?

  A. a device configuration policy
  B. a device compliance policy
  C. a conditional access policy
  D. an endpoint detection and response policy
  B. a device compliance policy

  ---

  Explanation

  https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure

• Question 330:

  HOTSPOT

  You need to meet the technical requirement for the SharePoint administrator.

  What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-insecurity-and-compliance#step-3-filter-the-search-results