Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 331:

  You have a hybrid Azure Active Directory (Azure AD) tenant and a Microsoft Endpoint Configuration Manager deployment.

  You have the devices shown in the following table.

  

  You plan to enable co-management.

  You need to identify which devices support co-management without requiring the installation of additional software.

  Which devices should you identify?

  A. Device1 only
  B. Device2 only
  C. Device3 only
  D. Device2 and Device3 only
  E. Device1, Device2, and Device3
  D. Device2 and Device3 only

• Question 332:

  You have a Microsoft 365 subscription.

  You plan to implement Microsoft Purview Privileged Access Management.

  Which Microsoft Office 365 workloads support privileged access?

  A. Microsoft Exchange Online only
  B. Microsoft Teams only
  C. Microsoft Exchanqe Online and SharePoint Online only
  D. Microsoft Teams and SharePoint Online only
  E. Microsoft Teams, Exchanqe Online, and SharePoint Online
  A. Microsoft Exchange Online only

  ---

  Explanation

  Privileged access management

  Having standing access by some users to sensitive information or critical network configuration settings in Microsoft Exchange Online is a potential pathway for compromised accounts or internal threat activities. Microsoft Purview Privileged Access Management helps protect your organization from breaches and helps to meet compliance best practices by limiting standing access to sensitive data or access to critical configuration settings. Instead of administrators having constant access, just-in-time access rules are implemented for tasks that need elevated permissions. Enabling privileged access management for Exchange Online in Microsoft 365 allows your organization to operate with zero standing privileges and provide a layer of defense against standing administrative access vulnerabilities.

  Note: When will privileged access support Office 365 workloads beyond Exchange? Privileged access management will be available in other Office 365 workloads soon.

  https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management-solution-overview

  https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management

• Question 333:

  HOTSPOT

  From the Microsoft Purview compliance portal, you create a retention policy named Policy 1.

  You need to prevent all users from disabling the policy or reducing the retention period.

  How should you configure the Azure PowerShell command? To answer select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 334:

  Your company has an Azure AD tenant named contoso.com that includes the users shown in the following table.

  

  Group2isa member of Group1.

  You assign an Office 365 Enterprise E3 license to Group1.

  How many Office 365 E3 licenses are assigned?

  A. 1
  B. 2
  C. 3
  D. 4
  C. 3

• Question 335:

  HOTSPOT

  You have an Azure AD tenant that contains the administrative units shown in the following table.

  

  You have the following users:

  A user named User1 that is assigned the Password Administrator for AU1 and AU2.

  A user named User2 that is assigned the User Administrator for AU1.

  A user named User3 that is assigned the User Administrator for the tenant.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 336:

  You have a Microsoft 365 E5 subscription.

  From the Microsoft 365 Defender portal, you review your company's Microsoft Secure Score.

  You discover a large number of recommended actions.

  You need to ensure that the actions can be filtered based on specific department names.

  What should you create first?

  A. a dynamic security group
  B. a tag
  C. an administrative unit
  D. a custom detection rule
  B. a tag

• Question 337:

  HOTSPOT

  Your company has a Microsoft 365 E5 subscription.

  You need to perform the following tasks:

  1. View the Adoption Score of the company.
  2. Create a new service request to Microsoft.

  Which two options should you use in the Microsoft 365 admin center? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 338:

  On which server should you install the Azure ATP sensor?

  A. Server 1
  B. Server 2
  C. Server 3
  D. Server 4
  E. Server 5
  A. Server 1

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-capacity-planning.

  However, if the case study had required that the DCs can't have any s/w installed, then the answer would have been a standalone sensor on Server2. In this scenario, the given answer is correct. BTW, ATP now known as Defender for Identity.

• Question 339:

  On which server should you use the Defender for identity sensor?

  A. Server1
  B. Server2
  C. Server3
  D. Server4
  E. Servers5
  A. Server1

  ---

  Explanation

  However, if the case study had required that the DCs can't have any s/w installed, then the answer would have been a standalone sensor on Server2. In this scenario, the given answer is correct. BTW, ATP now known as Defender for Identity.

• Question 340:

  HOTSPOT

  Your network contains an on-premises Active Directory domain.

  You have a Microsoft 365 E5 subscription.

  You plan to implement directory synchronization.

  You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege.

  What should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.