Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 341:

  You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

  You need to create a detection exclusion in Azure ATP.

  Which tool should you use?

  A. the Security & Compliance admin center
  B. Microsoft Defender Security Center
  C. the Microsoft 365 admin center
  D. the Azure Advanced Threat Protection portal
  E. the Cloud App Security portal
  D. the Azure Advanced Threat Protection portal

  ---

  Explanation

  https://docs.microsoft.com/en-us/defender-for-identity/what-is

  https://docs.microsoft.com/en-us/defender-for-identity/excluding-entities-from-detections

• Question 342:

  HOTSPOT

  You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps.

  You need to create a file policy named Policy1 that meets the following requirements:

  1. Inspects files in connected software as a service (SaaS) apps
  2. Inspects protected files

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 343:

  Your company has a Microsoft 365 E5 subscription.

  Users in the research department work with sensitive data.

  You need to prevent the research department users from accessing potentially unsafe websites by using hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.

  What should you do?

  A. Create a data loss prevention (DLP) policy that has a Content is shared condition.
  B. Modify the safe links policy Global settings.
  C. Create a data loss prevention (DLP) policy that has a Content contains condition.
  D. Create a new safe links policy.
  D. Create a new safe links policy.

  ---

  Explanation

  Use the Microsoft 365 Defender portal to create Safe Links policies In the Microsoft 365 Defender portal at

  https://security.microsoft.com,

  go to Email & Collaboration > Policies & Rules > Threat policies > Safe Links in the Policies section. Or, to go directly to the Safe Links page, use

  https://security.microsoft.com/safelinksv2.

  1. On the Safe Links page, select Create to start the new Safe Links policy wizard.

  2. On the Name your policy page, configure the following settings:

  Name: Enter a unique, descriptive name for the policy.

  Description: Enter an optional description for the policy.

  3. When you're finished on the Name your policy page, select Next.

  4. On the Users and domains page, identify the internal recipients that the policy applies to (recipient conditions):

  Users: The specified mailboxes, mail users, or mail contacts.

  *-> Groups:

  Members of the specified distribution groups (including non-mail-enabled security groups within distribution groups) or mail-enabled security groups (dynamic distribution groups aren't supported).

  The specified Microsoft 365 Groups.

  Domains: All recipients in the specified accepted domains in your organization.

  Etc.

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-links-policies-configure

• Question 344:

  You have two Microsoft 365 tenants. Users have accounts in both tenants.

  You plan to deploy a single device to each user. Each device will contain the Microsoft Authenticator app.

  You need to ensure that the users can use their device to authenticate to both tenants by using passwordless authentication.

  Which platform should you provide?

  A. iOS
  B. Android
  C. Windows
  D. macOS
  A. iOS

• Question 345:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two users named Admin1 and Admin2.

  All users are assigned a Microsoft 365 Enterprise E5 license and auditing is turned on.

  You create the audit retention policy shown in the exhibit. (Click the Exhibit tab.)

  

  After Policy1 is created, the following actions are performed:

  Admin1 creates a user named User1.

  Admin2 creates a user named User2.

  How long will the audit events for the creation of User1 and User2 be retained? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 346:

  You need to meet the technical requirement for large-volume document retrieval.

  What should you create?

  A. a data loss prevention (DLP) policy from the Security & Compliance admin center
  B. an alert policy from the Security & Compliance admin center
  C. a file policy from Microsoft Cloud App Security
  D. an activity policy from Microsoft Cloud App Security
  D. an activity policy from Microsoft Cloud App Security

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/activity-policies-and-alerts

• Question 347:

  DRAG DROP

  Your company purchases a cloud app named App1.

  You need to ensure that you can use Microsoft Cloud App Security to block downloads in App1. App1 supports session controls.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 348:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You create a device configuration profile from the Device Management admin center.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  1. Hybrid Azure AD 2. Client agent setting for hybrid Azure ADjoin

  3. Configure auto-enrollment of devices to Intune 4. Enable co-management in Configuration Manager

  https://docs.microsoft.com/enus/mem/configmgr/comanage/tutorial-co-manage-client

• Question 349:

  HOTSPOT

  You need to ensure that Admin4 can use SSPR.

  Which tool should you use. and which action should you perform? To answer, select the appropriate options m the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr-writeback

• Question 350:

  Your network contains an Active Directory domain named adatum.com that is synced to Azure AD.

  The domain contains 100 user accounts.

  The city attribute for all the users is set to the city where the user resides.

  You need to modify the value of the city attribute to the three-letter airport code of each city.

  What should you do?

  A. From Windows PowerShell on a domain controller, run the Gec-ADUser and Sec- ADUser cmdlets.
  B. From Azure Cloud Shell, run the Gec-ADUser and Sec-ADUser cmdlets.
  C. From Windows PowerShell on a domain controller, run the Gec-MgUser and Updace- MgUser cmdlets.
  D. From Azure Cloud Shell, run the Gec-MgUser and Update-MgUser cmdlets.
  A. From Windows PowerShell on a domain controller, run the Gec-ADUser and Sec- ADUser cmdlets.

  ---

  Explanation

  The user accounts are synced from the on-premise Active Directory to the Microsoft Azure Active Directory (Azure AD). Therefore, the city attribute must be changed in the on- premise Active Directory.

  You can use Windows PowerShell on a domain controller and run the Get-ADUser cmdlet to get the required users and pipe the results into Set-ADUser cmdlet to modify the city attribute.

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  1. From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.

  2. From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.

  Other incorrect answer options you may see on the exam include the following:

  1. From the Azure portal, select all the Azure AD users, and then use the User settings blade.

  2. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set- AzureADUser cmdlets.

  3. From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.

  4. From Azure Cloud Shell, run the Get-ADUser and Set-ADUser cmdlets.

  https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduser