Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 381:

  You have a Microsoft 365 E5 subscription.

  You are implementing Microsoft Defender for Cloud Apps.

  You need to ensure that you can create OAuth app policies.

  Solution: You configure Cloud Discovery.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 382:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

  

  The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

  

  User2 fails to authenticate to Azure AD when signing in as [email protected].

  You need to ensure that User2 can access the resources in Azure AD.

  Solution: From the Microsoft Entra admin center, you add fabrikam.com as a custom domain. You instruct User2 to sign in as [email protected].

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  The on-premises Active Directory domain is named contoso.com. To enable users to sign on using a different UPN (different domain), you need to add the domain to Microsoft 365 as a custom domain.

• Question 383:

  HOTSPOT

  You have a Microsoft 365 tenant that contains 100 Windows 10 devices. The devices are managed by using Microsoft Endpoint Manager.

  You plan to create two attack surface reduction (ASR) policies named ASR1 and ASR2. ASR1 will be used to configure Microsoft Defender Application Guard. ASR2 will be used to configure Microsoft Defender SmartScreen.

  Which ASR profile type should you use for each policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 384:

  You have a Microsoft 365 E5 tenant.

  You create a retention label named Retention1 as shown in the following exhibit.

  

  When users attempt to apply Retention1, the label is unavailable.

  You need to ensure that Retention1 is available to all the users.

  What should you do?

  A. Create a new label policy.
  B. Modify the Authority type setting for Retention1.
  C. Modify the Business function/department setting for Retention 1.
  D. Use a file plan CSV template to import Retention1.
  A. Create a new label policy.

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/create-apply-retention-labels?view=o365-worldwide

• Question 385:

  HOTSPOT

  You need to ensure that User2 can review the audit logs. The solutions must meet the technical requirements.

  To which role group should you add User2, and what should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 386:

  You have a Microsoft 365 E5 subscription that contains a domain named contoso.com.

  You deploy a new Microsoft Defender for Office 365 anti-phishing policy named Policy1 that has user impersonation protection enabled for a user named [email protected].

  You discover that Policy1 blocks email messages from a regular contact named [email protected].

  You need to ensure that the messages are delivered successfully.

  What should you do for Policy1?

  A. Select Enable domains to protect.
  B. Configure the Phishing email threshold setting.
  C. Configure which users to protect.
  D. Select Enable mailbox intelligence.
  D. Select Enable mailbox intelligence.

• Question 387:

  Your company has offices in five cities.

  The company has a Microsoft 365 tenant.

  Each office is managed by a local administrator.

  You plan to deploy Microsoft Intune.

  You need to recommend a solution to manage resources in intune that meets the following requirements:

  Local administrators must be able to manage only the resources in their respective office.

  Local administrators must be prevented from managing resources in other offices.

  Administrative effort must be minimized.

  What should you include in the recommendation?

  A. device categories
  B. scope tags
  C. configuration profiles
  D. conditional access policies
  B. scope tags

  ---

  Explanation

  https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

• Question 388:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains 200 Android devices enrolled in Microsoft Intune.

  You create an Android app protection policy named Policy1 that is targeted to all Microsoft apps and assigned to all users.

  Policy1 has the Data protection settings shown in the following exhibit.

  

  Use the drop down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  

  

• Question 389:

  You have a Microsoft 365 subscription.

  You need to configure a compliance solution that meets the following requirements:

  Defines sensitive data based on existing data samples

  Automatically prevents data that matches the samples from being shared externally in Microsoft SharePoint or email messages

  Which two components should you configure? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a trainable classifier
  B. a sensitive info type
  C. an insider risk policy
  D. an adaptive policy scope
  E. a data loss prevention (DLP) policy
  A. a trainable classifier
  E. a data loss prevention (DLP) policy

  ---

  Explanation

  A: Classifiers

  This categorization method is well suited to content that isn't easily identified by either the manual or automated pattern-matching methods. This method of categorization is more about using a classifier to identify an item based on what the item is, not by elements that are in the item (pattern matching). A classifier learns how to identify a type of content by looking at hundreds of examples of the content you're interested in identifying.

  Where you can use classifiers

  Classifiers are available to use as a condition for: Office auto-labeling with sensitivity labels

  Auto-apply retention label policy based on a condition Communication compliance

  Sensitivity labels can use classifiers as conditions, see Apply a sensitivity label to content automatically.

  Data loss prevention E: Organizations have sensitive information under their control such as financial data, proprietary data, credit card numbers, health records, or social security numbers. To help protect this sensitive data and reduce risk, they need a way to prevent their users from inappropriately sharing it with people who shouldn't have it. This practice is called data loss prevention (DLP).

  https://learn.microsoft.com/en-us/microsoft-365/compliance/classifier-learn-about

  https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp

• Question 390:

  HOTSPOT

  You have three devices enrolled in Microsoft Endpoint Manager as shown in the following table.

  

  The device compliance policies in Endpoint Manager are configured as shown in the following table.

  

  The device compliance policies have the assignments shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.