Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 411:

  Your on-premises network contains an Active Directory domain.

  You have a Microsoft 365 subscription.

  You need to sync the domain with the subscription.

  The solution must meet the following requirements:

  1. On-premises Active Directory password complexity policies must be enforced.
  2. Users must be able to use self-service password reset (SSPR) in Azure AD.

  What should you use?

  A. password hash synchronization
  B. Azure AD Identity Protection
  C. Azure AD Seamless Single Sign-On (Azure AD Seamless SSO)
  D. pass-through authentication
  D. pass-through authentication

  ---

  Explanation

  Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on-premises and cloud-based applications using the same passwords. This feature is an alternative to Azure AD Password Hash Synchronization, which provides the same benefit of cloud authentication to organizations. However, certain organizations wanting to enforce their on-premises Active Directory security and password policies, can choose to use Pass-through Authentication instead.

  Note: Azure Active Directory (Azure AD) self-service password reset (SSPR) lets users reset their passwords in the cloud, but most companies also have an on-premises Active Directory Domain Services (AD DS) environment for users. Password writeback allows password changes in the cloud to be written back to an on-premises directory in real time by using either Azure AD Connect or Azure AD Connect cloud sync. When users change or reset their passwords using SSPR in the cloud, the updated passwords also written back to the on-premises AD DS environment.

  Password writeback is supported in environments that use the following hybrid identity models:

  Password hash synchronization

  Pass-through authentication

  Active Directory Federation Services

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

• Question 412:

  HOTSPOT

  You have a Microsoft 365 ES subscription that has three auto retention policies as show in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  

  

• Question 413:

  You need to protect the U.S. PII data to meet the technical requirements.

  What should you create?

  A. a data loss prevention (DLP) policy that contains a domain exception
  B. a Security & Compliance retention policy that detects content containing sensitive data
  C. a Security & Compliance alert policy that contains an activity
  D. a data loss prevention (DLP) policy that contains a user override
  A. a data loss prevention (DLP) policy that contains a domain exception

• Question 414:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains the users shown in the following table.

  

  The tenant contains the devices shown in the following table.

  

  You have the apps shown in the following table.

  

  You plan to use Microsoft Endpoint Manager to manage the apps for the users.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 415:

  You need to configure Microsoft Entra Connect Sync to support the planned changes for the Montreal Users and Seattle Users OUs.

  What should you do?

  A. From PowerShell, run the Add-ADSyncConnectorAttributeInclusion cmdlet.
  B. From the Microsoft Entra Connect wizard, select Customize synchronization options.
  C. From PowerShell, run the Start-ADSyncSyncCycle cmdlet.
  D. From the Microsoft Entra Connect wizard, select Manage federation.
  B. From the Microsoft Entra Connect wizard, select Customize synchronization options.

• Question 416:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  The subscription contains the users shown in the following table.

  

  In Azure AD, you configure the External collaboration settings as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 417:

  You need to meet the technical requirement for the EU PII data.

  What should you create?

  A. a retention policy from the Security & Compliance admin center.
  B. a retention policy from the Exchange admin center
  C. a data loss prevention (DLP) policy from the Exchange admin center
  D. a data loss prevention (DLP) policy from the Security & Compliance admin center
  A. a retention policy from the Security & Compliance admin center.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies

  EU PII wants both documents and email message to be preserved so S&C Admin Center for Retention. If this was for Email only, this probably could have been done in EAC.

• Question 418:

  You plan to use Azure Sentinel and Microsoft Cloud App Security. You need to connect Cloud App Security to Azure Sentinel.

  What should you do in the Cloud App Security admin center?

  A. From Automatic log upload, add a log collector.
  B. From Automatic log upload, add a data source.
  C. From Connected apps, add an app connector.
  D. From Security extension, add a SIEM agent.
  D. From Security extension, add a SIEM agent.

• Question 419:

  HOTSPOT

  You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains the devices shown in the following table.

  

  You need to create the Endpoint security policies shown in the following table.

  

  To which device can you apply each policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 420:

  You have a Microsoft 365 E5 subscription.

  You plan to configure multi-factor authentication (MFA).

  You need to select an authentication method for users. The solution must ensure that each time a user is prompted for MFA, the application name that requires MFA is provided.

  What should you select?

  A. Microsoft Authenticator
  B. a FID02 security key
  C. a voice call
  D. SMS
  E. email OTP
  A. Microsoft Authenticator