Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 441:

  You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. The subscription contains users that have Windows 11 devices.

  You need to use the Cloud Discovery snapshot report to analyze cloud app usage on the devices.

  What should you do before generating a report?

  A. Create an activity policy.
  B. Deploy the Azure Monitor Agent on the devices.
  C. Create an app discovery policy.
  D. Export traffic logs from firewalls and proxies.
  D. Export traffic logs from firewalls and proxies.

• Question 442:

  You have a Microsoft 365 tenant.

  You plan to implement Endpoint Protection device configuration profiles.

  Which platform can you manage by using the profile?

  A. Android
  B. CentOS Linux
  C. iOS
  D. Window 10
  D. Window 10

  ---

  Explanation

  https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure

• Question 443:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  All company-owned Windows 11 devices are onboarded to Microsoft Defender for Endpoint.

  You need to configure Defender for Endpoint to meet the following requirements:

  Block a vulnerable app until the app is updated.

  Block an application executable based on a file hash.

  The solution must minimize administrative effort.

  What should you configure for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 444:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goats. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint. and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint Administrator role.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  You need to assign the Security Administrator role.

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide

• Question 445:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2.

  You need to enable multi-factor authentication (MFA) for the members of Group1 and Group2. The solution must meet the following requirements:

  - The Group1 members must be prompted for MFA only when authenticating to Microsoft Entra ID from Android devices.

  - The Group2 members must be prompted for MFA only when accessing Microsoft Exchange Online from outside the corporate network.

  - Administrative effort must be minimized.

  What should you configure for each group? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 446:

  You have a Microsoft 365 E5 tenant that contains a user named User1.

  You plan to implement insider risk management.

  You need to ensure that User1 can perform the following tasks:

  Review alerts.

  Manage cases.

  Create notice templates.

  Review user emails by using Content explorer.

  The solution must use the principle of least privilege.

  To which role group should you add User1?

  A. Insider Risk Management
  B. Insider Risk Management Analysts
  C. Insider Risk Management Investigators
  D. Insider Risk Management Admin
  C. Insider Risk Management Investigators

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide

• Question 447:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to create a Conditional Access policy that will require the use of FIDO2 security keys only when users join their Windows devices to Microsoft Entra ID.

  How should you configure the policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 448:

  Your company has digitally signed applications.

  You need to ensure that Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) considers the digitally signed applications safe and never analyzes them.

  What should you create in the Microsoft Defender Security Center?

  A. a custom detection rule
  B. an allowed/blocked list rule
  C. an alert suppression rule
  D. an indicator
  D. an indicator

  ---

  Explanation

  https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/manage-indicators

• Question 449:

  You are reviewing alerts in the Microsoft 365 Defender portal.

  How long are the alerts retained in the portal?

  A. 30 days
  B. 60 days
  C. 3 months
  D. 6 months
  E. 12 months
  D. 6 months

• Question 450:

  HOTSPOT

  You have an Azure subscription and a Microsoft 365 E5 subscription.

  You are licensed to use Microsoft Defender XDR

  You need to monitor activities from suspicious IP addresses and unusual administrative activities in Azure.

  What should you use to monitor the activities, and what should you use to integrate Azure with Microsoft Defender XDR?

  To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.