Microsoft MS-102 Online Practice Questions and Exam Preparation

Microsoft MS-102 Online Questions & Answers

• Question 471:

  HOTSPOT

  Your company uses a legacy on-premises LDAP directory that contains 100 users.

  The company purchases a Microsoft 365 subscription.

  You need to import the 100 users into Microsoft 365 by using the Microsoft 365 admin center.

  Which type of file should you use and which properties are required? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 472:

  You have a Microsoft 365 E5 subscription.

  You plan to implement Microsoft 365 compliance policies to meet the following requirements:

  Identify documents that are stored in Microsoft Teams and SharePoint Online that contain Personally Identifiable Information (PII).

  Report on shared documents that contain PII.

  What should you create?

  A. an alert policy
  B. a data loss prevention (DLP) policy
  C. a retention policy
  D. a Microsoft Cloud App Security policy
  B. a data loss prevention (DLP) policy

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about-dlp?view=o365-worldwide

• Question 473:

  You have a Microsoft 365 subscription that contains a user named User1.

  User1 requires admin access to perform the following tasks:

  Manage Microsoft Exchange Online settings.

  Create Microsoft 365 groups.

  You need to ensure that User1 only has admin access for eight hours and requires approval before the role assignment takes place.

  What should you use?

  A. zure AD Identity Protection
  B. Microsoft Entra Verified ID
  C. Conditional Access
  D. Azure AD Privileged Identity Management (PJM)
  D. Azure AD Privileged Identity Management (PJM)

  ---

  Explanation

  Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of

  Privileged Identity Management:

  Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator and Privileged Role Administrator role assignments.

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 474:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to ensure that an alert is generated when an app is registered in Microsoft Entra and is assigned the Directory.Readwrite.ALL Microsoft Graph permission.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 475:

  You have a Microsoft 365 E5 subscription.

  You plan to ingest syslog data from a supported firewall device to Microsoft Defender for Cloud Apps.

  You need to configure automatic log upload.

  Which two components should you configure for the log collector? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a connection string
  B. the receiver type
  C. the data source
  D. the username and password
  E. the host IP address or FQDN
  C. the data source
  E. the host IP address or FQDN

• Question 476:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You plan to create a Conditional Access policy named Policy1.

  You need to ensure that only Passwordless MFA authentication methods are used when administrators attempt to access the Azure portal. Azure PowerShell, or Azure Command-Line Interface (CLI).

  How should you configure Policy1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 477:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365 and contains a mailbox named Mailbox1.

  You plan to use Mailbox1 to collect and analyze unfiltered email messages.

  You need to ensure that Defender for Office 365 takes no action on any inbound emails delivered to Mailbox1.

  What should you do?

  A. Configure a retention policy for Mailbox1.
  B. Create a mail flow rule.
  C. Configure Mailbox1 as a SecOps mailbox.
  D. Place a litigation hold on Mailbox1.
  C. Configure Mailbox1 as a SecOps mailbox.

• Question 478:

  HOTSPOT

  You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains Windows 11 devices.

  You need to create a policy to restrict users from accessing the Device security settings and the Account protection settings in Windows Defender Security Center on the devices.

  Which type of policy should you create, and which template should you use? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 479:

  You have an Azure AD tenant.

  You have 1,000 computers that run Windows 10 Pro and are joined to Azure AD.

  You purchase a Microsoft 365 E3 subscription.

  You need to deploy Windows 10 Enterprise to the computers. The solution must minimize administrative effort.

  What should you do?

  A. From the Microsoft Endpoinf Manager admin center, create a Windows Autopilot deployment profile. Assign the profile to all the computers. Instruct users to restart their computer and perform a network restart.
  B. Enroll the computers in Microsoft Intune. Create a configuration profile by using the Edition upgrade and mode switch template. From the Microsoft Endpoint Manager admin center, assign the profile to all the computers and instruct users to restart their computer.
  C. From Windows Configuration Designer, create a provisioning package that has an EditionUpgrade configuration and upload the package to a Microsoft SharePoint Online site. Instruct users to run the provisioning package from SharePoint Online.
  D. From the Azure Active Directory admin center, create a security group that has dynamic device membership. Assign licenses to the group and instruct users to sign in to their computer.
  B. Enroll the computers in Microsoft Intune. Create a configuration profile by using the Edition upgrade and mode switch template. From the Microsoft Endpoint Manager admin center, assign the profile to all the computers and instruct users to restart their computer.

• Question 480:

  You have an Azure AD tenant and a Microsoft 365 E5 subscription. The tenant contains the users shown in the following table.

  

  You plan to implement Microsoft Defender for Endpoint.

  You verify that role-based access control (RBAC) is turned on in Microsoft Defender for Endpoint.

  You need to identify which user can view security incidents from the Microsoft 365 Defender portal.

  Which user should you identify?

  A. User1
  B. User2
  C. User3
  D. User4
  A. User1