MS-102 Exam Questions
369 real MS-102 exam questions with expert-verified answers and explanations. Page 2 of 8.
- Question #56Implement and manage Microsoft Entra identity and access
Your company has 10,000 users who access all applications from an on-premises data center. You plan to create a Microsoft 365 subscription and to migrate data to the cloud. You pla...
Directory SynchronizationAzure AD Connect TroubleshootingIdFix ToolHybrid Identity - Question #57Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription. Conditional Access is configured to block high-risk sign-ins for all users. All users are in France and are registered for multi-factor au...
Conditional AccessAzure AD Identity ProtectionSelf-Service Password Reset (SSPR)User account remediation - Question #58Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that contains the following user: Name: User1 UPN: [email protected] Email address: [email protected] MFA enrollment status: Disab...
User Principal Name (UPN)Microsoft Entra IDUser sign-inIdentity management - Question #59Implement and manage identity and access
Your on-premises network contains an Active Directory domain. You have a Microsoft 365 subscription. You need to sync the domain with the subscription. The solution must meet the f...
Azure AD ConnectPass-through Authentication (PTA)Password Complexity PoliciesSelf-Service Password Reset (SSPR) - Question #60Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription. Users access Microsoft 365 from both their laptop and a corporate Virtual Desktop Infrastructure (VDI) solution. From Azure AD Identity Pr...
Azure AD Identity ProtectionSign-in risk policyTrusted locationsConditional Access - Question #61Implement and manage Microsoft Entra identity and access
You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table. Azure AD Connect has the following settings: - Password Hash Sync: Enabled - Pas...
Azure AD ConnectAuthentication methodsHybrid identityAuthentication resilience - Question #62Implement and manage Microsoft Entra identity and access
Your network contains an on-premises Active Directory domain named contoso.com. For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of busine...
Azure AD ConnectPass-through authenticationHybrid identityAuthentication methods - Question #63Implement and manage Microsoft Entra identity and access
Your network contains three Active Directory forests. There are forests trust relationships between the forests. You create an Azure AD tenant. You plan to sync the on-premises Act...
Azure AD ConnectHybrid IdentityHigh AvailabilityStaging Mode - Question #64Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You have the retention policies shown in the following table. Both policies are applied to a Microsoft SharePoint site named Site1 that conta...
Retention policiesMicrosoft PurviewSharePoint OnlineData lifecycle management - Question #65Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You plan to publish a sensitivity label named Label1. To which groups can you publis...
Sensitivity LabelsMicrosoft 365 GroupsSecurity GroupsMicrosoft Purview Compliance - Question #66Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You configure a data loss prevention (DLP) policy. You discover that users are incorrectly marking content as false positive and bypassing th...
Data Loss PreventionDLP PoliciesUser OverridesMicrosoft Purview - Question #67Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 tenant. You create a retention label named Retention1 as shown in the following exhibit. When users attempt to apply Retention1, the label is unavailabl...
Retention labelsRetention policiesMicrosoft PurviewData governance - Question #68Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription that has published sensitivity labels shown in the following exhibit. Which labels can users apply to content?
Sensitivity LabelsMicrosoft PurviewLabel PoliciesInformation Protection - Question #69Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. Your company has a customer ID associated to each customer. The customer IDs contain 10 numbers followed by 10 characters. The following is a...
Data Loss Prevention (DLP)Sensitive Information Types (SIT)Custom Data DetectionMicrosoft Purview - Question #70Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription. You define a retention label that has the following settings: - Retention period: 7 years - Start the retention period based on: When item...
Retention labelsMicrosoft PurviewRecords managementRegulatory record - Question #71Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure AD authenticationHybrid identityUser Principal Name (UPN)On-premises AD permissions - Question #72Manage security and threats by using Microsoft Defender XDR
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Defender for Office 365Microsoft 365 rolesRole-Based Access Control (RBAC)Security administration - Question #73Manage security and threats by using Microsoft Defender XDR
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Entra rolesSecurity AdministratorDefender for Office 365RBAC - Question #74Manage security and threats by using Microsoft Defender XDR
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Defender for Office 365Admin RolesRole-Based Access Control (RBAC)Security Administration - Question #75Manage security and threats by using Microsoft Defender XDR
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Defender for Office 365Administrative RolesRBACSecurity Administration - Question #76Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that is linked to an Azure AD tenant named contoso.com. You purchase 100 Microsoft 365 Business Voice add-on licenses. You need to ensure t...
Group-based licensingMicrosoft Entra IDLicense managementAzure AD group settings - Question #77Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that uses Endpoint security. You need to create a group and assign the Endpoint Security Manager role to the group. Which type of group can...
Microsoft Entra ID GroupsRole-Based Access ControlGroup TypesRole Assignment - Question #78Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 subscription. You need to be notified to your personal email address when a Microsoft Exchange Online service issue occurs. What should you do?
Service HealthNotificationsMicrosoft 365 Admin CenterExchange Online - Question #79Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 subscription. All users are assigned Microsoft 365 Apps for enterprise licenses. You need to ensure that reports display the names of users that have activ...
Microsoft 365 Admin CenterUsage ReportsPrivacy SettingsMicrosoft 365 Apps - Question #80Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 subscription. You add a domain named contoso.com. When you attempt to verify the domain, you are prompted to send a verification email to [email protected]...
Domain verificationCustom domainsDomain registrarMicrosoft 365 administration - Question #81Manage security and threats by using Microsoft Defender XDR
Your company has a Microsoft 365 E5 subscription. You onboard a device on the company's network to Microsoft Defender for Endpoint. In the Microsoft 365 Defender portal, you notice...
Microsoft Defender for EndpointDevice DiscoverySecurity ConfigurationMicrosoft 365 Defender portal - Question #82Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that contains the groups shown in the following exhibit. To which groups can you assign Microsoft 365 E5 licenses?
License assignmentMicrosoft Entra groupsGroup typesMicrosoft 365 licensing - Question #83Implement and manage Microsoft Entra identity and access
Your company has on-premises servers and an Azure AD tenant. Several months ago, the Azure AD Connect Health agent was installed on all the servers. You review the health status of...
Azure AD Connect HealthHybrid IdentityPowerShellAgent Management - Question #84Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 E5 subscription that uses Microsoft Intune. You need to access service health alerts from a mobile phone. What should you use?
Service HealthMicrosoft 365 Admin AppTenant ManagementMobile Access - Question #85Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription. You need to recommend a solution for monitoring and reporting application access. The solution must meet the following requirements: - Sup...
Azure MonitorKQLApplication Access MonitoringLog Analytics - Question #86Implement and manage Microsoft Entra identity and access
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table. Group2 is a member of Group1. You assi...
Microsoft 365 LicensingAzure AD Group LicensingNested GroupsIdentity and Access Management - Question #87Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 E5 subscription that contains the users shown in the following table. Which users can review the Adoption Score in the Microsoft 365 admin center?
Microsoft 365 Adoption ScoreUser PermissionsReportsMicrosoft 365 Admin Center - Question #88Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 subscription that contains the users shown in the following table. You plan to use Exchange Online to manage email for a DNS domain. An administrator adds...
Microsoft 365 administrationAdministrative rolesDomain managementLeast privilege - Question #89Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You plan to create a Conditional Access policy that will use GPS-based named location...
Conditional AccessNamed locationsMicrosoft Entra ID P2Identity and Access Management - Question #90Implement and manage Microsoft Entra identity and access
Your network contains an Active Directory forest named contoso.local. You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that will us...
Hybrid IdentityDirectory SynchronizationUser Principal Name (UPN)Azure AD Connect - Question #91Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 ES subscription. On Monday, you create a new user named User1. On Tuesday, User1 signs in for the first time and perform the following actions: - Signs in...
Azure AD Identity ProtectionSign-in risk detectionMicrosoft Entra IDUser identity security - Question #92Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. Corporate policy states that user passwords must not include the word Contoso. What should...
Microsoft Entra Password ProtectionCustom banned passwordsPassword policyIdentity management - Question #93Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Directory SynchronizationPass-through Authentication (PTA)Password PolicyMicrosoft Entra ID - Question #94Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Password Hash Synchronization (PHS)Hybrid IdentityPassword PoliciesAzure AD Password Protection - Question #95Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Directory SynchronizationPass-through Authentication (PTA)Azure AD ConnectAuthentication Resilience - Question #96Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Password Hash SynchronizationDirectory SynchronizationMicrosoft Entra IDPassword Policy - Question #97Implement and manage Microsoft Entra identity and access
Your company has three main offices and one branch office. The branch office is used for research. The company plans to implement a Microsoft 365 tenant and to deploy multi-factor...
Conditional AccessMulti-factor authenticationMicrosoft Entra IDAccess control - Question #98Implement and manage Microsoft Entra identity and access
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Azure AD ConnectIdentity SynchronizationFilteringHybrid Identity - Question #99Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need...
Azure AD Identity ProtectionRole-Based Access Control (RBAC)Least PrivilegeSecurity Reader role - Question #100Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription. Users have Android or iOS devices and access Microsoft 365 resources from computers that run Windows 11 or MacOS. You need to implement pa...
Passwordless AuthenticationMicrosoft Authenticator AppAuthentication MethodsDevice Compatibility - Question #101Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription. You create a Conditional Access policy that blocks access to an app named App1 when users trigger a high-risk sign-in event. You need to r...
Conditional AccessIdentity ProtectionNamed LocationsRisk Detection - Question #102Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?
Mail-enabled contactsMicrosoft 365 admin centerAdministrative portalsUser management - Question #103Implement and manage Microsoft Entra identity and access
Your on-premises network contains an Active Directory domain. You have a Microsoft 365 E5 subscription. You plan to implement a hybrid configuration that has the following requirem...
Azure AD ConnectHybrid IdentitySingle Sign-OnAzure AD Identity Protection - Question #104Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 tenant that contains a Windows 10 device. The device is onboarded to Microsoft Defender for Endpoint. From Microsoft 365 Defender portal, you perform a sec...
Microsoft Defender for EndpointLive ResponseSecurity InvestigationForensics - Question #105Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. You notice that it takes several days to notify email recipients when an incoming email message i...
Microsoft Defender for Office 365Email QuarantineSpam NotificationsSecurity Policies