MS-102 Exam Questions
369 real MS-102 exam questions with expert-verified answers and explanations. Page 3 of 8.
- Question #106Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription. You need to ensure that administrators receive an email when Microsoft 365 Defender detects a sign-in from a risky IP address. What should...
Microsoft 365 DefenderSecurity AlertsEmail NotificationsRisky Sign-ins - Question #107Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are onboarded by using Microsoft Defender for Endpoint....
Device complianceMicrosoft IntuneMicrosoft Defender for EndpointRisk-based access - Question #108Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. A Built-in protection preset security policy is applied to the subscription. Which two policy typ...
Defender for Office 365Preset security policiesSafe AttachmentsSafe Links - Question #109Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. You have the policies shown in the following table. All the policies are configured to send ma...
Microsoft Defender for Office 365Quarantine policiesEmail securityRetention periods - Question #110Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription. Your company's Microsoft Secure Score recommends the actions shown in the following exhibit. You select Create Safe Links policies for ema...
Microsoft Secure ScoreSecurity recommendationsRisk acceptanceSafe Links - Question #111Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription. You onboard all devices to Microsoft Defender for Endpoint. You need to use Defender for Endpoint to block access to a malicious website a...
Microsoft Defender for EndpointCustom IndicatorsThreat ProtectionNetwork Security - Question #112Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 tenant. You need to create a policy that will trigger an alert when unusual Microsoft Office 365 usage patterns are detected. What should you use to cre...
Microsoft PurviewActivity alertsUnusual activity detectionCompliance policies - Question #113Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 subscription. You plan to use Adoption Score and need to ensure that it can obtain device and software metrics. What should you do?
Adoption ScoreEndpoint AnalyticsDevice metricsMicrosoft 365 administration - Question #114Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 tenant. You configure sensitivity labels. Users report that the Sensitivity button is unavailable in Microsoft Word for the web. The Sensitivity button...
Sensitivity LabelsMicrosoft PurviewOffice for the webSharePoint/OneDrive - Question #115Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. You plan to perform device discovery and authenticated scans of network devices. You install and...
Microsoft Defender for EndpointDevice DiscoveryNetwork ScanningSecurity Configuration - Question #116Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You need to receive a notification each time a user in the service desk department grants Full Access permissions for a user mailbox. What sh...
Alert policiesAudit loggingMailbox permissionsMicrosoft Purview - Question #117Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription. You need to be alerted when Microsoft 365 Defender detects high-severity incidents. What should you use?
Microsoft 365 DefenderAlert PoliciesIncident ManagementSecurity Monitoring - Question #118Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 subscription that contains the alerts shown in the following table. Which properties of the alerts can you modify?
Microsoft 365 alertsAlert managementMicrosoft Defender XDR - Question #119Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint. All the devices in your organization are onboarded to Microsoft Defender for Endpoint. You need to...
Microsoft Defender for EndpointAdvanced huntingCustom detection rulesThreat detection - Question #120Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 tenant. You create a retention label named Retention1 as shown in the following exhibit. You apply Retention1 to all the Microsoft OneDrive content. On...
Retention labelsMicrosoft PurviewOneDriveData lifecycle management - Question #121Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint site named site1. You need to ensure that site1 meets the following requirements: - Retains all data f...
Retention PoliciesDLP PoliciesSharePoint ComplianceMicrosoft Purview - Question #122Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription. From the Microsoft Purview compliance portal, you create a new data loss prevention (DLP) policy named DLP1 that protects financial data f...
Data Loss Prevention (DLP)Microsoft PurviewMicrosoft TeamsDLP Policy Rules - Question #123Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action. To which location can the policy be...
Data Loss Prevention (DLP)Microsoft PurviewDLP policy actionsExchange Online - Question #124Manage security and threats by using Microsoft Defender XDR
You need to notify the manager of the human resources department when a user in the department shares a file or folder from the department's Microsoft SharePoint site. What should...
SharePoint sharingMicrosoft 365 DefenderActivity alertsSecurity monitoring - Question #125Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. From Microsoft Defender for Endpoint, you turn on the Allow or block file advanced feature. You...
Microsoft Defender for EndpointFile blockingIndicators of Compromise (IoC)Threat management - Question #126Implement and manage identity and access
You have an Azure AD tenant that contains the users shown in the following table. You need to compare the permissions of each role. The solution must minimize administrative effort...
Role-based access control (RBAC)Microsoft 365 admin centerAdministrative portalsPermissions management - Question #127Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription that contains a user named User1. You create a retention label named Retention1 that is published to all locations. You need to ensure that...
Retention labelsExchange Online PowerShellComplianceMicrosoft Purview - Question #128Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 tenant. You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be appl...
Auto-labeling policiesData encryptionSensitive information typesSimulation mode - Question #129Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: - Windows 10 - Android - iOS On which devices can you configure...
Endpoint DLPData Loss PreventionMicrosoft PurviewPlatform compatibility - Question #130Manage compliance by using Microsoft Purview
You are testing a data loss prevention (DLP) policy to protect the sharing of credit card information with external users. During testing, you discover that a user can share credit...
Data Loss Prevention (DLP)DLP Policy ConfigurationPolicy LocationsEmail and SharePoint Protection - Question #131Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription that uses retention policies. You implement a preservation lock on a retention policy that is assigned to all executive users. Which two actio...
Retention policiesPreservation lockMicrosoft PurviewData governance - Question #132Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table. You create and assign a data l...
Data Loss Prevention (DLP)Microsoft PurviewCompliance policiesExternal sharing - Question #133Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365 and contains a mailbox named Mailbox1. You plan to use Mailbox1 to collect and analyze unfiltered...
Microsoft Defender for Office 365SecOps mailboxEmail security bypassThreat protection - Question #134Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You have a data loss prevention (DLP) policy that blocks sensitive data from being shared in email messages. You need to modify the policy so...
Data Loss Prevention (DLP)Microsoft PurviewEmail securityDLP policy actions - Question #135Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365 and contains a user named User1. User emails a product catalog in the PDF format to 300 vendors...
Microsoft Defender for Office 365Anti-spam policiesOutbound email protectionEmail sending limits - Question #136Manage compliance by using Microsoft Purview
You have a Microsoft 365 E5 subscription that contains the labels shown in the following table. You have the items shown in the following table. Which items can you view in Content...
Microsoft PurviewContent explorerSensitivity labelsData classification - Question #137Manage security and threats by using Microsoft Defender XDR
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
Microsoft Defender for Office 365Microsoft 365 admin rolesRole-Based Access Control (RBAC)Security administration - Question #138Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need...
Azure AD Identity ProtectionRole-based access control (RBAC)Least privilegeAzure AD roles - Question #139Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need...
Azure AD Identity ProtectionAzure AD RolesRole-Based Access Control (RBAC)Least Privilege - Question #140Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?
Mail-enabled contactExchange admin centerRecipient managementMicrosoft 365 administration - Question #141Implement and manage Microsoft Entra identity and access
Your network contains an Active Directory domain. You have an Azure AD tenant that has Security defaults disabled. Azure AD Connect is configured for directory synchronization. Pas...
Azure AD Identity ProtectionPassword Hash Synchronization (PHS)Azure AD ConnectLeaked Credentials Detection - Question #142Implement and manage Microsoft Entra identity and access
Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription. You implement a directory synchronization solution that uses pass-through authe...
Azure AD Password ProtectionHybrid IdentityPass-through AuthenticationActive Directory - Question #143Implement and manage Microsoft Entra identity and access
Your network contains an Active Directory domain and an Azure AD tenant. The network uses a firewall that contains a list of allowed outbound domains. You begin to implement direct...
Azure AD ConnectDirectory SynchronizationFirewall ConfigurationNetwork Connectivity - Question #144Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 subscription that contains users in the United States, Europe, and Asia. You use Azure AD Identity Protection. You have a virtual desktop infrastructure...
Azure AD Identity ProtectionNamed LocationsConditional AccessVDI - Question #145Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains more than 2,000 guest users. You need to ensure that when guest users are added to Microsoft 365 groups in the subscription, the...
Access reviewsGuest usersMicrosoft 365 GroupsIdentity governance - Question #146Implement and manage Microsoft Entra identity and access
Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10. You purchase a Microsoft 365 subscription. You implement pass...
Azure AD Seamless SSOGroup PolicyClient ConfigurationHybrid Identity - Question #147Implement and manage Microsoft Entra identity and access
Your network contains an Active Directory domain named adatum.com that is synced to Azure AD. The domain contains 100 user accounts. The city attribute for all the users is set to...
Hybrid IdentityUser Attribute ManagementActive DirectoryMicrosoft Entra ID - Question #148Implement and manage Microsoft Entra identity and access
Your network contains an Active Directory domain named adatum.com that is synced to Azure AD. The domain contains 100 user accounts. The city attribute for all the users is set to...
Active DirectoryAzure AD ConnectPowerShellUser Management - Question #149Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 E5 tenant. The Microsoft Secure Score for the tenant is shown in the following exhibit. You plan to enable Security defaults for Azure AD. Which three impr...
Azure AD Security DefaultsMulti-factor authentication (MFA)Legacy authenticationSecure Score - Question #150Manage security and threats by using Microsoft Defender XDR
You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are enrolled to Microsoft Intune and onboarded by using...
Microsoft IntuneMicrosoft Defender for EndpointDevice ComplianceConditional Access - Question #151Manage compliance by using Microsoft Purview
You have a Microsoft 365 subscription. You create a retention label named Retention1 as shown in the following exhibit. You apply Retention1 to all the Microsoft OneDrive content....
Retention LabelsMicrosoft PurviewOneDriveInformation Governance - Question #152Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need...
Azure AD Identity ProtectionAzure AD RolesLeast PrivilegeSecurity Administration - Question #153Implement and manage Microsoft Entra identity and access
You have a Microsoft 365 subscription. You need to implement a passwordless authentication solution that supports the following device types: - Windows - Android - iOS The solution...
Passwordless authenticationMicrosoft Authenticator appMulti-platform supportMicrosoft Entra ID - Question #154Implement and manage Microsoft Entra identity and access
Your company has a Microsoft Entra tenant named contoso.com and a Microsoft 365 subscription. All users use Windows 10 devices to access Microsoft Office 365 apps. All the devices...
Passwordless sign-inMicrosoft Entra IDMicrosoft Authenticator appAuthentication methods - Question #155Deploy and manage a Microsoft 365 tenant
You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?
Mail-enabled contactsMicrosoft 365 admin centerTenant administration