MS-102 practice questions 171–180

1. Question 171 · 396 in bank

   Your network contains an Active Directory domain named adatum.com that is synced to Azure AD. The domain contains 100 user accounts. The city attribute for all the users is set to the city where the user resides. You need to modify the value of the city attribute to the three-letter airport code of each city. What should you do?

   • AFrom Azure Cloud Shell, run the Get-MsolUser and Set-MsolUser cmdlets.
   • BFrom Windows PowerShell on a domain controller, run the Get-MgUser and Update-MgUser cmdlets.
   • CFrom Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
   • DFrom Azure Cloud Shell, run the Get-MgUser and Update-MgUser cmdlets.

   Show answer

   Answer: C

   Explanation

   C: To modify the city attribute that is synced from on-premises Active Directory to Azure AD, you must update it in on-premises Active Directory. Once updated, the change will be reflected in Azure AD after the next synchronization cycle.

   Source: Adapted from community discussion — Frank9020

   Next question

2. Question 172 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. You need to identify the settings that are configured less secure than the Standard protection profile settings in the preset security policies. What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

3. Question 173 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

   

   All the devices are onboarded to Microsoft Defender for Endpoint. You plan to use Microsoft Defender Vulnerability Management to meet the following requirements: • Detect operating system vulnerabilities. • Perform a configuration assessment of the operating system. Which devices support each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct. 1. OS vulnerabilities available for all devices & versions of Windows 2. OS configuration assessment, doesn't support Windows 7, Windows 8.1, Android, iOS & iPadOS. https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-supported-os?view=o365-worldwide#capabilities-per-supported-operating-systems-os-and-platforms

   Source: Adapted from community discussion — Khanbaba43

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 174 · 396 in bank

   You have a Microsoft 365 tenant. You plan to manage incidents in the tenant by using the Microsoft 365 Defender. Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

   • AMicrosoft Sentinel
   • BMicrosoft Defender for Cloud
   • CAzure Arc
   • DMicrosoft Defender for Identity

   Show answer

   Answer: D

   Explanation

   Microsoft Sentinel is a SIEM system and will not forward alerts to M365 Defender. Events will rather be forwarded from M365 Defender TO Sentinel. Azure ARC and Defender for Cloud (not Defender for Cloud Apps) will send their alerts to Sentinel. That leaves MS Defender for Identity and that will indeed send alerts to M365 Defender interface.

   Source: Adapted from community discussion — GenPatton

   References

   • Microsoft Learn

   Next question

5. Question 175 · 396 in bank

   Select 3

   You have a Microsoft 365 E5 tenant. The Microsoft Secure Score for the tenant is shown in the following exhibit.

   

   You plan to enable Security defaults for Azure AD. Which three improvement actions will this affect? NOTE: Each correct selection is worth one point.

   • ARequire MFA for administrative roles
   • BEnsure all users can complete multi-factor authentication for secure access
   • CEnable policy to block legacy authentication
   • DEnable self-service password reset
   • EUse limited administrative roles

   Show answer

   Answer: ABC

   Explanation

   ABC: Correct These basic controls include: Requiring all users to register for multifactor authentication Requiring administrators to do multifactor authentication Requiring users to do multifactor authentication when necessary Blocking legacy authentication protocols Protecting privileged activities like access to the Azure portal https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

   Source: Adapted from community discussion — sergioandreslq

   References

   • Microsoft Learn

   Next question

6. Question 176 · 396 in bank

   You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender for Endpoint. You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint. What should you create first?

   • Aa device configuration policy
   • Ban endpoint detection and response policy
   • Ca device compliance policy

   Show answer

   Answer: C

   Explanation

   C: Correct Configure a Device compliance policy that takes into consideration the Defender for endpoint to define if device is compliant or not compliant https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows#microsoft-defender-for-endpoint-rules

   Source: Adapted from community discussion — sergioandreslq

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 177 · 396 in bank

   You have a Microsoft 365 subscription. You create a retention label named Retention1 as shown in the following exhibit.

   

   You apply Retention1 to all the Microsoft OneDrive content. On January 1, 2020, a user stores a file named File1 in OneDrive. On January 10, 2020, the user modifies File1. On February 1, 2020, the user deletes File1. When will File1 be removed permanently and unrecoverable from OneDrive?

   • AFebruary 1, 2020
   • BJuly 1, 2020
   • CJuly 10, 2020
   • DAugust 1, 2020

   Show answer

   Answer: B

   Explanation

   B: Correct retain the item for 6 months using the date reference when it was created. the file1 was created on Jan 01, 2020, this file1 will be deleted automatically after 6 months in Jul 01, 2020.

   Source: Adapted from community discussion — sergioandreslq

   Next question

8. Question 178 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 tenant. You have a sensitivity label configured as shown in the Sensitivity label exhibit.

   

   You have an auto-labeling policy as shown in the Auto-labeling policy exhibit.

   

   A user sends an email that contains the components shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   https://learn.microsoft.com/en-us/purview/apply-sensitivity-label-automatically?view=o365-worldwide Specific to auto-labeling for Exchange: PDF attachments and Office attachments are scanned for the conditions you specify in your auto-labeling policy. When there's a match, the email is labeled but not the attachment.

   Source: Adapted from community discussion — Tomtom11

   References

   • Microsoft Learn

   

   Next question

9. Question 179 · 396 in bank

   You have a Microsoft 365 subscription. You need to implement a passwordless authentication solution that supports the following device types: • Windows • Android • iOS The solution must use the same authentication method for all devices. Which authentication method should you use?

   • Athe Microsoft Authentication app
   • BFIDO2-compliant security keys
   • Cmulti-factor authentication (MFA)
   • DWindows Hello for Business

   Show answer

   Answer: A

   Explanation

   My vote for A since this is a Microsoft technology and they would always use their own first. What is Passworless? => Passwordless authentication methods are more convenient because the password is removed and replaced with something you HAVE or something you are or know. Microsoft Authenticator: The Authenticator App turns any iOS or Android phone into a strong, passwordless credential. Users can sign in to ANY platform or browser by getting a notification to their phone, matching a number displayed on the screen to the one on their phone.

   Source: Adapted from community discussion — justITtopics

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 180 · 396 in bank

    HOTSPOT - You have a Microsoft 365 subscription. You need to configure an auto-apply policy for sensitivity labels that will protect corporate data. The solution must meet the following requirements: • Documents containing content that matches a custom regular expression must be classified automatically. • Contract documents in a standard format must be classified automatically. What should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    The second should be Trainable classifiers. When you publish the classifier, it sorts through items in locations like SharePoint Online, Exchange, and OneDrive, and classifies the content. After you publish the classifier, you can continue to train it using a feedback process that is similar to the initial training process. For example you could create trainable classifiers for: Legal documents - such as attorney client privilege, closing sets, statement of work Strategic business documents - like press releases, merger and acquisition, deals, business or marketing plans, intellectual property, patents, design docs Pricing information - like invoices, price quotes, work orders, bidding documents Financial information - such as organizational investments, quarterly or annual results https://learn.microsoft.com/en-us/purview/classifier-learn-about

    Source: Adapted from community discussion — TonyTe0

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 171. 396 questions available.