MS-102 practice questions 191–200

1. Question 191 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription. You need to identify all users that have an Enterprise Mobility + Security plan, and then provide a list of the users in the CSV format. Which settings should you use in the Microsoft 365 admin center, and which option should you select? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

2. Question 192 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains two administrative units named AU1 and AU2. The subscription contains the users shown in the following table.

   

   The subscription contains the groups shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   NYN A user admin can never reset the password of a Global Admin, AU or not. That's a huge security risk if you use common sense.

   Source: Adapted from community discussion — oopspruu

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 193 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription. You plan to update the EmployeeType attribute for all the users in a group named Contractors. You retrieve the GroupId value of the Contractors group. You need to use Microsoft Graph PowerShell to retrieve all the Contractors group users and set their EmployeeType attribute to Part-time. How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The PS in this way will never work. Get-MgGroupMember will give you back only "id", so $person.objectid does not exist. The working command is: Update-MgUser -UserId $person.id -EmployeeType "Part-time" Otherwise the answer is correct

   Source: Adapted from community discussion — BJS78

   References

   • Microsoft Learn

   

   Next question

4. Question 194 · 396 in bank

   HOTSPOT - You have a new Microsoft 365 E5 tenant. Enable Security defaults is set to Yes. A user signs in to the tenant for the first time. Which multi-factor authentication (MFA) method can the user use, and how many days does the user have to register for MFA? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct. the user can use the following multi-factor authentication (MFA) methods when signing in to the tenant for the first time: - Microsoft Authenticator app - SMS - Voice call The user has 14 days to register for MFA after the first sign-in1

   Source: Adapted from community discussion — sherifhamed

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 195 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra. Eligible users must meet the following requirements: • Always be able to request the User Administrator role • Must provide a reason when requesting the User Administrator role • Must require multi-factor authentication (MFA) when activating the User Administrator role The solution must minimize administrative effort. How should you configure the Role settings for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given answer is correct: Set Allow permanent eligible assignment to yes Set Require justification on activation On activation, require multifactor authentication The third option means you can require users who are eligible for a role to prove who they are by using the multifactor authentication feature in Microsoft Entra ID before they can activate. This option is not correct: Require multifactor authentication on active assignment - You can require that administrators provide multifactor authentication when they create an active (as opposed to eligible) assignment. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings

   Source: Adapted from community discussion — Ody

   References

   • Microsoft Learn

   

   Next question

6. Question 196 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to create a Conditional Access policy that will require the use of FIDO2 security keys only when users join their Windows devices to Microsoft Entra ID. How should you configure the policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   User Actions - here you choose the policy to apply when the user joins the device. Device Platform - because it is a Windows device Require authentication strength - to require FIDO2 Key

   Source: Adapted from community discussion — Motanel

   References

   • Microsoft Learn

   

   Next question

7. Question 197 · 396 in bank

   You have a Microsoft 365 E5 subscription. From the Microsoft 365 Defender portal, you review your company’s Microsoft Secure Score. You discover a large number of recommended actions. You need to ensure that the actions can be filtered based on specific department names. What should you create first?

   • Aa dynamic security group
   • Ba tag
   • Can administrative unit
   • Da custom detection rule

   Show answer

   Answer: B

   Explanation

   Answer: B Tags in Microsoft 365 are used to categorize and filter objects (like users and devices) based on specific attributes. By creating tags for different departments, you can then apply these tags to users and devices. This allows you to filter and view recommendations and actions in the Microsoft Secure Score tailored to these tagged departments.

   Source: Adapted from community discussion — Khattak3143

   Next question

8. Question 198 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

   

   You plan to create an Endpoint security policy by using the Defender Update controls template. To which devices can you apply the policy?

   • ADevice1 only
   • BDevice1 and Device2 only
   • CDevice1 and Device3 only
   • DDevice1, Device2, and Device3

   Show answer

   Answer: A

   Explanation

   The Defender Update controls template is designed for managing update settings specifically for Windows devices. Therefore A: Device 1 only

   Source: Adapted from community discussion — Khattak3143

   References

   • Microsoft Learn

   Next question

9. Question 199 · 396 in bank

   You have a Microsoft 365 tenant. You plan to manage incidents in the tenant by using the Microsoft Defender XDR. Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

   • AMicrosoft Sentinel
   • BMicrosoft Defender for Cloud
   • CAzure Web Application Firewall
   • DMicrosoft Defender for Identity

   Show answer

   Answer: D

   Explanation

   "Alerts from different Microsoft security solutions like Microsoft Defender for Endpoint, Defender for Office 365, Microsoft Sentinel, Defender for Cloud, Defender for Identity, Defender for Cloud Apps, Defender XDR, App Governance, Microsoft Entra ID Protection, and Microsoft Data Loss Prevention appear here." https://learn.microsoft.com/en-us/defender-xdr/investigate-alerts?tabs=settings

   Source: Adapted from community discussion — BJS78

   References

   • Microsoft Learn

   Next question

10. Question 200 · 396 in bank

    You have a Microsoft 365 E5 subscription. You are creating a data loss prevention (DLP) policy applied to the locations as shown in the following exhibit.

    

    Which condition can you use in the DLP rules of the policy?

    • Asensitive info types
    • Bsensitivity labels
    • Ckeywords
    • Dcontent search queries

    Show answer

    Answer: A

    Explanation

    A. sensitive info types: These are predefined patterns that identify sensitive information, such as credit card numbers, social security numbers, or other personally identifiable information (PII) Sensitivity labels are typically used to classify and protect content based on its sensitivity, but they are not directly used as conditions in DLP rules.

    Source: Adapted from community discussion — Frank9020

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 191. 396 questions available.