MS-102 practice questions 221–230

1. Question 221 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You connect a cloud app that contains a group named Group1 to Microsoft Defender for Cloud Apps. You need to configure the Cloud apps settings to monitor all activities performed by the members of Group1. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I'm not totally sure, because here is talkig about privacy, but I vote for 1. Scope deployment And 2. User groups. "https://learn.microsoft.com/en-us/defender-cloud-apps/activity-privacy" 1. In the Microsoft Defender Portal, select Settings. Then choose Cloud Apps. Under System, select Scoped deployment and privacy. 2. To set specific groups to be monitored by Defender for Cloud Apps, in the Activity privacy tab, select +Add group.

   Source: Adapted from community discussion — justITtopics

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 222 · 396 in bank

   HOTSPOT - Your network contains an on-premises Active Directory domain. You have a Microsoft 365 E5 subscription. You plan to implement directory synchronization. You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege. What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   IdFix Domain Users The application runs in the context of the authenticated user, which means that it will query the authenticated forest and must have rights to read the directory.

   Source: Adapted from community discussion — Casticod

   References

   • Microsoft Learn

   

   Next question

3. Question 223 · 396 in bank

   You have a Microsoft 365 E5 subscription. The subscription contains a Microsoft SharePoint Online site named Site1. Site1 contains the following files: • File.docx • ImportantFile.docx • File_Important.docx From Microsoft Defender Cloud Apps, you create a file policy named Policy that has the filter shown in the following exhibit.

   

   To which files will Policy1 apply?

   • AImportantFile.docx and File_Important.docx only
   • BFile.docx only
   • CFile_Important.docx only
   • DImportantFile.docx only
   • EFile.docx, ImportantFile.docx, and File_Important.docx

   Show answer

   Answer: C

   Explanation

   C is correct. When using the file policy filters, Contains will search only for full words – separated by commas, dots, hyphens or spaces to search. Spaces or hyphens between words function like OR. For example, if you search for malware virus it will find all files with either malware or virus in the name, so it will find both malware-virus.exe and virus.exe. If you want to search for a string, enclose the words in quotation marks. This functions like AND. For example, if you search for "malware" "virus", it will find virus-malware-file.exe but it will not find malwarevirusfile.exe and it will not find malware.exe. However, it will search for the exact string. If you search for "malware virus", it will not find "virus" or "virus-malware". Equals will search only for the complete string. For example, if you search for malware.exe it will find malware.exe but not malware.exe.txt.

   Source: Adapted from community discussion — Xive

   References

   • Microsoft Learn

   Next question

4. Question 224 · 396 in bank

   You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 10 • Android • iOS To which devices can you apply Endpoint DLP policies?

   • AWindows 10 only
   • BWindows 10 and Android only
   • CWindows 10 and iOS only
   • DWindows 10, Android, and iOS

   Show answer

   Answer: A

   Explanation

   https://learn.microsoft.com/en-us/purview/endpoint-dlp-learn-about Endpoint data loss prevention (Endpoint DLP) extends the activity monitoring and protection capabilities of DLP to sensitive items that are physically stored on Windows 10/11 and macOS (the three latest released major versions) devices. macOS not iOS

   Source: Adapted from community discussion — justITtopics

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 225 · 396 in bank

   HOTSPOT - Your company has an office in London. You have a Microsoft 365 subscription. You need to create a Conditional Access policy named Policy that meets the following requirements: • Only FIDO2 security keys, Windows Hello for Business, and certificates must be supported for authentication. • The London office must be marked as a trusted location and excluded from Policy1. How should you configure Policy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given answer is correct Named Location: IP Ranges >> Mark as Trusted Location See here To define a named location by public IPv4 or IPv6 address ranges, you must provide: A Name for the location. One or more public IP ranges. Optionally Mark as trusted location. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-assignment-network#ipv4-and-ipv6-address-ranges

   Source: Adapted from community discussion — Krayzr

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 226 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to use Microsoft Graph PowerShell to perform the following tasks: • Change the Company name property for all users. • Create new Microsoft 365 groups. Which PowerShell cmdlet should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Change the Company name property for all users: You would use the Update-MgUser cmdlet. For creating new Microsoft 365 groups: New-MgGroup

   Source: Adapted from community discussion — Preeb

   References

   • Microsoft Learn

   

   Next question

7. Question 227 · 396 in bank

   Select 2

   You have a Microsoft 365 E5 subscription. You plan to use a third-party protection service to scan email messages before they are delivered to Microsoft 365. You configure a mail flow rule to bypass spam filtering for incoming messages. Which two messages will still be scanned by Microsoft 365 and cannot be bypassed by the mail flow rule? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa message that contains malware
   • Ba high-confidence phishing message
   • Can encrypted message
   • Da message that includes HTML code
   • Ea messages that includes URL links

   Show answer

   Answer: AB

   Explanation

   A. A message that contains malware: Microsoft 365 has built-in protections that will detect and scan any email containing malware. This is a critical security measure, and such emails will be subjected to scanning even if the mail flow rule is set to bypass spam filtering. B. A high-confidence phishing message: Similar to malware, high-confidence phishing messages are also subject to scanning and protection measures. Microsoft 365 utilizes advanced algorithms and threat intelligence to identify and block these types of emails, ensuring that they cannot bypass security even if a mail flow rule is applied.

   Source: Adapted from community discussion — Tr619899

   References

   • Microsoft Learn

   Next question

8. Question 228 · 396 in bank

   You have a Microsoft 365 E5 subscription. Administrators are issued FIDO2 security keys. You need to create a Conditional Access policy that will use a FIDO2 security key as an authentication method. Which Access controls option should you select for the policy?

   • ARequire approved client app
   • BRequire token protection for sign-in sessions
   • CRequire multifactor authentication
   • DRequire authentication strength

   Show answer

   Answer: D

   Explanation

   To create a Conditional Access policy that requires FIDO2 security keys as an authentication method, you should select the "Grant" access control option and choose "Require authentication strength".

   Source: Adapted from community discussion — atre_01

   References

   • Microsoft Learn

   Next question

9. Question 229 · 396 in bank

   You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: • To reset a user’s password, emulate an email message that contains a link. • Track any user that selects the email message link. • Suggest further social engineering training. What should you use in the Microsoft Defender portal?

   • AAttack simulation training
   • BLearning hub
   • CExposure insights
   • DThreat tracker

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

10. Question 230 · 396 in bank

    HOTSPOT - You have a Microsoft 365 subscription. You integrate Microsoft Defender for Cloud Apps with Microsoft Defender for Endpoint. You need to create a policy to block users from accessing discovered apps that have a risk score of 4 or lower. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 221. 396 questions available.