MS-102 practice questions 251–260

1. Question 251 · 396 in bank

   You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. Defender for Endpoint has tamper protection enabled. You have a device named Device1 that is onboarded to Defender for Endpoint. You need to configure antivirus and real-time protection for Device1. What should you do in the Microsoft Defender portal?

   • AInitiate a live response session.
   • BCreate a device group.
   • CEnable troubleshooting mode.
   • DIsolate Device1.

   Show answer

   Answer: C

   Explanation

   The correct answer is: C. Enable troubleshooting mode. Enabling troubleshooting mode in Microsoft Defender for Endpoint allows you to configure settings, including antivirus and real-time protection, on a device that has tamper protection enabled. This mode helps ensure that necessary changes can be made without interference from existing security measures.

   Source: Adapted from community discussion — atre_01

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 252 · 396 in bank

   You have a Microsoft 365 E5 subscription. You plan to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra. You need to ensure that a user can make a role assignment request for the User Administrator role only during the next six months. How should you configure the assignment?

   • ASet Assignment type to Eligible.
   • BSet Assignment type to Active.
   • CSet Allow permanent active to assignment Yes.
   • DSet Allow permanent eligible assignment to Yes.

   Show answer

   Answer: A

   Explanation

   Set Assignment type to Eligible. Active is... already active. There is no need to request. Permanent means, there is no time limit of (6 months)

   Source: Adapted from community discussion — Krayzr

   Next question

3. Question 253 · 396 in bank

   DRAG DROP - You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2. You need to recommend an authentication solution that meets the following requirements: • Members of Group1 must be able to authenticate by using a hardware token. • Members of Group2 must be able to authenticate by using a public key infrastructure (PKI). Which authentication method should you recommend for each group? To answer, drag the appropriate methods to the correct groups. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

4. Question 254 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   Which users can create user objects, and which users can create Microsoft 365 groups? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think given answers are correct User objects: User 2 only Micrososft 365 Groups: user1, User 2 and User 3 Groups Administrator Role: There is nothing related to users, just groups (https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#groups-administrator) Users Administrators: Of course Users aspects and they can "Create and manage all groups" (https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#user-administrator) Teams Administrator: There is nothing related to users, just Teams and "This role additionally grants the ability to create and manage all Microsoft 365 groups, manage support tickets, and monitor service health." (https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#teams-administrator)

   Source: Adapted from community discussion — justITtopics

   References

   • Microsoft Learn

   

   Next question

5. Question 255 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to implement identity protection. The solution must meet the following requirements: Identify when a user's credentials are compromised and shared on the dark web. Provide users that have compromised credentials with the ability to self-remediate. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I know the answer is correct. I am looking at the user risk policy setting that says "allow access" with a check box for require password change. And my vent means nothing - but I have to say it. How stupid is it that if a user's credentials are compromised and shared on the dark web you think requiring a password change is a good idea? Couldn't the person that has the credentials execute the password change and still have access because they know what they changed the password to? Wouldn't it make more sense to require multi factor authentication? More sense in a practical sense - not in a what do I have to answer in order to pass the exam sense. I hate these exams.

   Source: Adapted from community discussion — 60ed5c2

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 256 · 396 in bank

   HOTSPOT - You have a hybrid deployment of Microsoft Entra that contains the users shown in the following table.

   

   You need to identify which users can perform the following tasks: • View sync errors in Microsoft Entra Connect Health. • Configure Microsoft Entra Connect Health settings. Which user should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

7. Question 257 · 396 in bank

   You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1. You enable Microsoft Entra ID Protection. You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege. To which role should you add User1?

   • ASecurity Reader
   • BReports Reader
   • CCompliance Administrator
   • DOwner

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

8. Question 258 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create a Strict preset security policy. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 259 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create an anti-malware policy. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

10. Question 260 · 396 in bank

    Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create a Standard preset security policy. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 251. 396 questions available.