MS-102 practice questions 261–270

1. Question 261 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to create a Conditional Access policy named Policy1 that meets the following requirements: • Applies to high-risk users • Requires multifactor authentication (MFA) Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   You are correct. They put very little effort into checking to see if they had the right answer on this one. Hopefully, it will be updated at some point.

   Source: Adapted from community discussion — Ody

   

   Next question

2. Question 262 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You plan to create a Conditional Access policy named Policy1. You need to ensure that only Passwordless MFA authentication methods are used when administrators attempt to access the Azure portal. Azure PowerShell, or Azure Command-Line Interface (CLI). How should you configure Policy1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Not quite correct. From the URL you provided... 1. Require multifactor authentication. "7. Under Access controls > Grant, select Grant access, Require multifactor authentication, and select Select." 2. Windows Azure Service Management API. "6. Under Target resources > Resources (formerly cloud apps) > Include > Select resources, choose Windows Azure Service Management API, and select Select."

   Source: Adapted from community discussion — northgaterebel

   References

   • Microsoft Learn

   

   Next question

3. Question 263 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains the devices shown in the following table.

   

   You need to create the Endpoint security policies shown in the following table.

   

   To which device can you apply each policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   guys please note....Endpoint Security Antivirus policies in Intune are not applicable to Linux devices because Intune policies for Defender Antivirus are specifically designed for Windows....

   Source: Adapted from community discussion — BigO76

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 264 · 396 in bank

   You have a Microsoft 365 tenant. You plan to manage incidents in the tenant by using the Microsoft Defender XDR. Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

   • AMicrosoft Purview
   • BAzure Arc
   • CMicrosoft Defender for Cloud
   • DMicrosoft Defender for Identity

   Show answer

   Answer: D

   Explanation

   https://learn.microsoft.com/en-us/defender-xdr/incident-queue Can be both Defender for Cloud and Defender for Identity Specify incidents that contain alerts from one or more of the following: Microsoft Defender for Identity Microsoft Defender for Cloud Apps Microsoft Defender for Endpoint Microsoft Defender XDR Microsoft Defender for Office 365 App Governance Microsoft Entra ID Protection Microsoft Data Loss Prevention Microsoft Defender for Cloud Microsoft Sentinel Microsoft Purview Insider Risk Management

   Source: Adapted from community discussion — IvanDJ

   References

   • Microsoft Learn

   Next question

5. Question 265 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You integrate Microsoft Defender for Endpoint with Microsoft Intune. You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune. Solution: You create an endpoint detection and response (EDR) policy. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   I have seen you have given alot of wrong answers here throughout multiple questions. You should really postpone your exam. https://learn.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure#onboard-windows-devices

   Source: Adapted from community discussion — Xive

   References

   • Microsoft Learn

   Next question

6. Question 266 · 396 in bank

   HOTSPOT - Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription. The domain contains the users shown in the following table.

   

   The domain contains the groups shown in the following table.

   

   You are deploying Azure AD Connect. You configure Domain and OU filtering as shown in the following exhibit.

   

   You configure Filter users and devices as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   It should be No, No, No since group is Sales OU which does not synchronize When using OU-based filtering in conjunction with group-based filtering, the OU(s) where the group and its members are located must be included. (https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#group-based-filtering) https://www.examtopics.com/discussions/microsoft/view/82530-exam-ms-100-topic-3-question-89-discussion/

   Source: Adapted from community discussion — Casticod

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 267 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You integrate Microsoft Defender for Endpoint with Microsoft Intune. You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune. Solution: You enable co-management. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Answer is: No Enabling co-management alone does not automatically onboard devices to Microsoft Defender for Endpoint when they are enrolled in Intune. Co-management allows you to manage devices with both Configuration Manager and Intune, but for automatic onboarding to Defender for Endpoint, you would need to configure the appropriate settings in Intune to ensure that the devices are onboarded to Defender for Endpoint upon enrollment.

   Source: Adapted from community discussion — Preeb

   Next question

8. Question 268 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You integrate Microsoft Defender for Endpoint with Microsoft Intune. You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune. Solution: You configure a device configuration profile. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   By creating a device configuration profile in Intune, you can specify the settings and policies needed to onboard devices to Microsoft Defender for Endpoint automatically. This profile ensures that the required configuration is applied as soon as the device is enrolled in Intune.

   Source: Adapted from community discussion — kaspen

   References

   • Microsoft Learn

   Next question

9. Question 269 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains a user named User1. You have a Conditional Access policy applied to a cloud-based app named App1. App1 has Conditional Access App Control deployed. You need to create a Microsoft Defender for Cloud Apps policy to block User1 from printing from App1. Which type of policy should you create?

   • Aactivity policy
   • Bsession policy
   • COAuth app policy
   • DCloud Discovery anomaly detection policy

   Show answer

   Answer: B

   Explanation

   Designed to control user sessions for cloud applications. It allows you to enforce restrictions based on user actions during a session, including blocking specific activities like printing. Since App1 has Conditional Access App Control deployed, you can leverage session policies to monitor and control user activities in real-time.

   Source: Adapted from community discussion — 7d01a47

   References

   • Microsoft Learn

   Next question

10. Question 270 · 396 in bank

    You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You plan to perform a security audit of all the apps detected by Cloud Discovery. You need to track which apps were audited. The solution must ensure that the list of audited apps can be displayed in the cloud app catalog. What should you do?

    • ADefine each app as a critical asset.
    • BDeploy Conditional Access App Control.
    • CEnable app governance.
    • DGenerate a Cloud Discovery snapshot report.
    • EApply a custom app tag to each app.

    Show answer

    Answer: E

    Explanation

    By applying custom app tags to the apps detected by Cloud Discovery, you can effectively categorize and track those apps within the cloud app catalog. Custom tags can be used to denote the status of apps, including whether they have been audited, allowing for easy identification and reporting.

    Source: Adapted from community discussion — 7d01a47

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 261. 396 questions available.