Microsoft 365 Administrator396 questions across 40 pages are complete and free, with no account or card.
396 questions in this bank
Free access · progress saved on this device
You use Microsoft Defender for Office 365. You plan to automate an attack simulation campaign. Any users that fail the simulation must take additional training based on the simulation results. What is the maximum number of days the training will be available to the users after the simulation?
Answer: C
HOTSPOT - You have a Microsoft 365 E5 subscription. The subscription contains users that have devices onboarded to Microsoft Defender for Endpoint. Defender for Endpoint is configured to forward signals to Microsoft Defender for Cloud Apps. Cloud Discovery identifies a risky web app named App1. You need to block users from connecting to Appl from Microsoft Edge. Users must be able to bypass the restriction. Which type of app tag should you use. and what should you configure to integrate Defender for Endpoint with Defender for Cloud Apps? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
App tag type: Monitored (Not unsanctioned. Unsanctioned in combination with Microsoft Defender for Endpoint blocks the app. https://learn.microsoft.com/en-us/defender-cloud-apps/governance-discovery#blocking-apps-with-built-in-streams "Monitored" is a soft block allowing users to bypass it. https://jeffreyappel.nl/warn-monitor-users-for-shadow-it-usage-with-cloud-app-security/ Integrate by configuring: Enforce App Access
Source: Adapted from community discussion — JohnDoe47
You have a Microsoft 365 E5 subscription. You need to assign a Microsoft Defender for Endpoint baseline. Which portal should you use?
Answer: A
Intune admin center->Endpoint Security->Security baselines. Here you can choose from: Security Baseline for Windows 10 and later, Microsoft Defender for Endpoint Security Baseline and more
Source: Adapted from community discussion — justITtopics
You have a Microsoft 365 E5 subscription. You need to be alerted when Microsoft Defender XDR detects high-severity incidents. What should you use?
Answer: C
This will ensure that you are alerted when Microsoft Defender XDR detects high-severity incidents, allowing for timely response and management of threats.
Source: Adapted from community discussion — 7d01a47
HOTSPOT - You have a Microsoft 365 E5 subscription that contains the identities shown in the following table.
From the Microsoft Defender portal, you create an anti-spam inbound policy named Policy1 that has the following settings: • Include these users, groups and domains o Users: User3 o Groups: Group 1 • Exclude these users, groups and domains o Users: User1 Policy1 has the following Bulk email threshold & spam properties settings: • Mark as spam о Empty messages: On о Object tags in HTML On о Sensitive words: Off о Backscatter: On Policy1 has the following Actions settings: • Message actions o Spam: Move message to Junk Email folder o High confidence spam: Move message to Junk Email folder For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
I think: Yes, No, No The policy is for INBOUND 1: User 2 is member of group 2, which is member of group 1 (nested groups), so: Yes 2: Sensitive words are off, so: No 3: User 1 is excluded, but member of group1. I think exclusions take preference, so: No Please, let me know if I'm wrong.
Source: Adapted from community discussion — justITtopics
HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You configure the Microsoft Authenticator authentication method policy to enable passwordless authentication as shown in the following exhibit.
Both User1 and User2 report that they are NOT prompted for passwordless sign-in in the Microsoft Authenticator app. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Answer is correct. YNN. User1 need to enable the phone sign-in option inside the Microsoft Authenticator app on his/her phone to be able to use passwordless (https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication-passwordless-phone#enable-phone-sign-in) User2 is registred for MFA with the Authenticator App but is not targeted by the passwordless configuration (as he/she is not member of group1). User3 has not registered yet for MFA.
Source: Adapted from community discussion — certma2023
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You integrate Microsoft Defender for Endpoint with Microsoft Intune. You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune. Solution: You configure a compliance policy. Does this meet the goal?
Answer: B
You have a Microsoft 365 subscription and use Microsoft Defender for Office 365. You need to create a policy to ensure that any email messages containing an attachment that has the .extl extension is quarantined for inspection. Which type of policy should you create?
Answer: D
D: By creating an anti-malware policy, you can set rules to quarantine emails based on the presence of specific file extensions, such as .extl, which may be associated with potential threats.
Source: Adapted from community discussion — 7d01a47
HOTSPOT - You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.
You plan to create 10 new users and configure group-based licensing to assign each user a Microsoft 365 E5 license. To which group should you add the users, and which portal should you use to assign the license? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Group: Group 1-Security Group https://learn.microsoft.com/en-us/entra/identity/users/licensing-admin-center "This article shows you how to use the Microsoft 365 license center to assign licenses to Security groups." Portal: M365 Admin Center https://learn.microsoft.com/en-us/entra/identity/users/licensing-admin-center "Sign in to the Microsoft 365 admin center as at least a License Administrator." https://learn.microsoft.com/en-us/entra/identity/users/licensing-groups-assign "Starting September 1st, the Microsoft Entra ID Admin Center and the Microsoft Azure portal will no longer support license assignment through their user interfaces. To manage license assignments for users and groups, administrators must use the Microsoft 365 Admin Center"
Source: Adapted from community discussion — justITtopics
HOTSPOT - You have a Microsoft 365 E5 subscription that contains a Windows 11 device named Device1. Device1 is onboarded to Microsoft Defender for Endpoint. You need to ensure that Device1 is blocked from connecting to IP address 131.107.10.15. What should you configure in the Microsoft Defender Endpoint settings? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
MS-102 practice, question 271. 396 questions available.
Version 1.0.0. How we source questions
