MS-102 practice questions 21–30

1. Question 21 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains the users shown in the following table.

   

   You create a new administrative unit named AU1 and configure the following AU1 dynamic membership rule. (user.department -eq "Engineering") and (user.jobTitle -notContains "Executive") The subscription contains the role assignments shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   -equal means that the exact name must match, -contain The Contains operator does partial string matches but not item in a collection matches Note the agument and (must match the 2) User 1 and user 2 do not belong as the 2 conditions do not match Therefore user 1 and user 2 do not belong to AU1 and are outside the scope of Admin 1 Option 1 NO Option 2 NO Option 3 YES

   Source: Adapted from community discussion — Casticod

   

   Next question

2. Question 22 · 396 in bank

   You have a Microsoft 365 subscription. You need to be notified to your personal email address when a Microsoft Exchange Online service issue occurs. What should you do?

   • AFrom the Exchange admin center, create a contact.
   • BFrom the Microsoft Outlook client, configure an Inbox rule.
   • CFrom the Microsoft 365 admin center, update the technical contact details.
   • DFrom the Microsoft 365 admin center, customize the Service health settings.

   Show answer

   Answer: D

   Explanation

   Should be D because you do not achieve anything without actually configuring the service outage actions outside the service health menu.

   Source: Adapted from community discussion — nordbymikael

   Next question

3. Question 23 · 396 in bank

   HOTSPOT - Your company has an Azure AD tenant that contains the users shown in the following table.

   

   The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts. External collaboration settings have default configuration. You need to identify which users can perform the following administrative tasks: • Create guest user accounts. • Add User3 to Admin1. Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Prerequisites To complete the scenario in this quickstart, you need: A role that allows you to create users in your tenant directory, such as at least a "Guest Inviter role" or a "User administrator". Access to a valid email address outside of your Microsoft Entra tenant, such as a separate work, school, or social email address. You'll use this email to create the guest account in your tenant directory and access the invitation. Ref: https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal#prerequisites and below the prerequisites, it state: Invite an external guest user Tip Steps in this article might vary slightly based on the portal you start from. Sign in to the Microsoft Entra admin center as at least a "User administrator". Browse to Identity > Users > All users. I will go with user 2 & user 2 whether creates or invite it states User Adminstrator.

   Source: Adapted from community discussion — cpaljchc4

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 24 · 396 in bank

   Your network contains an Active Directory forest named contoso.local. You purchase a Microsoft 365 subscription. You plan to move to Microsoft 365 and to implement a hybrid deployment solution for the next 12 months. You need to prepare for the planned move to Microsoft 365. What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

   • APurchase a third-party X.509 certificate.
   • BCreate an external forest trust.
   • CRename the Active Directory forest.
   • DPurchase a custom domain name.

   Show answer

   Answer: D

   Explanation

   D. Purchase a custom domain name The best action to take before implementing directory synchronization for a hybrid deployment with Microsoft 365 would be to purchase a custom domain name. When you set up Microsoft 365, you're prompted to provide your domain name. This domain should match the domain you use within your on-premises Active Directory environment to ensure a seamless user experience and email delivery.

   Source: Adapted from community discussion — Nilz76

   References

   • Microsoft Learn

   Next question

5. Question 25 · 396 in bank

   You have a Microsoft 365 subscription. All users are assigned Microsoft 365 Apps for enterprise licenses. You need to ensure that reports display the names of users that have activated Microsoft 365 apps and on how many devices. What should you modify in the Microsoft 365 admin center?

   • Athe Reports reader role
   • BOrganization information
   • COrg settings for Privacy profile
   • DOrg settings for Reports

   Show answer

   Answer: D

   References

   • Microsoft Learn

   Next question

6. Question 26 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. You need to configure the Org settings to meet the following requirements: • Sign users out of Microsoft Office 365 web apps after one hour of inactivity. • Integrate an internal support tool with Office. Which settings should you configure for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 27 · 396 in bank

   You have a Microsoft 365 subscription. You add a domain named contoso.com. When you attempt to verify the domain, you are prompted to send a verification email to admin@contoso.com. You need to change the email address used to verify the domain. What should you do?

   • AAdd a TXT record to the DNS zone of the domain.
   • BFrom the domain registrar, modify the contact information of the domain.
   • CFrom the Microsoft 365 admin center, change the global administrator of the Microsoft 365 subscription.
   • DModify the NS records for the domain.

   Show answer

   Answer: B

   Explanation

   since this is verifying your domain and txt/mx is not being used and email is, then to verify your domain using email ms will send it to the contact of the domain (the admin email whois).

   Source: Adapted from community discussion — pinky285

   Next question

8. Question 28 · 396 in bank

   HOTSPOT - Your company uses Microsoft Defender for Endpoint. Microsoft Defender for Endpoint contains the device groups shown in the following table.

   

   You onboard computers to Microsoft Defender for Endpoint as shown in the following table.

   

   Of which groups are Computer1 and Computer2 members? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Agree, both computers in Group 1. "When a device is matched to more than one group, it's added only to the highest ranked group." https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide#manage-device-groups

   Source: Adapted from community discussion — cb0900

   References

   • Microsoft Learn

   

   Next question

9. Question 29 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   You are implementing Microsoft Defender for Endpoint. You need to enable role-based access control (RBAC) to restrict access to the Microsoft 365 Defender portal. Which users can enable RBAC, and which users will no longer have access to the Microsoft 365 Defender portal after RBAC is enabled? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Agree with the answers. Enable RBAC: Admin1 and Admin 2 No longer have access: Admin 3 and Admin 4 Turning on role-based access control will cause users with read-only permissions (for example, users assigned to Azure AD Security reader role) to lose access until they are assigned to a role. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide#before-you-begin https://www.examtopics.com/discussions/microsoft/view/110910-exam-ms-101-topic-2-question-138-discussion/

   Source: Adapted from community discussion — cb0900

   References

   • Microsoft Learn

   

   Next question

10. Question 30 · 396 in bank

    Your company has a Microsoft 365 E5 subscription. You onboard a device on the company's network to Microsoft Defender for Endpoint. In the Microsoft 365 Defender portal, you notice that the device inventory displays many devices that have an Onboarding status of Can be onboarded. You need to ensure that onboarded devices are prevented from polling the network for device discovery but can still discover devices with which they communicate directly. What should you configure in the Microsoft 365 Defender portal?

    • Astandard discovery
    • Bdevice discovery exclusions
    • Cbasic discovery
    • Da network assessment job

    Show answer

    Answer: C

    Explanation

    "In the Device Discovery settings, select Basic Device Discovery mode. This mode restricts the devices from polling the network to discover other devices. Instead, it allows devices to discover only those with which they directly communicate." Explanation: Standard Discovery: This mode might allow for broader network polling which doesn’t meet the requirement of limiting discovery to direct communications only. Device Discovery Exclusions: These settings are typically used to exclude specific devices or IP ranges from being discovered but don't inherently restrict onboarded devices from polling the network for discovery. ChatGPT 4-o says C

    Source: Adapted from community discussion — XylosSW

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 21. 396 questions available.