MS-102 practice questions 301–310

1. Question 301 · 396 in bank

   You have a Microsoft 365 E5 tenant. Users store data in the following locations: Microsoft Teams - Microsoft OneDrive - Microsoft Exchange Online - Microsoft SharePoint - You need to retain Microsoft 365 data for two years. What is the minimum number of retention policies that you should create?

   • A1
   • B2
   • C3
   • D4

   Show answer

   Answer: C

   Explanation

   There's a trap with this one, you need two policies for Teams 1. Teams channel/chats 2. Teams private channel messages 3. OneDrive, SharePoint, Exchange

   Source: Adapted from community discussion — moshkoshbgosh

   References

   • Microsoft Learn

   Next question

2. Question 302 · 396 in bank

   HOTSPOT - You have a Microsoft 365 tenant. You plan to create a retention policy as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Deleted 7 years after they were created = Correct Data will be retained for a min of 7 years = incorrect, data will be stored for a MAX of 7 years Should be: "Some data will be deleted immediately" (as it says data that is currently older than 7 years will be deleted once this policy is enabled)

   Source: Adapted from community discussion — Mr4D97

   

   Next question

3. Question 303 · 396 in bank

   Select 2

   You have a Microsoft 365 subscription. You need to configure a compliance solution that meets the following requirements: Defines sensitive data based on existing data samples Automatically prevents data that matches the samples from being shared externally in Microsoft SharePoint or email messages Which two components should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa trainable classifier
   • Ba sensitive info type
   • Can insider risk policy
   • Dan adaptive policy scope
   • Ea data loss prevention (DLP) policy

   Show answer

   Answer: AE

   Explanation

   The correct answers are A and E. A. A trainable classifier is used to define sensitive data based on existing data samples. E. A data loss prevention (DLP) policy is used to automatically prevent data that matches the samples from being shared externally in Microsoft SharePoint or email messages. The other options are not necessary for this solution. B. A sensitive info type is a pre-defined category of sensitive data. This can be used to help you create a DLP policy, but it is not required. C. An insider risk policy is used to detect and prevent malicious activity by internal users. This is not relevant to the requirement to prevent sensitive data from being shared externally. D. An adaptive policy scope is used to define the scope of a DLP policy. This can be used to fine-tune the policy to apply to specific users, groups, or locations. However, it is not required for this solution.

   Source: Adapted from community discussion — Hard1k

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 304 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. Site1 has the files shown in the following table.

   

   For Site1, users are assigned the roles shown in the following table.

   

   You create a data loss prevention (DLP) policy named Policy1 that contains a rule as shown in the following exhibit.

   

   How many files will be visible to User1 and User2 after Policy1 is applied to Site1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   • Block everyone. Only the content owner, last modifier, and site admin will continue to have access https://learn.microsoft.com/en-us/purview/dlp-policy-reference#actions User1 Owner: can open all files because he is the owner: 5 User2: can open files with less than 2 Ips and the format is not supported by data classification User 2 can see: file1.docx, file4.bmp, however, the file2.txt-filex.xlsx and file5.doc are supported for data classification and the content has more than 2 ips.

   Source: Adapted from community discussion — sergioandreslq

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 305 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

   

   The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

   

   User2 fails to authenticate to Azure AD when signing in as user2@fabrikam.com. You need to ensure that User2 can access the resources in Azure AD. Solution: From the Microsoft Entra admin center, you assign User2 the Security Reader role. You instruct User2 to sign in as user2@contoso.com. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   Its funny how when you get an obviously easy question(fabrikam.com upn is not contoso.com), you question what you are missing, what's the gotcha.

   Source: Adapted from community discussion — NrdAlrt

   Next question

6. Question 306 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

   

   The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

   

   User2 fails to authenticate to Azure AD when signing in as user2@fabrikam.com. You need to ensure that User2 can access the resources in Azure AD. Solution: From the on-premises Active Directory domain, you set the UPN suffix for User2 to @contoso.com. You instruct User2 to sign in as user2@contoso.com. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   The domain fabrikam.com isn't syncronized at all (as I see in the picture..), so the only way to logon is to use contoso.com. It seems clear.

   Source: Adapted from community discussion — TonyManero

   Next question

7. Question 307 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

   

   The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

   

   User2 fails to authenticate to Azure AD when signing in as user2@fabrikam.com. You need to ensure that User2 can access the resources in Azure AD. Solution: From the Microsoft Entra admin center, you add fabrikam.com as a custom domain. You instruct User2 to sign in as user2@fabrikam.com. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   The on-premises Active Directory domain is named contoso.com. To enable users to sign on using a different UPN (different domain), you need to add the domain to Microsoft 365 as a custom domain. review: https://www.examtopics.com/discussions/microsoft/view/50100-exam-ms-100-topic-2-question-56-discussion/

   Source: Adapted from community discussion — sherifhamed

   Next question

8. Question 308 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain. You deploy an Azure AD tenant. Another administrator configures the domain to synchronize to Azure AD. You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully. You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD. Solution: You run idfix.exe and export the 10 user accounts. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   No, running idfix.exe and exporting the 10 user accounts does not meet the goal of ensuring that the 10 user accounts are synchronized to Azure AD. IdFix is a tool used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory1. It provides you the ability to query, identify, and remediate the majority of object synchronization errors in your Window’s Server AD forests in preparation for deployment to Microsoft 3652. However, simply exporting the 10 user accounts using IdFix will not ensure that they are synchronized to Azure AD. You need to review the errors reported by IdFix and take appropriate actions to fix them before synchronizing the accounts to Azure AD

   Source: Adapted from community discussion — RJTW070

   Next question

9. Question 309 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain. You deploy an Azure AD tenant. Another administrator configures the domain to synchronize to Azure AD. You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully. You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD. Solution: From Azure AD Connect, you modify the Azure AD credentials. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   No, modifying the Azure AD credentials from Azure AD Connect does not meet the goal of ensuring that the 10 user accounts are synchronized to Azure AD. If you have discovered that 10 user accounts in an organizational unit (OU) are not synchronized to Azure AD, while all the other user accounts synchronized successfully, and you have reviewed Azure AD Connect Health and discovered that all the user account synchronizations completed successfully, then you should troubleshoot an object that is not syncing with Azure Active Directory1.

   Source: Adapted from community discussion — RJTW070

   Next question

10. Question 310 · 396 in bank

    Your company has a Microsoft 365 subscription. You need to identify all the users in the subscription who are licensed for Office 365 through a group membership. The solution must include the name of the group used to assign the license. What should you use?

    • AActive users in the Microsoft 365 admin center
    • BReports in Microsoft Purview compliance portal
    • Cthe Licenses blade in the Microsoft Entra admin center
    • DReports in the Microsoft 365 admin center

    Show answer

    Answer: C

    Explanation

    There is no license report in "Reports in the Microsoft 365 admin center". https://entra.microsoft.com > Billing > Licenses > All Products > Open License > Licensed groups

    Source: Adapted from community discussion — osxzvkwpfcfxobqjby

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 301. 396 questions available.