MS-102 practice questions 311–320

1. Question 311 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain. You deploy an Azure AD tenant. Another administrator configures the domain to synchronize to Azure AD. You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully. You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD. Solution: From the Synchronization Rules Editor, you create a new outbound synchronization rule. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   No, this solution does not meet the goal. Creating a new outbound synchronization rule in the Synchronization Rules Editor will not solve the issue of the 10 user accounts not being synchronized to Azure AD. Outbound synchronization rules define what happens after Azure AD Connect has combined the data from all connected directories. They don’t control which objects are being synchronized to Azure AD. The issue seems to be with the scope of the objects that are being synchronized. It’s possible that the OU containing these 10 users is not included in the synchronization scope. To solve this issue, you should check the configuration of Azure AD Connect and ensure that the OU containing these 10 users is included in the synchronization scope.

   Source: Adapted from community discussion — Anonymous121011

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 312 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription. You need to review metrics for the following: The daily active users in Microsoft Teams Recent Microsoft service issues - What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer is correct if we take the values offered, but we must be attentive to whether in the exam they add the statistics section of the team administration portal, since (in a period of 7 days) but you can see the activity of one of them by hovering over the selected day or exporting the report to CSV

   Source: Adapted from community discussion — Casticod

   

   Next question

3. Question 313 · 396 in bank

   DRAG DROP - You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2. You need to ensure that each group can perform the tasks shown in the following table.

   

   The solution must use the principle of least privilege. Which role should you assign to each group? To answer, drag the appropriate roles to the correct groups. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 314 · 396 in bank

   You have a Microsoft 365 subscription. You need to add additional onmicrosoft.com domains to the subscription. The additional domains must be assignable as email addresses for users. What is the maximum number of onmicrosoft.com domains the subscription can contain?

   • A1
   • B2
   • C5
   • D10

   Show answer

   Answer: C

   Explanation

   i created 5 "onMicrosoft" domains and added all of them as additional email address. Also i received a test email on all of them so i'll select 5 Correct answer C

   Source: Adapted from community discussion — nsotis28

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 315 · 396 in bank

   HOTSPOT - You have an Azure AD tenant that contains the administrative units shown in the following table.

   

   You have the following users: • A user named User1 that is assigned the Password Administrator for AU1 and AU2. • A user named User2 that is assigned the User Administrator for AU1. • A user named User3 that is assigned the User Administrator for the tenant. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer is N,Y,N. User1 can't reset password of User3, not only are they in different administrative units, password administrators can only reset the passwords of non-admins and other password administrators. User2 can update the display name of User1, User2 is a User administrator and is in the same Administrative unit as User1 allowing them control to do so. User1 can't reset the password of User2, as User2 is a different admin. https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#commonly-used-microsoft-365-admin-center-roles

   Source: Adapted from community discussion — Be41223

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 316 · 396 in bank

   HOTSPOT - Your company has a Microsoft 365 E5 subscription. You need to perform the following tasks: View the Adoption Score of the company. Create a new service request to Microsoft. Which two options should you use in the Microsoft 365 admin center? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 317 · 396 in bank

   Select 2

   You have a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

   

   You add another user named User5 to the User Administrator role. You need to identify which two management tasks User5 can perform. Which two tasks should you identify? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • ADelete User2 and User4 only.
   • BReset the password of User4 only.
   • CReset the password of any user in Azure AD.
   • DDelete User1, User2, and User4 only.
   • EReset the password of User2 and User4 only.
   • FDelete any user in Azure AD.

   Show answer

   Answer: AE

   Explanation

   Correct Answer: E As a user administrator, user5 can manage regular user accounts, which includes resetting passwords and managing user attributes. However, the user administrator role does not grant permissions to delete users. Deleting users typically requires global administrator or equivalent privileges. Therefore, user5 cannot delete user2 and user4, as they lack the necessary permissions.

   Source: Adapted from community discussion — kayci

   References

   • Microsoft Learn

   Next question

8. Question 318 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that contains a Microsoft 365 group named Group1. Group1 is configured as shown in the following exhibit.

   

   An external user named User1 has an email address of user1@outlook.com. You need to add User1 to Group1. What should you do first, and which portal should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Both answers are correct. There is no need to change the group privacy just to include one external user (and probably not even if there were multiple external users). Be careful with the mental trap that the image can provoke: This is not the portal where we make the group settings, but rather the only portal where we can invite external users. The only portal where we can create guest users is on the Microsoft Entra Portal.

   Source: Adapted from community discussion — GLLimaBR

   

   Next question

9. Question 319 · 396 in bank

   You have a Microsoft 365 subscription that contains a user named User1. User1 requires admin access to perform the following tasks: Manage Microsoft Exchange Online settings. Create Microsoft 365 groups. You need to ensure that User1 only has admin access for eight hours and requires approval before the role assignment takes place. What should you use?

   • AAzure AD Identity Protection
   • BMicrosoft Entra Verified ID
   • CConditional Access
   • DAzure AD Privileged Identity Management (PIM)

   Show answer

   Answer: D

   Next question

10. Question 320 · 396 in bank

    HOTSPOT - You have a Microsoft 365 subscription that contains the users shown in the following table.

    

    You need to configure a dynamic user group that will include the guest users in any department that contains the word Support. How should you complete the membership rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    This can be tricky if you're used to PowerShell syntax. In PS syntax, "-contains" would be incorrect as it checks for an item in a collection, not partial matches. In dynamic group syntax, it's the opposite. In dynamic group syntax, "-contains" matches partial strings, not items in collections. https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership#supported-expression-operators

    Source: Adapted from community discussion — nenge

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 311. 396 questions available.