MS-102 practice questions 321–330

1. Question 321 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

   

   All the groups are deleted. Which groups can be restored, and what is the retention period? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct. The reason for the ability to restore something that is deleted in the M 365 world is to recover data. There is no data associated with any of those groups and therefore no restore function as you can just recreate them yourself with no harm. The 365 group however, has a mailbox and other data associated with it and therefore must be covered by retention, compliance, discovery, etc. and be recoverable.

   Source: Adapted from community discussion — amurp35

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 322 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription. From Azure AD Privileged Identity Management (PIM), you configure Role settings for the Global Administrator role as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1) 15 days. The user is Assigned the role in active state. The active assignment expires after 15 days, as shown in the config details. 2) the role can be made available to activation requests for 3 months. This is because the role assignment can be an Eligible assignment and an Eligible assignment is configured to expire after 3 months. Eligible assignments require themselves to be activated just in time by the assignee within the 3 month period. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to-user

   Source: Adapted from community discussion — amurp35

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 323 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription. A user named user1@contoso.com was recently provisioned. You need to use PowerShell to assign a Microsoft Office 365 E3 license to User1. Microsoft Bookings must NOT be enabled. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 324 · 396 in bank

   You have a Microsoft E5 subscription. You need to ensure that administrators who need to manage Microsoft Exchange Online are assigned the Exchange Administrator role for five hours at a time. What should you implement?

   • AAzure AD Privileged Identity Management (PIM)
   • Ba conditional access policy
   • Ca communication compliance policy
   • DAzure AD Identity Protection
   • Egroups that have dynamic membership

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

5. Question 325 · 396 in bank

   Select 2

   You have a Microsoft 365 subscription. You suspect that several Microsoft Office 365 applications or services were recently updated. You need to identify which applications or services were recently updated. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AFrom the Microsoft 365 admin center, review the Service health blade.
   • BFrom the Microsoft 365 admin center, review the Message center blade.
   • CFrom the Microsoft 365 admin center, review the Products blade.
   • DFrom the Microsoft 365 Admin mobile app, review the messages.

   Show answer

   Answer: BD

   Explanation

   A&B are B&D Here B. From the Microsoft 365 admin center, review the Message center blade. D. From the Office 365 Admin mobile app, review the messages.

   Source: Adapted from community discussion — sherifhamed

   References

   • Microsoft Learn

   Next question

6. Question 326 · 396 in bank

   You have a Microsoft 365 subscription that contains the domains shown in the following exhibit.

   

   Which domain name suffixes can you use when you create users?

   • Aonly Sub1.contoso221018.onmicrosoft.com
   • Bonlycontoso221018.onmicrosoft.com and Sub2.contoso221018.onmicrosoft.com
   • Conly contoso221018.onmicrosoft.com, Sub.contoso221018.onmicrosoft.com, and Sub2.contoso221018.onmicrosoft.com
   • Dall the domains in the subscription

   Show answer

   Answer: D

   Explanation

   I've created accounts with domains that were in the incomplete setup status and domains with service issues, so I believe it is D.

   Source: Adapted from community discussion — Clinson

   References

   • Microsoft Learn

   Next question

7. Question 327 · 396 in bank

   You have a Microsoft 365 subscription. You plan to implement Microsoft Purview Privileged Access Management. Which Microsoft Office 365 workloads support privileged access?

   • AMicrosoft Exchange Online only
   • BMicrosoft Teams only
   • CMicrosoft Exchange Online and SharePoint Online only
   • DMicrosoft Teams and SharePoint Online only
   • EMicrosoft Teams, Exchange Online, and SharePoint Online

   Show answer

   Answer: A

   Explanation

   Answer A. PAM only works with Exchange Online at that time. Based on my test you see only Exchange roles inside the O365 Admin Portal (Settings -> Org Settings -> Security & Privacy -> Privileged Access) The documentation also says: "When will privileged access support Office 365 workloads beyond Exchange? Privileged access management will be available in other Office 365 workloads soon. Visit the Microsoft 365 Roadmap for more details." https://learn.microsoft.com/en-us/purview/privileged-access-management

   Source: Adapted from community discussion — certma2023

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 328 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   You plan to provide User4 with early access to Microsoft 365 feature and service updates. You need to identify which Microsoft 365 setting must be configured, and which user can modify the setting. The solution must use the principle of least privilege. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is wrong. To have new features & updates on all users or some/targeted users you need to configure "release preference" for the entire organization/tenant. Only the Global Admins can change this. https://learn.microsoft.com/en-us/microsoft-365/admin/manage/release-options-in-office-365?view=o365-worldwide#set-up-the-release-option-in-the-admin-center

   Source: Adapted from community discussion — certma2023

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 329 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription. You are planning a threat management solution for your organization. You need to minimize the likelihood that users will be affected by the following threats: Opening files in Microsoft SharePoint that contain malicious content Impersonation and spoofing attacks in email messages Which policies should you create in Microsoft 365 Defender? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 330 · 396 in bank

    HOTSPOT - You have a Microsoft 365 E5 tenant. You have the alerts shown in the following exhibit.

    

    Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    This Alert is from Purview not from Security Admin, so the actions are differents. I just test it, and you can rollback it. In my case, I didn't have any explicit button but changing the comments, I was able to change the status as well. https://learn.microsoft.com/en-us/purview/compliance-manager-alert-policies

    Source: Adapted from community discussion — daye

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 321. 396 questions available.