MS-102 practice questions 341–350

1. Question 341 · 396 in bank

   You have a Microsoft 365 tenant that contains two users named User1 and User2. You create the alert policy shown in the following exhibit.

   

   User2 runs a script that modifies a file in a Microsoft SharePoint library once every four minutes and runs for a period of two hours. How many alerts will User1 receive?

   • A2
   • B5
   • C10
   • D25
   • E30

   Show answer

   Answer: A

   Explanation

   I would say: A "When multiple events that match the conditions of an alert policy occur with a short period of time, they are added to an existing alert by a process called alert aggregation. When an event triggers an alert, the alert is generated and displayed on the Alerts page and a notification is sent. If the same event occurs within the aggregation interval, then Microsoft 365 adds details about the new event to the existing alert instead of triggering a new alert. The goal of alert aggregation is to help reduce alert "fatigue" and let you focus and take action on fewer alerts for the same event." https://learn.microsoft.com/en-us/purview/alert-policies?view=o365-worldwide#alert-aggregation

   Source: Adapted from community discussion — Jillis

   References

   • Microsoft Learn

   Next question

2. Question 342 · 396 in bank

   You have a Microsoft 365 subscription that contains the users shown in the following table.

   

   You need to configure group-based licensing to meet the following requirements: To all users, deploy an Office 365 E3 license without the Power Automate license option. To all users, deploy an Enterprise Mobility + Security E5 license. To the users in the research department only, deploy a Power BI Pro license. To the users in the marketing department only, deploy a Visio Plan 2 license. What is the minimum number of deployment groups required?

   • A1
   • B2
   • C3
   • D4
   • E5

   Show answer

   Answer: C

   Explanation

   3 groups needed : - Group 1 : Allusers (deploy EMS+S E5 licence and O365 E3 licence with "PowerAutomate for Office 365" disabled. - group 2 : "Research group" : deploy Power Bi Pro Licence (not included in O365 E3 but in O365 E5). - Group 3 : "Marketing group" deploy Visio plan 2 Licence.

   Source: Adapted from community discussion — Perycles

   Next question

3. Question 343 · 396 in bank

   Your company has 10,000 users who access all applications from an on-premises data center. You plan to create a Microsoft 365 subscription and to migrate data to the cloud. You plan to implement directory synchronization. User accounts and group accounts must sync to Azure AD successfully. You discover that several user accounts fail to sync to Azure AD. You need to resolve the issue as quickly as possible. What should you do?

   • AFrom Active Directory Administrative Center, search for all the users, and then modify the properties of the user accounts.
   • BRun idfix.exe, and then click Edit.
   • CFrom Windows PowerShell, run the start-AdSyncSyncCycle -PolicyType Delta command.
   • DRun idfix.exe, and then click Complete.

   Show answer

   Answer: B

   Explanation

   IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory. IdFix is intended for the Active Directory administrators responsible for directory synchronization with Azure Active Directory. Reference: https://docs.microsoft.com/en-us/office365/enterprise/prepare-directory-attributes-for-synch-with-idfix

   Source: Adapted from community discussion — Greatone1

   References

   • Microsoft Learn

   Next question

4. Question 344 · 396 in bank

   HOTSPOT - Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains: Contoso.com - East.contoso.com - The forest contains the users shown in the following table.

   

   The forest syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes - The UPN of user1 is user1@contoso.com so he can authenticate to Azure AD by using the username user1@contoso.com. Box 2: No - The UPN of user2 is user2@east.contoso.com so he cannot authenticate to Azure AD by using the username user2@contoso.com. Box 3: No - The UPN of user3 is user3@fabrikam.com so he cannot authenticate to Azure AD by using the username user3@contoso.com.

   Source: Adapted from community discussion — Greatone1

   

   Next question

5. Question 345 · 396 in bank

   HOTSPOT - Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.

   

   You purchase a Microsoft 365 E5 subscription. You need to implement Azure AD Connect cloud sync. What should you install first and on which server? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is correct. You need to install a small agent on an On-Premises server. This server must run Windows Server 2016 ou later. Agent installation on DC is supporter. Agent installation on Windows Server Core is not supported.

   Source: Adapted from community discussion — certma2023

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 346 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the users shown in the following table.

   

   The devices are configured as shown in the following table.

   

   You have a Conditional Access policy named CAPolicy1 that has the following settings: Assignments - Users or workload identities: Group1 Cloud apps or actions: Office 365 SharePoint Online Conditions - Filter for devices: Exclude filtered devices from the policy Rule syntax: device.displayName -startsWith "Device" Access controls - Grant - Grant: Block access - Session: 0 controls selected - Enable policy: On - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   read the policy like this: "exclude from the block if the device starts with "device"". The first device is not registered. It is not, therefore, excluded from the block as it is not analyzed. It is blocked. The next two devices, however, are excluded from the block. N/Y/Y

   Source: Adapted from community discussion — amurp35

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 347 · 396 in bank

   You have a Microsoft 365 E5 subscription. Conditional Access is configured to block high-risk sign-ins for all users. All users are in France and are registered for multi-factor authentication (MFA). Users in the media department will travel to various countries during the next month. You need to ensure that if the media department users are blocked from signing in while traveling, the users can remediate the issue without administrator intervention. What should you configure?

   • Aan exclusion group
   • Bthe MFA registration policy
   • Cnamed locations
   • Dself-service password reset (SSPR)

   Show answer

   Answer: D

   Explanation

   A & B - Are excluding users from MFA, which is not a secure method of managing users and the risk to their accounts. C - Named locations requires IP ranges, how do you know each Wi-Fi/network range the reps will visit? Wouldn't trust ChatGPT as far as I could throw it. D - You can allow users to self-remediate their sign-in risks and user risks by setting up risk-based policies. If users pass the required access control, such as Azure AD Multifactor Authentication or secure password change, then their risks are automatically remediated. https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate-unblock#self-remediation-with-risk-based-policy

   Source: Adapted from community discussion — letters1234

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 348 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains the following user: Name: User1 - UPN: user1@contoso.com - Email address: user1@marketmg.contoso.com MFA enrollment status: Disabled - When User1 attempts to sign in to Outlook on the web by using the user1@marketing.contoso.com email address, the user cannot sign in. You need to ensure that User1 can sign in to Outlook on the web by using user1@marketing.contoso.com. What should you do?

   • AAssign an MFA registration policy to User1.
   • BReset the password of User1.
   • CAdd an alternate email address for User1.
   • DModify the UPN of User1.

   Show answer

   Answer: D

   Explanation

   Bro ! at least test it to your test environment then comment it in below! you can NOT login with Email Address. you Could ONLY Login with your UPN! So answer is D. This behavior applies not only to Office365, but also to Active Directory Local Exchange and all LDAP-based authentications that exist!

   Source: Adapted from community discussion — Milad666

   References

   • Microsoft Learn

   Next question

9. Question 349 · 396 in bank

   HOTSPOT - Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table.

   

   The groups have the members shown in the following table.

   

   You are configuring synchronization between fabrikam.com and an Azure AD tenant. You configure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit (Click the Domain/OU Filtering tab.)

   

   You configure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit. (Click the Filtering tab.)

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answers are correct User 2 is not synced because it's not in an OU that is synced. User 3 is synced because it is in both a synced OU and Group.

   Source: Adapted from community discussion — Greatone1

   References

   • Microsoft Learn

   

   Next question

10. Question 350 · 396 in bank

    HOTSPOT - You have a Microsoft 365 E5 subscription. From Azure AD Identity Protection on August 1, you configure a Multifactor authentication registration policy that has the following settings: Assignments: All users - Controls: Require Azure AD multifactor authentication registration Enforce Policy: On - On August 3, you create two users named User1 and User2. Users authenticate by using Azure Multi-Factor Authentication (MFA) for the first time on the dates shown in the following table.

    

    By which dates will User1 and User2 be forced to complete their Azure MFA registration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Answers are corrected. ''Azure AD Identity Protection will prompt your users to register the next time they sign in interactively and they'll have 14 days to complete registration.'' https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy

    Source: Adapted from community discussion — flim322

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 341. 396 questions available.