MS-102 practice questions 371–380

1. Question 371 · 396 in bank

   You have a Microsoft 365 subscription. You need to identify which shadow IT apps users connect to by using Cloud Discovery in Microsoft Defender for Cloud Apps. What should you create first?

   • Aa Cloud Discovery snapshot report
   • Ba session policy
   • Can app discovery policy
   • Da Conditional Access policy

   Show answer

   Answer: A

   Next question

2. Question 372 · 396 in bank

   Select 2

   You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You need to ensure that when a user-based alert is triggered in Defender for Cloud Apps, the user is marked as compromised. Which two options can you use to automate the response? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point

   • Aa Microsoft Power Automate playbook
   • Ba user tag
   • Ca custom detection rule
   • Da block script
   • Ean automated remediation level

   Show answer

   Answer: AE

   Next question

3. Question 373 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains a group named Group1. The subscription uses Microsoft Defender for Cloud Apps. You configure cloud discovery. You need to ensure that you can create a custom report that details shadow IT usage by the members of Group1. What should you do first?

   • AConfigure user enrichment.
   • BDisable anonymization.
   • CAdd an app connector.
   • DConfigure user monitoring.

   Show answer

   Answer: A

   Next question

4. Question 374 · 396 in bank

   Your company has offices in Seattle and Denver. You have a Microsoft 365 subscription. You plan to create a Conditional Access policy named Policy1 that will enforce multifactor authentication (MFA). You need to ensure that users at the Seattle office are excluded from MFA. Users at the Denver office must always be prompted for MFA. What should you configure for Policy1?

   • Aa named location that has IP ranges location set to the Seattle office
   • BAuthentication strengths
   • Ca named location that has Countries location set to United States
   • DVPN connectivity from the Seattle office

   Show answer

   Answer: A

   Next question

5. Question 375 · 396 in bank

   Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You are implementing Microsoft Defender for Cloud Apps. You need to ensure that you can create OAuth app policies. Solution: You add an API token to Defender for Cloud Apps. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

6. Question 376 · 396 in bank

   You have Microsoft 365 E5 subscription that contains the identities shown in the following table.

   

   You create a shared mailbox named Shared1. Which identities can you add to Shared1 as a member?

   • AUser1 only
   • BUser1 and Group1 only
   • CUser1 and Group2 only
   • DUser1 and Group3 only
   • EUser1, Group2, and Group3 only

   Show answer

   Answer: C

   Next question

7. Question 377 · 396 in bank

   You have a Microsoft 365 subscription that contains 500 Windows devices enrolled in Microsoft Intune. You need to ensure that you can review vulnerability management recommendations for the devices. The solution must minimize administrative effort. Which policy template should you select in the Microsoft Defender portal?

   • AMicrosoft Defender Antivirus
   • BWindows Security Experience
   • CEndpoint Detection and Response
   • DDevice Control

   Show answer

   Answer: C

   Next question

8. Question 378 · 396 in bank

   You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains Windows 11 devices. You need to recommend a solution to prevent antivirus and real-time protection on the devices from being modified or disabled. What should you include in the recommendation?

   • AEnforcement scope
   • Btamper protection
   • CAuto remediation
   • Dendpoint detection and response (EDR) in block mode
   • ELive Response

   Show answer

   Answer: B

   Next question

9. Question 379 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains 1,000 Windows devices. You need to review the exposure score of the devices. Which portal should you use?

   • Athe Microsoft Intune admin center
   • Bthe Microsoft Purview portal
   • Cthe Microsoft Defender portal
   • Dthe Microsoft 365 admin center

   Show answer

   Answer: C

   Next question

10. Question 380 · 396 in bank

    You have a Microsoft 365 E5 subscription. You create the users shown in the following table.

    

    You plan to use Microsoft Entra ID Protection. Which users will be added automatically to the Users at risk detected alerts list?

    • AAdmin1 only
    • BAdmin2 only
    • CAdmin1 and Admin2 only
    • DAdmin1 and Admin3 only
    • EAdmin1, Admin2, and Admin3

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 371. 396 questions available.