MS-102 practice questions 61–70

1. Question 61 · 396 in bank

   HOTSPOT - You have a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

   

   From the Sign-ins blade of the Microsoft Entra admin center, for which users can User1 and User2 view the sign-ins? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   User 1 - can view sign-in logs for user 1, user 2, user3, and user4. Correct User 2 - can only view sign-in logs for user2. This isn't listed as a possible answer, suspect the options are slightly wrong. https://www.examtopics.com/discussions/microsoft/view/60216-exam-ms-100-topic-4-question-50-discussion/ https://learn.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-access-activity-logs

   Source: Adapted from community discussion — cb0900

   References

   • Microsoft Learn

   

   Next question

2. Question 62 · 396 in bank

   You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. Corporate policy states that user passwords must not include the word Contoso. What should you do to implement the corporate policy?

   • AFrom the Microsoft Entra admin center, create a conditional access policy.
   • BFrom the Microsoft Entra admin center, configure the Password protection settings.
   • CFrom the Microsoft 365 admin center, configure the Password policy settings.
   • DFrom Azure AD Identity Protection, configure a sign-in risk policy.

   Show answer

   Answer: B

   References

   • Microsoft Learn

   Next question

3. Question 63 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: • Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. • User passwords must be 10 characters or more. Solution: Implement pass-through authentication and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   I dont get the point of ur answer. but it is because if active directory goes unavailable, microsoft will need AD to authenticate the password since pass through authentication is on. the solution here is to use password hash

   Source: Adapted from community discussion — momowagdy

   Next question

4. Question 64 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: • Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. • User passwords must be 10 characters or more. Solution: Implement password hash synchronization and configure password protection in the Azure AD tenant. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   B, WHY? Solution only partly meets requirements. solution does meet the goal for requirement 1: Password hash synchronization synchronizes user password hashes from Active Directory to Azure AD. This allows users to authenticate to Microsoft 365 services even if Active Directory is unavailable. solution does NOT meet the goal for requirement 2: ''When password hash synchronization is enabled, the password complexity policies in your on-premises Active Directory instance override complexity policies in the cloud for synchronized users. You can use all of the valid passwords from your on-premises Active Directory instance to access Microsoft Entra services.'' So configuring password complexity policies in AzureAD is pointless as is gets overwritten. Source: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization

   Source: Adapted from community discussion — BSVIT

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 65 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: • Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. • User passwords must be 10 characters or more. Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Next question

6. Question 66 · 396 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: • Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. • User passwords must be 10 characters or more. Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   Answer is correct. https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization When password hash synchronization is enabled, the password complexity policies in your on-premises Active Directory instance override complexity policies in the cloud for synchronized users. You can use all of the valid passwords from your on-premises Active Directory instance to access Microsoft Entra services.

   Source: Adapted from community discussion — Fran22

   References

   • Microsoft Learn

   Next question

7. Question 67 · 396 in bank

   You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 11 • Android • iOS To which devices can you apply Endpoint DLP policies?

   • AWindows 11 only
   • BWindows 11 and Android only
   • CWindows 11 and iOS only
   • DWindows 11, Android, and iOS

   Show answer

   Answer: A

   Explanation

   A is correct - Microsoft Endpoint DLP allows you to monitor onboarded Windows 10, and Windows 11 and onboarded macOS devices

   Source: Adapted from community discussion — 471e282

   References

   • Microsoft Learn

   Next question

8. Question 68 · 396 in bank

   You have a Microsoft 365 E5 subscription that contains a user named User1. User1 exceeds the default daily limit of allowed email messages and is on the Restricted entities list. You need to remove User1 from the Restricted entities list. What should you use?

   • Athe Exchange admin center
   • Bthe Microsoft Purview compliance portal
   • Cthe Microsoft 365 admin center
   • Dthe Microsoft 365 Defender portal
   • Ethe Microsoft Entra admin center

   Show answer

   Answer: D

   Explanation

   Remove a user from the Restricted entities page in the Microsoft 365 Defender portal In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email & collaboration > Review > Restricted entities. Or, to go directly to the Restricted entities page, use https://security.microsoft.com/restrictedentities. https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user-from-restricted-users-portal-after-spam?view=o365-worldwide

   Source: Adapted from community discussion — Dtriminio

   References

   • Microsoft Learn

   Next question

9. Question 69 · 396 in bank

   Your company has three main offices and one branch office. The branch office is used for research. The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication. You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office. What should you include in the recommendation?

   • AAzure AD password protection
   • Ba Microsoft Intune device configuration profile
   • Ca Microsoft Intune device compliance policy
   • DAzure AD conditional access

   Show answer

   Answer: D

   Next question

10. Question 70 · 396 in bank

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain. You deploy an Azure AD tenant. Another administrator configures the domain to synchronize to Azure AD. You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully. You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD. Solution: From Azure AD Connect, you modify the filtering settings. Does this meet the goal?

    • AYes
    • BNo

    Show answer

    Answer: A

    Explanation

    It's A simply because a filter is meant to be exclusive, not inclusive. Given all users except a single OU are syncing, it's not the culprit, unless, technically, someone created a group and added all users to it except people from the OU(very unlikely as that's not the point).

    Source: Adapted from community discussion — NrdAlrt

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 61. 396 questions available.