MS-102 practice questions 71–80

1. Question 71 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

   

   You create an administrative unit named AU1 that contains the members shown in the following exhibit.

   

   The User Administrator role has the assignments shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YES User1 can reset password of User3 because User1 is User Administrator Organization and User3 is direct member of AU1 which is inside Scope Organization YES User2 can reset password of User3 because User2 is member of Group2 and Group2 has assigned role for User Administrator for Scope AU1, User3 is direct user member of AU1 NO User2 can NOT reset password of User1 because both User2 and User1 are member of a role-assignable group and you cannot change a password of user in a role-assignable group

   Source: Adapted from community discussion — aleksdj

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 72 · 396 in bank

   You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1. You enable Azure AD Identity Protection. You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege. To which role should you add User1?

   • ASecurity Reader
   • BGlobal Administrator
   • COwner
   • DUser Administrator

   Show answer

   Answer: A

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 73 · 396 in bank

   HOTSPOT - Your company has an Azure AD tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

   

   You need to identify which users can perform the following administrative tasks: • Reset the password of User4. • Modify the value for the manager attribute of User4. Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

4. Question 74 · 396 in bank

   You have a Microsoft 365 E5 subscription. Users have Android or iOS devices and access Microsoft 365 resources from computers that run Windows 11 or MacOS. You need to implement passwordless authentication. The solution must support all the devices. Which authentication method should you use?

   • AWindows Hello
   • BFIDO2 compliant security keys
   • CMicrosoft Authenticator app

   Show answer

   Answer: C

   Explanation

   Agree with C. Authenticator App. B would work too. I guess as they mention Android and iOS they're looking for the app as an answer. https://www.examtopics.com/discussions/microsoft/view/81291-exam-ms-100-topic-5-question-73-discussion/

   Source: Adapted from community discussion — cb0900

   Next question

5. Question 75 · 396 in bank

   HOTSPOT - Your company has a hybrid deployment of Microsoft 365. An on-premises user named User1 is synced to Azure AD. Azure AD Connect is configured as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Cannot change her password from any Microsoft Portal: Password writeback is disabled, if the user changes the password in cloud services, the new password will be overridden in the next Azure AD connect sync process with the password in Active directory. Box 2: the new password hash will be synchronized to Azure AD if the user updates the password in AD, the new hash will be synced to AAD in the next ADSYNC.

   Source: Adapted from community discussion — sergioandreslq

   

   Next question

6. Question 76 · 396 in bank

   HOTSPOT - You have a Microsoft 365 E5 subscription and an Azure AD tenant named contoso.com. All users have computers that run Windows 11, are joined to contoso.com, and are protected by using BitLocker Drive Encryption (BitLocker). You plan to create a user named Admin1 that will perform following tasks: • View BitLocker recovery keys. • Configure the usage location for the users in contoso.com. You need to assign roles to Admin to meet the requirements. The solution must use the principle of least privilege. Which two roles should you assign? To answer, select the appropriate options in the answer area.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is correct as Helpdesk Administrator has action of: microsoft.directory/bitlockerKeys/key/read - Read bitlocker metadata and key on devices and License Administrator has: microsoft.directory/users/usageLocation/update - Update usage location of users

   Source: Adapted from community discussion — OliwerCiecwierz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 77 · 396 in bank

   HOTSPOT - You have a Microsoft 365 Enterprise E5 subscription. You add a cloud-based app named App1 to the Azure AD enterprise applications list. You need to ensure that two-step verification is enforced for all user accounts the next time they connect to App1. Which three settings should you configure from the policy? To answer, select the appropriate settings in the answer area, NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Given answer is correct. You will add app in Cloud apps section, and Grant is required to enforce MFA, and then policy needs to be Enabled.

   Source: Adapted from community discussion — oopspruu

   

   Next question

8. Question 78 · 396 in bank

   You have a Microsoft 365 E5 subscription. You create a Conditional Access policy that blocks access to an app named App1 when users trigger a high-risk sign-in event. You need to reduce false positives for impossible travel when the users sign in from the corporate network. What should you configure?

   • Aexclusion groups
   • Bmulti-factor authentication (MFA)
   • Cnamed locations
   • Duser risk policies

   Show answer

   Answer: C

   Explanation

   Answer given seems correct. Take a look at this article: https://www.petervanderwoude.nl/post/conditional-access-and-named-locations/ " Named locations is a feature of Azure AD that enables administrators to label trusted IP address ranges in their organizations. In the environment, administrators can use named locations in the context of the detection of risk events to reduce the number of reported false positives for the Impossible travel to atypical locations risk event type. "

   Source: Adapted from community discussion — Vaerox

   Next question

9. Question 79 · 396 in bank

   Your company has a Microsoft 365 E5 subscription. Users in the research department work with sensitive data. You need to prevent the research department users from accessing potentially unsafe websites by using hyperlinks embedded in email messages and documents. Users in other departments must not be restricted. What should you do?

   • ACreate a data loss prevention (DLP) policy that has a Content is shared condition.
   • BModify the safe links policy Global settings.
   • CCreate a data loss prevention (DLP) policy that has a Content contains condition.
   • DCreate a new safe links policy.

   Show answer

   Answer: D

   Explanation

   D. Create a new safe links policy. With this action, you can create a Safe Links policy specifically targeting the users in the research department, ensuring that only they are restricted from accessing potentially unsafe websites through hyperlinks, while other departments remain unaffected. https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-links-policies?view=o365-worldwide

   Source: Adapted from community discussion — Nilz76

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 80 · 396 in bank

    You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?

    • Athe Microsoft 365 admin center
    • Bthe SharePoint admin center
    • Cthe Microsoft Entra admin center
    • Dthe Microsoft Purview compliance portal

    Show answer

    Answer: A

    Explanation

    The Microsoft 365 admin center is the portal where you can manage various aspects of your Microsoft 365 subscription, including creating mail-enabled contacts. The other options (B, C, and D) are not typically used for creating mail-enabled contacts.

    Source: Adapted from community discussion — poesklap

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-102 practice, question 71. 396 questions available.