Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 91:

  You have a Microsoft E5 subscription.

  You need to ensure that administrators who need to manage Microsoft Exchange Online are assigned the Exchange Administrator role for five hours at a time. What should you implement?

  A. Azure AD Privileged Identity Management (PIM)

  B. a conditional access policy

  C. a communication compliance policy)

  D. Azure AD Identity Protection

  E. groups that have dynamic membership

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity- management/pim-how-to-change-default-settings

• Question 92:

  Your network contains an Active Directory domain.

  You deploy an Azure AD tenant.

  Another administrator configures the domain to synchronize to Azure AD.

  You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

  You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to Azure AD.

  Solution: From the Synchronization Rules Editor, you create a new outbound synchronization rule.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The question states that "all the user account synchronizations completed successfully". Therefore, the synchronization rule is configured correctly. It is likely that the 10 user accounts are being excluded from the synchronization cycle by a

  filtering rule.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync- configure-filtering

• Question 93:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to enable User1 to create Compliance Manager assessments.

  Solution: From the Microsoft 365 admin center, you assign User1 the Compliance admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft- 365/security/office-365-security/permissions-in-the-security-and-compliance-center.md

• Question 94:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  User1 exceeds the default daily limit of allowed email messages and is on the Restricted entities list.

  You need to remove User1 from the Restricted entities list.

  What should you use?

  A. the Exchange admin center

  B. the Microsoft Purview compliance portal

  C. the Microsoft 365 admin center

  D. the Microsoft 365 Defender portal

  E. the Microsoft Entra admin center

  Correct Answer: D

  Admins can remove user accounts from the Restricted entities page in the Microsoft 365 Defender portal or in Exchange Online PowerShell.

  Remove a user from the Restricted entities page in the Microsoft 365 Defender portal In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email and collaboration > Review > Restricted entities. Or, to go directly to the

  Restricted entities page, use https://security.microsoft.com/restrictedentities.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/removing-user- from-restricted-users-portal-after-spam

• Question 95:

  Your company has a Microsoft 365 subscription, you implement sensitivity Doris for your company.

  You need to automatically protect email messages that contain the word Confidential m the subject line.

  What should you create?

  A. a sharing policy from the Exchange admin center

  B. a mail flow rule from the Exchange admin center

  C. a message Dace from the Microsoft 365 security center

  D. a data loss prevention (DLP) policy from the Microsoft 365 compliance center

  Correct Answer: B

• Question 96:

  You have a Microsoft 365 tenant.

  You plan to implement Endpoint Protection device configuration profiles.

  Which platform can you manage by using the profile?

  A. Android

  B. CentOS Linux

  C. iOS

  D. Window 10

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure

• Question 97:

  You have the sensitivity labels shown in the following exhibit.

  

  Which labels can users apply to content?

  A. Label3, Label4, and Label6 only

  B. Label1, Label2. Label3. Label4. Label5. and Label6

  C. Label1, Label2, and Label5 only

  D. Label1, Label3, Label4, and Label6 only

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365- worldwide

• Question 98:

  Your company has 10,000 users who access all applications from an on-premises data center.

  You plan to create a Microsoft 365 subscription and to migrate data to the cloud.

  You plan to implement directory synchronization.

  User accounts and group accounts must sync to Azure AD successfully.

  You discover that several user accounts fail to sync to Azure AD.

  You need to resolve the issue as quickly as possible.

  What should you do?

  A. From Active Directory Administrative Center, search for all the users, and then modify the properties of the user accounts.

  B. Run idfix.exe, and then click Edit.

  C. From Windows PowerShell, run the start-AdSyncSyncCycle -PolicyType Delta command.

  D. Run idfix.exe, and then click Complete.

  Correct Answer: B

  IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory. IdFix is intended for the Active Directory

  administrators responsible for directory synchronization with Azure Active Directory.

  Reference:

  https://docs.microsoft.com/en-us/office365/enterprise/prepare-directory-attributes-for- synch-with-idfix

• Question 99:

  You have a Microsoft 365 tenant that contains the groups shown in the following table.

  

  You plan to create a new Windows 10 Security Baseline profile. To which groups can you assign to the profile?

  A. Group3 only

  B. Group1 and Group3 only

  C. Group2 and Group3 only

  D. Group1. Group2. and Group3

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/security-baselines-configure#create- the-profile https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare- groups?view=o365-worldwide

• Question 100:

  You have a Microsoft 365 subscription.

  From Microsoft 365 Defender, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From Windows PowerShell, you run the New-complianceSecurityFilter cmdlet with the appropriate parameters.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A