Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 101:

  You have a Microsoft 365 subscription.

  You discover that some external users accessed center for a Microsoft SharePoint site.

  You modify the sharePoint sharing policy to prevent sharing, outside your organization.

  You need to be notified if the SharePoint sharing policy is modified in the future.

  Solution: From the Security $ Compliance admin center you create a threat management policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 102:

  You have a Microsoft 365 subscription.

  You create a retention label named Retention1 as shown in the following exhibit.

  

  You apply Retention! to all the Microsoft OneDrive content.

  On January 1, 2020, a user stores a file named File1 in OneDrive.

  On January 10, 2020, the user modifies File1.

  On February 1, 2020, the user deletes File1.

  When will File1 be removed permanently and unrecoverable from OneDrive?

  A. February 1, 2020

  B. July 1.2020

  C. July 10, 2020

  D. August 1, 2020

  Correct Answer: B

• Question 103:

  You have a new Microsoft 365 E5 tenant.

  You need to enable an alert policy that will be triggered when an elevation of Microsoft Exchange Online administrative privileges is detected.

  What should you do first?

  A. Enable auditing.

  B. Enable Microsoft 365 usage analytics.

  C. Create an Insider risk management policy.

  D. Create a communication compliance policy.

  Correct Answer: A

  Microsoft Purview auditing solutions provide an integrated solution to help organizations effectively respond to security events, forensic investigations, internal investigations, and compliance obligations. Thousands of user and admin operations performed in dozens of Microsoft 365 services and solutions are captured, recorded, and retained in your organization's unified audit log. Audit records for these events are searchable by security ops, IT admins, insider risk teams, and compliance and legal investigators in your organization. This capability provides visibility into the activities performed across your Microsoft 365 organization.

  Note: Permissions alert policies Example: Elevation of Exchange admin privilege Generates an alert when someone is assigned administrative permissions in your Exchange Online organization. For example, when a user is added to the Organization Management role group in Exchange Online.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-solutions-overview

  https://learn.microsoft.com/en-us/microsoft-365/compliance/alert-policies

• Question 104:

  You have a Microsoft 365 tenant that contains a Windows 10 device named Device1 and the Microsoft Endpoint Manager policies shown in the following table.

  

  A. only the settings of Policy!

  B. only the settings of Policy2

  C. only the settings of Policy3

  D. no settings

  Correct Answer: C

• Question 105:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

  You need to be notified when a single user downloads more than 50 files during any 60- second period. What should you configure?

  A. a session policy

  B. a file policy

  C. an activity policy

  D. an anomaly detection policy

  Correct Answer: D

• Question 106:

  You have a Microsoft 365 E5 subscription.

  Users have the devices shown in the following table.

  

  On which devices can you manage apps by using app configuration policies in Microsoft Endpoint Manager?

  A. Device1, Device4, and Device6

  B. Device2, Device3, and Device5

  C. Device1, Device2, Device3, and Device6

  D. Device1, Device2, Device4, and Device5

  Correct Answer: C

  You can create and use app configuration policies to provide configuration settings for both iOS/iPadOS or Android apps on devices that are and are not enrolled in Microsoft Endpoint Manager.

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 107:

  You have a Microsoft 365 E5 subscription.

  Conditional Access is configured to block high-risk sign-ins for all users.

  All users are in France and are registered for multi-factor authentication (MFA).

  Users in the media department will travel to various countries during the next month.

  You need to ensure that if the media department users are blocked from signing in while traveling, the users can remediate the issue without administrator intervention.

  What should you configure?

  A. an exclusion group

  B. the MFA registration policy

  C. named locations

  D. self-service password reset (SSPR)

  Correct Answer: D

  Self-remediation with self-service password reset

  If a user has registered for self-service password reset (SSPR), then they can also remediate their own user risk by performing a self-service password reset.

  Reference:

  https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity- protection-remediate-unblock

• Question 108:

  You have a Microsoft 365 subscription.

  Your company has a customer ID associated to each customer. The customer IDs contain 10 numbers followed by 10 characters. The following is a sample customer ID: 12-456-7890-abc-de- fghij.

  You plan to create a data loss prevention (DLP) policy that will detect messages containing customer IDs.

  D18912E1457D5D1DDCBD40AB3BF70D5D

  What should you create to ensure that the DLP policy can detect the customer IDs?

  A. a sensitive information type

  B. a sensitivity label

  C. a supervision policy

  D. a retention label

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/custom-sensitive-info- types?view=o365-worldwide

• Question 109:

  You have a Microsoft 365 E5 subscription.

  You need to compare the current Safe Links configuration to the Microsoft recommended configurations.

  What should you use?

  A. Microsoft Purview

  B. Azure AD Identity Protection

  C. Microsoft Secure Score

  D. the configuration analyzer

  Correct Answer: D

• Question 110:

  You have a Microsoft 365 E5 subscription.

  All users have Mac computers. All the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).

  You need to configure Microsoft Defender ATP on the computers.

  What should you create from the Endpoint Management admin center?

  A. a device configuration profile

  B. an update policy for iOS

  C. a Microsoft Defender ATP baseline profile

  D. a mobile device management (MDM) security baseline profile

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/advanced-threat-protection-configure