Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 121:

  Your company has offices in five cities.

  The company has a Microsoft 365 tenant.

  Each office is managed by a local administrator.

  You plan to deploy Microsoft Intune.

  You need to recommend a solution to manage resources in intune that meets the following requirements:

  Local administrators must be able to manage only the resources in their respective office.

  Local administrators must be prevented from managing resources in other offices.

  Administrative effort must be minimized.

  What should you include in the recommendation?

  A. device categories

  B. scope tags

  C. configuration profiles

  D. conditional access policies

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

• Question 122:

  Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2.

  The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2.

  You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings.

  You install the Group Policy Management Console (GPMC) on Server1.

  You need to configure the Windows Update for Business Group Policy settings on Server1.

  Solution: You raise the domain functional level to Windows Server 2019. You copy the Group Policy Administrative Templates from a Windows 10 computer to the Netlogon share on all the domain controllers.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 123:

  You have a Microsoft 365 E5 tenant.

  You plan to deploy 1.000 new iOS devices to users. The devices will be shipped directly from the supplier to the users.

  You need to recommend a Microsoft Intune enrollment option that meets the following requirements:

  Minimizes user interaction

  Minimizes administrative effort Automatically installs corporate apps What should you recommend?

  A. Automated Device Enrollment (ADE)

  B. bring your own device (BYOD) user and device enrollment

  C. Apple Configurator enrollment

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-enroll

• Question 124:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.

  You need to ensure that users are prevented from opening or downloading malicious files from Microsoft Teams, OneDrive, or SharePoint Online.

  What should you do?

  A. Create a newAnti-malware policy

  B. Configure the Safe Links global settings.

  C. Create a new Anti-phishing policy

  D. Configure the Safe Attachments global settings.

  Correct Answer: D

  Safe Attachments for SharePoint, OneDrive, and Microsoft Teams In organizations with Microsoft Defender for Office 365, Safe Attachments for SharePoint, OneDrive, and Microsoft Teams provides an additional layer of protection against malware. After files are asynchronously scanned by the common virus detection engine in Microsoft 365, Safe Attachments opens files in a virtual environment to see what happens (a process known as detonation). Safe Attachments for SharePoint, OneDrive, and Microsoft Teams also helps detect and block existing files that are identified as malicious in team sites and document libraries.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe- attachments-for-spo-odfb-teams-about

• Question 125:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  The subscription has a single anti-malware policy as shown in the following exhibit.

  

  An email message that contains text and two attachments is sent to User1. One attachment is infected with malware. How will the email message and the attachments be processed?

  A. Both attachments will be removed. The email message will be quarantined, and Used will receive an email message without any attachments and an email message that includes the following text: 'Malware was removed.'

  B. The email message will be quarantined, and the message will remain undelivered.

  C. Both attachments will be removed. The email message will be quarantined, and User1 will receive a copy of the message containing the original text and a new attachment that includes the following text: 'Malware was removed."

  D. The malware-infected attachment will be removed. The email message will be quarantined, and User1 will receive a copy of the message containing only the uninfected attachment.

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-malware- protection?view=o365-worldwide#anti-malware-policies

• Question 126:

  You have a Microsoft 365 subscription that contains the domains shown in the following exhibit.

  

  Which domain name suffixes can you use when you create users?

  A. only Sub1.contoso221018.onmicrosoft.com

  B. onlycontoso.com and Sub2.contoso221018.onmicrosoft.com

  C. onlvcontoso221018.onmicrosoft.com, Sub.contoso221018.onmicrosoft.com, and Sub2.contoso221018.onmicrosoft.com

  D. all the domains in the subscription

  Correct Answer: D

• Question 127:

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You need to configure group-based licensing to meet the following requirements:

  To all users, deploy an Office 365 E3 license without the Power Automate license option.

  To all users, deploy an Enterprise Mobility + Security E5 license. To the users in the research department only, deploy a Power BI Pro license. To the users in the marketing department only, deploy a Visio Plan 2 license. What is the minimum

  number of deployment groups required?

  A. 1

  B. 2

  C. 3

  D. 4

  E. 5

  Correct Answer: C

  One for all users, one for the research department, and one for the marketing department.

  Note: What are Deployment Groups?

  With Deployment Groups, you can orchestrate deployments across multiple servers and perform rolling updates, while ensuring high availability of your application throughout. You can also deploy to servers on-premises or virtual machines

  on Azure or any cloud, plus have end-to-end traceability of deployed artifact versions down to the server level.

  Reference:

  https://devblogs.microsoft.com/devops/deployment-groups-is-now-generally-available- sharing-of-targets-and-more

• Question 128:

  You have a Microsoft 365 E5 subscription.

  You plan to implement Microsoft 365 compliance policies to meet the following requirements:

  Identify documents that are stored in Microsoft Teams and SharePoint Online that contain Personally Identifiable Information (PII).

  Report on shared documents that contain PII.

  What should you create?

  A. an alert policy

  B. a data loss prevention (DLP) policy

  C. a retention policy

  D. a Microsoft Cloud App Security policy

  Correct Answer: B

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-learn-about- dlp?view=o365-worldwide

• Question 129:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You add custom apps to the private store in Microsoft Store Business.

  You plan to create a policy to show only the private store in Microsoft Store for Business. To which devices can the policy be applied?

  A. Device2 only

  B. Device1 and Device3 only

  C. Device2 and Device4 only

  D. Device2, Device3, and Device5 only

  E. Device1, Device2, Device3, Device4, and Device5

  Correct Answer: C

• Question 130:

  You have a Microsoft 365 E5 tenant.

  You configure sensitivity labels.

  Users report that the Sensitivity button is unavailability in Microsoft Word for the web. The sensitivity button is available in Word for Microsoft 365.

  You need to ensure that the users can apply the sensitivity labels when they use Word for the web.

  What should you do?

  A. Copy policies from Azure information Protection to the Microsoft 365 Compliance center

  B. Publish the sensitivity labels.

  C. Create an auto-labeling policy

  D. Enable sensitivity labels for files in Microsoft SharePoint Online and OneDrive.

  Correct Answer: D