Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 141:

  You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  Your company purchases a Microsoft 365 subscription.

  You need to ensure that User1 is assigned the required role to create file policies and manage alerts in the Cloud App Security admin center.

  Solution: From the Azure Active Directory admin center, you assign the Compliance administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 142:

  Your network contains an Active Directory domain.

  You deploy an Azure AD tenant.

  Another administrator configures the domain to synchronize to Azure AD.

  You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

  You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to Azure AD.

  Solution: From Azure AD Connect, you modify the Azure AD credentials.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The question states that "all the user account synchronizations completed successfully". Therefore, the Azure AD credentials are configured correctly in Azure AD Connect. It is likely that the 10 user accounts are being excluded from the

  synchronization cycle by a filtering rule.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync- configure-filtering

• Question 143:

  From the Security and Compliance admin center, you create a content export as shown in the exhibit. (Click the Exhibit tab.)

  

  What will be excluded from the export?

  A. a 10-MB XLSX file

  B. a 5-MB MP3 file

  C. a 5-KB RTF file

  D. an 80-MB PPTX file

  Correct Answer: B

  Unrecognized file formats are excluded from the search.

  Certain types of files, such as Bitmap or MP3 files, don't contain content that can be indexed. As a result, the search indexing servers in Exchange and SharePoint don't perform full-text indexing on these types of files. These types of files are considered to be unsupported file types. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/partially-indexed-items-in- content-search?view=o365-worldwide https://docs.microsoft.com/en-us/office365/securitycompliance/export-a-content-search- report

• Question 144:

  You have a Microsoft 365 E5 tenant.

  You need to evaluate compliance with European Union privacy regulations for customer data.

  What should you do in the Microsoft 365 compliance center?

  A. Create a Data Subject Request (DSR)

  B. Create a data loss prevention (DLP) policy for General Data Protection Regulation (GDPR) data

  C. Create an assessment based on the EU GDPR assessment template

  D. Create an assessment based on the Data Protection Baseline assessment template

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/compliance/regulatory/gdpr-action-plan

• Question 145:

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  You need to configure an incident email notification rule that will be triggered when an alert occurs only on a Windows 10 device. The solution must minimize administrative effort.

  What should you do first?

  A. From the Microsoft 365 admin center, create a mail-enabled security group.

  B. From the Microsoft 365 Defender portal, create a device group.

  C. From the Microsoft Endpoint Manager admin center, create a device category.

  D. From the Azure Active Directory admin center, create a dynamic device group.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine- groups?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-email- notifications?view=o365-worldwide

• Question 146:

  You have a Microsoft 365 tenant.

  You plan to manage incidents in the tenant by using the Microsoft 365 security center.

  Which Microsoft service source will appear on the Incidents page of the Microsoft 365 security center?

  A. Microsoft Cloud App Security

  B. Azure Sentinel

  C. Azure Web Application Firewall

  D. Azure Defender

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender/investigate- alerts?view=o365-worldwide

• Question 147:

  You have a Microsoft 365 subscription.

  You need to add additional onmicrosoft.com domains to the subscription. The additional domains must be assignable as email addresses for users.

  What is the maximum number of onmicrosoft.com domains the subscription can contain?

  A. 1

  B. 2

  C. 5

  D. 10

  Correct Answer: C

  You are limited to five onmicrosoft.com domains in your Microsoft 365 environment, so make sure to check for spelling and to assess your need if you choose to create a new one.

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/admin/setup/domains-faq

• Question 148:

  You have a Microsoft 365 E5 tenant. Users store data in the following locations: Microsoft Teams

  Microsoft OneDrive Microsoft Exchange Online Microsoft SharePoint Online

  You need to retain Microsoft 365 data for two years.

  What is the minimum number of retention policies that you should create?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/create-retention- policies?view=o365-worldwide

• Question 149:

  You have Windows 10 devices that are managed by using Microsoft Endpoint Manager.

  You need to configure the security settings in Microsoft Edge.

  What should you create in Microsoft Endpoint Manager?

  A. an app configuration policy

  B. an app

  C. a device configuration profile

  D. a device compliance policy

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/deployedge/configure-edge-with-intune

• Question 150:

  You have a Microsoft 365 subscription.

  From the Microsoft 365 Defender, you create a role group named US eDiscovery Managers by copying the eDiscovery Manager role group.

  You need to ensure that the users in the new role group can only perform content searches of mailbox content for users in the United States.

  Solution: From the Microsoft 365 Defender, you modify the roles of the US eDiscovery Managers role group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B