Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 181:

  You need to configure just in time access to meet the technical requirements. What should you use?

  A. entitlement management

  B. Azure AD Privileged Identity Management (PIM)

  C. access reviews

  D. Azure AD Identity Protection

  Correct Answer: B

• Question 182:

  You need to configure Azure AD Connect to support the planned changes for the Montreal Users and Seattle Users OUs. What should you do?

  A. From the Microsoft Azure AD Connect wizard, select Customize synchronization options.

  B. From PowerShell, run the Add-ADSyncConnectorAttnbuteinclusion cmdlet.

  C. From PowerShell, run the start-ADSyncSyncCycle cmdlet.

  D. From the Microsoft Azure AD Connect wizard, select Manage federation.

  Correct Answer: A

• Question 183:

  You enable the Azure AD Identity Protection weekly digest email.

  You create the users shown in the following table.

  

  Which users will receive the weekly digest email automatically?

  A. Admin2, Admin3, and Admin4 only

  B. Admin1, Admin2, Admin3, and Admin4

  C. Admin2 and Admin3 only

  D. Admin3 only

  E. Admin1 and Admin3 only

  Correct Answer: E

  By default, all Global Admins receive the email. Any newly created Global Admins, Security Readers or Security Administrators will automatically be added to the recipients list.

• Question 184:

  You have a Microsoft 365 subscription.

  You configure a data loss prevention (DLP) policy.

  You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

  You need to prevent the users from bypassing the DLP policy.

  What should you configure?

  A. actions

  B. incident reports

  C. exceptions

  D. user overrides

  Correct Answer: D

  A DLP policy can be configured to allow users to override a policy tip and report a false positive.

  You can educate your users about DLP policies and help them remain compliant without blocking their work. For example, if a user tries to share a document containing sensitive information, a DLP policy can both send them an email

  notification and show them a policy tip in the context of the document library that allows them to override the policy if they have a business justification. The same policy tips also appear in Outlook on the web, Outlook, Excel, PowerPoint, and

  Word.

  If you find that users are incorrectly marking content as false positive and bypassing the DLP policy, you can configure the policy to not allow user overrides.

  Reference:

  https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention- policies

• Question 185:

  You need to recommend a solution for the security administrator. The solution must meet the technical requirements. What should you include in the recommendation?

  A. Microsoft Azure Active Directory (Azure AD) Privileged Identity Management

  B. Microsoft Azure Active Directory (Azure AD) Identity Protection

  C. Microsoft Azure Active Directory (Azure AD) conditional access policies

  D. Microsoft Azure Active Directory (Azure AD) authentication methods

  Correct Answer: B

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conceptconditional-access-conditions#sign-in-risk states clearly that Sign-in risk

• Question 186:

  You need to meet the technical requirement for large-volume document retrieval. What should you create?

  A. a data loss prevention (DLP) policy from the Security and Compliance admin center

  B. an alert policy from the Security and Compliance admin center

  C. a file policy from Microsoft Cloud App Security

  D. an activity policy from Microsoft Cloud App Security

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/activity-policies-and-alerts

• Question 187:

  You need to protect the U.S. PII data to meet the technical requirements. What should you create?

  A. a data loss prevention (DLP) policy that contains a domain exception

  B. a Security and Compliance retention policy that detects content containing sensitive data

  C. a Security and Compliance alert policy that contains an activity

  D. a data loss prevention (DLP) policy that contains a user override

  Correct Answer: A

• Question 188:

  You need to configure Office on the web to meet the technical requirements. What should you do?

  A. Assign the Global reader role to User1.

  B. Enable sensitivity labels for Office files in SharePoint Online and OneDrive.

  C. Configure an auto-labeling policy to apply the sensitivity labels.

  D. Assign the Office apps admin role to User1.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-sharepointonedrive-files?view=o365-worldwide

• Question 189:

  You need to configure the compliance settings to meet the technical requirements. What should you do in the Microsoft Endpoint Manager admin center?

  A. From Compliance policies, modify the Notifications settings.

  B. From Locations, create a new location for noncompliant devices.

  C. From Retire Noncompliant Devices, select Clear All Devices Retire State.

  D. Modify the Compliance policy settings.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 190:

  You need to create the Safe Attachments policy to meet the technical requirements. Which option should you select?

  A. Replace

  B. Enable redirect

  C. Block

  D. Dynamic Delivery

  Correct Answer: D

  Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/office-365-security/safe-attachments.md