Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 201:

  You need to ensure that User1 can enroll the devices to meet the technical requirements. What should you do?

  A. From the Azure Active Directory admin center, assign User1 the Cloud device administrator rote.

  B. From the Azure Active Directory admin center, configure the Maximum number of devices per user setting.

  C. From the Intune admin center, add User1 as a device enrollment manager.

  D. From the Intune admin center, configure the Enrollment restrictions.

  Correct Answer: C

  References: https://docs.microsoft.com/en-us/sccm/mdm/deploy-use/enroll-devices-with-deviceenrollment-manager

• Question 202:

  On which server should you use the Defender for identity sensor?

  A. Server1

  B. Server2

  C. Server3

  D. Server4

  E. Servers5

  Correct Answer: A

  However, if the case study had required that the DCs can't have any s/w installed, then the answer would have been a standalone sensor on Server2. In this scenario, the given answer is correct. BTW, ATP now known as Defender for Identity.

• Question 203:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

  

  The subscription contains the users shown in the following table.

  

  In Azure AD, you configure the External collaboration settings as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 204:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  Each user has a device with the Microsoft Authenticator app installed.

  From Microsoft Authenticator settings for the subscription, the Enable and Target settings are configured as shown in the exhibit. (Click the Exhibit tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 205:

  HOTSPOT

  Your network contains an on-premises Active Directory domain that is synced to Azure AD as shown in the following exhibit.

  

  An on-premises Active Directory user account named Allan You is synchronized to Azure AD. You view Allan's account from Microsoft 365 and notice that his username is set to Allan @>ddatum.onmicrosoft.com.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 206:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You create an administrative unit named AU1 that contains the members shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE; Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 207:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You have the named locations shown in the following table.

  

  You create a conditional access policy that has the following configurations:

  Users or workload identities:

  Include: Group1

  Exclude: Group2

  Cloud apps or actions: Include all cloud apps

  Conditions:

  Include: Any location

  Exclude: Montreal

  Access control: Grant access, Require multi-factor authentication

  User1 is on the multi-factor authentication (MFA) blocked users list.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 208:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You enable self-service password reset (SSPR) for Group1. You configure security questions as the only authentication method for SSPR. Which users can use SSPR, and which users must answer security questions to reset their password? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 209:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You plan to use a mailbox named Mailbox1 to analyze malicious email messages.

  You need to configure Microsoft Defender for Office 365 to meet the following requirements:

  Ensure that incoming email is NOT filtered for Mailbox1.

  Detect impersonation and spoofing attacks on all other mailboxes in the subscription.

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 210:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You have an Azure AD tenant named contoso.com that contains the following users:

  Admin1

  Admin2

  User1 Contoso.com contains an administrative unit named AIM that has no role assignments. User1 is a member of AU1. You create an administrative unit named AU2 that does NOT have any members or role assignments. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: