Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 251:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

  

  All the devices are onboarded To Microsoft Defender for Endpoint

  You plan to use Microsoft Defender Vulnerability Management to meet the following requirements:

  Detect operating system vulnerabilities.

  Hot Area:

  

  Correct Answer:

  

• Question 252:

  HOTSPOT

  You configure a data loss prevention (DLP) policy named DLP1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 253:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.

  The subscription has the default inbound anti-spam policy and a custom Safe Attachments policy.

  You need to identify the following information:

  The number of email messages quarantined by zero-hour auto purge (ZAP)

  The number of times users clicked a malicious link in an email message

  Which Email and collaboration report should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 254:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

  You need to create a policy that will generate an email alert when a banned app is detected requesting permission to access user information or data in the subscription.

  What should you configure? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 255:

  HOTSPOT

  You have a Microsoft 365 tenant that contains 100 Windows 10 devices. The devices are managed by using Microsoft Endpoint Manager.

  You plan to create two attack surface reduction (ASR) policies named ASR1 and ASR2. ASR1 will be used to configure Microsoft Defender Application Guard. ASR2 will be used to configure Microsoft Defender SmartScreen.

  Which ASR profile type should you use for each policy? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 256:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that has auditing turned on. The subscription contains the users shown in the following table.

  

  You plan to create a new user named User1.

  How long will the user creation audit event be available if Admin1 or Admin2 creates User1? To answer, select the appropriate options in the answer area.

  Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 257:

  HOTSPOT

  You have a Microsoft 365 tenant that contains the compliance policies shown in the following table.

  

  The tenant contains the devices shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 258:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  You integrate Microsoft Intune and contoso.com as shown in the following exhibit.

  

  You purchase a Windows 10 device named Device1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 259:

  HOTSPOT

  Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table.

  

  The groups have the members shown in the following table.

  

  You are configuring synchronization between fabrikam.com and an Azure AD tenant.

  You configure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit (Click the Domain/OU Filtering tab.)

  

  You configure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit. (Click the Filtering tab.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 260:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  All company-owned Windows 11 devices are onboarded to Microsoft Defender for Endpoint.

  You need to configure Defender for Endpoint to meet the following requirements:

  Block a vulnerable app until the app is updated.

  Block an application executable based on a file hash.

  The solution must minimize administrative effort.

  What should you configure for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: