Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 21:

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: From Device Manager, you view the computer properties.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system- am-i-running-628bec99-476a-2c13-5296-9dd081cdd808

• Question 22:

  Your company has multiple offices.

  You have a Microsoft 365 E5 tenant that uses Microsoft Intune for device management.

  Each office has a local administrator.

  You need to ensure that the local administrators can manage only the devices in their respective office.

  What should you use?

  A. scope tags

  B. configuration profiles

  C. device categories

  D. conditional access policies

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/scope-tags

• Question 23:

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: From the Settings app, you select System, and then you select About to view information about the system.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://support.microsoft.com/en-us/windows/which-version-of-windows-operating-system- am-i-running-628bec99-476a-2c13-5296-9dd081cdd808

• Question 24:

  You have a Microsoft 365 F5 subscription.

  You plan to deploy 100 new Windows 10 devices.

  You need to order the appropriate version of Windows 10 for the new devices. The version must

  Meet the following requirements.

  Be serviced for a minimum of 24 moths.

  Support Microsoft Application Virtualization (App-V)

  Which version should you identify?

  A. Window 10 Pro, version 1909

  B. Window 10 Pro, version 2004

  C. Window 10 Pro, version 1909

  D. Window 10 Enterprise, version 2004

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/windows/release-health/release-information https://docs.microsoft.com/en-us/windows/application-management/app-v/appv-supported- configurations

• Question 25:

  You have a hybrid Azure Active Directory (Azure AD) tenant and a Microsoft Endpoint Configuration Manager deployment. You have the devices shown in the following table.

  

  You plan to enable co-management.

  You need to identify which devices support co-management without requiring the installation of additional software.

  Which devices should you identify?

  A. Device1 only

  B. Device2 only

  C. Device3 only

  D. Device2 and Device3 only

  E. Device1, Device2, and Device3

  Correct Answer: D

• Question 26:

  You have a Microsoft 365 tenant.

  You plan to implement Endpoint Protection device configuration profiles.

  Which platform can you manage by using the profile?

  A. Ubuntu Linux

  B. macOS

  C. iOS

  D. Android

  Correct Answer: B

  Intune device configuration profiles can be applied to Windows 10 devices and macOS devices

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  Windows 10

  macOS

  Other incorrect answer options you may see on the exam include the following:

  Android Enterprise

  Windows 8.1

  Reference:

  https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure

• Question 27:

  You have a Microsoft 365 E5 tenant.

  You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be applied.

  You need to deploy the policy.

  What should you do first?

  A. Review the sensitive information in Activity explorer

  B. Turn on the policy

  C. Run the policy in simulation mode

  D. Configure Azure Information Protection analytics

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label- automatically?view=o365-worldwide

• Question 28:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps.

  You configure a session control policy to block downloads from SharePoint Online sites.

  Users report that they can still download files from SharePoint Online sites.

  You need to ensure that file download is blocked while still allowing users to browse SharePoint Online sites.

  What should you configure?

  A. an access policy

  B. a data loss prevention (DLP) policy

  C. an activity policy

  D. a Conditional Access policy

  Correct Answer: A

• Question 29:

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePoint admin role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365- atp?view=o365-worldwide

• Question 30:

  Your on-premises network contains an Active Directory domain.

  You have a Microsoft 365 subscription.

  You need to sync the domain with the subscription. The solution must meet the following requirements:

  On-premises Active Directory password complexity policies must be enforced.

  Users must be able to use self-service password reset (SSPR) in Azure AD.

  What should you use?

  A. password hash synchronization

  B. Azure AD Identity Protection

  C. Azure AD Seamless Single Sign-On (Azure AD Seamless SSO)

  D. pass-through authentication

  Correct Answer: D

  Azure Active Directory (Azure AD) Pass-through Authentication allows your users to sign in to both on-premises and cloud-based applications using the same passwords. This feature is an alternative to Azure AD Password Hash Synchronization, which provides the same benefit of cloud authentication to organizations. However, certain organizations wanting to enforce their on-premises Active Directory security and password policies, can choose to use Pass-through Authentication instead.

  Note: Azure Active Directory (Azure AD) self-service password reset (SSPR) lets users reset their passwords in the cloud, but most companies also have an on-premises Active Directory Domain Services (AD DS) environment for users. Password writeback allows password changes in the cloud to be written back to an on-premises directory in real time by using either Azure AD Connect or Azure AD Connect cloud sync. When users change or reset their passwords using SSPR in the cloud, the updated passwords also written back to the on-premises AD DS environment.

  Password writeback is supported in environments that use the following hybrid identity models:

  Password hash synchronization Pass-through authentication Active Directory Federation Services

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr- writeback