Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 331:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365 and contains a mailbox named Mailbox1.

  You plan to use Mailbox1 to collect and analyze unfiltered email messages.

  You need to ensure that Defender for Office 365 takes no action on any inbound emails delivered to Mailbox1.

  What should you do?

  A. Configure a retention policy for Mailbox1.

  B. Create a mail flow rule.

  C. Configure Mailbox1 as a SecOps mailbox.

  D. Place a litigation hold on Mailbox1.

  Correct Answer: C

• Question 332:

  You have a Microsoft 365 subscription.

  You plan to use Adoption Score and need to ensure that it can obtain device and software metrics.

  What should you do?

  A. Enable Endpoint analytics.

  B. Run the Microsoft 365 network connectivity test on each device.

  C. Enable privileged access.

  D. Configure Support integration.

  Correct Answer: A

• Question 333:

  Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.

  You purchase a Microsoft 365 subscription.

  You implement password hash synchronization and Azure AD Seamless Single Sign-On (Seamless SSO).

  You need to ensure that users can use Seamless SSO from the Windows 10 computers.

  What should you do?

  A. Join the computers to Azure AD.

  B. Create a conditional access policy in Azure AD.

  C. Modify the Intranet zone settings by using Group Policy.

  D. Deploy an Azure AD Connect staging server.

  Correct Answer: C

• Question 334:

  You have a Microsoft 365 E5 subscription.

  On Monday, you create a new user named User1.

  On Tuesday, User1 signs in for the first time and perform the following actions:

  Signs in to Microsoft Exchange Online from an anonymous IP address

  Signs in to Microsoft SharePoint Online from a device in New York City.

  Establishes Remote Desktop connections to hosts in Berlin and Hong Kong, and then signs in to SharePoint Online from the Remote Desktop connections

  Which types of sign-in risks will Azure AD Identity Protection detect for User1?

  A. anonymous IP address only

  B. anonymous IP address and atypical travel

  C. anonymous IP address, atypical travel, and unfamiliar sign-in properties

  D. unfamiliar sign-in properties and atypical travel only

  E. anonymous IP address and unfamiliar sign-in properties only

  Correct Answer: D

  Atypical travel and Unfamiliar sign-in properties have learning period.

  The system has an initial learning period of the earliest of 14 days or 10 logins, during which it learns a new user's sign-in behavior.

• Question 335:

  You have a Microsoft 365 subscription.

  You add a domain named contoso.com.

  When you attempt to verify the domain, you are prompted to send a verification email to [email protected].

  You need to change the email address used to verify the domain.

  What should you do?

  A. From the Microsoft 365 admin center, change the global administrator of the Microsoft 365 subscription.

  B. Add a TXT record to the DNS zone of the domain.

  C. From the domain registrar, modify the contact information of the domain.

  D. Modify the NS records for the domain.

  Correct Answer: C

• Question 336:

  Your company has three main offices and one branch office. The branch office is used for research.

  The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

  You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

  What should you include in the recommendation?

  A. Azure AD password protection

  B. a Microsoft Intune device configuration profile

  C. a Microsoft Intune device compliance policy

  D. Azure AD conditional access

  Correct Answer: D

• Question 337:

  You have a Microsoft 365 E5 subscription.

  Users have Android or iOS devices and access Microsoft 365 resources from computers that run Windows 11 or MacOS.

  You need to implement passwordless authentication. The solution must support all the devices.

  Which authentication method should you use?

  A. Windows Hello

  B. FID02 compliant security keys

  C. Microsoft Authenticator app

  Correct Answer: C

• Question 338:

  You have a Microsoft 365 E5 subscription.

  You need to recommend a solution for monitoring and reporting application access. The solution must meet the following requirements:

  Support KQL for querying data.

  Retain report data for at least one year.

  What should you include in the recommendation?

  A. a security report in Microsoft 365 Defender

  B. End point analytics

  C. Microsoft 365 usage analytics

  D. Azure Monitor workbooks

  Correct Answer: D

• Question 339:

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You need to access service health alerts from a mobile phone.

  What should you use?

  A. the Microsoft Authenticator app

  B. the Microsoft 365 Admin mobile app

  C. Intune Company Portal

  D. the Intune app

  Correct Answer: B

• Question 340:

  You have a Microsoft 365 subscription.

  You have a data loss prevention (DLP) policy that blocks sensitive data from being shared in email messages.

  You need to modify the policy so that when an email message containing sensitive data is sent to both external and internal recipients, the message is only prevented from being delivered to the external recipients.

  What should you modify?

  A. the policy rule exceptions

  B. the DLP policy locations

  C. the policy rule conditions

  D. the policy rule actions

  Correct Answer: D