Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 341:

  You have a Microsoft 365 subscription.

  You need to receive a notification each time a user in the service desk department grants Full Access permissions for a user mailbox.

  What should you configure?

  A. a data loss prevention (DLP) policy

  B. an alert policy

  C. an audit search

  D. an insider risk management policy

  Correct Answer: B

• Question 342:

  You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

  

  You create and assign a data loss prevention (DLP) policy named Policy1. Policy1 is configured to prevent documents that contain Personally Identifiable Information (Pll) from being emailed to users outside your organization. To which users can User! send documents that contain Pll?

  A. User2only

  B. User2and User3only

  C. User2, User3, and User4 only

  D. User2, User3, User4, and User5

  Correct Answer: B

• Question 343:

  You have a Microsoft 365 E5 subscription that uses Endpoint security.

  You need to create a group and assign the Endpoint Security Manager role to the group.

  Which type of group can you use?

  A. Microsoft 365 only

  B. security only

  C. mail-enabled security and security only

  D. mail-enabled security, Microsoft 365, and security only

  E. distribution, mail-enabled security, Microsoft 365, and security

  Correct Answer: D

• Question 344:

  Your network contains an Active Directory forest.

  You deploy Microsoft 365.

  You plan to implement directory synchronization.

  You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

  Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

  User passwords must be 10 characters or more.

  Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 345:

  Your network contains an Active Directory forest.

  You deploy Microsoft 365.

  You plan to implement directory synchronization.

  You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

  Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

  User passwords must be 10 characters or more.

  Solution: implement password hash synchronization and configure password protection in the Azure AD tenant.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 346:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You plan to create a Conditional Access policy that will use GPS-based named locations. Which users can the policy protect?

  A. User2 and User4 only

  B. User1 and User3 only

  C. Userl1 only

  D. User1, User2. User3. and User4

  Correct Answer: C

• Question 347:

  You have a Microsoft 365 E5 subscription that contains a user named User1

  You create a retention label named Retention1 that is published to all locations.

  You need to ensure that User1 can label email messages by using Retention1 as soon as possible.

  Which cmdlet should you run in Microsoft Exchange Online PowerShell?

  A. Start-MpScan

  B. Start-Process

  C. Start-ManagedFolderAsslstant

  D. Start-AppBackgroundTask

  Correct Answer: C

• Question 348:

  You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1.

  You enable Azure AD Identity Protection.

  You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

  To which role should you add User1?

  A. Security Reader

  B. Global Administrator

  C. Owner

  D. User Administrator

  Correct Answer: A

• Question 349:

  You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?

  A. the Microsoft 365 admin center

  B. the SharePoint admin center

  C. the Microsoft Entra admin center

  D. the Microsoft Purview compliance portal

  Correct Answer: A

• Question 350:

  You have a Microsoft 365 E5 subscription.

  You create an account tor a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Administrator role.

  Does this meet the goal?

  A. Yes

  B. no

  Correct Answer: B