Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 351:

  Your network contains an Active Directory domain.

  You deploy an Azure AD tenant.

  Another administrator configures the domain to synchronize to Azure AD.

  You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

  You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

  You need to ensure that the 10 user accounts are synchronized to Azure AD.

  Solution: From Azure AD Connect, you modify the filtering settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 352:

  You have a Microsoft 365 subscription.

  You need to be notified to your personal email address when a Microsoft Exchange Online service issue occurs.

  What should you do?

  A. From the Exchange admin center, create a contact.

  B. From the Microsoft Outlook client, configure an Inbox rule.

  C. From the Microsoft 365 admin center, update the technical contact details.

  D. From the Microsoft 365 admin center, customize the Service health settings.

  Correct Answer: D

  Service Health can mail only Exchange issue. Technical contact get mail M365 total issue.

• Question 353:

  You have a Microsoft 365 subscription.

  All users are assigned Microsoft 365 Apps for enterprise licenses.

  You need to ensure that reports display the names of users that have activated Microsoft 365 apps and on how many devices.

  What should you modify in the Microsoft 365 admin center?

  A. the Reports reader role

  B. Organization information

  C. Org settings for Privacy profile

  D. Org settings for Reports

  Correct Answer: D

• Question 354:

  Your company has a Microsoft 365 E5 subscription.

  You onboard a device on the company's network to Microsoft Defender for Endpoint.

  In the Microsoft 365 Defender portal, you notice that the device inventory displays many devices that have an Onboarding status of Can be onboarded.

  You need to ensure that onboarded devices are prevented from polling the network for device discovery but can still discover devices with which they communicate directly.

  What should you configure in the Microsoft 365 Defender portal?

  A. standard discovery

  B. device discovery exclusions

  C. basic discovery

  D. a network assessment job

  Correct Answer: C

• Question 355:

  You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.

  You notice that it takes several days to notify email recipients when an incoming email message is marked as spam, and then quarantined.

  You need to ensure that the email recipients are notified within 24 hours.

  What should you do?

  A. Modify the default inbound anti-spam policy.

  B. Modify the DefaultFullAccessPolicy quarantine policy.

  C. Add a custom quarantine policy.

  D. Modify the global settings for quarantine policies.

  Correct Answer: D

  Quarantine policy, Global Settings (Defender portal -> Email and Collaboration -> Policies and rules -> Threat policies -> Quarantine policy). Change 'Send end-user spam notifications' to Daily.

• Question 356:

  You have a Microsoft 365 E5 subscription.

  You need to ensure that administrators receive an email when Microsoft 365 Defender detects a sign-in from a risky IP address.

  What should you create?

  A. a vulnerability notification rule

  B. an alert

  C. an incident assignment filter

  D. an incident notification rule

  Correct Answer: C

  C - incident notification rule. Risky sign in is not available underbalert policy

• Question 357:

  You have a Microsoft 365 E5 subscription.

  From the Microsoft Purview compliance portal, you create a new data loss prevention (DLP) policy named DLP1 that protects financial data from being shared by using Microsoft Teams messages. You apply DLP1 to the users in the finance

  department.

  An incident is raised when a finance department user named User1 shares financial data in a Teams channel that includes external members.

  When User1 uses Teams to send the same message in a 1:1 chat or a private channel, the message is blocked as expected.

  You need to ensure that User1 is prevented from sharing financial data in Teams channels that include external members.

  What should you do?

  A. Edit the settings of the team that contains the channel.

  B. Edit the Locations settings of DLP1.

  C. Modify the licenses assigned to User1.

  D. Edit the policy rules of DLP1.

  Correct Answer: B

• Question 358:

  You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant includes a user named User1.

  You enable Azure AD Identity Protection.

  You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

  To which role should you add User1?

  A. Compliance Administrator

  B. Security Administrator

  C. Service Administrator

  D. User Administrator

  Correct Answer: B

• Question 359:

  Your network contains an Active Directory domain.

  You have an Azure AD tenant that has Security defaults disabled.

  Azure AD Connect is configured for directory synchronization. Password hash synchronization and pass-through authentication are disabled.

  You need to enable Azure AD Identity Protection to detect leaked credentials.

  What should you do first?

  A. From Azure AD Connect, enable password hash synchronization.

  B. From the Microsoft Entra admin center, enable Security defaults.

  C. From the Microsoft Entra admin center, configure verifiable credentials.

  D. From Azure AD Connect, enable pass-through authentication.

  Correct Answer: A

  https://www.examtopics.com/discussions/microsoft/view/107560-exam-ms-100-topic-3-question-93-discussion/

• Question 360:

  Your network contains an on-premises Active Directory domain.

  You have a Microsoft 365 subscription.

  You implement a directory synchronization solution that uses pass-through authentication.

  You configure Azure AD smart lockout as shown in the following exhibit.

  

  You discover that Active Directory users can use the passwords in the custom banned passwords list.

  You need to ensure that banned passwords are banned for all users.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From a domain controller, install the Azure AD Password Protection Proxy.

  B. From Active Directory, modify the Default Domain Policy.

  C. From a domain controller, install the Azure AD Application Proxy connector.

  D. From all the domain controllers, install the Azure AD Password Protection DC Agent.

  E. From Password protection for Windows Server Active Directory, modify the Mode setting.

  F. From Custom banned passwords, modify the Enforce custom list setting.

  Correct Answer: ADF