Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 361:

  Your network contains an Active Directory domain and an Azure AD tenant.

  The network uses a firewall that contains a list of allowed outbound domains.

  You begin to implement directory synchronization.

  You discover that the firewall configuration contains only the following domain names in the list of allowed domains:

  Correct Answer: A

  https://www.examtopics.com/discussions/microsoft/view/53623-exam-ms-100-topic-3-question-40-discussion/

• Question 362:

  You have a Microsoft 365 E5 subscription that contains users in the United States, Europe, and Asia.

  You use Azure AD Identity Protection.

  You have a virtual desktop infrastructure (VDI). All VDI servers are located in the United States.

  Users connect to Microsoft 365 from laptops and the VDI.

  Some VDI users report that they are blocked from signing in to Microsoft 365 due to a high sign-in risk.

  You need to reduce the likelihood that the VDI users will be erroneously blocked from signing in to Microsoft 365. The solution must ensure that sign-ins from the VDI environment are protected by using Identity Protection.

  What should you configure?

  A. ExpressRoute for Microsoft 365

  B. a trusted location

  C. a Satellite Geography location

  D. a Conditional Access policy

  Correct Answer: B

• Question 363:

  You have a Microsoft 365 subscription that contains more than 2,000 guest users.

  You need to ensure that when guest users are added to Microsoft 365 groups in the subscription, their membership is validated by the group owner every 30 days.

  What should you configure?

  A. group expiration policies

  B. retention policies

  C. access reviews

  D. Conditional Access policies

  Correct Answer: C

  Access review policy can request the owner to check the membership for guest every 30 days.

• Question 364:

  You have a Microsoft 365 subscription.

  You need to implement a passwordless authentication solution that supports the following device types:

  Correct Answer: A

• Question 365:

  Your company has a Microsoft Entra tenant named contoso.com and a Microsoft 365 subscription.

  All users use Windows 10 devices to access Microsoft Office 365 apps.

  All the devices are in a workgroup.

  You plan to implement password less sign-in to contoso.com.

  You need to recommend changes to the infrastructure for the planned implementation.

  What should you include in the recommendation?

  A. Join all the devices to contoso.com.

  B. Deploy Microsoft Entra Application Proxy.

  C. Deploy X.509.3 certificates to all the users.

  D. Deploy the Microsoft Authenticator app.

  Correct Answer: D

• Question 366:

  You need to ensure that all the sales department users can authenticate successfully during Project1 and Project2. Which authentication strategy should you implement for the pilot projects?

  A. pass-through authentication

  B. pass-through authentication and seamless SSO

  C. password hash synchronization and seamless SSO

  D. password hash synchronization

  Correct Answer: C

• Question 367:

  You are evaluating the required processes for Project1.

  You need to recommend which DNS record must be created while adding a domain name for the project.

  Which DNS record should you recommend?

  A. host (A)

  B. host information

  C. text (TXT)

  D. pointer (PTR)

  Correct Answer: C

  Not necessary Cname record to add Email Only TXT o MX Record are Valid. Correct C https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365worldwide#step-1-add-a-txt-or-mx-record-to-verify-you-own-the-domain

• Question 368:

  Which role should you assign to User1?

  Available Choices (select all choices that are correct)

  A. Hygiene Management

  B. Security Reader

  C. Security Administrator

  D. Records Management

  Correct Answer: B

  A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

  Users with the Security Reader role have global read-only access on security-related features, including all information in Microsoft 365 security center, Azure Active Directory, Identity Protection, Privileged Identity Management, as well as the

  ability to read Azure

  Active Directory sign-in reports and audit logs, and in Office 365 Security and Compliance Center.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directoryassign- admin-roles

• Question 369:

  HOTSPOT

  Your company has a Microsoft 365 subscription that contains the users shown in the following table.

  

  External collaboration settings have default configuration.

  You need to identify which users can perform the following administrative tasks:

  Modify the password protection policy.

  Create guest user accounts.

  Which users should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 370:

  HOTSPOT

  Your company has a Azure AD tenant named comoso.onmicrosoft.com that contains the users shown in the following table.

  

  You need to identify which users can perform the following administrative tasks:

  Reset the password of User4.

  Modify the value for the manager attribute of User4.

  Which users should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: