Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 51:

  You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.

  

  Azure AD Connect has the following settings:

  Password Hash Sync: Enabled Pass-through authentication: Enabled You need to identify which users will be able to authenticate by using Azure AD if connectivity between on-premises Active Directory and the internet is lost.

  Which users should you identify?

  A. none

  B. Used only1

  C. User1 and User2 only

  D. User1. User2, and User3

  Correct Answer: B

• Question 52:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  You need to enable User1 to create Compliance Manager assessments.

  Solution: From the Microsoft 365 compliance center, you add User1 to the Compliance Manager Assessors role group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference:

  https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft- 365/security/office-365-security/permissions-in-the-security-and-compliance-center.md

• Question 53:

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

  When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

  

  You need to enable user access to the partner company's portal. Which Microsoft Defender for Endpoint setting should you modify?

  A. Alert notifications

  B. Alert suppression

  C. Custom detections

  D. Advanced hunting

  E. Indicators

  Correct Answer: E

  

  This Website Is Blocked By Your Organization

  Custom indicators will block malicious IPs, URLs, and domains. Then, they will display the above message for the user.

  Reference:

  https://jadexstrategic.com/web-protection/

• Question 54:

  You have a computer that runs Windows 10.

  You need to verify which version of Windows 10 is installed.

  Solution: From the Settings app, you select Update and Security to view the update history.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 55:

  You have a Microsoft 365 tenant.

  Company policy requires that all Windows 10 devices meet the following minimum requirements:

  Require complex passwords.

  Require the encryption of data storage devices.

  Have Microsoft Defender Antivirus real-time protection enabled.

  You need to prevent devices that do not meet the requirements from accessing resources in the tenant.

  Which two components should you create? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a configuration policy

  B. a compliance policy

  C. a security baseline profile

  D. a conditional access policy

  E. a configuration profile

  Correct Answer: BD

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 56:

  You have a Microsoft 365 tenant that contains 1,000 Windows 10 devices. The devices are enrolled in Microsoft Intune.

  Company policy requires that the devices have the following configurations:

  Require complex passwords.

  Require the encryption of removable data storage devices. Have Microsoft Defender Antivirus real-time protection enabled.

  You need to configure the devices to meet the requirements.

  What should you use?

  A. an app configuration policy

  B. a compliance policy

  C. a security baseline profile

  D. a conditional access policy

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/device-compliance-get-started

• Question 57:

  You have a Microsoft 365 tenant that contains a Windows 10 device named Device1 and the Microsoft Endpoint Manager policies shown in the following table.

  

  The policies are assigned to Device1.

  Which policy settings will be applied to Device1?

  A. only the settings of Policy1

  B. only the settings of Policy2

  C. only the settings of Policy3

  D. no settings

  Correct Answer: D

• Question 58:

  You need to notify the manager of the human resources department when a user in the department shares a file or folder from the departments Microsoft SharePoint Online site. What should you do?

  A. From the SharePoint Online site, create an alert.

  B. From the SharePoint Online admin center, modify the sharing settings.

  C. From the Microsoft 365 Defender portal, create an alert policy.

  D. From the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.

  Correct Answer: C

• Question 59:

  You have a Microsoft 365 E5 tenant.

  The Microsoft Secure Score for the tenant is shown in the following exhibit.

  

  You plan to enable Security defaults for Azure Active Directory (Azure AD).

  Which three improvement actions will this affect?

  A. Require MFA for administrative roles.

  B. Ensure all users can complete multi-factor authentication for secure access

  C. Enable policy to block legacy authentication

  D. Enable self-service password reset

  E. Use limited administrative roles

  Correct Answer: ABC

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept- fundamentals-security-defaults

• Question 60:

  You have a Microsoft 365 subscription that uses Security and Compliance retention policies.

  You implement a preservation lock on a retention policy that is assigned to all executive users.

  Which two actions can you perform on the retention policy? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point?

  A. Add locations to the policy

  B. Reduce the duration of policy

  C. Remove locations from the policy

  D. Extend the duration of the policy

  E. Disable the policy

  Correct Answer: AD