Microsoft Microsoft Certifications MS-102 Questions & Answers

• Question 71:

  You have a Microsoft 365 tenant.

  You plan to enable BitLocker Disk Encryption (BitLocker) automatically for all Windows 10 devices that enroll in Microsoft Intune.

  What should you use?

  A. an attack surface reduction (ASR) policy

  B. an app configuration policy

  C. a device compliance policy

  D. a device configuration profile

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/mem/intune/protect/encrypt-devices

• Question 72:

  You have a Microsoft 365 tenant and a LinkedIn company page.

  You plan to archive data from the LinkedIn page to Microsoft 365 by using the LinkedIn connector.

  Where can you store data from the LinkedIn connector?

  A. a Microsoft OneDrive for Business folder

  B. a Microsoft SharePoint Online document library

  C. a Microsoft 365 mailbox

  D. Azure Files

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/archive-linkedin- data?view=o365-worldwide

• Question 73:

  You have a Microsoft 365 E5 subscription.

  You create an account for a new security administrator named SecAdmin1.

  You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection (ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.

  Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Service Administrator role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to assign the Security Administrator role.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365- atp?view=o365-worldwide

• Question 74:

  Your on-premises network contains an Active Directory domain named Contoso.com and 500 devices that run either macOS, Windows 8.1. Windows 10, or Windows 11. All the devices are managed by using Microsoft Endpoint Configuration Manager. The domain syncs with Azure Active Directory (Azure AD).

  You plan to implement a Microsoft 365 E5 subscription and enable co-management. Which devices can be co-managed after the implementation?

  A. Windows 11 and Windows 10 only

  B. Windows 11, Windows 10-Windows8.1.andmacOS

  C. Windows 11 and macOS only

  D. Windows 11 only

  E. Windows 11. Windows 10, and Windows8.1 only

  Correct Answer: C

• Question 75:

  You have a Microsoft 365 E5 tenant, industry regulations require that the tenant comply with the ISO 27001 standard. You need to evaluate the tenant based on the standard

  A. From Policy in the Azure portal, select Compliance, and then assign a pokey

  B. From Compliance Manager, create an assessment

  C. From the Microsoft J6i compliance center, create an audit retention policy.

  D. From the Microsoft 365 admin center enable the Productivity Score.

  Correct Answer: B

• Question 76:

  You have a Microsoft 365 E5 tenant.

  You need to ensure that when a document containing a credit card number is added to the tenant, the document is encrypted.

  Which policy should you use?

  A. a retention policy

  B. a retention label policy

  C. an auto-labeling policy

  D. an insider risk policy

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label- automatically?view=o365-worldwide

• Question 77:

  Your network contains an Active Directory domain named adatum.com that is synced to Azure AD.

  The domain contains 100 user accounts.

  The city attribute for all the users is set to the city where the user resides.

  You need to modify the value of the city attribute to the three-letter airport code of each city.

  What should you do?

  A. From Windows PowerShell on a domain controller, run the Gec-ADUser and Sec- ADUser cmdlets.

  B. From Azure Cloud Shell, run the Gec-ADUser and Sec-ADUser cmdlets.

  C. From Windows PowerShell on a domain controller, run the Gec-MgUser and Updace- MgUser cmdlets.

  D. From Azure Cloud Shell, run the Gec-MgUser and Update-MgUser cmdlets.

  Correct Answer: A

  The user accounts are synced from the on-premise Active Directory to the Microsoft Azure Active Directory (Azure AD). Therefore, the city attribute must be changed in the on- premise Active Directory.

  You can use Windows PowerShell on a domain controller and run the Get-ADUser cmdlet to get the required users and pipe the results into Set-ADUser cmdlet to modify the city attribute.

  Note:

  There are several versions of this question in the exam. The question has two possible correct answers:

  1.

  From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.

  2.

  From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings. Other incorrect answer options you may see on the exam include the following:

  1.

  From the Azure portal, select all the Azure AD users, and then use the User settings blade.

  2.

  From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set- AzureADUser cmdlets.

  3.

  From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.

  4.

  From Azure Cloud Shell, run the Get-ADUser and Set-ADUser cmdlets. Reference: https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduser

• Question 78:

  You have a Microsoft 365 E5 tenant.

  You need to be notified when emails with attachments that contain sensitive personal data are sent to external recipients.

  Which two policies can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. a data loss prevention (DLP) policy

  B. a sensitivity label policy

  C. a Microsoft Cloud App Security file policy

  D. a communication compliance policy

  E. a retention label policy

  Correct Answer: AD

• Question 79:

  You have a Microsoft 365 tenant that uses Microsoft Endpoint Manager for device management. You need to add the phone number of the help desk to the Company Portal app. What should you do?

  A. From Customization in the Microsoft Endpoint Manager admin center, modify the support information for the tenant.

  B. From the Microsoft Endpoint Manager admin center, create an app configuration policy.

  C. From the Microsoft 365 admin center, modify Organization information.

  D. From the Microsoft 365 admin center, modify Help desk information.

  Correct Answer: A

  Reference: https://systemcenterdudes.com/intune-company-portal-customization/

• Question 80:

  You have a Microsoft 365 E5 tenant that contains the devices shown in the following table.

  

  You plan to review device startup performance issues by using Endpoint analytics.

  Which devices can you monitor by using Endpoint analytics?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1, Device2, and Device3 only

  D. Device1, Device2, and Device4 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/analytics/overview