Home / Microsoft / MS-102

Microsoft MS-102 Practice Test - Questions Answers, Page 34

Question list

List of questions

Question 331

(0)

HOTSPOT You have a Microsoft 365 E5 subscription. You plan to create the data loss prevention (DLP) policies shown in the following table. You need to create DLP rules for each policy. Which p

Question 332

(0)

HOTSPOT From the Microsoft Purview compliance portal, you create a retention policy named Policy 1. You need to prevent all users from disabling the policy or reducing the retention period. How s

Question 333

(0)

HOTSPOT Your company has a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table. You create a retention label nam

Question 334

(0)

You have a Microsoft 365 E5 subscription. Your company s Microsoft Secure Score recommends the actions shown in the following exhibit. You select Create Safe Links policies for email messages an

Question 335

(0)

HOTSPOT You have a Microsoft 365 E5 subscription that contains the users shown in the following table. The subscription has the following two anti-spam policies: * Name: AntiSpam1 * Priority: 0

Question 336

(0)

DRAG DROP You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. You need to onboard the devices to Microsoft Defender for Endpoint. The solution must m

Question 337

(0)

HOTSPOT You have a Microsoft 365 E5 subscription. You have an Azure AD tenant named contoso.com that contains the following users: * Admin1 * Admin2 * User1 Contoso.com contains an administrat

Question 338

(0)

HOTSPOT You have a Microsoft 365 subscription. You need to create two groups named Group! and Group2. The solution must meet the following requirements: * Group1 must be mail-enabled and have an

Question 339

(0)

HOTSPOT You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You create an administrative unit named AU1 that contains the members shown in the followin

Question 340

(0)

HOTSPOT Your company has a Azure AD tenant named comoso.onmicrosoft.com that contains the users shown in the following table. You need to identify which users can perform the following administr

Related questions

HOTSPOT Your company has a Microsoft 365 subscription that contains the users shown in the following table. External collaboration settings have default configuration. You need to identify which users can perform the following administrative tasks: * Modify the password protection policy. * Create guest user accounts. Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription that contains the labels shown in the following table. You have the items shown in the following table. Which items can you view in Content explorer?

HOTSPOT You have a Microsoft 365 E5 subscription that contains 200 Android devices enrolled in Microsoft Intune. You create an Android app protection policy named Policy! that is targeted to all Microsoft apps and assigned to all users. Policy! has the Data protection settings shown in the following exhibit. Use the drop-down menus to select 'he answer choice that completes each statement based on the information presented in the graphic.

You need to ensure that all the sales department users can authenticate successfully during Project1 and Project2. Which authentication strategy should you implement for the pilot projects?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD). You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch). You configure a pilot for co-management. You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1. You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager. Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection. Does this meet the goal?

You have a Microsoft 365 subscription that contains the users shown in the following table. You plan to use Exchange Online to manage email for a DNS domain. An administrator adds the DNS domain to the subscription. The DNS domain has a status of Incomplete setup. You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege. Which user should you identify?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it as a result these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: * Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. * User passwords must be 10 characters or more. Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant. Does this meet the goal?

HOTSPOT You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. All the devices are onboarded To Microsoft Defender for Endpoint You plan to use Microsoft Defender Vulnerability Management to meet the following requirements: * Detect operating system vulnerabilities.

You have an Azure AD tenant. You have 1,000 computers that run Windows 10 Pro and are joined to Azure AD. You purchase a Microsoft 365 E3 subscription. You need to deploy Windows 10 Enterprise to the computers. The solution must minimize administrative effort. What should you do?

You have a Microsoft 365 E5 subscription. You create an account tor a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint and OneDrive. Solution: From the Azure Active Directory admin center, you assign SecAdmin1 the Teams Administrator role. Does this meet the goal?

Question 331

HOTSPOT

You have a Microsoft 365 E5 subscription.

You plan to create the data loss prevention (DLP) policies shown in the following table.

You need to create DLP rules for each policy.

Which policies support the sender is condition and the file extension is condition? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 332

HOTSPOT

From the Microsoft Purview compliance portal, you create a retention policy named Policy 1.

You need to prevent all users from disabling the policy or reducing the retention period.

How should you configure the Azure PowerShell command? To answer select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 333

HOTSPOT

Your company has a Microsoft 365 subscription that uses an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

You create a retention label named Label 1 that has the following configurations:

* Retains content for five years

* Automatically deletes all content that is older than five years

You turn on Auto labeling for Label1 by using a policy named Policy1. Policy1 has the following configurations:

* Applies to content that contains the word Merger

* Specifies the OneDrive accounts and SharePoint sites locations

You run the following command.

Set-RetentionConpliancePolicy Policy1 -RestrictiveRetention Strue -Force

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 334

You have a Microsoft 365 E5 subscription.

Your company s Microsoft Secure Score recommends the actions shown in the following exhibit.

You select Create Safe Links policies for email messages and change Status to Risk accepted in the Status & action plan settings.

How does the change affect the Secure Score?

remains the same

increases by 1 point

increases by 9 points

decreases by 1 point

decreases by 9 points

Show Answer Comment (0)

Question 335

HOTSPOT

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

The subscription has the following two anti-spam policies:

* Name: AntiSpam1

* Priority: 0

* Induce these users, groups and domains

o Users: User3

o Groups: Group!

* Exclude these users, groups and domains

o Groups: Group2

* Message limits

o Set a daily message limit 100

* Name: AntiSpam2

* Priority: 1

* Include these users, groups and domains

o Users: User! o Groups: Group2

* Exclude these users, groups and domains

o Users: User3

* Message limits

o Set a daily message limit 50

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 336

DRAG DROP

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You need to onboard the devices to Microsoft Defender for Endpoint. The solution must minimize administrative effort.

What should you use to onboard each type of device? To answer, drag the appropriate onboarding methods to the correct device types. Each onboarding method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 337

HOTSPOT

You have a Microsoft 365 E5 subscription.

You have an Azure AD tenant named contoso.com that contains the following users:

* Admin1

* Admin2

* User1

Contoso.com contains an administrative unit named AIM that has no role assignments. User1 is a member of AU1. You create an administrative unit named AU2 that does NOT have any members or role assignments. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Answer Comment (0)

Question 338

HOTSPOT

You have a Microsoft 365 subscription.

You need to create two groups named Group! and Group2. The solution must meet the following requirements:

* Group1 must be mail-enabled and have an associated Microsoft SharePoint Online site.

* Group2 must support dynamic membership and role assignments but must NOT be mail-enabled.

Which types of groups should you create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.