Microsoft MS-102 Practice Test - Questions Answers, Page 43

You have a Microsoft 365 ES subscription.

From the Microsoft 365 Defender portal, you review your company's Microsoft Secure Score.

You discover a large number of recommended actions.

You need to ensure that the actions can be filtered based on specific department names.

What should you create first?

HOTSPOT

You have a Microsoft 365 E5 subscription.

You need to create a Conditional Access policy that will require the use of FID02 security keys only when users join their Windows devices to Microsoft Entra ID.

How should you configure the policy? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Your network contains an Active Directory domain.

You deploy a Microsoft Entra tenant.

Another administrator configures the domain to synchronize to the Microsoft Entra tenant

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to the Microsoft Entra tenant. All the other user accounts synchronized successfully.

You review Microsoft Entra Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to the Microsoft Entra tenant.

Solution: From Microsoft Entra Connect you modify the Microsoft Entra credentials.

Does this meet the goal?

HOTSPOT

You have a Microsoft 365 E5 subscription that contains a SharePoint site named Site1. Site1 contains the files shown in the following table.

You have the users shown in the following table.

You create a data loss prevention (DLP) policy with an advanced DLP rule and apply the policy to Site1. The DLP rule is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true Otherwise, select No

NOTE: Each correct selection is worth one point.

HOTSPOT

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure a Multifactor authentication registration policy that has the following settings:

* Assignments:

* Include: Group1

* Exclude: Group2

* Controls: Requite Microsoft Entra ID multifactor authentication registration

* Policy enforcement: Enabled

You create a conditional access policy that has the following settings:

* Name: Policy1

* Assignments:

* Include: Group1

* Exclude; Group1

* Grant: Require multifactor authentication

* Enable policy. On

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each coned selection is one point.

HOTSPOT

You have a Microsoft 365 E5 subscription.

You create a Conditional Access policy named Policy1 and assign Policy1 to all users.

You need to configure Policy1 to enforce multi factor authentication (MFA) if the user risk level is high.

Which two settings should you configure in Policy1? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

HOTSPOT

You have a Microsoft 365 subscription.

From Microsoft Entra Privileged Identity Management (PIM), you configure Role settings for the Global Administrator role as shown in the following exhibit.

You make a user named [email protected] eligible for the Global Administrator role.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the

HOTSPOT

You have a Microsoft 365 E5 subscription.

You need to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra. Eligible users must meet the following requirements:

* Always be able to request the User Administrator role.

* Must provide a reason when requesting the User Administrator role

* Must require multi-factor authentication (MFA} when activating the User Administrator role

The solution must minimize administrative effort.

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You plan to create an Endpoint security policy by using the Defender Update controls template. To which device can you apply the policy?