Month End Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

MS-102 Microsoft 365 Administrator Exam Questions and Answers

Questions 4

You have a Microsoft J65 E5 subscription.

You integrate Microsoft Defender for Endpoint with Microsoft Intune.

You need to ensure that devices automatically onboard to Defender for Endpoint when they are enrolled in Intune.

Solution: You configure a device configuration profile.

Does this meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Questions 5

You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com.

Corporate policy states that user passwords must not include the word Contoso.

What should you do to implement the corporate policy?

Options:

A.

From Azure AD Identity Protection, configure a sign-in risk policy.

B.

From the Microsoft Entra admin center, create a conditional access policy.

C.

From the Microsoft 365 admin center, configure the Password policy settings.

D.

From the Microsoft Entra admin center, configure the Password protection settings.

Buy Now
Questions 6

Your company has a Microsoft E5 tenant.

The company must meet the requirements of the ISO/IEC 27001:2013 standard.

You need to assess the company’s current state of compliance.

What should you use?

Options:

A.

eDiscovery

B.

Information governance

C.

Compliance Manager

D.

Data Subject Requests (DSRs)

Buy Now
Questions 7

You have a Microsoft 365 E5 subscription.

You are creating a data loss prevention (DLP) policy applied to the locations as shown in the following exhibit.

MS-102 Question 7

Which condition can you use in the DIP rules of the policy?

Options:

A.

sensitive info types

B.

sensitivity labels

C.

content search queries

D.

keywords

Buy Now
Questions 8

Your company has an Azure AD tenant named contoso.com that includes the users shown in the following table.

MS-102 Question 8

Group2isa member of Group1.

You assign an Office 365 Enterprise E3 license to Group1.

How many Office 365 E3 licenses are assigned?

Options:

A.

1

B.

2

C.

3

D.

4

Buy Now
Questions 9

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

MS-102 Question 9

You have a Microsoft Office 365 retention label named Retention1 that is published to Exchange email.

You have a Microsoft Exchange Online retention policy that is applied to all mailboxes. The retention policy contains a retention tag named Retention2.

Which users can assign Retention1 and Retention2 to their emails? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 9

Options:

Buy Now
Questions 10

You have a Microsoft 365 E5 tenant.

You need to create a policy that will trigger an alert when unusual Microsoft Office 365 usage patterns are detected.

What should you use to create the policy?

Options:

A.

the Microsoft 365 admin center

B.

the Microsoft Purview compliance portal

C.

the Microsoft Defender for Cloud Apps portal

D.

the Microsoft Apps admin center

Buy Now
Questions 11

Your company has a Microsoft 365 subscription.

You need to identify all the users in the subscription who are licensed for Office 365 through a group membership. The solution must include the name of the group used to assign the license.

What should you use?

Options:

A.

Active users in the Microsoft 365 admin center

B.

Reports in Microsoft Purview compliance portal

C.

the Licenses blade in the Microsoft Entra admin center

D.

Reports in the Microsoft 365 admin center

Buy Now
Questions 12

HOTSPOT

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

MS-102 Question 12

You configure the Microsoft Authenticator authentication method policy to enable passwordless authentication as shown in the following exhibit.

MS-102 Question 12

Both User1 and User2 report that they are NOT prompted for passwordless sign-in in the Microsoft Authenticator app.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

MS-102 Question 12

Options:

Buy Now
Questions 13

You have a hybrid deployment of Azure AD that contains the users shown in the following table.

MS-102 Question 13

You need to identify which users can perform the following tasks:

• View sync errors in Azure AD Connect Health.

• Configure Azure AD Connect Health settings.

Which user should you identify for each task? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 13

Options:

Buy Now
Questions 14

: 249 HOTSPOT

You have a Microsoft 365 E5 tenant that contains the users shown in the following table.

MS-102 Question 14

The tenant contains the devices shown in the following table.

MS-102 Question 14

You have the apps shown in the following table.

MS-102 Question 14

You plan to use Microsoft Endpoint Manager to manage the apps for the users.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

MS-102 Question 14

Options:

Buy Now
Questions 15

You have a Microsoft 365 subscription.

From the Microsoft 365 admin center, you open the Microsoft 365 Apps usage report as shown in the following exhibit.

MS-102 Question 15

You need ensure that the report meets the following requirements:

• The Username column must display the actual name of each user.

• Usage of the Microsoft Teams mobile app must be displayed.

What should you modify for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

MS-102 Question 15

Options:

Buy Now
Questions 16

: 230

You have a Microsoft 365 E5 subscription that uses Azure Advanced Threat Protection (ATP).

You need to create a detection exclusion in Azure ATP.

Which tool should you use?

Options:

A.

the Security & Compliance admin center

B.

Microsoft Defender Security Center

C.

the Microsoft 365 admin center

D.

the Azure Advanced Threat Protection portal

E.

the Cloud App Security portal

Buy Now
Questions 17

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365.

You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware.

Solution: You create an anti-malware policy.

Does this meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Questions 18

You have a Microsoft 365 E5 subscription.

Your company s Microsoft Secure Score recommends the actions shown in the following exhibit.

MS-102 Question 18

You select Create Safe Links policies for email messages and change Status to Risk accepted in the Status & action plan settings.

How does the change affect the Secure Score?

Options:

A.

remains the same

B.

increases by 1 point

C.

increases by 9 points

D.

decreases by 1 point

E.

decreases by 9 points

Buy Now
Questions 19

You have a Microsoft 365 E5 subscription.

Al users have Mac computers. ATI the computers are enrolled in Microsoft Endpoint Manager and onboarded to Microsoft Defender for Endpoint.

You need to configure Microsoft Defender for Endpoint on the computers.

What should you create from the Endpoint Management admin center?

Options:

A.

a Microsoft Defender for Endpoint baseline profile

B.

an update policy for iOS

C.

a device configuration profile

D.

a mobile device management (MDM) security baseline profile

Buy Now
Questions 20

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

MS-102 Question 20

The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

User2 fails to authenticate to the Microsoft Entra tenant when signing in as usef2@fabfikam.com

You need to ensure that User2 can access the resources in Microsoft Entra ID.

Solution: From the Microsoft Entra admin center, you add <abrlkam.com as a custom domain You insttud User2 to sign in as user2@fabrikam.com

Does this meet the goal?

Options:

A.

Yes

B.

No

Buy Now
Questions 21

Which role should you assign to User1?

Available Choices (select all choices that are correct)

Options:

A.

Hygiene Management

B.

Security Reader

C.

Security Administrator

D.

Records Management

Buy Now
Questions 22

You need to ensure that all the sales department users can authenticate successfully during Project1 and Project2.

Which authentication strategy should you implement for the pilot projects?

Options:

A.

pass-through authentication

B.

pass-through authentication and seamless SSO

C.

password hash synchronization and seamless SSO

D.

password hash synchronization

Buy Now
Questions 23

You are evaluating the required processes for Project1.

You need to recommend which DNS record must be created while adding a domain name for the project.

Which DNS record should you recommend?

Options:

A.

host (A)

B.

host information

C.

text (TXT)

D.

alias (CNAME)

Buy Now
Questions 24

HOTSPOT

You create the Microsoft 365 tenant.

You implement Azure AD Connect as shown in the following exhibit.

MS-102 Question 24

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

MS-102 Question 24

Options:

Buy Now
Questions 25

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

Does this meet the goal?

Options:

A.

Yes

B.

NO

Buy Now
Questions 26

You need to ensure that the Microsoft 365 incidents and advisories are reviewed monthly.

Which users can review the incidents and advisories, and which blade should the users use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 26

Options:

Buy Now
Questions 27

You need to ensure that Admin4 can use SSPR.

Which tool should you use. and which action should you perform? To answer, select the appropriate options m the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 27

Options:

Buy Now
Questions 28

You are evaluating the use of multi-factor authentication (MFA).

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

MS-102 Question 28

Options:

Buy Now
Questions 29

You need to configure Azure AD Connect to support the planned changes for the Montreal Users and Seattle Users OUs.

What should you do?

Options:

A.

From the Microsoft Azure AD Connect wizard, select Customize synchronization options.

B.

From PowerShell, run the Add-ADSyncConnectorAttnbuteinclusion cmdlet.

C.

From PowerShell, run the start-ADSyncSyncCycle cmdlet.

D.

From the Microsoft Azure AD Connect wizard, select Manage federation.

Buy Now
Questions 30

You need to configure just in time access to meet the technical requirements.

What should you use?

Options:

A.

entitlement management

B.

Azure AD Privileged Identity Management (PIM)

C.

access reviews

D.

Azure AD Identity Protection

Buy Now
Questions 31

You need to configure the Office 365 service status notifications and limit access to the service and feature updates. The solution must meet the technical requirements.

What should you configure in the Microsoft 365 admin center? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 31

Options:

Buy Now
Questions 32

You need to meet the technical requirement for the SharePoint administrator. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

MS-102 Question 32

Options:

Buy Now
Questions 33

You need to protect the U.S. PII data to meet the technical requirements.

What should you create?

Options:

A.

a data loss prevention (DLP) policy that contains a domain exception

B.

a Security & Compliance retention policy that detects content containing sensitive data

C.

a Security & Compliance alert policy that contains an activity

D.

a data loss prevention (DLP) policy that contains a user override

Buy Now
Questions 34

You need to meet the technical requirement for the EU PII data.

What should you create?

Options:

A.

a retention policy from the Security & Compliance admin center.

B.

a retention policy from the Exchange admin center

C.

a data loss prevention (DLP) policy from the Exchange admin center

D.

a data loss prevention (DLP) policy from the Security & Compliance admin center

Buy Now
Questions 35

You need to meet the technical requirement for log analysis.

What is the minimum number of data sources and log collectors you should create from Microsoft Cloud App Security? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 35

Options:

Buy Now
Questions 36

Which report should the New York office auditors view?

Options:

A.

DLP policy matches

B.

DLP false positives and overrides

C.

DLP incidents

D.

Top Senders and Recipients

Buy Now
Questions 37

You need to meet the technical requirement for large-volume document retrieval. What should you create?

Options:

A.

a data loss prevention (DLP) policy from the Security & Compliance admin center

B.

an alert policy from the Security & Compliance admin center

C.

a file policy from Microsoft Cloud App Security

D.

an activity policy from Microsoft Cloud App Security

Buy Now
Questions 38

You need to recommend a solution for the security administrator. The solution must meet the technical requirements.

What should you include in the recommendation?

Options:

A.

Microsoft Azure Active Directory (Azure AD) Privileged Identity Management

B.

Microsoft Azure Active Directory (Azure AD) Identity Protection

C.

Microsoft Azure Active Directory (Azure AD) conditional access policies

D.

Microsoft Azure Active Directory (Azure AD) authentication methods

Buy Now
Questions 39

You need to configure the compliance settings to meet the technical requirements.

What should you do in the Microsoft Endpoint Manager admin center?

Options:

A.

From Compliance policies, modify the Notifications settings.

B.

From Locations, create a new location for noncompliant devices.

C.

From Retire Noncompliant Devices, select Clear All Devices Retire State.

D.

Modify the Compliance policy settings.

Buy Now
Questions 40

You need to configure Office on the web to meet the technical requirements.

What should you do?

Options:

A.

Assign the Global reader role to User1.

B.

Enable sensitivity labels for Office files in SharePoint Online and OneDrive.

C.

Configure an auto-labeling policy to apply the sensitivity labels.

D.

Assign the Office apps admin role to User1.

Buy Now
Questions 41

You need to create the DLP policy to meet the technical requirements.

What should you configure first?

Options:

A.

sensitive info types

B.

the Insider risk management settings

C.

the event types

D.

the sensitivity labels

Buy Now
Questions 42

You need to create the Safe Attachments policy to meet the technical requirements.

Which option should you select?

Options:

A.

Replace

B.

Enable redirect

C.

Block

D.

Dynamic Delivery

Buy Now
Questions 43

You plan to implement the endpoint protection device configuration profiles to support the planned changes.

You need to identify which devices will be supported, and how many profiles you should implement.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 43

Options:

Buy Now
Questions 44

You need to configure automatic enrollment in Intune. The solution must meet the technical requirements.

What should you configure, and to which group should you assign the configurations? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 44

Options:

Buy Now
Questions 45

You create the planned DLP policies.

You need to configure notifications to meet the technical requirements.

What should you do?

Options:

A.

From the Microsoft 365 security center, configure an alert policy.

B.

From the Microsoft Endpoint Manager admin center, configure a custom notification.

C.

From the Microsoft 365 admin center, configure a Briefing email.

D.

From the Microsoft 365 compliance center, configure the Endpoint DLP settings.

Buy Now
Questions 46

You need to meet the requirement for the legal department.

Which three actions should you perform in sequence from the Security & Compliance admin center? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

MS-102 Question 46

Options:

Buy Now
Questions 47

You need to ensure that User2 can review the audit logs. The solutions must meet the technical requirements.

To which role group should you add User2, and what should you use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 47

Options:

Buy Now
Questions 48

You need to configure the information governance settings to meet the technical requirements.

Which type of policy should you configure, and how many policies should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MS-102 Question 48

Options:

Buy Now
Exam Code: MS-102
Exam Name: Microsoft 365 Administrator Exam
Last Update: Apr 27, 2025
Questions: 483

PDF + Testing Engine

$61.25  $174.99

Testing Engine

$47.25  $134.99
buy now MS-102 testing engine

PDF (Q&A)

$40.25  $114.99
buy now MS-102 pdf