Microsoft MS-102 Exam Dumps

Microsoft 365 Administrator Exam

Microsoft MS-102 Sample Questions

Question # 1

You have a Microsoft 365 subscription. You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action. To which location can the policy be applied?

A. OneDrive accounts
B. Exchange email
C. Teams chat and channel messages
D. SharePoint sites

Answer: B

Show Answer

Question # 2

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Your network contains an Active Directory domain.You deploy an Azure AD tenant.Another administrator configures the domain to synchronize to Azure AD.You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized toAzure AD. All the other user accounts synchronized successfully.You review Azure AD Connect Health and discover that all the user accountsynchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD.Solution: From Azure AD Connect, you modify the Azure AD credentials.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 3

You have a Microsoft 365 tenant that contains 500 Windows 10 devices and a MicrosoftEndpoint Manager device compliance policy.You need to ensure that only devices marked as compliant can access Microsoft Office 365apps.Which policy type should you configure?

A. conditional access
B. account protection
C. attack surface reduction (ASR)
D. Endpoint detection and response

Answer: A

Show Answer

Question # 4

You have a Microsoft 365 subscription. All users have their email stored in Microsoft Exchange Online. In the mailbox of a user named User1. you need to preserve a copy of all the emailmessages that contain the word ProjectX.What should you do first?

A. From the Exchange admin center create a mail flow rule.
B. From Microsoft 365 Defender, start a message trace.
C. From Microsoft Defender for Cloud Apps, create an activity policy.
D. From the Microsoft Purview compliance portal, create a label and a label policy.

Answer: D

Show Answer

Question # 5

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription that contains a user named User1.You need to enable User1 to create Compliance Manager assessments.Solution: From the Microsoft 365 admin center, you assign User1 the Compliance adminrole.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 6

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription.You create an account for a new security administrator named SecAdmin1.You need to ensure that SecAdmin1 can manage Office 365 Advanced Threat Protection(ATP) settings and policies for Microsoft Teams, SharePoint, and OneDrive.Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the SharePointadmin role.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 7

You have a Microsoft 365 E5 subscription.You plan to create a data loss prevention (DLP) policy that will be applied to all availablelocations.Which conditions can you use in the DLP rules of the policy?

A. sensitive info types
B. content search queries
C. keywords
D. sensitivity labels

Answer: C

Show Answer

Question # 8

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription.You create an account for a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365settings and policies for Microsoft Teams, SharePoint, and OneDrive.Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the Exchangeadmin role.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 9

You have a Microsoft 365 E5 subscription.You need to compare the current Safe Links configuration to the Microsoft recommendedconfigurations.What should you use?

A. Microsoft Purview
B. Azure AD Identity Protection
C. Microsoft Secure Score
D. the configuration analyzer

Answer: C

Show Answer

Question # 10

You have an Azure AD tenant.You have 1,000 computers that run Windows 10 Pro and are joined to Azure AD.You purchase a Microsoft 365 E3 subscription.You need to deploy Windows 10 Enterprise to the computers. The solution must minimizeadministrative effort.What should you do?

A. From the Microsoft Endpoinf Manager admin center, create a Windows Autopilotdeployment profile. Assign the profile to all the computers. Instruct users to restart theircomputer and perform a network restart.
B. Enroll the computers in Microsoft Intune. Create a configuration profile by using theEdition upgrade and mode switch template. From the Microsoft Endpoint Manager admincenter, assign the profile to all the computers and instruct users to restart their computer.
C. From Windows Configuration Designer, create a provisioning package that has anEditionUpgrade configuration and upload the package to a Microsoft SharePoint Onlinesite. Instruct users to run the provisioning package from SharePoint Online.
D. From the Azure Active Directory admin center, create a security group that has dynamicdevice membership. Assign licenses to the group and instruct users to sign in to theircomputer.

Answer: B

Show Answer

Question # 11

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a computer that runs Windows 10.You need to verify which version of Windows 10 is installed.Solution: At a command prompt, you run the winver.exe command.Does this meet the goal?

A. Yes
B. No

Answer: A

Show Answer

Question # 12

You have a Microsoft 365 E5 tenant.Users store data in the following locations:Microsoft TeamsMicrosoft OneDriveMicrosoft Exchange OnlineMicrosoft SharePoint OnlineYou need to retain Microsoft 365 data for two years.What is the minimum number of retention policies that you should create?

A. 1
B. 2
C. 3
D. 4

Answer: C

Show Answer

Question # 13

You have a new Microsoft 365 E5 tenant.You need to enable an alert policy that will be triggered when an elevation of MicrosoftExchange Online administrative privileges is detected.What should you do first?

A. Enable auditing.
B. Enable Microsoft 365 usage analytics.
C. Create an Insider risk management policy.
D. Create a communication compliance policy.

Answer: A

Show Answer

Question # 14

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Your network contains an on-premises Active Directory domain. The domain containsdomain controllers that run Windows Server 2019. The functional level of the forest and thedomain is Windows Server 2012 R2.The domain contains 100 computers that run Windows 10 and a member server namedServer1 that runs Windows Server 2012 R2.You plan to use Server1 to manage the domain and to configure Windows 10 Group Policysettings.You install the Group Policy Management Console (GPMC) on Server1.You need to configure the Windows Update for Business Group Policy settings on Server1.Solution: You copy the Group Policy Administrative Templates from a Windows 10computer to Server1.Does this meet the goal?

A. yes
B. No

Answer: A

Show Answer

Question # 15

Your company has multiple offices.You have a Microsoft 365 E5 tenant that uses Microsoft Intune for device management.Each office has a local administrator.You need to ensure that the local administrators can manage only the devices in theirrespective office.What should you use?

A. scope tags
B. configuration profiles
C. device categories
D. conditional access policies

Answer: A

Show Answer

Question # 16

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.Your network contains an on-premises Active Directory domain. The domain containsdomain controllers that run Windows Server 2019. The functional level of the forest and thedomain is Windows Server 2012 R2.The domain contains 100 computers that run Windows 10 and a member server namedServer1 that runs Windows Server 2012 R2.You plan to use Server1 to manage the domain and to configure Windows 10 Group Policysettings.You install the Group Policy Management Console (GPMC) on Server1.You need to configure the Windows Update for Business Group Policy settings on Server1. Solution: You raise the forest functional level to Windows Server 2016. You copy the GroupPolicy Administrative Templates from a Windows 10 computer to the Netlogon share on allthe domain controllers.Does this meet the goal?

A. yes
B. No

Answer: B

Show Answer

Question # 17

You have a Microsoft 365 tenant that is signed up for Microsoft Store for Business andcontains a user named User1. You need to ensure that User1 can perform the followingtasks in Microsoft Store for Business:• Assign licenses to users.• Procure apps from Microsoft Store.• Manage private store availability for all items.The solution must use the principle of least privilege. Which Microsoft Store for Business role should you assign to User1?

A. Basic Purchaser
B. Device Guard signer
C. Admin
D. Purchaser

Answer: C

Show Answer

Question # 18

You have a Microsoft 365 tenant that contains 1,000 iOS devices enrolled in MicrosoftIntune. You plan to purchase volume-purchased apps and deploy the apps to the devices.You need to track used licenses and manage the apps by using Intune. What should youuse to purchase the apps?

A. Microsoft Store for Business
B. Apple Business Manager
C. Apple iTunes Store
D. Apple Configurator

Answer: B

Show Answer

Question # 19

You have a Microsoft E5 subscription.You need to ensure that administrators who need to manage Microsoft Exchange Onlineare assigned the Exchange Administrator role for five hours at a time.What should you implement?

A. Azure AD Privileged Identity Management (PIM)
B. a conditional access policy
C. a communication compliance policy)
D. Azure AD Identity Protection
E. groups that have dynamic membership

Answer: A

Show Answer

Question # 20

You have a Microsoft 365 subscription.You register two applications named App1 and App2 to Azure AD.You need to ensure that users who connect to App1 require multi-factor authentication(MFA). MFA is required only for App1. What should you do?

A. From the Microsoft Entra admin center, create a conditional access policy
B. From the Microsoft 365 admin center, configure the Modem authentication settings.
C. From the Enterprise applications blade of the Microsoft Entra admin center, configurethe Users settings.
D. From Multi-Factor Authentication, configure the service settings.

Answer: A

Show Answer

Question # 21

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a computer that runs Windows 10.You need to verify which version of Windows 10 is installed.Solution: From the Settings app, you select System, and then you select About to viewinformation about the system.Does this meet the goal?

A. Yes
B. No

Answer: A

Show Answer

Question # 22

Note: This question is part of a series of questions that present the same scenario.Each question in the series contains a unique solution that might meet the statedgoals. Some question sets might have more than one correct solution, while othersmight not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As aresult, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription that contains a user named User1.You need to enable User1 to create Compliance Manager assessments.Solution: From the Microsoft 365 admin center, you assign User1 the Compliance dataadmin role.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer