MS-102 Practice Test

Question 81

Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains: Contoso.com - East.contoso.com - The forest contains the users shown in the following table. The forest syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 82

Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table. You purchase a Microsoft 365 E5 subscription. You need to implement Azure AD Connect cloud sync. What should you install first and on which server? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 83

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1 and the users shown in the following table. The devices are configured as shown in the following table. You have a Conditional Access policy named CAPolicy1 that has the following settings: Assignments - Users or workload identities: Group1 Cloud apps or actions: Office 365 SharePoint Online Conditions - Filter for devices: Exclude filtered devices from the policy Rule syntax: device.displayName -startsWith "Device" Access controls - Grant - Grant: Block access - Session: 0 controls selected - Enable policy: On - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 84

You have a Microsoft 365 E5 subscription. Conditional Access is configured to block high-risk sign-ins for all users. All users are in France and are registered for multi-factor authentication (MFA). Users in the media department will travel to various countries during the next month. You need to ensure that if the media department users are blocked from signing in while traveling, the users can remediate the issue without administrator intervention. What should you configure?

1. an exclusion group
2. the MFA registration policy
3. named locations
4. self-service password reset (SSPR)

Question 85

You have a Microsoft 365 E5 subscription that contains the following user: Name: User1 - UPN: user1@contoso.com - Email address: user1@marketmg.contoso.com MFA enrollment status: Disabled - When User1 attempts to sign in to Outlook on the web by using the user1@marketing.contoso.com email address, the user cannot sign in. You need to ensure that User1 can sign in to Outlook on the web by using user1@marketing.contoso.com. What should you do?

1. Assign an MFA registration policy to User1.
2. Reset the password of User1.
3. Add an alternate email address for User1.
4. Modify the UPN of User1.