MS-102 Practice Test

Question 86

Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table. The groups have the members shown in the following table. You are configuring synchronization between fabrikam.com and an Azure AD tenant. You configure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit (Click the Domain/OU Filtering tab.) You configure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit. (Click the Filtering tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 87

You have a Microsoft 365 E5 subscription. From Azure AD Identity Protection on August 1, you configure a Multifactor authentication registration policy that has the following settings: Assignments: All users - Controls: Require Azure AD multifactor authentication registration Enforce Policy: On - On August 3, you create two users named User1 and User2. Users authenticate by using Azure Multi-Factor Authentication (MFA) for the first time on the dates shown in the following table. By which dates will User1 and User2 be forced to complete their Azure MFA registration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 88

Your on-premises network contains an Active Directory domain. You have a Microsoft 365 subscription. You need to sync the domain with the subscription. The solution must meet the following requirements: On-premises Active Directory password complexity policies must be enforced. Users must be able to use self-service password reset (SSPR) in Azure AD. What should you use?

1. password hash synchronization
2. Azure AD Identity Protection
3. Azure AD Seamless Single Sign-On (Azure AD Seamless SSO)
4. pass-through authentication

Question 89

You have a Microsoft 365 E5 subscription. Users access Microsoft 365 from both their laptop and a corporate Virtual Desktop Infrastructure (VDI) solution. From Azure AD Identity Protection, you enable a sign-in risk policy. Users report that when they use the VDI solution, they are regularly blocked when they attempt to access Microsoft 365. What should you configure?

1. the Tenant restrictions settings in Azure AD
2. a trusted location
3. a Conditional Access policy exclusion
4. the Microsoft 365 network connectivity settings

Question 90

You have a Microsoft 365 E5 subscription that contains a user named User1. Azure AD Password Protection is configured as shown in the following exhibit. User1 attempts to update their password to the following passwords: F@lcon - Project22 - T4il$pin45dg4 - Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.