MS-102 Practice Test

MS-102 Practice Test practice questions, page 6 of 19, with answer review and explanations.

Question 26

You have a Microsoft 365 tenant. You plan to manage incidents in the tenant by using the Microsoft 365 Defender. Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

  1. Microsoft Sentinel
  2. Microsoft Defender for Cloud
  3. Azure Arc
  4. Microsoft Defender for Identity

Question 27

Your network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers. Your company purchases Microsoft 365 and creates an Azure AD tenant named contoso.onmicrosoft.com. You plan to install Azure AD Connect on a member server and implement pass-through authentication. You need to prepare the environment for the planned implementation of pass-through authentication. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. From a domain controller, install an Authentication Agent.
  2. From the Microsoft Entra admin center, configure an authentication method.
  3. From Active Directory Domains and Trusts, add a UPN suffix.
  4. Modify the email address attribute for each user account.
  5. From the Microsoft Entra admin center, add a custom domain name.
  6. Modify the User logon name for each user account.

Question 28

You have a new Microsoft 365 E5 tenant. Enable Security defaults is set to Yes. A user signs in to the tenant for the first time. Which multi-factor authentication (MFA) method can the user use, and how many days does the user have to register for MFA? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 29

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table. You configure Azure AD Connect to sync contoso.com to Azure AD. Which objects will sync to Azure AD?

  1. Group1 only
  2. User1 and User2 only
  3. Group1 and User1 only
  4. Group1, User1, and User2

Question 30

You have a Microsoft 365 E5 subscription. You need to create Conditional Access policies to meet the following requirements: All users must use multi-factor authentication (MFA) when they sign in from outside the corporate network. Users must only be able to sign in from outside the corporate network if the sign-in originates from a compliant device. All users must be blocked from signing in from outside the United States and Canada. Only users in the R&D department must be blocked from signing in from both Android and iOS devices. Only users in the finance department must be able to sign in to an Azure AD enterprise application named App1. All other users must be blocked from signing in to App1. What is the minimum number of Conditional Access policies you should create?

  1. 3
  2. 4
  3. 5
  4. 6
  5. 7
  6. 8