MS-102 Practice Test

MS-102 Practice Test practice questions, page 7 of 19, with answer review and explanations.

Question 31

Your network contains an on-premises Active Directory domain. You have a Microsoft 365 E5 subscription. You plan to implement directory synchronization. You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege. What should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 32

You have an Azure AD tenant named contoso.com that contains the users shown in the following table. Multi-factor authentication (MFA) is configured to use 131.107.5.0/24 as trusted IPs. The tenant contains the named locations shown in the following table. You create a conditional access policy that has the following configurations: Users or workload identities assignments: All users Cloud apps or actions assignment: App1 Conditions: Include all trusted locations Grant access: Require multi-factor authentication For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 33

You have a Microsoft 365 subscription. You register two applications named App1 and App2 to Azure AD. You need to ensure that users who connect to App1 require multi-factor authentication (MFA). MFA is required only for App1. What should you do?

  1. From the Microsoft Entra admin center, create a conditional access policy.
  2. From the Microsoft 365 admin center, configure the Modem authentication settings.
  3. From the Enterprise applications blade of the Microsoft Entra admin center, configure the Users settings.
  4. From Multi-Factor Authentication, configure the service settings.

Question 34

You have a Microsoft 365 E5 subscription. You need to implement identity protection. The solution must meet the following requirements: Identify when a user's credentials are compromised and shared on the dark web. Provide users that have compromised credentials with the ability to self-remediate. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 35

Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription. The domain contains the users shown in the following table. The domain contains the groups shown in the following table. You are deploying Azure AD Connect. You configure Domain and OU filtering as shown in the following exhibit. You configure Filter users and devices as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.