You have a Microsoft 365 subscription that contains a user named User1. User1 requires admin access to perform the following tasks:Manage Microsoft Exchange Online settings. Create Microsoft 365 groups.You need to ensure that User1 only has admin access for eight hours and requires approval before the role assignment takes place.What should you use?
Answer(s): D
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management:Provide just-in-time privileged access to Microsoft Entra ID and Azure resources Assign time-bound access to resources using start and end datesRequire approval to activate privileged rolesEnforce multi-factor authentication to activate any role Use justification to understand why users activateGet notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external auditPrevents removal of the last active Global Administrator and Privileged Role Administrator role assignments.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription.From Microsoft Entra Privileged Identity Management (PIM), you configure Role settings for the Global Administrator role as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: will lose the role after eight hoursFrom exhibit: Activation, Activation maximum duration (hours): 8 hour(s)Box 2: for up to three monthsWe see from exhibit: Assignment, Expire eligible assignment after: 3 month(s)
You have a Microsoft E5 subscription.You need to ensure that administrators who need to manage Microsoft Exchange Online are assigned the Exchange Administrator role for five hours at a time.What should you implement?
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change- default-settings
You have a Microsoft 365 subscription.You plan to implement Microsoft Purview Privileged Access Management. Which Microsoft Office 365 workloads support privileged access?
Privileged access managementHaving standing access by some users to sensitive information or critical network configuration settings in Microsoft Exchange Online is a potential pathway for compromised accounts or internal threat activities. Microsoft Purview Privileged Access Management helps protect your organization from breaches and helps to meet compliance best practices by limiting standing access to sensitive data or access to critical configuration settings. Instead of administrators having constant access, just-in-time access rules are implemented for tasks that need elevated permissions. Enabling privileged access management for Exchange Online in Microsoft 365 allows your organization to operate with zero standing privileges and provide a layer of defense against standing administrative access vulnerabilities.Note: When will privileged access support Office 365 workloads beyond Exchange? Privileged access management will be available in other Office 365 workloads soon.
https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management-solution-overview https://learn.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management
Your company has 10,000 users who access all applications from an on-premises data center. You plan to create a Microsoft 365 subscription and to migrate data to the cloud.You plan to implement directory synchronization.User accounts and group accounts must sync to Microsoft Entra ID successfully. You discover that several user accounts fail to sync to the Microsoft Entra tenant. You need to resolve the issue as quickly as possible.What should you do?
Answer(s): B
IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Microsoft Entra ID. IdFix is intended for the Active Directory administrators responsible for directory synchronization with Microsoft Entra ID.
https://docs.microsoft.com/en-us/office365/enterprise/prepare-directory-attributes-for-synch-with-idfix
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.