HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the users shown in the following table.You create an administrative unit named AU1 that contains the members shown in the following exhibit.The User Administrator role has the assignments shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesUser1 is member of Group1.Group1 is assigned the role User Administrator with the scope of the organization.Box 2: YesUser2 is member of Group2.Group2 is assigned the role User Administrator with the scope of AU1. User3 is in AU1.Box 3: YesUser2 is member of Group2.Group2 is assigned the role User Administrator with the scope of AU1.User1 is in AU1.
You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1.You enable Microsoft Entra ID Protection.You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1?
The risky sign-ins reports are available to users in the following roles:Security Administrator Global Administrator Security ReaderOf the three roles listed above, the Security Reader role has the least privilege. Note:There are several versions of this question in the exam. The question has three possible correct answers: Security ReaderSecurity Administrator Global AdministratorOther incorrect answer options you may see on the exam include the following: Service Administrator.Reports Reader Compliance Administrator
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-risky-sign-in
HOTSPOT (Drag and Drop is not supported)Your company has a Microsoft Entra tenant named contoso.onmicrosoft.com that contains the users shown in the following table.You need to identify which users can perform the following administrative tasks:Reset the password of User4.Modify the value for the manager attribute of User4.Which users should you identify for each task? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: User1 and User3 onlyA Password Administrator or a User Administrator can reset the password non-administrative users.Box 2: User3 onlyA User Administrator can configure other attributes such as the Manager attribute of non-administrative users.
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles
You have a Microsoft 365 E5 subscription.Users have Android or iOS devices and access Microsoft 365 resources from computers that run Windows 11 or MacOS.You need to implement passwordless authentication. The solution must support all the devices. Which authentication method should you use?
Answer(s): C
HOTSPOT (Drag and Drop is not supported)Your company has a hybrid deployment of Microsoft 365.An on-premises user named User1 is synced to Microsoft Entra. Microsoft Entra Connect is configured as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: cannot change her password from any Microsoft portalsUser1 cannot change her password from any Microsoft portals because Password Writeback is disabled in the Microsoft Entra Connect configuration.Box 2: the password hash will be synchronized to Microsoft EntraIf the password for User1 is changed in Active Directory, the password hash will be synchronized to Microsoft Entra because Password Synchronization is enabled in the Microsoft Entra Connect configuration.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.