Free MS-102 Exam Braindumps
Microsoft 365 Administrator Questions 141–145 (page: 30)

Updated On: 10-Feb-2026
View Related Case Study

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.


You create an administrative unit named AU1 that contains the members shown in the following exhibit.


The User Administrator role has the assignments shown in the following exhibit.


For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: Yes
User1 is member of Group1.
Group1 is assigned the role User Administrator with the scope of the organization.
Box 2: Yes
User2 is member of Group2.
Group2 is assigned the role User Administrator with the scope of AU1. User3 is in AU1.
Box 3: Yes
User2 is member of Group2.
Group2 is assigned the role User Administrator with the scope of AU1.
User1 is in AU1.



View Related Case Study

You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1.
You enable Microsoft Entra ID Protection.
You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege.
To which role should you add User1?

  1. Security Reader
  2. Global Administrator
  3. Owner
  4. User Administrator

Answer(s): A

Explanation:

The risky sign-ins reports are available to users in the following roles:
Security Administrator Global Administrator Security Reader
Of the three roles listed above, the Security Reader role has the least privilege. Note:
There are several versions of this question in the exam. The question has three possible correct answers: Security Reader
Security Administrator Global Administrator
Other incorrect answer options you may see on the exam include the following: Service Administrator.
Reports Reader Compliance Administrator


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-risky-sign-in



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
Your company has a Microsoft Entra tenant named contoso.onmicrosoft.com that contains the users shown in the following table.


You need to identify which users can perform the following administrative tasks:
Reset the password of User4.
Modify the value for the manager attribute of User4.
Which users should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: User1 and User3 only
A Password Administrator or a User Administrator can reset the password non-administrative users.
Box 2: User3 only
A User Administrator can configure other attributes such as the Manager attribute of non-administrative users.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles



View Related Case Study

You have a Microsoft 365 E5 subscription.
Users have Android or iOS devices and access Microsoft 365 resources from computers that run Windows 11 or MacOS.
You need to implement passwordless authentication. The solution must support all the devices. Which authentication method should you use?

  1. Windows Hello
  2. FIDO2 compliant security keys
  3. Microsoft Authenticator app

Answer(s): C



View Related Case Study

HOTSPOT (Drag and Drop is not supported)
Your company has a hybrid deployment of Microsoft 365.
An on-premises user named User1 is synced to Microsoft Entra. Microsoft Entra Connect is configured as shown in the following exhibit.


Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Box 1: cannot change her password from any Microsoft portals
User1 cannot change her password from any Microsoft portals because Password Writeback is disabled in the Microsoft Entra Connect configuration.
Box 2: the password hash will be synchronized to Microsoft Entra
If the password for User1 is changed in Active Directory, the password hash will be synchronized to Microsoft Entra because Password Synchronization is enabled in the Microsoft Entra Connect configuration.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom



Viewing page 30 of 85
Viewing questions 146 - 150 out of 473 questions


Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!