Your network contains an Active Directory domain named adatum.com that is synced to a Microsoft Entratenant.The domain contains 100 user accounts.The city attribute for all the users is set to the city where the user resides.You need to modify the value of the city attribute to the three-letter airport code of each city. What should you do?
Answer(s): C
For this question these are the correct answers:* From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.For this question these are the incorrect answers:* From Azure Cloud Shell, run the Get-ADUser and Set-ADUser cmdlets.* From Azure Cloud Shell, run the Get-MgUser and Update-MgUser cmdlets.* From Azure Cloud Shell, run the Get-MsolUser and Set-MsolUser cmdlets.* From the Azure portal, select all the Microsoft Entra users, and then use the User settings blade.* From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.From the Microsoft Entra admin center, select all the Microsoft Entra users, and then use the User settings blade.Need to update the user in Active Directory.* From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets. Explanations for correct answers:From Windows PowerShell on a domain controller, run the Get-ADUser and Set-ADUser cmdlets.The user accounts are synced from the on-premise Active Directory to the Microsoft Entra ID. Therefore, the city attribute must be changed in the on-premise Active Directory.You can use Windows PowerShell on a domain controller and run the Get-ADUser cmdlet to get the required users and pipe the results into Set-ADUser cmdlet to modify the city attribute.From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.The user accounts are synced from the on-premise Active Directory to the Microsoft Azure Microsoft Entra ID. Therefore, the city attribute must be changed in the on-premise Active Directory.You can modify certain attributes of multiple user accounts simultaneously by selecting them in Active Directory Administrative Center or Active Directory Users and Computers, right clicking then selecting Properties.
https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduser https://blogs.technet.microsoft.com/canitpro/2015/11/25/step-by-step-managing-multiple-user-accounts-via- active-directory-admin-center/
Your network contains an Active Directory domain named adatum.com that is synced to a Microsoft Entra tenant.The domain contains 100 user accounts.The city attribute for all the users is set to the city where the user resides.You need to modify the value of the city attribute to the three-letter airport code of each city. What should you do?
Answer(s): A
https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduserhttps://blogs.technet.microsoft.com/canitpro/2015/11/25/step-by-step-managing-multiple-user-accounts-via- active-directory-admin-center/
You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1.You enable Microsoft Entra ID Protection.You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1?
Correct:* Global Administrator (Most privilege, least preferable)* Security AdministratorSecurity Reader (Least privilege, most preferable)Incorrect:* Compliance Administrator* Reports Reader* Service Administrator.Note: The risky sign-ins reports are available to users in the following roles: Security AdministratorGlobal Administrator Security ReaderOf the three roles listed above, the Security Reader role has the least privilege.
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-risky-sign-in
You have a Microsoft 365 subscription.You need to implement a passwordless authentication solution that supports the following device types: WindowsAndroid iOSThe solution must use the same authentication method for all devices. Which authentication method should you use?
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the security groups shown in the following table.The subscription contains the users shown in the following table.You have a Conditional Access policy that has the following settings: AssignmentsUsersInclude: Group1- Exclude: Group2, Group3 Target resources- Cloud apps- App1- Access controls- Grant- Block accessFor each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: YesYes- User1 can sign in to App1.User1 is in the Finance department and is assigned to Group1. Group1 membership type is assigned.The Conditional Access policy includes Group1 and targets App1. It blocks access. With a membership rule User1 is assigned to Group2.Group2 is excluded from the conditional access policy. The exclusion takes precedence of the inclusion.Box 2: NoNo - User2 can sign in to App1.User2 is in the Technical department and is not directly assigned to any group.No membership rules apply to User2.Box 3: YesYes - User3 can sign in to App1.User3 is in the R&D department and is assigned to Group1. Group1 membership type is assigned.The Conditional Access policy includes Group1 and targets App1. It blocks access. With a membership rule User3 is assigned to Group3.Group3 is excluded from the conditional access policy. The exclusion takes precedence of the inclusion.Note 1:In Microsoft Entra ID, you can scope a Conditional Access policy to a set of users. You can also configure exclusions by selecting Microsoft Entra roles, individual users, or guests. You should keep in mind that when exclusions are configured, the policy intent can't be enforced on excluded users.Note 2:Conditional Access takes signals from various sources into account when making access decisions. These signals include:User or group membershipPolicies can be targeted to specific users and groups giving administrators fine-grained control over access.* Etc.
https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview https://learn.microsoft.com/en-us/entra/id-governance/conditional-access-exclusion
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.