Your company has a Microsoft Entra tenant named contoso.com and a Microsoft 365 subscription. All users use Windows 10 devices to access Microsoft Office 365 apps.All the devices are in a workgroup.You plan to implement password less sign-in to contoso.com.You need to recommend changes to the infrastructure for the planned implementation. What should you include in the recommendation?
Answer(s): D
Correct:Deploy the Microsoft Authenticator appYou can now completely remove the password from your Microsoft account. Use the Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email to sign in to your favorite apps and services, such as Microsoft Outlook, Microsoft OneDrive, Microsoft Family Safety, and more.Incorrect:* Deploy Microsoft Entra Application Proxy.* Deploy the Microsoft Entra Connect provisioning agent.* Deploy X.509.3 certificates to all the users.Join all the devices to contoso.com.
https://www.microsoft.com/security/blog/2021/09/15/the-passwordless-future-is-here-for-your-microsoft- account/
You have a Microsoft 365 E5 subscription.You plan to implement an authentication policy that will user FIDO2 security key as a user authentication method.You need to ensure that during enrollment, each FIDO2 security key is verified by using the FIDO Alliance Metadata Service.Which setting should you enable?
Answer(s): C
Passkey optional settingsThere are some optional settings on the Configure tab to help manage how passkeys can be used for sign-in.-> Enforce attestation should be set to Yes if your organization wants to be assured that a FIDO2 security key model or passkey provider is genuine and comes from the legitimate vendor.* For FIDO2 security keys, we require security key metadata to be published and verified with the FIDO Alliance Metadata Service, and also pass Microsoft's another set of validation testing. For more information, see Become a Microsoft-compatible FIDO2 security key vendor.* For passkeys in Microsoft Authenticator, we don't currently support attestation.
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-enable-passkey-fido2
You have a Microsoft 365 E5 subscription.You create the users shown in the following table.You plan to use Microsoft Entra ID Protection.Which users will be added automatically to the User at risk detected alerts list?
Microsoft Entra ID Protection sends two types of automated notification emails to help you manage user risk and risk detections:Users at risk detected email Weekly digest emailImportantBy default users actively assigned Global Administrator, Security Administrator, or Security Reader roles are automatically added to this list if that user has a valid "Email" or "Alternate email" configured. If a user is enrolled in PIM to elevate to one of these roles on demand, then they will only receive emails if they are elevated at the time the email is sent.
https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications
You have a Microsoft 365 E5 subscription.You plan to configure multi-factor authentication (MFA).You need to select an authentication method for users. The solution must ensure that each time a user is prompted for MFA, the application name that requires MFA is provided.What should you select?
Answer(s): B
Enable Azure MFA application name for extra securityYou can enable MFA application name in Microsoft Authenticator app for sign-in security purposes.
https://www.alitajran.com/azure-mfa-application-name/
You have a Microsoft 365 E5 subscription. You plan to use Microsoft Entra ID Protection.You need to ensure that account passwords must be changed if account credentials are leaked. What should you configure?
Answer(s): A
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.