HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant that has security defaults enabled. You create a user named Admin1.You need to ensure that Admin1 can create and apply Conditional Access policies.Which two settings should you configure? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.Hot Area:03CDC095F9FEFF732D90886CB388BC30
Answer(s): A
03CDC095F9FEFF732D90886CB388BC3003CDC095F9FEFF732D90886CB388BC30Box 1: LicencesFor a tenant to have Conditional Access Policies available, you need Microsoft Entra ID P1 licensesBox 2: Roles and administratorsTo create a Conditional Access policy, you need Conditional Access Administrator, Security Administrator or Global Administrator.
https://www.codetwo.com/admins-blog/conditional-access-policies
HOTSPOT (Drag and Drop is not supported)Your company has an office in London. You have a Microsoft 365 subscription.You need to create a Conditional Access policy named Policy1 that meets the following requirements:● Only FIDO2 security keys, Windows Hello for Business, and certificates must be supported for authentication.● The London office must be marked as a trusted location and excluded from Policy1.How should you configure Policy1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Phishing-resistant MFA Authentication strengthPhishing-resistant MFA strength is the strictest authenticate strength level. It only supports the following authentication methods:FIDO2 Security key. Windows Hello for Business.Certificate-based authentication (Multi-factor)Box 2: IP ranges Named locationConditional Access: Network assignmentAdministrators can create policies that target specific network locations as a signal along with other conditions in their decision making process. They can include or exclude these network locations as part of their policy configuration. These network locations might include public IPv4 or IPv6 network information, countries, unknown areas that don't map to specific countries, or Global Secure Access' compliant network.IPv4 and IPv6 address rangesTo define a named location by public IPv4 or IPv6 address ranges, you must provide:A Name for the location.One or more public IP ranges. Optionally Mark as trusted location.
https://www.securew2.com/blog/phishing-resistant-mfa-vs-authentication-methods-azure-ad https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-assignment-network
You have a Microsoft 365 E5 subscription. Administrators are issued FIDO2 security keys.You need to create a Conditional Access policy that will use a FIDO2 security key as an authentication method. Which Access controls option should you select for the policy?
Answer(s): D
Enforce passkey sign-inTo make users sign in with a passkey when they access a sensitive resource, you can: Use a built-in phishing-resistant authentication strengthOrCreate a custom authentication strengthThe following steps show how to create a custom authentication strength Conditional Access policy that allows passkey sign-in for only a specific security key model or passkey provider.1. Sign in to the Microsoft Entra admin center as at least a Conditional Access Administrator.2. Browse to Protection > Authentication methods > Authentication strengths.3. Select New authentication strength.4. Provide a Name for your new authentication strength.5. Optionally provide a Description.6. Select Passkeys (FIDO2).7. Optionally, if you want to restrict by specific AAGUID(s), select Advanced options then Add AAGUID. Enter the AAGUID(s) that you allow. Select Save.8. Choose Next and review the policy configuration.
https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-enable-passkey-fido2
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You register a cloud app named App1 in Microsoft Entra ID.You need to create an access policy for App1. What should you do first?
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3.You use Microsoft Entra ID Protection.You configure the Users at risk detected alerts setting to send an alert when a user risk level of low or above is detected.Users are assigned the risk levels shown in the following table.By the end of the day, how many alerts were generated for User1, and how many alerts were generated for User2 and User3? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: 4 User1Box 2: 6User2 and User3
https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.