HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the users shown in the following table.You use Microsoft Entra ID Protection.For the Users at risk detected alerts setting, you configure the following:Recipient: Admin1Alert on user risk level at or above: MediumUser1 signs in to Microsoft 365 services and is assigned the detected risk levels shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: NoNo - By the end of the day, Admin1 has received two email alerts. Three: Two Medium, and one high.Box 2: YesYes - By the end of the day, Admin2 has received three email alerts.Admin2 is Security Reader.Admin2 will receive the three emails. Note: ImportantBy default, users actively assigned Global Administrator, Security Administrator, or Security Reader roles are automatically added to this list if that user has a valid "Email" or "Alternate email" configured. If a user is enrolled in PIM to elevate to one of these roles on demand, then they will only receive emails if they are elevated at the time the email is sent.Box 3: NoNo - By the end of the day, Admin3 has received three email alerts. Admin3 is User Administrator and will not receive any email alerts.
https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-notifications
You have a Microsoft 365 E5 subscription.You plan to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra.You need to ensure that a user can make a role assignment request for the User Administrator role only during the next six months.How should you configure the assignment?
Assign eligibility for a group in Privileged Identity ManagementIn Microsoft Entra ID, you can use Privileged Identity Management (PIM) to manage just-in-time membership in the group or just-in-time ownership of the group.When a membership or ownership is assigned, the assignment:Can't be assigned for a duration of less than five minutes Can't be removed within five minutes of it being assigned
https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/groups-assign-member- owner
DRAG DROP (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2. You need to recommend an authentication solution that meets the following requirements:Members of Group1 must be able to authenticate by using a hardware token.Members of Group2 must be able to authenticate by using a public key infrastructure (PKI).Which authentication method should you recommend for each group? To answer, drag the appropriate methods to the correct groups. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
Box 1: A FIDO2 security keyMembers of Group1 must be able to authenticate by using a hardware token.FIDO security keys are small USB dongles that enable secure login to websites and applications supporting FIDO2 WebAuthn and classic FIDO (U2F) standards. Token2 T2F2 security key combines hardware-based authentication, public-key cryptography, HOTP, U2F, and FIDO2 protocols to protect your accounts.Box 2: Certificate-based authenticationMembers of Group2 must be able to authenticate by using a public key infrastructure (PKI).A public key infrastructure (PKI) creates, manages, distributes, stores, and revokes digital certificates.
https://www.token2.com/shop/product/token2-t2f2-fido2-and-u2f-security-key
HOTSPOT (Drag and Drop is not supported)You have a Microsoft 365 E5 subscription that contains the users shown in the following table.Which users can create user objects, and which users can create Microsoft 365 groups? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: User2 only User objects:You must be a global, license, or a user admin to add users and assign licenses.Box 2: User1, User2, and User3 Microsoft 365 groups:By default, all users can create Microsoft 365 groups. This is the recommended approach because it allows users to start collaborating without requiring assistance from IT.
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/add-users https://learn.microsoft.com/en-us/microsoft-365/solutions/manage-creation-of-groups
You have a Microsoft 365 subscription that contains a Microsoft Entra tenant named contoso.com. The tenant includes a user named User1.You enable Microsoft Entra ID Protection.You need to ensure that User1 can review the list in Microsoft Entra ID Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1?
Microsoft Entra ID Protection notifications Note: ImportantBy default, users actively assigned Global Administrator, Security Administrator, or Security Reader roles are automatically added to this list if that user has a valid "Email" or "Alternate email" configured. If a user is enrolled in PIM to elevate to one of these roles on demand, then they will only receive emails if they are elevated at the time the email is sent.
Post your Comments and Discuss Microsoft MS-102 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the MS-102 content, but please register or login to continue.