MS-102: Microsoft 365 AdministratorDemo

Your network includes an on-premises Active Directory domain named contoso.com.

For every user account, the Logon Hours settings are configured to block sign-ins outside business hours.

You plan to synchronize contoso.com with an Azure AD tenant.

You need to recommend a solution that ensures the logon-hour restrictions are enforced when synchronized users sign in to Azure AD.

What should you include in the recommendation?

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.

You need to automate Attack simulation training for users when a phishing campaign is detected in real time.

Which type of automation should you use, and which condition should you configure for Attack simulation training?

You have a Microsoft 365 E5 subscription that contains a SharePoint site named Site1. Site1 contains the files shown in the following table.

The users are shown in the following table.

You create a data loss prevention (DLP) policy with an advanced DLP rule and apply it to Site1. The DLP rule is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Your network has an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. Contoso.com includes the users in the following table.

Contoso.com includes the groups in the following table.

Group3 has no members.

You have a Microsoft Entra tenant.

You deploy Microsoft Entra Cloud Sync and configure a scoping filter by using the following entry.

CN=Group1,OU=OU2,DC=contoso, DC=com

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

You have a Microsoft 365 subscription.

You plan to update the EmployeeType attribute for every user in a group named Contractors, and you retrieve the Contractors group’s GroupId value.

You need to use Microsoft Graph PowerShell to retrieve all Contractors group users and set their EmployeeType attribute to Part-time.

How should you complete the PowerShell script?

foreach ($person in $( Select… -GroupId "2c5b5f9b-75eb-4e1e-beca-3b4373f7f4f3"))
{
    Select… Select… $person.ObjectId -EmployeeType "Part-time"
}

You have a Microsoft 365 E5 subscription that contains the devices in the following table.

At 08:00, you create an incident notification rule with these settings:

• Name: Notification1
• Notification settings
• Notify on alert severity: Low
• Device group scope: All (3)
• Details: First notification per incident
• Recipients: [email protected], [email protected]

At 08:02, you create an incident notification rule with these settings:

• Name: Notification2
• Notification settings
• Notify on alert severity: Low, Medium
• Device group scope: DeviceGroup1, DeviceGroup2
• Recipients: [email protected]

In Microsoft 365 Defender, the following alerts are logged.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

HOTSPOT

You have a Microsoft 365 E5 subscription that includes the users shown in the following table.

You use Microsoft Entra ID Protection.

For the Users at risk detected alerts setting, you configure the following:

• Recipient: Admin1
• Alert on user risk level at or above: Medium

User1 signs in to Microsoft 365 services and is assigned the detected risk levels shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

You have a Microsoft 365 subscription that contains the users shown in the following table.

The Global Administrator role has the Privileged Identity Management (PIM) settings shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using Microsoft Defender XDR.

Which Microsoft service source will be shown on the Incidents page in the Microsoft Defender portal?

You have a Microsoft 365 E5 subscription that includes 1,000 Windows devices.

You need to review the devices’ exposure score.

Which portal should you use?

You have a Microsoft 365 E5 subscription.

Configure the organization settings to meet these requirements:

• Sign users out of Microsoft Office 365 web apps after one hour of inactivity.
• Integrate an internal support tool with Office.

Which settings should you configure for each requirement?

From the Microsoft Purview compliance portal, you configure a data loss prevention (DLP) policy for a Microsoft SharePoint site named Site1. Site1 includes the roles in the following table.

Prvi creates the files shown in the exhibit.

Determine which files User1 and User2 can open.

You have a Microsoft 365 subscription containing an Azure AD tenant named contoso.com. The tenant has a user named User1.

You enable Azure AD Identity Protection.

You must ensure that User1 can review the Azure AD Identity Protection list of users flagged as risky. The solution must follow the principle of least privilege.

To which role should you add User1?

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

Group2 is a member of Group1.

You assign a Microsoft Office 365 Enterprise E3 license to Group1.

How many Office 365 E3 licenses are assigned?

Your network has an on-premises Active Directory domain and a Microsoft 365 E5 subscription. You plan to implement directory synchronization.

You need to find potential synchronization problems in the domain while following the principle of least privilege. What should you use?

Your network has an on-premises Active Directory domain. The domain includes the servers shown in the following table.

You purchase a Microsoft 365 E5 subscription.

You need to implement Azure AD Connect cloud sync. What should you install first, and on which server?

You have a Microsoft 365 subscription that includes a user named User1.

User1 needs administrative access to complete the following tasks:

• Manage Microsoft Exchange Online settings.
• Create Microsoft 365 groups.

You need to ensure that User1 has administrative access for only eight hours and must receive approval before the role assignment occurs.

What should you use?

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.

You need to identify settings configured less securely than the Standard protection profile settings in the preset security policies.

What should you use?

You have a Microsoft 365 subscription. You view the Service health Overview shown in the following exhibit.

You need to ensure that a user named User1 can view the advisories in order to investigate service health issues. Which role should you assign to User1?

You have a Microsoft 365 E5 subscription.

You plan to implement Microsoft Purview policies to satisfy these requirements:

• Identify documents stored in Microsoft Teams and SharePoint that contain Personally Identifiable Information (PII).
• Report on shared documents that contain PII.

What should you create?

You have a Microsoft 365 subscription containing the users shown in the following table.

You need to configure a dynamic user group that includes guest users in any department containing the word Support. How should you complete the membership rule?

(user.userType Select…) and (user.department Select…)

Your network has an Active Directory domain named adatum.com that is synchronized with a Microsoft Entra tenant.

The domain has 100 user accounts.

The city attribute for every user is set to the city in which that user lives.

You need to change the city attribute value to each city’s three-letter airport code.

What should you do?

Your network has an Active Directory domain and an Azure AD tenant.

You implement directory synchronization for all 10,000 users in the organization.

You automate the creation of 100 new user accounts.

You need to ensure that the new user accounts synchronize to Azure AD as quickly as possible.

Which command should you run?

Select… -PolicyType Select…

HOTSPOT -

You have a Microsoft 365 subscription. A user named [email protected] was recently provisioned.

Use PowerShell to assign a Microsoft Office 365 E3 license to User1, while ensuring that Microsoft Bookings is not enabled. Complete the command by selecting the appropriate options in the answer area.

Select… -Scopes User.ReadWrite.All, Organization.Read.All

$E3 = Select… | Where SkuPartNumber -eq 'EnterprisePack'

$disabledPlans = $E3.ServicePlans | Where ServicePlanName -in ("MICROSOFTBOOKINGS") | select -ExcludeProperty ServicePlanID

$LicenseOptions = @(
    @{
        SkuId = $E3.SkuId
        DisabledPlans = $disabledPlans
    }
)

Select… -UserId [email protected] -AddLicenses $LicenseOptions -RemoveLicenses @()