MS-102 Free Practice Questions — Page 14

Question 133

You have a Microsoft 365 E5 subscription. Administrators are issued FIDO2 security keys. You need to create a Conditional Access policy that will use a FIDO2 security key as an authentication method. Which Access controls option should you select for the policy?

Question 134

You have a Microsoft 365 E5 subscription. You plan to use a third-party protection service to scan email messages before they are delivered to Microsoft 365. You configure a mail flow rule to bypass spam filtering for incoming messages. Which two messages will still be scanned by Microsoft 365 and cannot be bypassed by the mail flow rule? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question 135

You have a Microsoft 365 E5 subscription. The subscription contains users that have the following types of devices: • Windows 10 • Android • iOS To which devices can you apply Endpoint DLP policies?

Question 136

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. Defender for Endpoint has tamper protection enabled. You have a device named Device1 that is onboarded to Defender for Endpoint. You need to configure antivirus and real-time protection for Device1. What should you do in the Microsoft Defender portal?

Question 137

You have a Microsoft 365 E5 subscription. You plan to configure multi-factor authentication (MFA). You need to select an authentication method for users. The solution must ensure that each time a user is prompted for MFA, the application name that requires MFA is provided. What should you select?

Question 138

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You configure a Multifactor authentication registration policy that has the following settings: • Assignments: o Include: Group1 o Exclude: Group2 • Controls: Require Microsoft Entra ID multifactor authentication registration • Policy enforcement: Enabled You create a conditional access policy that has the following settings: • Name: Policy1 • Assignments: o Include: Group2 o Exclude: Group1 • Grant: Require multifactor authentication • Enable policy: On For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 139

You use Microsoft Defender for Office 365. You plan to automate an attack simulation campaign. Any users that fail the simulation must take additional training based on the simulation results. What is the maximum number of days the training will be available to the users after the simulation?

Question 140

HOTSPOT - You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains the devices shown in the following table. You need to create the Endpoint security policies shown in the following table. To which device can you apply each policy? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 141

HOTSPOT - You have a Microsoft 365 E5 subscription. You need to create a Conditional Access policy named Policy1 that meets the following requirements: • Applies to high-risk users • Requires multifactor authentication (MFA) Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

Question 142

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You are configuring Attack simulation training that will target all users and use the Credential Harvest social engineering technique. You need to ensure that the simulation sends an email message that contains a custom phishing link and company-based terminology and branding. How should you configure the simulation?