MS-102 Free Practice Questions — Page 5

Question 18

Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription. You implement a directory synchronization solution that uses pass-through authentication. You configure Azure AD smart lockout as shown in the following exhibit. You discover that Active Directory users can use the passwords in the custom banned passwords list. You need to ensure that banned passwords are banned for all users. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Question 19

Overview - Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide. Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States. Existing Environment - Active Directory Environment - The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication. Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts. All users authenticate to on-premises applications by signing in to their device by using a UPN format of . Fabrikam does NOT plan to implement identity federation. Network Infrastructure - Each office has a high-speed connection to the Internet. Each office contains two domain controllers. All domain controllers are configured as DNS servers. The public zone for fabrikam.com is managed by an external DNS server. All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed. All shared company documents are stored on a Microsoft SharePoint Server farm. Requirements - Planned Changes - Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription. Fabrikam plans to implement two pilot projects: • Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365. • Project2: After the successful completion of Project1, Microsoft Teams will be enabled in Microsoft 365 for the sales department users. Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses. Technical Requirements - Fabrikam identifies the following technical requirements: • All users must be able to exchange email messages successfully during Project1 by using their current email address. • Users must be able to authenticate to cloud services if Active Directory becomes unavailable. • A user named User1 must be able to view all DLP reports from the Microsoft Purview compliance portal. • Microsoft 365 Apps for enterprise applications must be installed from a network share only. • Disruptions to email access must be minimized. Application Requirements - Fabrikam identifies the following application requirements: • An on-premises web application named App1 must allow users to complete their expense reports online. App1 must be available to users from the My Apps portal. • The installation of feature updates for Microsoft 365 Apps for enterprise must be minimized. Security Requirements - Fabrikam identifies the following security requirements: • After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN. • The membership of the UserLicenses group must be validated monthly. Unused user accounts must be removed from the group automatically. • After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically. • The principle of least privilege must be used. You are evaluating the required processes for Project1. You need to recommend which DNS record must be created while adding a domain name for the project. Which DNS record should you recommend?

Question 19

You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table. You create and assign a data loss prevention (DLP) policy named Policy1. Policy1 is configured to prevent documents that contain Personally Identifiable Information (PII) from being emailed to users outside your organization. To which users can User1 send documents that contain PII?

Question 20

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You need to create a contact named Contact1 and add Contact1 to a group. Which two portals can you use to create Contact1, and to which groups can you add Contact1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 20

You have a Microsoft 365 E5 tenant. You create a retention label named Retention1 as shown in the following exhibit. You apply Retention1 to all the Microsoft OneDrive content. On January 1, 2020, a user stores a file named File1 in OneDrive. On January 10, 2020, the user modifies File1. On February 1, 2020, the user deletes File1. When will File1 be removed permanently and unrecoverable from OneDrive?

Question 21

You have a Microsoft 365 subscription that contains the alerts shown in the following table. Which properties of the alerts can you modify?

Question 22

You have a Microsoft 365 E5 subscription. Your company’s Microsoft Secure Score recommends the actions shown in the following exhibit. You select Create Safe Links policies for email messages and change Status to Risk accepted in the Status & action plan settings. How does the change affect the Secure Score?

Question 23

HOTSPOT - Your company has a hybrid deployment of Microsoft 365. An on-premises user named User1 is synced to the Microsoft Entra tenant. Microsoft Entra Connect Sync is configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Question 23

You have a Microsoft 365 subscription that contains the users shown in the following table. You plan to use Exchange Online to manage email for a DNS domain. An administrator adds the DNS domain to the subscription. The DNS domain has a status of Incomplete setup. You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege. Which user should you identify?

Question 24

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. You have the policies shown in the following table. All the policies are configured to send malicious email messages to quarantine. Which policies support a customized quarantine retention period?