MS-102 Free Practice Questions — Page 9

Question 78

DRAG DROP - You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2. You need to recommend an authentication solution that meets the following requirements: • Members of Group1 must be able to authenticate by using a hardware token. • Members of Group2 must be able to authenticate by using a public key infrastructure (PKI). Which authentication method should you recommend for each group? To answer, drag the appropriate methods to the correct groups. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 79

You have a Microsoft 365 E5 subscription. You plan to configure Privileged Identity Management (PIM) for the User Administrator role in Microsoft Entra. You need to ensure that a user can make a role assignment request for the User Administrator role only during the next six months. How should you configure the assignment?

Question 80

You have a Microsoft 365 E5 subscription that contains Windows 11 devices. All the devices are onboarded to Microsoft Defender for Endpoint. You need to compare the configuration of the devices against industry standard benchmarks. What should you use?

Question 81

HOTSPOT - Your company has offices in Montreal, Seattle, and New York City. You have a Microsoft 365 E5 subscription that contains the users shown in the following table. The offices have the IP addresses shown in the following table. From Microsoft Defender for Cloud Apps, you create the activity policy shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 82

HOTSPOT - You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3. You use Microsoft Entra ID Protection. You configure the Users at risk detected alerts setting to send an alert when a user risk level of low or above is detected. Users are assigned the risk levels shown in the following table. By the end of the day, how many alerts were generated for User1, and how many alerts were generated for User2 and User3? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 83

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create a Standard preset security policy. Does this meet the goal?

Question 84

HOTSPOT - You have a Microsoft 365 E5 subscription that contains a user named User1. User1 has a Windows 11 device named Device1 that is onboarded to Microsoft Defender for Endpoint. User1 reports that various files were deleted from Device1. You need to create a filter to identify which service deleted the files. Which settings should you configure, and which type of filter should you create in the Microsoft Defender portal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 85

HOTSPOT - You have a Microsoft 365 subscription. You integrate Microsoft Defender for Cloud Apps with Microsoft Defender for Endpoint. You need to create a policy to block users from accessing discovered apps that have a risk score of 4 or lower. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

Question 86

HOTSPOT - You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You use Microsoft Entra ID Protection. For the Users at risk detected alerts setting, you configure the following: • Recipient: Admin1 • Alert on user risk level at or above: Medium User1 signs in to Microsoft 365 services and is assigned the detected risk levels shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 87

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a social engineering awareness solution that meets the following requirements: • To reset a user's password, emulate an email message that contains a link. • Track any users that selects the email message link. • Suggest further social engineering training. What should you use in the Microsoft Defender portal?