File Info
| Exam | Microsoft 365 Administrator |
| Number | MS-102 |
| File Name | Microsoft.MS-102.PassLeader.2024-12-19.256q.tqb |
| Size | 27 MB |
| Posted | Dec 19, 2024 |
| Download | Microsoft.MS-102.PassLeader.2024-12-19.256q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
You are evaluating the required processes for Project1.
You need to recommend which DNS record must be created while adding a domain name for the project.
Which DNS record should you recommend?
- host (A)
- host information (HINFO)
- text (TXT)
- pointer (PTR)
Correct answer: C
Explanation:
Before you start you have to verify your custom domain with a TXT record. https://learn.microsoft.com/en-us/microsoft-365/admin/setup/add-domain?view=o365-worldwide Before you start you have to verify your custom domain with a TXT record.
https://learn.microsoft.com/en-us/microsoft-365/admin/setup/add-domain?view=o365-worldwide
Question 2
You need to ensure that all the sales department users can authenticate successfully during Project1 and Project2.
Which authentication strategy should you implement for the pilot projects?
- pass-through authentication
- pass-through authentication and seamless SSO
- password hash synchronization and seamless SSO
- password hash synchronization
Correct answer: C
Explanation:
"Users must be able to authenticate to cloud services if Active Directory becomes unavailable." That would be hash sync. Pass-though with failback is also possible but more work to implement and maintain. "After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically." that's the SSO. "Users must be able to authenticate to cloud services if Active Directory becomes unavailable."
That would be hash sync. Pass-though with failback is also possible but more work to implement and maintain.
"After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically." that's the SSO.
Question 3
Which role should you assign to User1?
- Hygiene Management
- Security Reader
- Security Administrator
- Records Management
Correct answer: B
Explanation:
The Security Reader role in Microsoft 365 provides permissions to read security information and reports. The main task for User1 as per the scenario is to view DLP reports, and this role provides the necessary permissions for that task without granting extra, potentially unnecessary, permissions. https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions The Security Reader role in Microsoft 365 provides permissions to read security information and reports. The main task for User1 as per the scenario is to view DLP reports, and this role provides the necessary permissions for that task without granting extra, potentially unnecessary, permissions.
https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions
Question 4
You are evaluating the required processes for Project1.
You need to recommend which DNS record must be created while adding a domain name for the project.
Which DNS record should you recommend?
- host (A)
- alias (CNAME)
- text (TXT)
- host (AAAA)
Correct answer: C
Explanation:
https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#step-1-add-a-txt-or-mx-record-to-verify-you-own-the-domain https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#step-1-add-a-txt-or-mx-record-to-verify-you-own-the-domain
Question 5
Your company has a Microsoft 365 subscription.
You need to identify all the users in the subscription who are licensed for Office 365 through a group membership. The solution must include the name of the group used to assign the license.
What should you use?
- Active users in the Microsoft 365 admin center
- Reports in Microsoft Purview compliance portal
- the Licenses blade in the Azure portal
- Reports in the Microsoft 365 admin center
Correct answer: C
Explanation:
In the Azure AD Admin Center, select Azure Active Directory then select Licenses to open the Licenses blade. From there you need to click on the 'Managed your purchased licenses link'. Select a license you want to view, for example Office 365 E3. This will then display a list of all users with that license. In the 'Assignment Paths' column, it will say 'Direct' for a license that has been assigned directly to a user or 'Inherited (Group Name)' for a license that has been assigned through a group. Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign In the Azure AD Admin Center, select Azure Active Directory then select Licenses to open the Licenses blade.
From there you need to click on the 'Managed your purchased licenses link'. Select a license you want to view, for example Office 365 E3. This will then display a list of all users with that license. In the 'Assignment Paths' column, it will say 'Direct' for a license that has been assigned directly to a user or 'Inherited (Group Name)' for a license that has been assigned through a group.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign
Question 6
You have a Microsoft 365 subscription that contains the users shown in the following table.
You need to configure group-based licensing to meet the following requirements:
- To all users, deploy an Office 365 E3 license without the Power Automate license option.
- To all users, deploy an Enterprise Mobility + Security E5 license.
- To the users in the research department only, deploy a Power BI Pro license.
- To the users in the marketing department only, deploy a Visio Plan 2 license.
What is the minimum number of deployment groups required?
- 1
- 2
- 3
- 4
- 5
Correct answer: C
Explanation:
3 groups needed : Group 1: Allusers (deploy EMS+S E5 licence and O365 E3 licence with "PowerAutomate for Office 365" disabled. group 2: "Research group" : deploy Power Bi Pro Licence (not included in O365 E3 but in O365 E5). Group 3: "Marketing group" deploy Visio plan 2 Licence. 3 groups needed :
- Group 1: Allusers (deploy EMS+S E5 licence and O365 E3 licence with "PowerAutomate for Office 365" disabled.
- group 2: "Research group" : deploy Power Bi Pro Licence (not included in O365 E3 but in O365 E5).
- Group 3: "Marketing group" deploy Visio plan 2 Licence.
Question 7
You have a Microsoft 365 subscription.
You view the Service health Overview as shown in the following exhibit.
You need to ensure that a user named User1 can view the advisories to investigate service health issues.
Which role should you assign to User1?
- Message Center Reader
- Reports Reader
- Service Support Administrator
- Compliance
Correct answer: C
Explanation:
Service Support Admin - Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role: Open and manage service requests View and share message center posts Monitor service health https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#commonly-used-microsoft-365-admin-center-roles Service Support Admin - Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role:
- Open and manage service requests
- View and share message center posts
- Monitor service health
https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#commonly-used-microsoft-365-admin-center-roles
Question 8
You have a Microsoft 365 subscription.
You have an Azure AD tenant that contains the users shown in the following table.
You configure Tenant properties as shown in the following exhibit.
Which users will be contacted by Microsoft if the tenant experiences a data breach?
- User1 only
- User2 only
- User3 only
- User1 and User2 only
- User2 and User3 only
Correct answer: B
Explanation:
Global privacy contact: Type the email address for the person to contact for inquiries about personal data privacy. This person is also who Microsoft contacts if there's a data breach related to Azure Active Directory services. If there's no person listed here, Microsoft contacts your Global Administrators. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/properties-area Global privacy contact: Type the email address for the person to contact for inquiries about personal data privacy. This person is also who Microsoft contacts if there's a data breach related to Azure Active Directory services. If there's no person listed here, Microsoft contacts your Global Administrators.
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/properties-area
Question 9
Your network contains an Active Directory forest named contoso.local.
You purchase a Microsoft 365 subscription.
You plan to move to Microsoft 365 and to implement a hybrid deployment solution for the next 12 months.
You need to prepare for the planned move to Microsoft 365.
What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.
- Purchase a third-party X.509 certificate.
- Create an external forest trust.
- Rename the Active Directory forest.
- Purchase a custom domain name.
Correct answer: D
Explanation:
The best action to take before implementing directory synchronization for a hybrid deployment with Microsoft 365 would be to purchase a custom domain name. When you set up Microsoft 365, you're prompted to provide your domain name. This domain should match the domain you use within your on-premises Active Directory environment to ensure a seamless user experience and email delivery. The best action to take before implementing directory synchronization for a hybrid deployment with Microsoft 365 would be to purchase a custom domain name. When you set up Microsoft 365, you're prompted to provide your domain name. This domain should match the domain you use within your on-premises Active Directory environment to ensure a seamless user experience and email delivery.
Question 10
You have a Microsoft 365 subscription.
You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role.
Which type of group should you use to assign the Reports Reader role and to access App1?
- a Microsoft 365 group that has assigned membership
- a Microsoft 365 group that has dynamic user membership
- a security group that has assigned membership
- a security group that has dynamic user membership
Correct answer: C
Explanation:
You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group. You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group.
