Free Microsoft MS-102 Practice Questions & Answers 2026 Part2 | Microsoft 365 Administrator

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription.You create an account for a new security administrator named SecAdmin1.You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive.Solution: From the Microsoft Entra admin center, you assign SecAdmin1 the Teams Administrator role. Does this meet the goal?

OverviewFabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.Existing EnvironmentActive Directory EnvironmentThe network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication. Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.All users authenticate to on-premises applications by signing in to their device by using a UPN format of[email protected].Fabrikam does NOT plan to implement identity federation.Network InfrastructureEach office has a high-speed connection to the Internet.Each office contains two domain controllers. All domain controllers are configured as DNS servers.The public zone for fabrikam.com is managed by an external DNS server.All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.All shared company documents are stored on a Microsoft SharePoint Server farm.RequirementsPlanned ChangesFabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.Fabrikam plans to implement two pilot projects:Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.Project2: After the successful completion of Project1, Microsoft Teams will be enabled in Microsoft 365 for the sales department users.Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.Technical RequirementsFabrikam identifies the following technical requirements:All users must be able to exchange email messages successfully during Project1 by using their current email address.Users must be able to authenticate to cloud services if Active Directory becomes unavailable.A user named User1 must be able to view all DLP reports from the Microsoft Purview compliance portal.Microsoft 365 Apps for enterprise applications must be installed from a network share only.Disruptions to email access must be minimized.Application RequirementsFabrikam identifies the following application requirements:An on-premises web application named App1 must allow users to complete their expense reports online. App1 must be available to users from the My Apps portal.The installation of feature updates for Microsoft 365 Apps for enterprise must be minimized.Security RequirementsFabrikam identifies the following security requirements:After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.The membership of the UserLicenses group must be validated monthly. Unused user accounts must be removed from the group automatically.After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.The principle of least privilege must be used.Which role should you assign to User1?

Your network contains an Active Directory forest named contoso.local. You purchase a Microsoft 365 subscription.You plan to move to Microsoft 365 and to implement a hybrid deployment solution for the next 12 months. You need to prepare for the planned move to Microsoft 365.What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.You need to ensure that users are prevented from opening or downloading malicious files from Microsoft Teams, OneDrive, or SharePoint Online.What should you do?

Your company has a Microsoft 365 subscription.You need to identify all the users in the subscription who are licensed for Office 365 through a group membership. The solution must include the name of the group used to assign the license.What should you use?

You have a Microsoft 365 subscription.You need to be notified to your personal email address when a Microsoft Exchange Online service issue occurs.What should you do?

You plan to delete several user accounts that are assigned Microsoft 365 licenses. How soon after deleting the accounts will you be able to re-assign the licenses to other users?

You have a Microsoft 365 E5 subscription.You create an account tor a new security administrator named SecAdmin1.You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint and OneDrive.Solution: From the Microsoft Entra ID admin center, you assign SecAdmin1 the Teams Administrator role.Does this meet the goal?

You have Microsoft 365 E5 subscription that contains the identities shown in the following table.You create a shared mailbox named Shared1.Which identities can you add to Shared1 as a member?

You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?

Overview -Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.Existing Environment -Active Directory Environment -The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication. Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.All users authenticate to on-premises applications by signing in to their device by using a UPN format of[email protected].Fabrikam does NOT plan to implement identity federation.Network Infrastructure -Each office has a high-speed connection to the Internet.Each office contains two domain controllers. All domain controllers are configured as DNS servers.The public zone for fabrikam.com is managed by an external DNS server.All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.All shared company documents are stored on a Microsoft SharePoint Server farm.Requirements -Planned Changes -Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.Fabrikam plans to implement two pilot projects:Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.Project2: After the successful completion of Project1, Microsoft Teams will be enabled in Microsoft 365 for the sales department users.Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.Technical Requirements -Fabrikam identifies the following technical requirements:All users must be able to exchange email messages successfully during Project1 by using their current email address.Users must be able to authenticate to cloud services if Active Directory becomes unavailable.A user named User1 must be able to view all DLP reports from the Microsoft Purview compliance portal.Microsoft 365 Apps for enterprise applications must be installed from a network share only.Disruptions to email access must be minimized.Application Requirements -Fabrikam identifies the following application requirements:An on-premises web application named App1 must allow users to complete their expense reports online. App1 must be available to users from the My Apps portal.The installation of feature updates for Microsoft 365 Apps for enterprise must be minimized.Security Requirements -Fabrikam identifies the following security requirements:After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.The membership of the UserLicenses group must be validated monthly. Unused user accounts must be removed from the group automatically.After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.The principle of least privilege must be used.You are evaluating the required processes for Project1.You need to recommend which DNS record must be created while adding a domain name for the project.Which DNS record should you recommend?

You have a Microsoft 365 subscription that contains the users shown in the following table.You need to configure group-based licensing to meet the following requirements:To all users, deploy an Office 365 E3 license without the Power Automate license option.To all users, deploy an Enterprise Mobility + Security E5 license.To the users in the research department only, deploy a Power BI Pro license.To the users in the marketing department only, deploy a Visio Plan 2 license.What is the minimum number of deployment groups required?

You have a Microsoft 365 E5 subscription that uses Endpoint security. You need to create a group and assign the Endpoint Security Manager role to the group. Which type of group can you use?

You have a Microsoft 365 E5 subscription.You need to recommend a solution for monitoring and reporting application access. The solution must meet the following requirements:Support KQL for querying data.Retain report data for at least one year.What should you include in the recommendation?

Which role should you assign to User1?

You have a Microsoft 365 E5 subscription that contains the groups shown in the following exhibit.To which groups can you assign Microsoft 365 E5 licenses?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory domain. The domain contains domain controllers that run Windows Server 2019. The functional level of the forest and the domain is Windows Server 2012 R2. The domain contains 100 computers that run Windows 10 and a member server named Server1 that runs Windows Server 2012 R2. You plan to use Server1 to manage the domain and to configure Windows 10 Group Policy settings. You install the Group Policy Management Console (GPMC) on Server1. You need to configure the Windows Update for Business Group Policy settings on Server1. Solution: You copy the Group Policy Administrative Templates from a Windows 10 computer to Server1. Does this meet the goal?

You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?

You have a Microsoft 365 E5 subscription and use Microsoft Intune for managing mobile devices. You need to access service health alerts from a mobile phone.What should you use?

Your company has a Microsoft 365 E5 subscription.You onboard a device on the company's network to Microsoft Defender for Endpoint.In the Microsoft Defender portal, you notice that the device inventory displays many devices that have an Onboarding status of Can be onboarded.You need to ensure that onboarded devices are prevented from polling the network for device discovery but can still discover devices with which they communicate directly.What should you configure in the Microsoft Defender portal?

You have a Microsoft 365 subscription that contains the users shown in the following table.You need to configure group-based licensing to meet the following requirements:To all users, deploy an Office 365 E3 license without the Power Automate license option. To all users, deploy an Enterprise Mobility + Security E5 license.To the users in the research department only, deploy a Power BI Pro license. To the users in the marketing department only, deploy a Visio Plan 2 license.What is the minimum number of deployment groups required?

You have a Microsoft Microsoft Entra ID (Microsoft Entra ID) tenant named Contoso.com.You create a Microsoft Defender for identity instance Contoso.The tenant contains the users shown in the following table.You need to modify the configuration of the Defender for identify sensors.Solutions: You instruct User3 to modify the Defender for identity sensor configuration.Does this meet the goal?

You have a Microsoft 365 E5 tenant that uses Microsoft Intune. You need to ensure that users can select a department when they enroll their device in Intune. What should you create?

You have a Microsoft 365 E5 subscription. You need to create a mail-enabled contact. Which portal should you use?

You have a Microsoft Microsoft Entra ID (Microsoft Entra ID) tenant named Contoso.com.You create a Microsoft Defender for identity instance Contoso.The tenant contains the users shown in the following table.You need to modify the configuration of the Defender for identify sensors.Solutions: You instruct User1 to modify the Defender for identity sensor configuration.Does this meet the goal?

You have a Microsoft 365 subscription and use Microsoft Defender for Office 365. You need to recommend a solution to educate users on topics that relate to social engineering risks. The users must receive a weekly reminder to complete a learning task. What should you use in the Microsoft Defender portal?

You have a Microsoft 365 E3 subscription that uses Microsoft Defender for Endpoint Plan 1. Which two Defender for Endpoint features are available to the subscription? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have a Microsoft 365 subscription.You view the Service health Overview as shown in the following exhibit.You need to ensure that a user named User1 can view the advisories to investigate service health issues. Which role should you assign to User1?

You have a Microsoft 365 E5 tenant.You plan to create a custom Compliance Manager assessment template based on the ISO 27001:2013 template.You need to export the existing template.Which file format should you use for the exported template?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft 365 E5 subscription.You create an account for a new security administrator named SecAdmin1.You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive.Solution: From the Microsoft Entra admin center, you assign SecAdmin1 the Security Administrator role. Does this meet the goal?

You have a Microsoft 365 E5 subscription.You need to assign a Microsoft Defender for Endpoint baseline. Which portal should you use?

Your company has a Microsoft 365 subscription.You need to identify all the users in the subscription who are licensed for Microsoft 365 through a group membership. The solution must include the name of the group used to assign the license.What should you use?

You have a Microsoft 365 tenant. You plan to implement Endpoint Protection device configuration profiles. Which platform can you manage by using the profile? Intune device configuration profiles can be applied to Windows 10 devices and macOS devices Note: There are several versions of this question in the exam. The question has two possible correct answers: Windows 10 macOS Other incorrect answer options you may see on the exam include the following: Android Enterprise Windows 8.1 https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure

Your company has on-premises servers and a Microsoft Entra tenant.Several months ago, the Microsoft Entra Connect Health agent was installed on all the servers. You review the health status of all the servers regularly.Recently, you attempted to view the health status of a server named Server1 and discovered that the server isNOT listed on the Microsoft Entra Connect Servers list.You suspect that another administrator removed Server1 from the list. You need to ensure that you can view the health status of Server1.What are two possible ways to achieve the goal? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.