MS-102 - Microsoft 365 Administrator Expert Managing Entra ID Authentication Questions and Answers

Question 1

A company is rolling out Self-Service Password Reset (SSPR) for all users.
To ensure a smooth rollout, the administrator wants to require users to register their authentication methods upon their next sign-in.
Which setting should be configured in the Microsoft Entra admin center?

Accepted Answer

Set 'Require users to register when signing in?' to Yes in the SSPR Registration settings.

Answer

Create a Conditional Access policy that requires registration for all users.

Answer

Enable the 'Combined security information registration' feature for all users.

Answer

Configure the 'Authentication methods' policy to require registration for a mobile app.

Question 2

An organization wants to enhance security for its privileged administrator accounts. The goal is to require phishing-resistant multifactor authentication (MFA) whenever an administrator signs in. Which of the following authentication methods would satisfy this requirement?

Accepted Answer

FIDO2 security key

Answer

SMS message

Answer

Microsoft Authenticator (push notification)

Answer

Email OTP

Question 3

A Microsoft 365 administrator is configuring a Conditional Access policy to respond to risky sign-ins detected by Microsoft Entra ID Protection. The policy should apply when the sign-in risk level is medium or high. What is the most appropriate 'Grant' control to configure for this policy to allow users to self-remediate?

Accepted Answer

Require multifactor authentication

Answer

Block access

Answer

Require device to be marked as compliant

Answer

Require Microsoft Entra hybrid joined device

Question 4

Your company wants to allow new employees to set up their passwordless authentication methods, such as the Microsoft Authenticator app or a FIDO2 key, without needing to know a password first. Which Entra ID feature is specifically designed to facilitate this initial onboarding process?

Accepted Answer

Temporary Access Pass (TAP)

Answer

Self-Service Password Reset (SSPR)

Answer

Conditional Access

Answer

Security Defaults

Question 5

An administrator is reviewing the authentication methods policies in Microsoft Entra ID and notices separate legacy policies for MFA and SSPR. What is the recommended approach for managing authentication methods going forward?

Accepted Answer

Migrate the settings from the legacy MFA and SSPR policies to the modern 'Authentication methods' policy.

Answer

Keep the MFA and SSPR policies separate for more granular control.

Answer

Disable the legacy policies and have users re-register their methods.

Answer

Use PowerShell to synchronize the settings between the legacy and modern policies.

Question 6

A user reports being unable to sign in. When you review the Entra ID sign-in logs, you see a sign-in attempt was interrupted with the status 'Failure' and the reason 'Conditional Access policy'. Which of the following is the MOST likely cause?

Accepted Answer

The sign-in attempt did not satisfy the requirements of a configured Conditional Access policy.

Answer

The user entered an incorrect password.

Answer

The user's account is disabled.

Answer

The user has not registered for Self-Service Password Reset (SSPR).