Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Identity & Access Management Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Identity & Access Management flashcards as text

  1. A Microsoft 365 administrator needs to ensure that users can sign in only from devices that are joined to Azure AD. Which Conditional Access condition should be configured?

    Answer: Require Hybrid Azure AD joined device

    The 'Require Hybrid Azure AD joined device' grant control restricts access to devices that are joined to both on-premises AD and Azure AD.

  2. An organization uses Azure AD Password Protection. What happens when a user attempts to set a password containing a term from the global banned password list?

    Answer: The user receives an error and must choose a different password

    Azure AD Password Protection rejects passwords that match or are variants of terms on the global or custom banned password lists.

  3. Which Azure AD feature allows you to automatically assign or remove group memberships based on user attribute values?

    Answer: Dynamic groups

    Dynamic groups use membership rules based on user or device attributes to automatically manage group membership.

  4. A company wants to prevent users from registering personal devices with Azure AD unless they are in a specific security group. Which setting controls this?

    Answer: Users may join devices to Azure AD setting

    The 'Users may join devices to Azure AD' setting in Azure AD Device settings controls which users can register or join devices.

  5. In Azure AD Entitlement Management, what is an 'access package'?

    Answer: A collection of resources and policies that govern who can request access to those resources

    An access package is a bundle of resources (groups, apps, SharePoint sites) with policies defining who can request access and for how long.

  6. What is the purpose of Azure AD Identity Protection's 'User risk policy'?

    Answer: Automatically require users with risky sign-in behavior to change their password

    The User risk policy detects compromised accounts and can automatically require a password change when a user's risk level exceeds a threshold.

  7. An administrator configures a Conditional Access policy with session control 'Sign-in frequency' set to 4 hours for all cloud apps. What does this enforce?

    Answer: Users must re-authenticate every 4 hours when using covered apps

    Sign-in frequency session control forces users to reauthenticate after the specified interval when accessing covered applications.