Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Identity & Access Management Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Identity & Access Management flashcards as text

  1. A Conditional Access policy is set to 'Report-only' mode. What is the effect on users signing in?

    Answer: Users can sign in normally, but results are logged for evaluation without enforcement

    Report-only mode evaluates the policy and logs what would happen without actually enforcing access controls, enabling impact assessment.

  2. An administrator wants to ensure that only licensed users can be assigned the Teams Administrator role. Where is role assignability controlled in Azure AD?

    Answer: Azure AD > Roles and administrators > Role settings

    Role settings in Azure AD Roles and administrators control eligibility, activation requirements, and assignment rules for each role.

  3. What is the primary function of Azure AD Access Reviews in the context of privileged roles?

    Answer: Periodically verify that users still need their current role assignments

    Access Reviews allow administrators or designated reviewers to periodically confirm whether users still require their privileged role assignments.

  4. A company needs to integrate a third-party SaaS application with Azure AD for Single Sign-On using SAML. Which Azure AD component is used to configure this?

    Answer: Enterprise applications

    Enterprise applications in Azure AD is used to add and configure SAML-based SSO for third-party SaaS applications from the gallery or manually.

  5. Which Azure AD feature enables users to request access to applications and resources through a self-service portal?

    Answer: Entitlement Management access packages

    Entitlement Management access packages provide a self-service catalog where users can request access to bundles of resources through a portal.

  6. An administrator needs to configure Azure AD Connect to filter which OUs are synchronized to Azure AD. Where is this configured?

    Answer: Azure AD Connect wizard > Domain/OU Filtering

    The Azure AD Connect configuration wizard's Domain/OU Filtering step lets administrators select which OUs are included in synchronization.

  7. A user's account is assigned the Security Reader role in Azure AD. What can this user do?

    Answer: View security-related reports and configurations without making changes

    The Security Reader role provides read-only access to security features including Identity Protection, Conditional Access, and security reports.