Microsoft 365 Administrator Expert Managing Entra ID Authentication Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Managing Entra ID Authentication flashcards as text
An organization wants to enforce MFA only when users sign in from outside the corporate network. Which Conditional Access condition should the administrator configure?
Answer: Named locations condition
Named locations allow you to define trusted IP ranges so Conditional Access policies can target or exclude corporate network traffic.
A user reports that they are unable to use the Microsoft Authenticator app for MFA because they lost their phone. Which self-service option allows the user to regain access without admin intervention?
Answer: Temporary Access Pass
A Temporary Access Pass is a time-limited passcode issued by an admin or self-service that allows users to sign in and register new authentication methods.
Which Entra ID feature continuously evaluates session risk in real time and can revoke access mid-session without requiring reauthentication?
Answer: Continuous Access Evaluation (CAE)
Continuous Access Evaluation (CAE) allows resource providers to respond immediately to critical events such as account disablement or location changes during an active session.
An administrator needs to ensure that only Entra ID-registered devices can access Exchange Online. Which Conditional Access grant control should be applied?
Answer: Require Entra ID joined device
The 'Require Entra ID joined device' grant control restricts access to devices that have completed Entra ID (Azure AD) device registration or join.
A company is piloting passwordless authentication using FIDO2 security keys. Where in the Microsoft Entra admin center should the administrator enable this authentication method?
Answer: Authentication methods policy
FIDO2 security key support is enabled under Authentication Methods Policy in the Entra ID admin center, allowing granular targeting to specific user groups.
Which PowerShell module should an MS-102 administrator use to manage Entra ID authentication policies using Microsoft Graph-based cmdlets?
Answer: Microsoft.Graph
The Microsoft.Graph PowerShell SDK is the current recommended module for managing Entra ID resources, replacing the deprecated MSOnline and AzureAD modules.
An organization enables Password Hash Synchronization (PHS) alongside Pass-Through Authentication (PTA) in a hybrid environment. What is the primary reason for this dual configuration?
Answer: To provide resilience if PTA agents go offline
Configuring PHS as a backup alongside PTA ensures users can still authenticate via cloud password hashes if all on-premises PTA agents become unavailable.