Practice Test Geeks(MS-102) Microsoft 365 Administrator Expert Practice Test
← All MS-102 Flashcard Decks

Microsoft 365 Administrator Expert Managing Entra ID Authentication Flashcards

7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft 365 Administrator Expert Managing Entra ID Authentication flashcards as text

  1. A company's Entra ID Connect sync is running in Staging Mode. What is the effect of this configuration?

    Answer: The sync engine imports and exports but does not write changes to Entra ID

    In Staging Mode, Entra ID Connect runs full sync cycles and populates its local database but does not apply any changes to Entra ID or on-premises AD, making it safe for testing.

  2. Which Entra ID role grants the minimum permissions needed to reset user passwords and manage MFA registration for non-admin users?

    Answer: Authentication Administrator

    The Authentication Administrator role can reset passwords and manage MFA settings for non-privileged users, following the principle of least privilege.

  3. An organization needs to ensure that service accounts used by applications cannot sign in interactively and are not required to perform MFA. Which Entra ID object type is best suited for this scenario?

    Answer: Managed Identity

    Managed Identities are non-interactive identities managed by Azure that eliminate the need for credentials entirely, making them ideal for service-to-service authentication.

  4. A Conditional Access policy is set to 'Report-Only' mode. What is the impact on end users?

    Answer: Users experience no change in sign-in behavior, but policy outcomes are logged

    Report-Only mode evaluates a Conditional Access policy and logs what the outcome would have been without enforcing it, allowing administrators to assess impact before enablement.

  5. An administrator needs to configure Entra ID to send sign-in logs to a Log Analytics workspace for long-term retention. Which Azure service should be configured?

    Answer: Diagnostic Settings on the Entra ID tenant

    Diagnostic Settings in Entra ID allow routing of audit logs, sign-in logs, and other telemetry to a Log Analytics workspace, Event Hub, or Storage Account.

  6. Which Entra ID feature prevents users from using recently used passwords when they perform a self-service password reset?

    Answer: Password History enforcement via on-premises AD policy

    Password history is enforced through the on-premises Active Directory password policy when password writeback is configured, preventing reuse of recent passwords.

  7. A Microsoft 365 tenant has Security Defaults enabled. A user reports they cannot use a third-party mail client that uses Basic authentication. What is the cause?

    Answer: Security Defaults blocks all legacy authentication protocols

    Security Defaults blocks legacy authentication protocols including Basic Auth, which is used by older mail clients, requiring modern authentication-capable clients instead.