Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant Flashcards
7 cards from real MS-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant flashcards as text
A Microsoft 365 administrator wants to configure a retention policy that keeps Exchange emails for 7 years but allows users to delete emails sooner. Which retention behavior should be selected?
Answer: Retain and then delete
The 'Retain and then delete' setting keeps content for the retention period and deletes it afterward, but users can still delete items before the period ends.
Which tool should a Microsoft 365 admin use to analyze how a specific Conditional Access policy would affect users before enabling it?
Answer: What If tool in Conditional Access
The 'What If' tool in Conditional Access simulates policy outcomes for specific users, apps, and conditions without actually enforcing the policy.
An administrator needs to ensure that a contractor's guest account is automatically reviewed and removed if no action is taken within 30 days. Which feature should be used?
Answer: Azure AD access reviews
Azure AD access reviews can be scheduled to periodically review guest accounts and automatically remove access if reviewers take no action.
A new Microsoft 365 tenant is being set up. The admin wants all users to see the company name in their Office apps and email signatures. What should be configured first?
Answer: Organizational profile in Microsoft 365 admin center
The Organizational profile in the Microsoft 365 admin center stores the company name that appears across Microsoft 365 services and apps.
An admin receives a Microsoft 365 Message Center notification about a planned feature change. What action should the admin take to prevent the change from rolling out to users immediately?
Answer: Use the 'Targeted release' option for a limited group first
Configuring Targeted release allows the admin to test changes with a subset of users before broader rollout, providing time to prepare.
A Microsoft 365 administrator wants to delegate management of a single application in Azure AD to a specific team without granting them Global Admin rights. What is the best approach?
Answer: Assign the team as owners of the specific application in Azure AD
Assigning application owners in Azure AD grants the team management rights only over that specific application without broader directory permissions.
Which Microsoft 365 admin center section allows an administrator to configure the default app permissions that users grant to third-party applications?
Answer: Azure AD Enterprise Applications > User consent settings
User consent settings in Azure AD Enterprise Applications control whether users can grant permissions to third-party apps and what types of permissions are allowed.