MS-102 Study Guide 2026

Everything you need to pass the MS-102 exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.

📋 MS-102 Exam Format at a Glance

Questions

100 min

Time Limit

70%

Passing Score

Take a Full MS-102 Exam Simulation →

📚 MS-102 Topics to Study (60)

See all 60 topics as flashcards →

✍️ Sample MS-102 Questions & Answers

1. Which Defender for Office 365 feature provides a detonation-based analysis of email attachments in an isolated environment before delivery?

✓ Safe Attachments

Safe Attachments detonates suspicious attachments in a sandboxed virtual environment to detect malware before the email is delivered to the recipient.

2. What is the purpose of the 'Live Response' feature in Microsoft Defender for Endpoint?

✓ Provide a remote shell session to investigate and remediate a device in real time

Live Response gives security analysts a remote shell connection to a device, allowing them to run commands, collect files, and remediate threats interactively.

3. What is 'co-management' in the context of Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM)?

✓ Sharing device management workloads between Configuration Manager and Intune simultaneously

Co-management connects existing ConfigMgr-managed Windows devices to Intune and allows organizations to progressively shift specific management workloads (e.g., Compliance, Device Configuration) from on-premises ConfigMgr to cloud-based Intune.

4. An organization has synchronized on-premises Active Directory users to Azure AD using Azure AD Connect. A user's account is disabled in on-premises AD. What happens to the Azure AD account?

✓ The Azure AD account is disabled on the next synchronization cycle

Azure AD Connect synchronizes account state changes, so the Azure AD account will be disabled after the next sync cycle (default every 30 minutes).

5. Which role is required to create and manage DLP policies in the Microsoft Purview compliance portal?

✓ DLP Compliance Management

The DLP Compliance Management role grants permissions to create, edit, and manage DLP policies in the Microsoft Purview compliance portal.

6. An administrator must ensure that all Microsoft 365 license assignments are removed when a user account is deleted. Which behavior is correct by default?

✓ Licenses remain assigned to the deleted user account for 30 days then are reclaimed

When a user is deleted in Microsoft 365, the account enters a soft-delete state for 30 days, during which the license remains consumed; the license is reclaimed after the 30-day retention period.

🎯 Free MS-102 Practice Tests

Microsoft 365 Tenant & Service Management · 9 questions Identity & Access Management · 7 questions Microsoft 365 Administrator Expert Implementing Data Loss Prevention · 7 questions Microsoft 365 Administrator Expert Implementing Data Loss Prevention · 7 questions Microsoft 365 Administrator Expert Implementing Data Loss Prevention · 7 questions Microsoft 365 Administrator Expert Implementing Data Loss Prevention · 7 questions Identity & Access Management · 7 questions Microsoft 365 Tenant & Service Management · 7 questions Microsoft 365 Tenant & Service Management · 7 questions Identity & Access Management · 7 questions

📖 MS-102 Guides & Articles

Your MS-102 Study Path

1. Learn with Flashcards → 2. Drill Practice Tests → 3. Take the Full Exam Simulation

🃏 MS-102 Flashcards (414)🏆 MS-102 Exam Simulation

Was this helpful?