MS-102 Identity & Access Management 2

Question 1

A Microsoft 365 administrator needs to ensure that users can sign in only from devices that are joined to Azure AD. Which Conditional Access condition should be configured?

Accepted Answer

Require Hybrid Azure AD joined device

Answer

The 'Require Hybrid Azure AD joined device' grant control restricts access to devices that are joined to both on-premises AD and Azure AD.

Question 2

An organization uses Azure AD Password Protection. What happens when a user attempts to set a password containing a term from the global banned password list?

Accepted Answer

The user receives an error and must choose a different password

Answer

Azure AD Password Protection rejects passwords that match or are variants of terms on the global or custom banned password lists.

Question 3

Which Azure AD feature allows you to automatically assign or remove group memberships based on user attribute values?

Accepted Answer

Dynamic groups

Answer

Dynamic groups use membership rules based on user or device attributes to automatically manage group membership.

Question 4

A company wants to prevent users from registering personal devices with Azure AD unless they are in a specific security group. Which setting controls this?

Accepted Answer

Users may join devices to Azure AD setting

Answer

The 'Users may join devices to Azure AD' setting in Azure AD Device settings controls which users can register or join devices.

Question 5

In Azure AD Entitlement Management, what is an 'access package'?

Accepted Answer

A collection of resources and policies that govern who can request access to those resources

Answer

An access package is a bundle of resources (groups, apps, SharePoint sites) with policies defining who can request access and for how long.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Identity & Access Management 2