MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 3

Question 1

When configuring a Conditional Access policy with 'Require hybrid Azure AD join' as a grant control, which devices will satisfy this requirement?

Accepted Answer

On-premises domain-joined devices that are also registered in Azure AD

Answer

Hybrid Azure AD join applies to devices that are both joined to the on-premises Active Directory domain and registered in Azure AD.

Question 2

An administrator has configured a Conditional Access policy in 'Report-only' mode. What is the effect of this mode?

Accepted Answer

The policy evaluates sign-ins and reports results without enforcing controls

Answer

Report-only mode evaluates all sign-ins against the policy conditions and logs what would happen, without actually enforcing the grant or block controls.

Question 3

A Conditional Access policy requires MFA for all cloud apps, but an administrator needs to exempt the Microsoft Intune Enrollment app. What is the correct configuration?

Accepted Answer

Exclude Microsoft Intune Enrollment from the cloud apps assignment

Answer

Excluding Microsoft Intune Enrollment from the cloud apps assignment prevents the MFA requirement from applying during the device enrollment process.

Question 4

Which feature must be enabled in Azure AD before Conditional Access can evaluate user risk conditions?

Accepted Answer

Azure AD Identity Protection

Answer

Azure AD Identity Protection generates user and sign-in risk signals that Conditional Access policies use to evaluate risk-based conditions.

Question 5

An administrator configures a Conditional Access policy with 'Require approved client app' as the grant control. Which scenario does this control address?

Accepted Answer

Requiring access only from apps that support Intune app protection policies

Answer

'Require approved client app' enforces that only Microsoft-approved client applications (which support app protection policies) can access the resource.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 3