MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 4

Question 1

A global administrator needs to configure Conditional Access to require reauthentication every 4 hours for users accessing sensitive financial data. Which session control should be used?

Accepted Answer

Sign-in frequency set to 4 hours

Answer

Sign-in frequency session control forces users to reauthenticate after the specified time interval, regardless of their existing session.

Question 2

Which Azure AD role is required to create and modify Conditional Access policies?

Accepted Answer

Conditional Access Administrator

Answer

The Conditional Access Administrator role grants the permissions needed to create, modify, and delete Conditional Access policies.

Question 3

An organization wants to allow access to Microsoft 365 apps only from devices running Windows 10 or Windows 11. Which Conditional Access condition should be configured?

Accepted Answer

Device platform condition targeting 'Windows'

Answer

The device platform condition allows targeting of specific operating systems, including Windows, to restrict access accordingly.

Question 4

A Conditional Access policy has multiple grant controls configured: 'Require MFA' and 'Require compliant device' with 'Require one of the selected controls' logic. What does this mean?

Accepted Answer

Users only need to satisfy either MFA or compliant device, not both

Answer

'Require one of the selected controls' (OR logic) means satisfying any single grant control is sufficient to gain access.

Question 5

What happens when a user is subject to two conflicting Conditional Access policies — one that blocks access and one that grants access to the same cloud app?

Accepted Answer

The block policy always takes precedence over the grant policy

Answer

In Conditional Access, block controls always take precedence over grant controls when multiple policies apply to the same sign-in.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 4