MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 5

Question 1

An administrator wants Conditional Access to evaluate every request continuously, not just at initial sign-in. Which feature enables this capability?

Accepted Answer

Continuous Access Evaluation (CAE)

Answer

Continuous Access Evaluation (CAE) enables near-real-time enforcement of policy changes and revocations without waiting for the token to expire.

Question 2

A Conditional Access policy targets 'All guest and external users'. Which user type is included by this assignment?

Accepted Answer

B2B collaboration guest users invited to the tenant

Answer

'All guest and external users' targets B2B collaboration users who have been invited to and have accounts in the Azure AD tenant.

Question 3

Which named location type can be used to restrict Conditional Access based on specific geographic regions rather than IP addresses?

Accepted Answer

Countries/Regions named location

Answer

The Countries/Regions named location type uses Azure AD's IP-to-country mapping to restrict or allow access based on geographic location.

Question 4

An organization uses authentication strength in Conditional Access to require phishing-resistant MFA for privileged administrators. Which method satisfies this requirement?

Accepted Answer

FIDO2 security key

Answer

FIDO2 security keys meet the phishing-resistant MFA authentication strength requirement because they are bound to the origin and cannot be phished.

Question 5

A Conditional Access policy uses the 'Require password change' grant control in response to a high user risk. What must the user do to regain access?

Accepted Answer

Complete MFA and then change their password through the Azure AD self-service password reset flow

Answer

When 'Require password change' is triggered by high user risk, the user must complete MFA and then perform a self-service password reset to remediate the risk.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 5