MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 2

Question 1

An organization wants to enforce MFA only when users sign in from outside the corporate network. Which Conditional Access condition should the administrator configure?

Accepted Answer

Named locations condition

Answer

Named locations allow you to define trusted IP ranges so Conditional Access policies can target or exclude corporate network traffic.

Question 2

A user reports that they are unable to use the Microsoft Authenticator app for MFA because they lost their phone. Which self-service option allows the user to regain access without admin intervention?

Accepted Answer

Temporary Access Pass

Answer

A Temporary Access Pass is a time-limited passcode issued by an admin or self-service that allows users to sign in and register new authentication methods.

Question 3

Which Entra ID feature continuously evaluates session risk in real time and can revoke access mid-session without requiring reauthentication?

Accepted Answer

Continuous Access Evaluation (CAE)

Answer

Continuous Access Evaluation (CAE) allows resource providers to respond immediately to critical events such as account disablement or location changes during an active session.

Question 4

An administrator needs to ensure that only Entra ID-registered devices can access Exchange Online. Which Conditional Access grant control should be applied?

Accepted Answer

Require Entra ID joined device

Answer

The 'Require Entra ID joined device' grant control restricts access to devices that have completed Entra ID (Azure AD) device registration or join.

Question 5

A company is piloting passwordless authentication using FIDO2 security keys. Where in the Microsoft Entra admin center should the administrator enable this authentication method?

Accepted Answer

Authentication methods policy

Answer

FIDO2 security key support is enabled under Authentication Methods Policy in the Entra ID admin center, allowing granular targeting to specific user groups.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 2