MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 3

Question 1

An administrator wants to block legacy authentication protocols across the tenant to reduce attack surface. Which is the most straightforward method to accomplish this?

Accepted Answer

Create a Conditional Access policy targeting legacy authentication client apps

Answer

A Conditional Access policy that targets the 'Other clients' and legacy authentication app types and blocks access is the recommended granular approach for blocking legacy protocols.

Question 2

A global administrator notices a spike in Entra ID Identity Protection risk detections labeled 'Atypical travel.' What does this detection indicate?

Accepted Answer

Two sign-ins occurred from geographically distant locations within an impossible timeframe

Answer

Atypical travel detection flags sign-ins from two locations that could not be physically reached within the time elapsed between them, suggesting account compromise.

Question 3

Which Entra ID feature allows administrators to require users to re-verify their identity after a set number of hours, even if they have a valid session token?

Accepted Answer

Sign-in frequency Conditional Access control

Answer

The Sign-in Frequency control in Conditional Access forces reauthentication after a configurable time interval, overriding persistent session tokens.

Question 4

An administrator is configuring Entra ID self-service password reset (SSPR). The organization requires users to verify identity with two methods. Which combination is NOT a valid SSPR authentication method?

Accepted Answer

Manager approval and backup email

Answer

Manager approval is not a supported SSPR authentication method; supported methods include phone, email, authenticator app, security questions, and OATH tokens.

Question 5

A company uses AD FS for federated authentication. The administrator wants to migrate to Entra ID cloud authentication without disrupting users. Which migration approach allows gradual rollout by user group?

Accepted Answer

Staged Rollout feature

Answer

The Staged Rollout feature in Entra ID Connect allows selective migration of specific groups from AD FS to PHS or PTA while the rest of the tenant remains federated.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 3