MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 4

Question 1

A company's Entra ID Connect sync is running in Staging Mode. What is the effect of this configuration?

Accepted Answer

The sync engine imports and exports but does not write changes to Entra ID

Answer

In Staging Mode, Entra ID Connect runs full sync cycles and populates its local database but does not apply any changes to Entra ID or on-premises AD, making it safe for testing.

Question 2

Which Entra ID role grants the minimum permissions needed to reset user passwords and manage MFA registration for non-admin users?

Accepted Answer

Authentication Administrator

Answer

The Authentication Administrator role can reset passwords and manage MFA settings for non-privileged users, following the principle of least privilege.

Question 3

An organization needs to ensure that service accounts used by applications cannot sign in interactively and are not required to perform MFA. Which Entra ID object type is best suited for this scenario?

Accepted Answer

Managed Identity

Answer

Managed Identities are non-interactive identities managed by Azure that eliminate the need for credentials entirely, making them ideal for service-to-service authentication.

Question 4

A Conditional Access policy is set to 'Report-Only' mode. What is the impact on end users?

Accepted Answer

Users experience no change in sign-in behavior, but policy outcomes are logged

Answer

Report-Only mode evaluates a Conditional Access policy and logs what the outcome would have been without enforcing it, allowing administrators to assess impact before enablement.

Question 5

An administrator needs to configure Entra ID to send sign-in logs to a Log Analytics workspace for long-term retention. Which Azure service should be configured?

Accepted Answer

Diagnostic Settings on the Entra ID tenant

Answer

Diagnostic Settings in Entra ID allow routing of audit logs, sign-in logs, and other telemetry to a Log Analytics workspace, Event Hub, or Storage Account.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Entra ID Authentication 4