MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 2

Question 1

An administrator needs to prevent users from creating new Microsoft 365 Groups unless they belong to a specific security group. Which Azure AD setting should be configured?

Accepted Answer

Group creation restriction

Answer

Group creation restriction in Azure AD settings allows admins to limit Microsoft 365 Group creation to members of a designated security group.

Question 2

A company wants to ensure that all Microsoft 365 Groups are reviewed and either renewed or deleted after 180 days. What feature should be enabled?

Accepted Answer

Group expiration policy

Answer

Group expiration policy in Azure AD automatically prompts group owners to renew groups at set intervals, deleting inactive ones.

Question 3

Which Microsoft 365 admin center role allows a user to manage service health and message center posts but NOT make configuration changes?

Accepted Answer

Message Center Reader

Answer

The Message Center Reader role grants read-only access to Message Center posts but no ability to change tenant configurations.

Question 4

An admin wants to configure a custom domain for Microsoft 365. After adding the domain in the admin center, what must be done to verify ownership?

Accepted Answer

Add a DNS TXT or MX record provided by Microsoft

Answer

Microsoft requires adding a specific TXT or MX record to the domain's DNS zone to verify ownership before the domain can be used.

Question 5

A tenant administrator needs to review all changes made to tenant settings over the last 30 days. Where should they look?

Accepted Answer

Azure AD Audit Logs

Answer

Azure AD Audit Logs record all administrative activities including tenant configuration changes with timestamps and actor details.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 2