MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 3 — Questions and Answers
Question 1: An administrator wants to configure Microsoft 365 so that all new users are automatically assigned an E3 license. What is the most efficient method?
- Manually assign licenses as users are created
- Use group-based licensing with a dynamic group (Correct answer)
- Create a PowerShell script that runs daily
- Configure a license template in the admin center
Correct answer: Use group-based licensing with a dynamic group
Group-based licensing in Azure AD automatically assigns licenses to users when they join a group, including dynamic groups with rule-based membership.
Question 2: Which Microsoft 365 feature allows administrators to set a company-wide branding experience on the Azure AD sign-in page?
- Tenant themes in Microsoft 365 admin center
- Company branding in Azure AD (Correct answer)
- SharePoint Organization assets library
- Microsoft Viva Connections
Correct answer: Company branding in Azure AD
Company branding in Azure AD lets admins customize the sign-in page with logos, background images, and text for all users in the tenant.
Question 3: A tenant has multiple subscriptions. An admin needs to assign Microsoft 365 E5 licenses only to users in the Finance department. What is the best approach?
- Use a security group with group-based licensing and add Finance users to it (Correct answer)
- Assign licenses manually per user in the admin center
- Create a Conditional Access policy targeting Finance users
- Use a retention policy scoped to the Finance department
Correct answer: Use a security group with group-based licensing and add Finance users to it
Group-based licensing scoped to a Finance security group ensures only Finance department members receive E5 licenses automatically.
Question 4: When configuring a Microsoft 365 tenant's organizational profile, which setting determines the default time zone used for scheduling in apps like Teams and Outlook?
- Locale setting in Azure AD
- Organization information time zone in Microsoft 365 admin center (Correct answer)
- Exchange Online regional settings
- User mailbox time zone
Correct answer: Organization information time zone in Microsoft 365 admin center
The Organization information section in the Microsoft 365 admin center includes a default time zone that affects tenant-wide scheduling defaults.
Question 5: An admin needs to prevent data from a specific Microsoft 365 tenant from being stored outside the European Union. Which feature addresses this requirement?
- Azure Policy
- Microsoft 365 Multi-Geo (Correct answer)
- Data Loss Prevention policy
- Information barriers
Correct answer: Microsoft 365 Multi-Geo
Microsoft 365 Multi-Geo allows organizations to store data in specific geographic regions to meet data residency requirements.
Question 6: A Microsoft 365 admin receives an alert that a service is degraded. Which admin center provides the most detailed real-time status information?
- Microsoft Defender portal
- Microsoft 365 admin center Service Health dashboard (Correct answer)
- Azure Monitor
- Microsoft Secure Score
Correct answer: Microsoft 365 admin center Service Health dashboard
The Service Health dashboard in the Microsoft 365 admin center provides real-time status, incident details, and impact information for all Microsoft 365 services.
Question 7: An organization wants to enable self-service password reset for all users but requires them to register two authentication methods. Where is this configured?
- Microsoft Entra ID Protection policies
- Authentication methods policy in Azure AD
- SSPR settings in Azure AD under Password reset (Correct answer)
- Conditional Access policy
Correct answer: SSPR settings in Azure AD under Password reset
SSPR settings in Azure AD Password reset section allow admins to require users to register a specific number of authentication methods before SSPR is available to them.
MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 3
An administrator wants to configure Microsoft 365 so that all new users are automatically assigned an E3 license.
What is the most efficient method?