MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 5 — Questions and Answers
Question 1: A Microsoft 365 tenant administrator needs to track how storage is being consumed across all SharePoint sites in the organization. Which tool provides this information?
- SharePoint admin center storage reports (Correct answer)
- Microsoft 365 Usage Analytics
- Azure Cost Management
- Microsoft Purview data map
Correct answer: SharePoint admin center storage reports
The SharePoint admin center provides storage reports showing usage per site collection, helping admins identify storage consumption across the tenant.
Question 2: An administrator needs to configure Microsoft 365 so that users can only access tenant resources from devices that are marked as compliant. Which technology combination achieves this?
- Azure AD MFA + SSPR
- Intune device compliance + Conditional Access (Correct answer)
- Microsoft Defender + Azure AD Identity Protection
- Information barriers + DLP policies
Correct answer: Intune device compliance + Conditional Access
Intune device compliance policies define compliant device criteria, and Conditional Access policies can require compliant devices as a condition for resource access.
Question 3: A company wants to set a minimum password length of 12 characters for all cloud-only Microsoft 365 user accounts. Where is this configured?
- Azure AD Password Protection settings
- Microsoft 365 admin center > Settings > Security & privacy > Password policy (Correct answer)
- Exchange Online password policies
- Microsoft Intune compliance policy
Correct answer: Microsoft 365 admin center > Settings > Security & privacy > Password policy
Password policy settings in the Microsoft 365 admin center Security & privacy section control minimum length and expiration for cloud-only accounts.
Question 4: An admin wants to export a report of all Microsoft 365 licenses assigned to users, including which licenses are unused. What is the most efficient method?
- Run Get-MsolAccountSku in PowerShell
- Download the licensing report from Microsoft 365 admin center > Billing > Licenses (Correct answer)
- Use Microsoft Graph API to query license assignments
- Check Azure Cost Management for license utilization
Correct answer: Download the licensing report from Microsoft 365 admin center > Billing > Licenses
The Billing > Licenses section in the Microsoft 365 admin center provides a clear view of assigned versus available licenses for each subscription.
Question 5: A Microsoft 365 Global Administrator wants to provide another admin with the ability to reset user passwords but not make any other changes. Which role should be assigned?
- User Administrator
- Helpdesk Administrator
- Authentication Administrator
- Password Administrator (Correct answer)
Correct answer: Password Administrator
The Password Administrator role is scoped specifically to resetting passwords for non-admin users, following the principle of least privilege.
Question 6: An organization is transitioning to a new Microsoft 365 tenant and needs to migrate user accounts from an on-premises Active Directory. Which service should be used to synchronize identities?
- Azure AD Application Proxy
- Microsoft Entra Connect (Azure AD Connect) (Correct answer)
- Active Directory Federation Services alone
- Microsoft Identity Manager
Correct answer: Microsoft Entra Connect (Azure AD Connect)
Microsoft Entra Connect (formerly Azure AD Connect) synchronizes on-premises Active Directory identities to Azure AD, enabling hybrid identity scenarios.
Question 7: A Microsoft 365 administrator needs to configure the tenant so that Microsoft support engineers cannot access tenant data without explicit admin approval. Which feature enables this?
- Customer Key
- Customer Lockbox (Correct answer)
- Privileged Identity Management
- Information barriers
Correct answer: Customer Lockbox
Customer Lockbox requires an admin to explicitly approve before Microsoft support can access tenant data, providing an additional control layer.
MS-102 Microsoft 365 Administrator Expert Managing Microsoft 365 Tenant 5
A Microsoft 365 tenant administrator needs to track how storage is being consumed across all SharePoint sites in the organization.
Which tool provides this information?