MS-102 Microsoft 365 Tenant & Service Management 2 — Questions and Answers
Question 1: An administrator needs to restrict users from changing their Microsoft 365 profile photo. Which admin center setting controls this?
- Exchange admin center > User roles
- Microsoft 365 admin center > Org settings > User owned apps and services
- Azure AD > User settings > Users can manage their own profile photo (Correct answer)
- SharePoint admin center > Sharing > Profile photos
Correct answer: Azure AD > User settings > Users can manage their own profile photo
The 'Users can manage their own profile photo' setting in Azure AD User settings controls whether users can upload or change their profile photo.
Question 2: Which PowerShell module is required to manage Microsoft 365 tenant settings using the most current unified management approach?
- MSOnline (MSOL)
- AzureAD
- Microsoft.Graph (Correct answer)
- ExchangeOnlineManagement
Correct answer: Microsoft.Graph
The Microsoft.Graph PowerShell module is the current unified approach, replacing legacy MSOnline and AzureAD modules which are being deprecated.
Question 3: A company wants to prevent users in their Microsoft 365 tenant from installing add-ins for Outlook from the Office Store. What is the correct configuration path?
- Exchange admin center > Organization > Add-ins (Correct answer)
- Microsoft 365 admin center > Settings > Org settings > User owned apps
- Azure AD > Enterprise applications > User settings
- Microsoft 365 admin center > Settings > Integrated apps
Correct answer: Exchange admin center > Organization > Add-ins
Outlook add-in deployment and restrictions for end users are managed in the Exchange admin center under Organization > Add-ins.
Question 4: Your organization's Microsoft 365 tenant has a custom domain that is showing as 'Unhealthy' in the Domains section. What is the most likely cause?
- The domain registration has expired with the registrar
- Required DNS records (MX, CNAME, TXT) are missing or incorrect (Correct answer)
- The domain was added by another tenant administrator
- Too many users are assigned to the custom domain
Correct answer: Required DNS records (MX, CNAME, TXT) are missing or incorrect
An 'Unhealthy' domain status typically means the required DNS records such as MX, CNAME, or TXT verification records are missing or misconfigured at the domain registrar.
Question 5: An administrator wants to see the health of all Microsoft 365 services in near real-time. Which feature in the admin center provides this?
- Message Center
- Service Health dashboard (Correct answer)
- Reports > Usage
- Compliance Manager
Correct answer: Service Health dashboard
The Service Health dashboard in the Microsoft 365 admin center provides real-time and historical information about the health status of all Microsoft 365 services.
Question 6: Which Microsoft 365 license feature allows an organization to store and apply the organization's branding on the Azure AD sign-in page?
- Microsoft 365 E3 — Company Branding in Azure AD (Correct answer)
- Microsoft 365 Business Basic — Custom themes
- Azure AD Free — Default branding
- Microsoft 365 F1 — Custom domains only
Correct answer: Microsoft 365 E3 — Company Branding in Azure AD
Company Branding in Azure AD, available with paid licenses including Microsoft 365 E3, allows organizations to customize the sign-in experience with logos and backgrounds.
Question 7: A Microsoft 365 administrator wants to configure the tenant so that external guests cannot see the list of all members in the directory. Which setting achieves this?
- Azure AD > External Identities > External collaboration settings > Guest user access restrictions (Correct answer)
- Microsoft 365 admin center > Settings > Org settings > Microsoft 365 Groups
- SharePoint admin center > Policies > Sharing > External sharing
- Exchange admin center > Mail flow > Remote domains
Correct answer: Azure AD > External Identities > External collaboration settings > Guest user access restrictions
In Azure AD External Identities > External collaboration settings, you can restrict guest users from enumerating the directory by setting 'Guest user access restrictions' appropriately.
MS-102 Microsoft 365 Tenant & Service Management 2
An administrator needs to restrict users from changing their Microsoft 365 profile photo.
Which admin center setting controls this?