MS-102 Microsoft 365 Tenant & Service Management 3 — Questions and Answers
Question 1: What is the maximum number of custom domains that can be added to a single Microsoft 365 tenant?
- 100
- 300
- 500 (Correct answer)
- 900
Correct answer: 500
A Microsoft 365 tenant supports up to 900 custom domains, but the common documented limit often cited is 900; however the practical supported limit is 500 custom domains per tenant.
Question 2: An administrator notices that planned maintenance notifications for Microsoft 365 services appear in a specific admin center location. Where should they check regularly for these planned changes?
- Service Health > History
- Message Center (Correct answer)
- Security & Compliance Center > Alerts
- Reports > Service usage
Correct answer: Message Center
The Message Center in the Microsoft 365 admin center contains notifications about planned maintenance, new features, and required admin actions.
Question 3: Which role allows a user to manage Microsoft 365 service requests and monitor service health without granting full Global Administrator privileges?
- Reports Reader
- Service Support Administrator (Correct answer)
- Helpdesk Administrator
- Message Center Reader
Correct answer: Service Support Administrator
The Service Support Administrator role allows users to create and manage Microsoft support requests and monitor service health in the admin center.
Question 4: A tenant administrator wants to allow only specific Microsoft 365 Groups to be created by select users rather than all users. What is the correct approach?
- Disable Groups in SharePoint admin center and re-enable selectively
- Create a security group and use Azure AD Group creation restriction settings via PowerShell or Azure portal (Correct answer)
- Use Conditional Access policies to block group creation
- Configure an Exchange mail flow rule to block distribution group creation
Correct answer: Create a security group and use Azure AD Group creation restriction settings via PowerShell or Azure portal
You restrict Microsoft 365 Group creation by designating a specific security group whose members are allowed to create groups, configured via Azure AD settings or PowerShell.
Question 5: Which setting in Microsoft 365 tenant configuration controls whether users can access Microsoft 365 services on devices that are not Azure AD joined or compliant?
- Multi-Factor Authentication policies
- Conditional Access policies (Correct answer)
- Microsoft Secure Score recommendations
- Mobile Device Management enrollment settings
Correct answer: Conditional Access policies
Conditional Access policies in Azure AD control access based on device state, allowing administrators to require Azure AD joined or compliant devices for Microsoft 365 access.
Question 6: An administrator must ensure that all Microsoft 365 license assignments are removed when a user account is deleted. Which behavior is correct by default?
- Licenses are immediately reassigned to a pool for reuse when a user is deleted
- Licenses remain assigned to the deleted user account for 30 days then are reclaimed (Correct answer)
- Licenses are returned to the available pool immediately upon account deletion
- Licenses must be manually unassigned before the account can be deleted
Correct answer: Licenses remain assigned to the deleted user account for 30 days then are reclaimed
When a user is deleted in Microsoft 365, the account enters a soft-delete state for 30 days, during which the license remains consumed; the license is reclaimed after the 30-day retention period.
Question 7: Which Microsoft 365 admin center page allows an administrator to configure the default time zone and language for the entire tenant?
- Settings > Org settings > Organization profile (Correct answer)
- Settings > Org settings > Services > Microsoft 365
- Azure AD > Properties
- Settings > Org settings > Security & privacy
Correct answer: Settings > Org settings > Organization profile
The Organization profile page under Settings > Org settings in the Microsoft 365 admin center allows configuration of the tenant's default name, address, phone, language, and time zone.
