MS-102 Microsoft 365 Tenant & Service Management 5

Question 1

A Microsoft 365 administrator needs to view which admin roles are currently assigned to a specific user. What is the fastest way to check this in the admin center?

Accepted Answer

Microsoft 365 admin center > Users > Active users > Select user > Roles tab

Answer

In the Microsoft 365 admin center, selecting a user from Active users and viewing their Roles tab shows all currently assigned admin roles for that specific user.

Question 2

Which Microsoft 365 feature allows an administrator to set policies that automatically classify and label data across Exchange, SharePoint, and OneDrive?

Accepted Answer

Microsoft Purview auto-labeling policies

Answer

Microsoft Purview auto-labeling policies automatically apply sensitivity labels to content in Exchange, SharePoint, and OneDrive based on sensitive information types or trainable classifiers.

Question 3

An administrator needs to configure the Microsoft 365 tenant to require all guest users to re-authenticate every 30 days even if they use MFA. Which feature enables this?

Accepted Answer

Conditional Access — Sign-in frequency policy

Answer

Conditional Access sign-in frequency policies allow administrators to control how often users, including guests, must reauthenticate, regardless of MFA token persistence.

Question 4

A tenant administrator wants to prevent users from creating new Microsoft 365 tenants using their work email accounts. Which setting controls this?

Accepted Answer

Azure AD > User settings > Users can create Azure AD tenants

Answer

The 'Users can create Azure AD tenants' setting in Azure AD User settings controls whether users can create new Azure AD (and thus Microsoft 365) tenants with their organizational credentials.

Question 5

Which Microsoft 365 feature provides a centralized view of all third-party apps that have been granted permissions in the tenant and allows administrators to review and revoke those permissions?

Accepted Answer

Azure AD > Enterprise applications

Answer

Azure AD Enterprise applications shows all third-party and first-party apps that have been consented to in the tenant, with options to review permissions and revoke access.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Tenant & Service Management 5