MS-102 Security & Compliance 5

Question 1

An organization needs to ensure that only compliant devices can access Microsoft 365 resources. Which feature enforces device compliance as an access condition?

Accepted Answer

Conditional Access with device compliance requirement

Answer

Conditional Access policies can require that devices meet Intune compliance requirements before granting access to Microsoft 365 resources.

Question 2

What happens to email messages that match a Microsoft Purview retention policy with a 'retain and delete' action after the retention period expires?

Accepted Answer

They are moved to the Recoverable Items folder and then purged

Answer

When a retain-and-delete retention policy expires, items are moved to the Recoverable Items folder where they are purged after the deletion period.

Question 3

Which Microsoft Purview feature provides a workflow for requesting, approving, and auditing access to privileged administrative tasks?

Accepted Answer

Privileged Access Management (PAM)

Answer

Privileged Access Management in Microsoft Purview enforces just-in-time, just-enough access for privileged tasks in Microsoft 365 through an approval workflow.

Question 4

An admin configures a Safe Attachments policy in Microsoft Defender for Office 365 with the 'Dynamic Delivery' action. What does this do?

Accepted Answer

Delivers the email body immediately while scanning the attachment in a sandbox, then re-attaches it

Answer

Dynamic Delivery allows the email body to reach the recipient immediately while the attachment is detonated in a sandbox, then delivered once deemed safe.

Question 5

A security team wants to create a custom detection rule that triggers an alert when a specific behavior pattern is observed. Which Microsoft 365 Defender feature supports this?

Accepted Answer

Custom detection rules via Advanced Hunting

Answer

Custom detection rules in Microsoft 365 Defender are built on Advanced Hunting KQL queries and trigger alerts or actions when defined conditions are met.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Security & Compliance 5