MS102-Quiz3

Which Microsoft 365 provisioning option do companies prefer when they want more administrative

versatility and another disaster recovery backup option?

• On-premises

• Cloud

• Hybrid

Answer explanation

Explanation:

That's correct. Companies prefer the hybrid option when they want more administrative versatility and

another disaster recovery backup option.

You're the Enterprise Administrator for Tailspin Toys. Tailspin wants to have extra Azure AD connect servers for disaster recovery purposes. How can this requirement be achieved?

• Install multiple Azure AD Connect servers connected to a single Azure AD or Microsoft 365 tenant

• Install an extra Azure AD Connect server(s) in staging mode

• Install Active Directory Federation Services

Answer explanation

Explanation:

That's correct. If a disaster occurs and the primary server fails, you can fail over to the staging server that

was defined in the Azure AD Connect wizard.

You're the Enterprise Administrator for Contoso, which is planning to install Azure AD Connect. Which of

the following permissions is required to install Azure AD Connect on a domain joined computer and

successfully synchronize your directory to Microsoft 365?

• A Domain Admin account for your on-premises Active Directory

• Domain User account for your on-premises Active Directory

• Local administrator permissions on the Azure AD Connect computer

Answer explanation

Explanation:

That's correct. To install Azure AD Connect, you must have Local administrator permissions on the Azure AD Connect computer.

Which Microsoft 365 administrator role can change the password of a user who's assigned to the Microsoft

365 Global administrator role?

• User Management administrator

• Global administrator

• Password administrator

Answer explanation

When your account is a global admin account, you must get another global admin to reset it

for you.

When passwords are changed in Microsoft 365, they can be written back to the on-premises Active

Directory. Which of the following requirements must be met to enable this feature?

• You need an Azure Active Directory Premium license

• You need a Microsoft 365 E5 license

• Your domain controllers must be at least Windows Server 2003

A lead admin for an organization is looking to protect against malicious threats posed by email

messages, links (URLs), and collaboration tools. Which solution from the Microsoft 365 Defender suite is

best suited for this purpose?

• Microsoft Defender for Endpoint

• Microsoft Defender for Identity

• Microsoft Defender for Office 365

Answer explanation

Explanation:

Microsoft Defender for Office 365 safeguards your organization against malicious threats posed by email messages, links (URLs), and collaboration tools, including Microsoft Teams, SharePoint Online, OneDrive for Business, and other Office clients.

Admins in the organization are using the Microsoft 365 Defender portal every day. They want to

quickly get an understanding of the organization's current security posture. Which capability in the

Microsoft 365 Defender portal will they use?

• Reports

• Policies

• Secure Score

Answer explanation

Explanation:

Microsoft Secure Score, one of the tools in the Microsoft 365 Defender portal, is a representation of acompany's security posture.

One of the recommended methods that can be used to mitigate an account/identity breach is?

• SSO

• MFA

• Azure AD Connect

The unauthorized transfer of information from an information system.

• Data spillage

• Data exfiltration

• data breach

Azure AD Privileged Identity Management (PIM) enables you to manage, control, and monitor access to resources such as:

• Azure AD

• M365

• Microsoft Intune

• all of them