[Sep 22, 2026] Valid MS-102 Test Answers & MS-102 Exam PDF [Q229-Q247]

QUESTION 229
You have several devices enrolled in Microsoft Endpoint Manager
You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown In the following table.

The device limit restrictions in Endpoint manager are configured as shown in the following table.

You add user as a device enrollment manager in Endpoint manager
For each of the following statements, select Yes if the statement is true. Otherwise, select No

QUESTION 230
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You integrate Microsoft Intune and contoso.com as shown in the following exhibit.

You purchase a Windows 10 device named Device1.
以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

QUESTION 231
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

Each user has a device with the Microsoft Authenticator app installed.
From Microsoft Authenticator settings for the subscription, the Enable and Target settings are configured as shown in the exhibit. (Click the Exhibit tab.)

以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

QUESTION 232
Your company has an Azure AD tenant named contoso.onmicrosoft.com.
You purchase a domain named contoso.com from a registrar and add all the required DNS records.
You create a user account named User1. User1 is configured to sign in as [email protected].
You need to configure User1 to sign in as [email protected].
順番に実行すべき3つのアクションはどれでしょう？答えるには、アクションのリストから適切なアクションを解答エリアに移動し、正しい順番に並べます。

QUESTION 233
Your on-premises network contains an Active Directory domain and a Microsoft Endpoint Configuration Manager site.
Microsoft Intuneを使用するMicrosoft 365 E5サブスクリプションを持っています。
You use Azure AD Connect to sync user objects and group objects to Azure Directory (Azure AD) Password hash synchronization is disabled.
You plan to implement co-management.
You need to configure Azure AD Connect and the domain to support co-management.
あなたは何をすべきですか？回答するには、回答エリアで適切な選択肢を選択してください。
注意：各選択肢の正誤は1点満点とする。

QUESTION 234
You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.
You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory.
What should you configure in the profile?

QUESTION 235
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.
You need to automatically label the documents on Site1 that contain credit card numbers.
順番に実行すべき3つのアクションはどれでしょう？答えるには、アクションのリストから適切なアクションを解答エリアに移動し、正しい順番に並べます。

QUESTION 236
Your network contains an on-premises Active Directory domain that is synced to a Microsoft Entra tenant as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to the Microsoft Entra tenant. You view Allan ‘ s account from Microsoft 365 and notice that his username is set to Allan@adatum.
onmicrosoft.com.
以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

質問237
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

Which groups can be members of Group1 and Group4? To answer, select the appropriate options in the answer area.
注意：各選択肢の正誤は1点満点とする。

質問238
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.
The subscription has the default inbound anti-spam policy and a custom Safe Attachments policy.
以下の情報を確認する必要がある：
* The number of email messages quarantined by zero-hour auto purge (ZAP)
* The number of times users clicked a malicious link in an email message Which Email & collaboration report should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

質問239
You have a Microsoft 365 E5 subscription and an Azure AD tenant named contoso.com.
All users have computers that run Windows 11, are joined to contoso.com, and are protected by using BitLocker Drive Encryption (BitLocker).
You plan to create a user named Admin1 that will perform following tasks:
* View BitLocker recovery keys.
* Configure the usage location for the users in contoso.com.
You need to assign roles to Admin1 to meet the requirements. The solution must use the principle of least privilege. Which two roles should you assign? To answer, select the appropriate roles in the answer area.
注：各選択肢の正解は1点とする

質問 240
ホットスポット
Microsoft 365 E5のサブスクリプションをお持ちです。
From Azure AD Identity Protection on August 1, you configure a Multifactor authentication registration policy that has the following settings:
* Assignments: All users
* Controls: Require Azure AD multifactor authentication registration
* Enforce Policy: On
* On August 3, you create two users named User1 and User2.
Users authenticate by using Azure Multi-Factor Authentication (MFA) for the first time on the dates shown in the following table.

By which dates will User1 and User2 be forced to complete their Azure MFA registration? To answer, select the appropriate options in the answer area.
注意：各選択肢の正誤は1点満点とする。

質問241
You have a Microsoft 365 E5 tenant.
You have a sensitivity label configured as shown in the Sensitivity label exhibit. (Click the Sensitivity label tab.)

You have an auto-labeling policy as shown in the Auto-labeling policy exhibit. (Click the Auto-labeling policy tab.)

A user sends an email that contains the components shown in the following table.

以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

質問242
You are evaluating the use of multi-factor authentication (MFA).
以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注意：各選択肢の正誤は1点満点とする。

質問243
You have a Microsoft 365 tenant that contains 100 Windows 10 devices. The devices are managed by using Microsoft Endpoint Manager.
You plan to create two attack surface reduction (ASR) policies named ASR1 and ASR2. ASR1 will be used to configure Microsoft Defender Application Guard. ASR2 will be used to configure Microsoft Defender SmartScreen.
Which ASR profile type should you use for each policy? To answer, select the appropriate options in the answer area.
注意：各選択肢の正誤は1点満点とする。

質問244
You have a Microsoft 36S E5 subscription.
You have devices onboarded to Microsoft Defender for Endpoint as shown in the following table.

You create the device groups shown in the following table.

IP address indicators are defined as shown in the following table.

以下の各記述について、その記述が真であれば「はい」を選択する。そうでない場合は、「いいえ」を選択してください。
注：各選択肢の正解は1点とする

質問245
You have a Microsoft 365 E5 subscription that.
You need to identify whenever a sensitivity label is applied, changed, or removed within the subscription.
Which feature should you use, and how many days will the data be retained? To answer, select the appropriate options in the answer area.
注：各選択肢の正解は1点とする。

質問246
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.) User2 fails to authenticate to the Microsoft Entra tenant when signing in as [email protected] You need to ensure that User2 can access the resources in Microsoft Entra ID.
Solution: From the Microsoft Entra admin center, you add <abrlkam.com as a custom domain You insttud User2 to sign in as [email protected] Does this meet the goal?

質問247
(You have a Microsoft 365 E5 subscription that contains 1,000 Windows devices.
You need to review the exposure score of the devices.
Which portal should you use?)