[Sep 22, 2026] Valid MS-102 Test Answers & MS-102 Exam PDF [Q229-Q247]

QUESTION 229
You have several devices enrolled in Microsoft Endpoint Manager
You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown In the following table.

The device limit restrictions in Endpoint manager are configured as shown in the following table.

You add user as a device enrollment manager in Endpoint manager
For each of the following statements, select Yes if the statement is true. Otherwise, select No

QUESTION 230
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You integrate Microsoft Intune and contoso.com as shown in the following exhibit.

You purchase a Windows 10 device named Device1.
对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分。

QUESTION 231
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

Each user has a device with the Microsoft Authenticator app installed.
From Microsoft Authenticator settings for the subscription, the Enable and Target settings are configured as shown in the exhibit. (Click the Exhibit tab.)

对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分。

QUESTION 232
Your company has an Azure AD tenant named contoso.onmicrosoft.com.
You purchase a domain named contoso.com from a registrar and add all the required DNS records.
You create a user account named User1. User1 is configured to sign in as [email protected].
You need to configure User1 to sign in as [email protected].
您应该依次执行哪三个操作？要回答问题，请将适当的操作从操作列表移到答案区域，并按正确顺序排列。

QUESTION 233
Your on-premises network contains an Active Directory domain and a Microsoft Endpoint Configuration Manager site.
您拥有使用 Microsoft Intune 的 Microsoft 365 E5 订阅。
You use Azure AD Connect to sync user objects and group objects to Azure Directory (Azure AD) Password hash synchronization is disabled.
You plan to implement co-management.
You need to configure Azure AD Connect and the domain to support co-management.
您应该怎么做？要回答问题，请在答案区域选择适当的选项。
注意：每个正确选项得一分。

QUESTION 234
You have a Microsoft 365 E5 tenant that contains 100 Windows 10 devices.
You plan to deploy a Windows 10 Security Baseline profile that will protect secrets stored in memory.
What should you configure in the profile?

QUESTION 235
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.
You need to automatically label the documents on Site1 that contain credit card numbers.
您应该依次执行哪三个操作？要回答问题，请将适当的操作从操作列表移到答案区域，并按正确顺序排列。

QUESTION 236
Your network contains an on-premises Active Directory domain that is synced to a Microsoft Entra tenant as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to the Microsoft Entra tenant. You view Allan ‘ s account from Microsoft 365 and notice that his username is set to Allan@adatum.
onmicrosoft.com.
对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分。

问题 237
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

Which groups can be members of Group1 and Group4? To answer, select the appropriate options in the answer area.
注意：每个正确选项得一分。

问题 238
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365.
The subscription has the default inbound anti-spam policy and a custom Safe Attachments policy.
您需要确定以下信息：
* The number of email messages quarantined by zero-hour auto purge (ZAP)
* The number of times users clicked a malicious link in an email message Which Email & collaboration report should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

问题 239
You have a Microsoft 365 E5 subscription and an Azure AD tenant named contoso.com.
All users have computers that run Windows 11, are joined to contoso.com, and are protected by using BitLocker Drive Encryption (BitLocker).
You plan to create a user named Admin1 that will perform following tasks:
* View BitLocker recovery keys.
* Configure the usage location for the users in contoso.com.
You need to assign roles to Admin1 to meet the requirements. The solution must use the principle of least privilege. Which two roles should you assign? To answer, select the appropriate roles in the answer area.
注意：每个正确选项得一分

问题 240
热点
您已订购 Microsoft 365 E5。
From Azure AD Identity Protection on August 1, you configure a Multifactor authentication registration policy that has the following settings:
* Assignments: All users
* Controls: Require Azure AD multifactor authentication registration
* Enforce Policy: On
* On August 3, you create two users named User1 and User2.
Users authenticate by using Azure Multi-Factor Authentication (MFA) for the first time on the dates shown in the following table.

By which dates will User1 and User2 be forced to complete their Azure MFA registration? To answer, select the appropriate options in the answer area.
注意：每个正确选项得一分。

问题 241
You have a Microsoft 365 E5 tenant.
You have a sensitivity label configured as shown in the Sensitivity label exhibit. (Click the Sensitivity label tab.)

You have an auto-labeling policy as shown in the Auto-labeling policy exhibit. (Click the Auto-labeling policy tab.)

A user sends an email that contains the components shown in the following table.

对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分。

问题 242
You are evaluating the use of multi-factor authentication (MFA).
对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分。

问题 243
You have a Microsoft 365 tenant that contains 100 Windows 10 devices. The devices are managed by using Microsoft Endpoint Manager.
You plan to create two attack surface reduction (ASR) policies named ASR1 and ASR2. ASR1 will be used to configure Microsoft Defender Application Guard. ASR2 will be used to configure Microsoft Defender SmartScreen.
Which ASR profile type should you use for each policy? To answer, select the appropriate options in the answer area.
注意：每个正确选项得一分。

问题 244
You have a Microsoft 36S E5 subscription.
You have devices onboarded to Microsoft Defender for Endpoint as shown in the following table.

You create the device groups shown in the following table.

IP address indicators are defined as shown in the following table.

对于下列每项陈述，如果为真，请选择 "是"。否则，选择 "否"。
注意：每个正确选项得一分

问题 245
You have a Microsoft 365 E5 subscription that.
You need to identify whenever a sensitivity label is applied, changed, or removed within the subscription.
Which feature should you use, and how many days will the data be retained? To answer, select the appropriate options in the answer area.
注意 每选对一项得一分。

问题 246
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

The domain syncs to a Microsoft Entra tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.) User2 fails to authenticate to the Microsoft Entra tenant when signing in as [email protected] You need to ensure that User2 can access the resources in Microsoft Entra ID.
Solution: From the Microsoft Entra admin center, you add <abrlkam.com as a custom domain You insttud User2 to sign in as [email protected] Does this meet the goal?

问题 247
(You have a Microsoft 365 E5 subscription that contains 1,000 Windows devices.
You need to review the exposure score of the devices.
Which portal should you use?)