Exam MS-102: Microsoft 365 Administrator questions and answers

For administrators handling Microsoft 365 deployment and management, overseeing tenant-level implementation and administration in both cloud and hybrid environments, this article caters to your needs as you prepare for the MS-102: Microsoft 365 Administrator exam. Inside, we’ll address key questions and provide answers to assist you in successfully navigating MS-102 exam. So let’s explore MS-102 exam questions and answers.

MS-102 Exam

MS-102 exam measures your ability to accomplish the following technical tasks: deploy and manage a Microsoft 365 tenant; implement and manage identity and access in Microsoft Entra ID; manage security and threats by using Microsoft 365 Defender; and manage compliance by using Microsoft Purview.

Watch the video

If you want to learn Microsoft 365 Administration, please watch this video on our YouTube channel.

Skills measured

In MS-102 Exam below skills are measured:

• Deploy and manage a Microsoft 365 tenant (25–30%)
• Implement and manage identity and access in Microsoft Entra ID (25–30%)
• Manage security and threats by using Microsoft 365 Defender (25–30%)
• Manage compliance by using Microsoft Purview (15–20%)

To learn more about MS-102 exam, please refer to this link.

To schedule MS-102 exam, please refer to this link.

MS-102 Exam Questions and Answers

Deploy and manage a Microsoft 365 tenant (25–30%)

Q1. What are the initial steps to set up a new Microsoft 365 tenant?

Setting up a new Microsoft 365 tenant involves several key steps:

• Purchase or Sign Up for Microsoft 365: Acquire a subscription or sign up for a trial version of Microsoft 365.
• Create the Tenant: During the sign-up process, you’ll create the initial tenant by providing basic information like your domain name, business name, and contact details.
• Verify Domain Ownership: Verify ownership of the domain you intend to use with your Microsoft 365 tenant. This involves adding specific DNS records provided by Microsoft to your domain registrar’s settings.
• Add Users: Start by creating user accounts within your tenant. You can do this manually or import user data if you have a larger number of users.
• Assign Licenses: Allocate licenses to users based on the subscription plan you’ve chosen. This grants access to various Microsoft 365 services and applications.
• Set Up Security: Implement security measures such as multi-factor authentication (MFA), conditional access policies, and data loss prevention (DLP) policies to protect your tenant and data.
• Configure Settings: Customize tenant-level settings, including organizational details, user permissions, and global policies for services like Exchange Online, SharePoint Online, and Teams.
• Set Up Email: Configure Exchange Online settings for email services, including domain settings, email addresses, and mail flow rules.
• Enable Collaboration Tools: Configure SharePoint Online for document storage and collaboration and set up Microsoft Teams for communication and collaboration among users.
• Training and Communication: Educate users about the new Microsoft 365 environment, its features, and how they can make the most of the tools provided.

Q2. Scenario

As an administrator responsible for deploying a new Microsoft 365 tenant for a company, you need to set up user accounts efficiently.

Which method should you use to create multiple user accounts in the Microsoft 365 tenant while minimizing manual input?

Options:

1. Import a CSV file containing user information into the Microsoft 365 Admin Center.
2. Create each user account manually in the Microsoft 365 Admin Center.
3. Use PowerShell commands to create users individually.
4. Utilize Microsoft Excel to generate user accounts and import them via PowerShell.

Answer: 1. Import a CSV file containing user information into the Microsoft 365 Admin Center.

Q3. Scenario

You are tasked with managing security policies in Microsoft 365 to enhance data protection. The organization requires a policy that prevents users from sharing sensitive information outside the organization’s network.

Which feature within Microsoft 365 can you leverage to meet this requirement?

Options:

1. Azure Information Protection
2. Data Loss Prevention (DLP) policies
3. Office 365 Advanced Threat Protection (ATP)
4. Microsoft Entra Conditional Access

Answer: 2. Data Loss Prevention (DLP) policies

Q4. Scenario

You are configuring user accounts for the Finance department in your Microsoft 365 tenant. The department head requests that all users in Finance have access to specific shared resources and documents stored in SharePoint Online.

Which action should you take to fulfill this request efficiently?

Options:

1. Assign each user in the Finance department individual permissions to the SharePoint resources.
2. Create a SharePoint Group for the Finance department, grant access to the resources, and add Finance department users to this group.
3. Enable external sharing for the SharePoint resources and share them with the Finance department users.
4. Configure Conditional Access policies to grant access to the SharePoint resources for Finance department users.

Answer: 2. Create a SharePoint Group for the Finance department, grant access to the resources, and add Finance department users to this group.

Q5. Scenario

You are tasked with implementing Multi-Factor Authentication (MFA) for enhanced security in the Microsoft 365 tenant. However, some users frequently travel to areas with limited internet access.

Which method can be used to ensure these users can successfully authenticate even without reliable internet connectivity?

Options:

1. Enable SMS-based MFA for these users.
2. Implement biometric authentication methods for offline access.
3. Allow users to set up one-time bypass codes for use during offline periods.
4. Users in offline regions cannot use MFA for authentication.

Answer: 3. Allow users to set up one-time bypass codes for use during offline periods.

Q6. Scenario

Your organization plans to migrate existing email data from an on-premises Exchange Server to Exchange Online in Microsoft 365.

Which tool or service can facilitate a seamless migration of mailbox data from the on-premises Exchange Server to Exchange Online?

Options:

1. Azure Storage Explorer
2. Microsoft Data Migration Assistant
3. Exchange Admin Center
4. Microsoft Exchange Online Migration

Answer: 4. Microsoft Exchange Online Migration

Implement and manage identity and access in Microsoft Entra ID (25–30%)

Q7. Scenario: Managing Microsoft Entra Identities

You need to add a new user named “John Doe” to Azure Active Directory using PowerShell. Which command would you use?

Options:

1. New-AzureADUser -DisplayName “John Doe”
2. Add-AzureADUser -DisplayName “John Doe”
3. New-AzureADUser -DisplayName “John Doe” -UserPrincipalName “[email protected]”
4. Add-AzureADUser -DisplayName “John Doe” -UserPrincipalName “[email protected]”

Answer: 3. New-AzureADUser -DisplayName “John Doe” -UserPrincipalName “[email protected]”

Q8. Scenario: Azure AD Role Assignment

You’re assigned to grant the “Application Administrator” role to a service principal named “AppService”. Which PowerShell command should you use?

Options:

1. Add-AzureADServicePrincipalRoleMember -ObjectId “AppService” -RoleTemplateId “Application Administrator”
2. Add-AzureADServicePrincipalRoleMember -RoleObjectId “Application Administrator” -RefObjectId “AppService”
3. Add-AzureADServicePrincipalRoleMember -PrincipalId “AppService” -RoleTemplateId “Application Administrator”
4. Add-AzureADServicePrincipalRoleMember -ObjectId “Application Administrator” -PrincipalId “AppService”

Answer: 1. Add-AzureADServicePrincipalRoleMember -ObjectId “AppService” -RoleTemplateId “Application Administrator”

Q9. Scenario: Conditional Access Policy

Your organization wants to enforce MFA for users accessing Azure resources from untrusted IP addresses. Which condition should you configure in the Conditional Access policy?

Options:

1. User group membership
2. Named locations
3. IP address range
4. Device compliance

Answer: 3. IP address range

Q10. Scenario: Privileged Identity Management (PIM)

You’ve been tasked to enable just-in-time access for the “Global Administrator” role. Which PowerShell command should you use?

Options:

1. Enable-AzureADPrivilegedRole -RoleName “Global Administrator” -AccessType “JustInTime”
2. Set-AzureADPrivilegedRole -RoleName “Global Administrator” -AccessType “JustInTime”
3. Enable-AzureADPrivilegedRoleAssignment -RoleName “Global Administrator” -AccessType “JustInTime”
4. Set-AzureADPrivilegedRoleAssignment -RoleName “Global Administrator” -AccessType “JustInTime”

Answer: 1. Enable-AzureADPrivilegedRole -RoleName “Global Administrator” -AccessType “JustInTime”

Q11. Scenario: Authentication Methods

Your company wants to strengthen security by requiring Microsoft Entra Identities to use smart cards for authentication. Which authentication method should you configure?

Options:

1. Passwords
2. Certificates
3. Multi-Factor Authentication (MFA)
4. OAuth

Answer: 2. Certificates

Q12. Scenario: Monitoring Microsoft Entra ID Sign-Ins

You need to retrieve sign-in logs for a specific user named “Emma Brown” in Microsoft Entra ID using PowerShell. Which command should you use?

Options:

1. Get-AzureADUserSigninLog -ObjectId “Emma Brown”
2. Get-AzureADUser -ObjectId “Emma Brown” | Get-AzureADUserSignInHistory
3. Get-AzureADAuditSignInLogs -Filter “UserPrincipalName eq ‘Emma Brown'”
4. Get-AzureADUser -Filter “DisplayName eq ‘Emma Brown'” | Get-AzureADSignInLogs

Answer: 3. Get-AzureADAuditSignInLogs -Filter “UserPrincipalName eq ‘Emma Brown'”

Q13. Microsoft Entra ID Application Proxy

You want to provide secure remote access to an on-premises web application using Microsoft Entra ID. Which feature should you use?

Options:

1. Microsoft Entra B2B
2. Microsoft Entra B2C
3. Microsoft Entra Application Proxy
4. Microsoft Entra Connect

Answer: 3. Microsoft Entra Application Proxy

Q14. Scenario: Managing Device Compliance

Your organization wants to ensure that only compliant devices can access Azure resources. Which service should you integrate with Microsoft Entra ID?

Options:

1. Azure Information Protection (AIP)
2. Azure Security Center
3. Azure Sentinel
4. Azure Virtual Network

Answer: 2. Azure Security Center

Q15. Scenario: Managing Microsoft Entra Roles

You’re responsible for granting users the “Device Administrator” role in Azure AD. Which PowerShell command should you use?

Options:

1. Add-AzureADDirectoryRoleMember -RoleTemplateId “Device Administrator” -ObjectId “UserPrincipalId”
2. Add-AzureADDirectoryRoleMember -RoleObjectId “Device Administrator” -PrincipalId “UserPrincipalId”
3. Add-AzureADDirectoryRoleMember -RoleObjectId “Device Administrator” -RefObjectId “UserPrincipalId”
4. Add-AzureADDirectoryRoleMember -ObjectId “Device Administrator” -PrincipalId “UserPrincipalId”

Answer: 1. Add-AzureADDirectoryRoleMember -RoleTemplateId “Device Administrator” -ObjectId “UserPrincipalId”

Q16. Scenario: Microsoft Entra Connect Configuration

You’re tasked with synchronizing on-premises Active Directory to Microsoft Entra ID using Microsoft Entra Connect. Which synchronization method should you select for password synchronization?

Options:

1. Password hash synchronization
2. Pass-through authentication
3. Federation with AD FS
4. Microsoft Entra Seamless SSO

Answer: 1. Password hash synchronization

Manage security and threats by using Microsoft 365 Defender (25–30%)

Q17. Threat Detection

How does Microsoft 365 Defender assist in identifying and mitigating email-based threats like phishing?

Options:

1. By utilizing advanced threat intelligence and behavior analytics
2. Through VPN encryption and network segmentation
3. By regularly updating firewall rules
4. None of the above

Answer: 1. By utilizing advanced threat intelligence and behavior analytics

Q18. Endpoint Protection

What mechanisms does Microsoft 365 Defender employ to protect endpoints from ransomware attacks?

Options:

1. Heuristic analysis and real-time monitoring
2. Disk scans and system backups
3. User access controls and network segmentation
4. Ignoring ransomware threats

Answer: Heuristic analysis and real-time monitoring

Q19. Insider Threat Monitoring

Can Microsoft 365 Defender detect insider threats? If yes, how?

Options:

1. By monitoring only external threats
2. Through dark web scanning for employee information leaks
3. Using user behavior analytics and anomaly detection
4. By restricting all employees’ access to sensitive data

Answer: 3. Using user behavior analytics and anomaly detection

Q20. Zero-Day Exploits

How does Microsoft 365 Defender address zero-day exploits?

Options:

1. By waiting for third-party vendor security patches
2. Using machine learning and behavior-based detection
3. Ignoring zero-day threats as they’re too complex
4. Regularly updating antivirus definitions

Answer: 2. Using machine learning and behavior-based detection

Q21. Multi-Platform Coverage

Which platforms does Microsoft 365 Defender provide security coverage for?

Options:

1. Only Windows devices
2. Windows and macOS devices
3. Windows, macOS, Linux, Android, and iOS devices
4. Windows and Android devices

Answer: 3. Windows, macOS, Linux, Android, and iOS devices

Q22. Querying Threat Intelligence

Which PowerShell cmdlet is used to retrieve threat intelligence data in Microsoft 365 Defender?

Options:

1. Get-ATPThreatIntelligence
2. Get-M365ThreatIntelligence
3. Get-ATPFileSubmission
4. Get-M365SecurityAlerts

Answer: 3. Get-ATPFileSubmission

Q23. Managing Security Incidents

What cmdlet initiates an automated investigation for a security incident in Microsoft 365 Defender?

Options:

1. Start-M365SecurityInvestigation
2. Invoke-ATPInvestigation
3. Start-ATPInvestigation
4. Invoke-M365AutomatedInvestigation

Answer: 2. Invoke-ATPInvestigation

Q24. Retrieving Security Alerts

Which cmdlet is used to retrieve security alerts in Microsoft 365 Defender?

Options:

1. Get-M365SecurityAlerts
2. Get-ATPAlerts
3. Get-DefenderSecurityAlerts
4. Get-M365ThreatAlerts

Answer: 1. Get-M365SecurityAlerts

Q25. Which PowerShell cmdlet is used to initiate automated response actions for identified threats in Microsoft 365 Defender?

Options:

1. Run-M365AutomatedResponse
2. Invoke-ATPResponseAction
3. Start-M365ThreatMitigation
4. Invoke-DefenderAutomatedResponse

Answer: 2. Invoke-ATPResponseAction

Q26. What cmdlet fetches the details of an ongoing threat investigation in Microsoft 365 Defender?

Options:

1. Get-M365ThreatInvestigationDetails
2. Get-ATPInvestigationData
3. Get-M365ThreatIntelligence
4. Get-DefenderThreatInvestigation

Answer: 4. Get-DefenderThreatInvestigation

Q27. Scenario: You need to ensure that all sensitive customer data stored across various databases within your organization complies with privacy regulations. Which feature in Microsoft Purview would you use?

Options:

1. Data Cataloging
2. Data Discovery
3. Data Classification
4. Data Governance

Answer: 3. Data Classification

Q28. Scenario: Your company wants to maintain an audit trail of data access and usage. Which tool within Microsoft Purview helps achieve this?

Options:

1. Data Cataloging
2. Data Discovery
3. Data Classification
4. Data Lineage

Answer: 4. Data Lineage

Q29. Scenario: You want to identify all instances of personal identifiable information (PII) across your organization’s cloud services. What function in Microsoft Purview would you utilize?

Options:

1. Data Cataloging
2. Data Discovery
3. Data Classification
4. Data Governance

Answer: 2. Data Discovery

Q30. Scenario: You need to ensure that your organization’s data complies with specific industry standards and regulations. Which aspect of Microsoft Purview assists in implementing and monitoring these compliance requirements?

Options:

1. Data Cataloging
2. Data Governance
3. Data Classification
4. Data Policies

Answer: 4. Data Policies

Q31. Scenario: You want to create a centralized inventory of all structured and unstructured data sources across your organization. Which feature in Microsoft Purview facilitates this?

Options:

1. Data Cataloging
2. Data Discovery
3. Data Classification
4. Data Governance

Answer: 1. Data Cataloging

Q32. Scenario: Your company needs to establish a data governance framework that includes data stewardship and data lineage. What component of Microsoft Purview supports this requirement?

Options:

1. Data Cataloging
2. Data Governance
3. Data Classification
4. Data Policies

Answer: 2. Data Governance

Q33. Scenario: You aim to automate the tagging of sensitive data to ensure it’s adequately protected. Which functionality in Microsoft Purview can help achieve this?

Options:

1. Data Cataloging
2. Data Discovery
3. Data Classification
4. Data Policies

Answer: 3. Data Classification

Related articles

📌After going through above MS-102 exam questions and answers, we welcome you to check our other blogs on Interview questions and answers on Cloud technologies:

40+ Azure Active Directory interview questions and answers
50+ Office 365 Interview questions and answers
40+ Exchange Hybrid Interview questions and answers
50+ Microsoft Exchange Online interview questions and answers
40+ Azure AD Connect Interview Questions and Answers
50+ Microsoft Exchange Server Interview Questions and Answers
50+ Exchange Server 2010 Interview Questions and Answers