Implement and Manage Authentication MS-102 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A user reports that they cannot sign in because their account is locked. What is the most appropriate action to resolve this issue?

   • AUnlock the account in Microsoft Entra
   • BReset the user's password
   • CWait for the lockout duration to expire
   • DDisable and re-enable the user account
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which passwordless authentication method is built into Windows and allows users to sign in using a PIN or biometric gesture?

   • ATemporary Access Pass
   • BMicrosoft Authenticator
   • CWindows Hello for Business
   • DFIDO2 security key
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   Users report that they are prompted for MFA every time they sign in, even though the conditional access policy has a session control for sign-in frequency of 90 days. The users are on the corporate network, which is a trusted location. What is the most likely cause?

   • AThe users are using a browser that does not support persistent cookies, so the session is not maintained.
   • BThe sign-in frequency setting is being overridden by the per-user MFA configuration.
   • CThe conditional access policy is configured to require MFA for all cloud apps, and the session control is not applied because the users are on a trusted location.
   • DThe conditional access policy is set to require MFA for all users, but the session control is set to 0 days.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A user reports that they cannot sign in to Microsoft 365. They receive an error that their account is locked. The user says they have not entered the wrong password. You need to determine the cause of the lockout. What should you do first?

   • AReview the sign-in logs in the Microsoft Entra admin center for the user's recent sign-in attempts.
   • BReset the user's password and require MFA registration at next sign-in.
   • CDisable and re-enable the user's account to clear the lockout state.
   • DCheck the user's group memberships to see if they are in a group that has a conditional access policy requiring MFA.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A user reports that they are prompted for MFA every time they sign in, even though they have already completed MFA on the same device. The user is not using a kiosk or shared device. You need to reduce the number of MFA prompts. What should you do?

   • AConfigure the MFA session lifetime to a longer duration in the conditional access policy.
   • BCheck if the user is in a group that has a conditional access policy with 'Require MFA' set to 'Every time'.
   • CDisable MFA for the user's device.
   • DAsk the user to re-register their MFA methods.
   Reveal Solution Discussion Select an answer first