After enabling SSPR, a company finds that only 30% of users have registered authentication methods. The helpdesk is still receiving many password reset calls. You need to increase SSPR registration and reduce helpdesk load. What should you do?

Reset all user passwords to temporary passwords and require change at next sign-in.

Configure the SSPR registration campaign to require users to register at their next sign-in.

Enable combined registration for MFA and SSPR.

Send an email to all users explaining how to register for SSPR.

A user is unable to sign in to Microsoft 365 and receives an error that their account is disabled. The user is a hybrid identity user. You need to resolve the authentication failure. What should you do?

Reset the user's password in Microsoft Entra ID.

Check the on-premises Active Directory account status and ensure it is enabled.

Enable the user account in Microsoft Entra ID.

Re-run the Microsoft Entra Connect sync cycle.

A company has enabled SSPR and wants to monitor its usage. The security team wants to know how many users have registered for SSPR, how many resets have been successful, and whether any users are repeatedly failing to reset their password. You need to provide this information. What should you do?

Export the sign-in logs and filter for SSPR-related events.

Create a custom workbook in Azure Monitor to track SSPR usage.

Use the Microsoft Entra admin center to view the SSPR registration and usage reports.

Use Microsoft Graph API to query the audit logs for password reset events.

Contoso has a hybrid identity environment with password hash sync. They want to require MFA for all users but avoid prompting users who are on the corporate network. They also need to support users who use legacy authentication protocols. What should they configure?

Enable MFA with a conditional access policy that excludes trusted locations and block legacy authentication.

Enable Security defaults to enforce MFA for all users and allow legacy authentication.

Configure per-user MFA and set the trusted IPs range to the corporate network.

Use conditional access to require MFA only for users outside the corporate network and leave legacy authentication enabled.

A company with 5,000 users is rolling out Microsoft Entra Multi-Factor Authentication. The security team requires that all users verify with a second factor, but the CFO's executive assistants frequently travel internationally and report that SMS codes often arrive late or not at all. The company has a Microsoft 365 E5 license. You need to ensure that all users, including the traveling assistants, can reliably complete MFA. What should you configure?

Keep SMS as the only allowed method but increase the code timeout to 10 minutes.

Enable the Microsoft Authenticator app as an allowed MFA method and require it for all users.

Disable MFA for the executive assistants to avoid blocking them during travel.

Use a third-party OTP token generator that is not integrated with Microsoft Entra.

Microsoft 365 Certified:Administrator Expert

Domain 2Objective 2

Implement and Manage Authentication MS-102 Practice Questions (Page 3)

Part of the Implement and manage Microsoft Entra identity and access domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

10concepts

25–30%of the exam

Questions 11–15

11application · medium
After enabling SSPR, a company finds that only 30% of users have registered authentication methods. The helpdesk is still receiving many password reset calls. You need to increase SSPR registration and reduce helpdesk load. What should you do?
Select an answer first
12expert · hard
A user is unable to sign in to Microsoft 365 and receives an error that their account is disabled. The user is a hybrid identity user. You need to resolve the authentication failure. What should you do?
Select an answer first
13expert · hard
A company has enabled SSPR and wants to monitor its usage. The security team wants to know how many users have registered for SSPR, how many resets have been successful, and whether any users are repeatedly failing to reset their password. You need to provide this information. What should you do?
Select an answer first
14application · medium
Contoso has a hybrid identity environment with password hash sync. They want to require MFA for all users but avoid prompting users who are on the corporate network. They also need to support users who use legacy authentication protocols. What should they configure?
Select an answer first
15application · medium
A company with 5,000 users is rolling out Microsoft Entra Multi-Factor Authentication. The security team requires that all users verify with a second factor, but the CFO's executive assistants frequently travel internationally and report that SMS codes often arrive late or not at all. The company has a Microsoft 365 E5 license. You need to ensure that all users, including the traveling assistants, can reliably complete MFA. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.