A company uses a proxy server for internet access. They want to use Cloud App Discovery to identify cloud apps used by employees. They have installed the collector on a server that receives logs from the proxy. What else must they do to ensure the logs are parsed correctly?

Assign the Cloud App Discovery admin role to the collector

Create a file policy to monitor discovered apps

Enable the app connector for Microsoft 365

Configure the collector to use the correct log format for the proxy

A company has connected Microsoft 365 to Defender for Cloud Apps. They want to block downloads from SharePoint Online for users who are not in the 'Marketing' group, but they also want to allow downloads for users who have completed a training course. The training completion is stored as a custom attribute in Microsoft Entra ID. What should they configure?

A file policy that blocks downloads for users not in the Marketing group

A session policy that blocks downloads for users not in the Marketing group, with an exception for users who have the custom attribute

An activity policy that alerts when a download occurs

An access policy that blocks downloads for users not in the Marketing group

A company has connected Microsoft 365 to Defender for Cloud Apps. They want to prevent users from sharing files with external users from SharePoint Online. They also want to be alerted if a user attempts to share a file externally. What should they configure?

A governance action in the app connector to disable external sharing

A file policy that triggers when the sharing permission is 'External' and set the alert to 'Send alert'

An access policy that blocks external sharing

A session policy that blocks external sharing

You have connected Microsoft 365 to Defender for Cloud Apps. You want to ensure that activities from Exchange Online are included in the activity log. What should you verify?

The activity log is configured to include Exchange Online activities by default.

The Exchange Online admin center is enabled for API access.

The app connector has the required admin roles, such as Global Admin or Security Admin, to access Exchange Online data.

The users are using a supported browser for Exchange Online.

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 4

Implement and Manage Microsoft Defender for Cloud Apps MS-102 Practice Questions (Page 2)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

30–35%of the exam

Questions 6–10

6application · medium
A company uses a proxy server for internet access. They want to use Cloud App Discovery to identify cloud apps used by employees. They have installed the collector on a server that receives logs from the proxy. What else must they do to ensure the logs are parsed correctly?
Select an answer first
7foundation · easy
You are configuring Microsoft Defender for Cloud Apps to monitor activities in Microsoft 365. Which component must you configure to establish the connection between Defender for Cloud Apps and Microsoft 365?
Select an answer first
8expert · hard
A company has connected Microsoft 365 to Defender for Cloud Apps. They want to block downloads from SharePoint Online for users who are not in the 'Marketing' group, but they also want to allow downloads for users who have completed a training course. The training completion is stored as a custom attribute in Microsoft Entra ID. What should they configure?
Select an answer first
9application · medium
A company has connected Microsoft 365 to Defender for Cloud Apps. They want to prevent users from sharing files with external users from SharePoint Online. They also want to be alerted if a user attempts to share a file externally. What should they configure?
Select an answer first
10application · medium
You have connected Microsoft 365 to Defender for Cloud Apps. You want to ensure that activities from Exchange Online are included in the activity log. What should you verify?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Implement and Manage Microsoft Defender for Cloud Apps MS-102 Practice Questions (Page 2)

Questions 6–10

A company uses a proxy server for internet access. They want to use Cloud App Discovery to identify cloud apps used by employees. They have installed the collector on a server that receives logs from the proxy. What else must they do to ensure the logs are parsed correctly?

You are configuring Microsoft Defender for Cloud Apps to monitor activities in Microsoft 365. Which component must you configure to establish the connection between Defender for Cloud Apps and Microsoft 365?

A company has connected Microsoft 365 to Defender for Cloud Apps. They want to prevent users from sharing files with external users from SharePoint Online. They also want to be alerted if a user attempts to share a file externally. What should they configure?

You have connected Microsoft 365 to Defender for Cloud Apps. You want to ensure that activities from Exchange Online are included in the activity log. What should you verify?

Keep studying — Manage security and threats by using Microsoft Defender XDR