Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Microsoft logo

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 4

Implement and Manage Microsoft Defender for Cloud Apps MS-102 Practice Questions (Page 3)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here
7free pages
6concepts
30–35%of the exam

Questions 11–15

  1. 11foundation · easy

    Which data source can be used by Cloud App Discovery to identify cloud app usage?

    Select an answer first
  2. 12foundation · easy

    You configure a policy in Microsoft Defender for Cloud Apps to alert when more than five failed sign-in attempts occur within 10 minutes. Which policy component defines the condition that triggers the alert?

    Select an answer first
  3. 13foundation · easy

    You are investigating a user's activity in Microsoft Defender for Cloud Apps. Which log provides a chronological record of user actions across connected cloud apps?

    Select an answer first
  4. 14application · medium

    A security analyst is investigating an alert in Microsoft Defender for Cloud Apps. The alert indicates that a user performed a mass download from OneDrive. The analyst wants to see the exact sequence of activities that led to the alert. What should the analyst use?

    Select an answer first
  5. 15expert · hard

    A security analyst is investigating an alert for a user who downloaded a large number of files from SharePoint Online. The alert was triggered by an activity policy. The analyst wants to determine if the user also accessed other Microsoft 365 services during the same time period. What is the most efficient way to do this?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Keep studying — Manage security and threats by using Microsoft Defender XDR

Full MS-102 curriculum →Every domain, objective & concept — with linked practiceMS-102 exam overview →Microsoft 365 Certified: Administrator Expert

Other objectives in Manage security and threats by using Microsoft Defender XDR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.