When planning identity protection in Microsoft Entra, which of the following is a key principle to consider?

All users should be assigned the Global Administrator role to ensure comprehensive protection.

Risk detections should be reviewed manually once a year to minimize false positives.

Identity protection should be planned only for external users, not internal employees.

Risk-based policies should be configured to automatically respond to detected risks.

When planning Conditional Access policies, what is the primary purpose of the 'Assignments' section?

To define which users, groups, and workloads the policy applies to

To configure the access controls that are enforced when conditions are met

To enable or disable the policy

To set the session controls for the policy

A company uses Microsoft Entra MFA. They have a group of users who are unable to use the Microsoft Authenticator app because their devices are not supported. They also cannot receive SMS due to carrier restrictions. What is the best alternative for these users?

Use a Conditional Access policy that requires MFA only for high-risk sign-ins.

Exclude these users from MFA requirements.

Use a hardware token (OATH token) for MFA.

A company wants to require MFA for all users, but they are concerned about user productivity. They want to minimize MFA prompts. What should they configure?

Use per-user MFA instead of Conditional Access.

Require MFA only for users in the IT department.

Disable MFA for users who complain about prompts.

Enable MFA with session persistence for trusted devices and locations.

What is the purpose of the MFA registration policy in Microsoft Entra Identity Protection?

To enforce MFA on every sign-in

To reset user passwords when MFA is not registered

To require users to register for Microsoft Entra multifactor authentication

To block users who have not registered for MFA

Microsoft 365 Certified:Administrator Expert

Domain 2Objective 3

Implement and Manage Secure Access MS-102 Practice Questions (Page 3)

Part of the Implement and manage Microsoft Entra identity and access domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

25–30%of the exam

Questions 11–15

11foundation · easy
When planning identity protection in Microsoft Entra, which of the following is a key principle to consider?
Select an answer first
12foundation · easy
When planning Conditional Access policies, what is the primary purpose of the 'Assignments' section?
Select an answer first
13expert · hard
A company uses Microsoft Entra MFA. They have a group of users who are unable to use the Microsoft Authenticator app because their devices are not supported. They also cannot receive SMS due to carrier restrictions. What is the best alternative for these users?
Select an answer first
14application · medium
A company wants to require MFA for all users, but they are concerned about user productivity. They want to minimize MFA prompts. What should they configure?
Select an answer first
15foundation · easy
What is the purpose of the MFA registration policy in Microsoft Entra Identity Protection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.