A company is planning to implement Identity Protection. They want to ensure that high-risk users are automatically remediated. What should they include in their plan?

Configure a sign-in risk policy that blocks high risk.

Set up manual reviews of all high-risk users.

Configure a user risk policy that requires a password change for high risk.

Your organization uses Microsoft Entra Identity Protection. You notice that a user has been flagged for multiple risk detections, including impossible travel and anonymous IP address. The user is a remote worker who uses a VPN. What should you do?

Dismiss all risk detections as false positives.

Block the user's account immediately.

Require the user to change their password immediately.

Investigate the risk detections and confirm with the user before taking action.

An organization has an existing Conditional Access policy that requires MFA for all users. They now want to exclude a group of users who use legacy authentication from this policy. What should they do?

Create a new policy that blocks legacy authentication for the group.

Add the group to the Exclude list of the existing policy.

Remove the existing policy and create a new one that excludes the group.

Modify the existing policy to include the group in the Include list.

What is the purpose of the 'Session' controls in a Conditional Access policy?

To enable limited experiences within a cloud app after sign-in

To block access before the user signs in

To define which users the policy applies to

To require the user to sign in again immediately

Your organization uses Microsoft Entra Identity Protection. You notice that several users are being flagged for impossible travel risk, but you suspect the detections are false positives because users frequently use VPNs that route through different countries. What should you do to reduce false positives?

Disable the impossible travel risk detection in Identity Protection.

Create a Conditional Access policy that excludes the VPN users from risk-based policies.

Increase the risk level threshold for impossible travel in Identity Protection.

Add the VPN egress IP addresses to the named locations trusted in Conditional Access.

Microsoft 365 Certified:Administrator Expert

Domain 2Objective 3

Implement and Manage Secure Access MS-102 Practice Questions (Page 4)

Part of the Implement and manage Microsoft Entra identity and access domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

25–30%of the exam

Questions 16–20

16application · medium
A company is planning to implement Identity Protection. They want to ensure that high-risk users are automatically remediated. What should they include in their plan?
Select an answer first
17expert · hard
Your organization uses Microsoft Entra Identity Protection. You notice that a user has been flagged for multiple risk detections, including impossible travel and anonymous IP address. The user is a remote worker who uses a VPN. What should you do?
Select an answer first
18application · medium
An organization has an existing Conditional Access policy that requires MFA for all users. They now want to exclude a group of users who use legacy authentication from this policy. What should they do?
Select an answer first
19foundation · easy
What is the purpose of the 'Session' controls in a Conditional Access policy?
Select an answer first
20application · medium
Your organization uses Microsoft Entra Identity Protection. You notice that several users are being flagged for impossible travel risk, but you suspect the detections are false positives because users frequently use VPNs that route through different countries. What should you do to reduce false positives?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.