A company has a Conditional Access policy that requires MFA for all users. They also have a policy that requires device compliance for access to Microsoft 365. A user with a compliant device is prompted for MFA every time they access Outlook on the web. What is the most likely cause?

The user is accessing from a different IP address each time.

The MFA session is not being persisted because the policy is configured to require reauthentication every time.

The device compliance policy is not being evaluated correctly.

The user's device is not registered in Microsoft Entra.

A company is planning to implement Conditional Access. They have a mix of users: some use managed devices, some use personal devices, and some are external partners. They want to require MFA for all users but also want to enforce device compliance for internal users. What is the best way to structure the policies?

Create two policies: one for MFA for all users, and another for device compliance for internal users.

Use Identity Protection to require MFA and device compliance.

Create a single policy that requires MFA and device compliance for all users.

Create a policy that requires MFA for all users and excludes external partners from device compliance.

Which feature in Microsoft Entra allows administrators to manage and monitor user MFA registration status?

Conditional Access insights workbook

A company is planning to implement Conditional Access. They want to require MFA for all users, but they are concerned about the user experience for users who are already on the corporate network. What should they do?

Require MFA for all users, including those on the corporate network.

Require MFA only for users accessing from outside the corporate network.

Exclude the corporate network IP addresses from the MFA policy.

Use Identity Protection to require MFA for high-risk sign-ins only.

Which of the following is a best practice when planning Conditional Access policies?

Use report-only mode to test policies before enforcing them

Create as many policies as possible to cover every scenario

Avoid using conditions to keep policies simple

Apply policies to all users, including break-glass accounts

Microsoft 365 Certified:Administrator Expert

Domain 2Objective 3

Implement and Manage Secure Access MS-102 Practice Questions (Page 6)

Part of the Implement and manage Microsoft Entra identity and access domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

25–30%of the exam

Questions 26–30

26expert · hard
A company has a Conditional Access policy that requires MFA for all users. They also have a policy that requires device compliance for access to Microsoft 365. A user with a compliant device is prompted for MFA every time they access Outlook on the web. What is the most likely cause?
Select an answer first
27expert · hard
A company is planning to implement Conditional Access. They have a mix of users: some use managed devices, some use personal devices, and some are external partners. They want to require MFA for all users but also want to enforce device compliance for internal users. What is the best way to structure the policies?
Select an answer first
28foundation · easy
Which feature in Microsoft Entra allows administrators to manage and monitor user MFA registration status?
Select an answer first
29application · medium
A company is planning to implement Conditional Access. They want to require MFA for all users, but they are concerned about the user experience for users who are already on the corporate network. What should they do?
Select an answer first
30foundation · easy
Which of the following is a best practice when planning Conditional Access policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.