Manage Roles and Role Groups MS-102 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   You need to modify an existing custom role in Microsoft Entra ID to add a new permission. What is the correct way to do this?

   • AAssign the new permission to each user individually.
   • BEdit the role in the Microsoft Entra admin center and add the permission.
   • CUse the Microsoft 365 admin center to modify the role.
   • DDelete the role and recreate it with the new permission.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   You need to assign a Microsoft Entra ID role to a user so they can reset passwords for other users. Which role should you assign?

   • AExchange Administrator
   • BSecurity Reader
   • CPassword Administrator
   • DBilling Administrator
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   You need to activate a role in PIM for a short period to perform a specific task. What is the typical maximum duration for role activation?

   • A8 hours
   • B24 hours
   • C1 hour
   • DThe maximum duration is configurable by administrators
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   You need to configure a role in PIM so that a user must request activation and receive approval before using the role. What should you configure?

   • AConditional Access policy
   • BAdministrative unit scope
   • CActivation settings with approval required
   • DAssignment as active
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Your organization uses Microsoft Teams, and you need to allow a group of IT staff to manage Teams policies and settings, but they should not be able to manage other workloads like Exchange or SharePoint. You need to assign the appropriate permissions. What should you do?

   • AAssign the SharePoint Administrator role to the IT staff.
   • BCreate a custom role in Microsoft Entra ID with Teams permissions and assign it to the IT staff.
   • CAssign the Global Administrator role to the IT staff.
   • DAssign the Teams Administrator role to the IT staff in Microsoft Entra ID.
   Reveal Solution Discussion Select an answer first