You need to manage permissions for Microsoft Defender XDR by creating a role group. Where do you configure this?

Microsoft Purview compliance portal

Your organization wants to ensure that administrators who have the Global Administrator role must activate the role only when needed and for a maximum of 2 hours. You need to configure this in Microsoft Entra PIM. What should you do?

Create an active assignment for Global Administrator with a start and end time of 2 hours each day.

Assign the Global Administrator role directly and set an expiration date of 2 hours from now.

Create a custom role with Global Administrator permissions and set the session timeout to 2 hours.

Create an eligible assignment for Global Administrator and set the maximum activation duration to 2 hours.

A compliance team at your company needs to manage data retention policies in Microsoft Purview, but they should not be able to view or manage other compliance features like eDiscovery or insider risk. You need to assign the appropriate permissions. What should you do?

Add the team to the Compliance Administrator role in Microsoft Entra ID.

Assign the eDiscovery Manager role to the team and then remove their access to insider risk.

Add the team to the Records Management role group in Microsoft Purview.

Create a custom role group in Microsoft Purview with only the 'Retention management' role and add the team as members.

Microsoft 365 Certified:Administrator Expert

Domain 1Objective 3

Manage Roles and Role Groups MS-102 Practice Questions (Page 4)

Part of the Deploy and manage a Microsoft 365 tenant domain, which accounts for 25–30% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

25–30%of the exam

Questions 16–20

16foundation · easy
You need to manage permissions for Microsoft Defender XDR by creating a role group. Where do you configure this?
Select an answer first
17application · medium
Your organization wants to ensure that administrators who have the Global Administrator role must activate the role only when needed and for a maximum of 2 hours. You need to configure this in Microsoft Entra PIM. What should you do?
Select an answer first
18foundation · easy
You need to delegate administrative tasks for users in a specific department to a support agent. What should you use to limit the agent's scope?
Select an answer first
19application · medium
A compliance team at your company needs to manage data retention policies in Microsoft Purview, but they should not be able to view or manage other compliance features like eDiscovery or insider risk. You need to assign the appropriate permissions. What should you do?
Select an answer first
20foundation · easy
You need to grant a user permission to manage SharePoint Online sites. Which role should you assign?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Manage Roles and Role Groups MS-102 Practice Questions (Page 4)

Questions 16–20

You need to manage permissions for Microsoft Defender XDR by creating a role group. Where do you configure this?

Your organization wants to ensure that administrators who have the Global Administrator role must activate the role only when needed and for a maximum of 2 hours. You need to configure this in Microsoft Entra PIM. What should you do?

You need to delegate administrative tasks for users in a specific department to a support agent. What should you use to limit the agent's scope?

A compliance team at your company needs to manage data retention policies in Microsoft Purview, but they should not be able to view or manage other compliance features like eDiscovery or insider risk. You need to assign the appropriate permissions. What should you do?

You need to grant a user permission to manage SharePoint Online sites. Which role should you assign?

Keep studying — Deploy and manage a Microsoft 365 tenant