Microsoft MS-102 Exam
Minimum Operating System Requirement to enroll in Intune - CORRECT
ANSWER-Windows 10 (TPM 2.0)
Sender Policy Framework (SPF) - CORRECT ANSWER-A TXT record in Domain
DNS to validate outbound emails sent from your domain. Helps to prevent spoofing
and spamming.
Domain Keys Identified Mail (DKIM) - CORRECT ANSWER-Adds a digital signature
to the message header of emails to ensure that destination email systems trust
messages sent outbound from your domain. Helps to prevent spoofing and
spamming.
Microsoft Purview Audit Logs - CORRECT ANSWER-Unified audit log. Can view
user and admin activity in the organization. Thousands of users and admin activities
performed are logged here and stored for 90 days.
eDiscovery Manager Role Group - CORRECT ANSWER-Has both Compliance
Search and Hold roles. Can be used to put a mailbox on Hold.
Records Management Role Group - CORRECT ANSWER-Used to manage and
dispose of record content.
Security Operator Role Group - CORRECT ANSWER-Can manage alerts and can
view reports and security features settings.
User offboarding steps - CORRECT ANSWER-Block user sign-in
Convert to shared mailbox
Shared mailbox delegation or email forwarding
OneDrive access to another user
Remove license
Service Support Administrator - CORRECT ANSWER-Can open and manage
service requests, manage the message center, and monitor service health. It cannot
reset passwords for any other users.
Global Admin - CORRECT ANSWER-Has all rights across Microsoft 365 services.
Password Administrator - CORRECT ANSWER-Can reset passwords for
non-administrators and Password Administrators.
, Helpdesk Administrator - CORRECT ANSWER-Can reset passwords for users and
admin roles such as password admin, helpdesk admin, etc. but cannot reset Global
Admin; can manage service requests, monitor service health, etc.
Permanently delete a user from M365 - CORRECT ANSWER-Remove-MsolUser
-userprincipalname $name -RemoveFromRecycleBin
Remove-MsolUser - CORRECT ANSWER-You can use this cmdlet to remove an
Office 365 or Azure Active Directory user. This cmdlet allows you to remove the user,
associated licenses, mailbox, files, etc.
Remove-TeamUser - CORRECT ANSWER-Remove the Team owner or user from a
Team.
Remove-mailbox - CORRECT ANSWER-Delete the mailbox and the associated user
account.
License details in M365 vs Azure - CORRECT ANSWER-In M365 admin center, you
can view the license details like Purchase information, Status, Billing Frequency,
manage the subscription and payment settings.
In Azure, you can only assign and remove licenses to user and get limited details
such as Service Plan.
Report reader - CORRECT ANSWER-Has permission to read usage reporting data
from the dashboard, sign-in reports, productivity score, etc.
Compliance Administrator - CORRECT ANSWER-Can read and manage compliance
configuration and reports in Azure AD and Microsoft 365.
Cloud Device Administrator - CORRECT ANSWER-Users in this role can enable,
disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if
present) in the Azure portal.
Windows 365 Administrator - CORRECT ANSWER-Users assigned to this Azure AD
role can provision and manage all the aspects of the Cloud PCs.
AD FS and Sync - CORRECT ANSWER-AD FS servers and Sync servers should be
deployed on different servers. You should not install the AD FS agent on your Sync
servers.
Insider Risk Management - CORRECT ANSWER-A compliance solution that helps
minimize internal risks by enabling you to detect, investigate, and act on malicious
and inadvertent activities in your organization.
Minimum Operating System Requirement to enroll in Intune - CORRECT
ANSWER-Windows 10 (TPM 2.0)
Sender Policy Framework (SPF) - CORRECT ANSWER-A TXT record in Domain
DNS to validate outbound emails sent from your domain. Helps to prevent spoofing
and spamming.
Domain Keys Identified Mail (DKIM) - CORRECT ANSWER-Adds a digital signature
to the message header of emails to ensure that destination email systems trust
messages sent outbound from your domain. Helps to prevent spoofing and
spamming.
Microsoft Purview Audit Logs - CORRECT ANSWER-Unified audit log. Can view
user and admin activity in the organization. Thousands of users and admin activities
performed are logged here and stored for 90 days.
eDiscovery Manager Role Group - CORRECT ANSWER-Has both Compliance
Search and Hold roles. Can be used to put a mailbox on Hold.
Records Management Role Group - CORRECT ANSWER-Used to manage and
dispose of record content.
Security Operator Role Group - CORRECT ANSWER-Can manage alerts and can
view reports and security features settings.
User offboarding steps - CORRECT ANSWER-Block user sign-in
Convert to shared mailbox
Shared mailbox delegation or email forwarding
OneDrive access to another user
Remove license
Service Support Administrator - CORRECT ANSWER-Can open and manage
service requests, manage the message center, and monitor service health. It cannot
reset passwords for any other users.
Global Admin - CORRECT ANSWER-Has all rights across Microsoft 365 services.
Password Administrator - CORRECT ANSWER-Can reset passwords for
non-administrators and Password Administrators.
, Helpdesk Administrator - CORRECT ANSWER-Can reset passwords for users and
admin roles such as password admin, helpdesk admin, etc. but cannot reset Global
Admin; can manage service requests, monitor service health, etc.
Permanently delete a user from M365 - CORRECT ANSWER-Remove-MsolUser
-userprincipalname $name -RemoveFromRecycleBin
Remove-MsolUser - CORRECT ANSWER-You can use this cmdlet to remove an
Office 365 or Azure Active Directory user. This cmdlet allows you to remove the user,
associated licenses, mailbox, files, etc.
Remove-TeamUser - CORRECT ANSWER-Remove the Team owner or user from a
Team.
Remove-mailbox - CORRECT ANSWER-Delete the mailbox and the associated user
account.
License details in M365 vs Azure - CORRECT ANSWER-In M365 admin center, you
can view the license details like Purchase information, Status, Billing Frequency,
manage the subscription and payment settings.
In Azure, you can only assign and remove licenses to user and get limited details
such as Service Plan.
Report reader - CORRECT ANSWER-Has permission to read usage reporting data
from the dashboard, sign-in reports, productivity score, etc.
Compliance Administrator - CORRECT ANSWER-Can read and manage compliance
configuration and reports in Azure AD and Microsoft 365.
Cloud Device Administrator - CORRECT ANSWER-Users in this role can enable,
disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if
present) in the Azure portal.
Windows 365 Administrator - CORRECT ANSWER-Users assigned to this Azure AD
role can provision and manage all the aspects of the Cloud PCs.
AD FS and Sync - CORRECT ANSWER-AD FS servers and Sync servers should be
deployed on different servers. You should not install the AD FS agent on your Sync
servers.
Insider Risk Management - CORRECT ANSWER-A compliance solution that helps
minimize internal risks by enabling you to detect, investigate, and act on malicious
and inadvertent activities in your organization.
