MS-102 Microsoft 365 Administrator Free Practice Questions and Answers

An organization wants to require multifactor authentication for administrators when they sign in from outside trusted locations. Which control can enforce this requirement?

• A. A Microsoft Entra Conditional Access policy with appropriate conditions and grant controls
• B. A mail flow rule that adds a warning to email
• C. A retention label applied to administrator documents
• D. A SharePoint sharing link expiration setting

Users report suspicious messages that appear to come from a trusted sender. Which Microsoft 365 security capability helps investigate and respond to email threats?

• A. Microsoft Defender for Office 365 threat investigation and response tools
• B. Microsoft 365 usage reports alone
• C. A SharePoint site template
• D. The tenant’s domain verification record

An organization needs to detect sensitive information in Microsoft 365 content and prevent it from being shared in ways that violate policy. Which solution is designed for this purpose?

• A. Microsoft Purview Data Loss Prevention policies
• B. Microsoft 365 group naming policy
• C. Entra ID sign-in logs only
• D. Exchange mailbox forwarding settings only

A compliance team must retain specified content for a defined period, even if a user attempts to delete it. Which control should the administrator evaluate?

• A. A Microsoft Purview retention policy or retention label configured for the requirement
• B. A mailbox signature template
• C. A user’s Outlook view settings
• D. A Microsoft 365 service health alert

An investigator needs to review user and administrator activities across Microsoft 365. Which source is the appropriate starting point for searching recorded audit events?

• A. Microsoft Purview Audit search, with suitable roles and licensing
• B. The organization’s public DNS zone
• C. The browser download history of one administrator
• D. The Microsoft 365 product purchase receipt