Free Microsoft MS-102 Practice Test & Real Exam Questions

  • Exam Code/Number: MS-102
  • Exam Name/Title: Microsoft 365 Administrator
  • Certification Provider: Microsoft
  • Corresponding Certification: Microsoft 365 Certified
  • Exam Questions: 598
  • Updated On: Sep 09, 2026
You have a Microsoft 365 E5 subscription. Administrators are issued FID02 security keys.
You need to create a Conditional Access policy that will use a FID02 security key as an authentication method. Which Access controls option should you select for the policy?
Correct Answer: B Vote an answer
You have a Microsoft 365 E5 subscription that contains the identities shown in the following table:

You create a shared mailbox named Shared1.
Which identities can you add to Shared1 as a member?
Correct Answer: B Vote an answer
You configure an anti-phishing policy as shown in the following exhibit.

Use the drop-down menus to select the answer choke that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
If a message is identified as a domain impersonation: the message is moved to the Junk Email folder According to the anti-phishing policy settings shown in the exhibit, messages identified as domain impersonation should be moved to the Junk Email folder to reduce the risk of phishing attacks.
To reduce the likelihood of the impersonation policy generating false positives, configure: Mailbox intelligence Mailbox intelligence helps in reducing false positives by using machine learning and historical email patterns to make better decisions about which emails are legitimate and which are not.
Your network contains an Active Directory domain.
You deploy a Microsoft Entra tenant.
Another administrator configures the domain to synchronize to the Microsoft Entra tenant You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to the Microsoft Entra tenant. All the other user accounts synchronized successfully.
You review Microsoft Entra Connect Health and discover that all the user account synchronizations completed successfully.
You need to ensure that the 10 user accounts are synchronized to the Microsoft Entra tenant.
Solution: From Microsoft Entra Connect you modify the Microsoft Entra credentials.
Does this meet the goal?
Correct Answer: A Vote an answer
You have a Microsoft 365 subscription that uses Microsoft 365 Multi-Geo. The subscription contains two Microsoft SharePoint Online sites named Site1 and Site2 that are stored in different Multi-Geo regions.
You plan to configure a Microsoft 365 Backup policy.
You need to add Site1 and Site2 to the policy and configure the longest retention period available.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
To add the sites
Upload a list of the sites in a CSV file
Set the retention period to
1 year
The correct method for adding the sites is Upload a list of the sites in a CSV file. The key exam detail is Microsoft 365 Multi-Geo. Microsoft states that Microsoft 365 Backup supports backup of sites and user accounts from both central and satellite Multi-Geo locations, but for Multi-Geo policy creation, sites or user accounts from all geos must be added by using the CSV file upload method. Microsoft also states that adding sites through the site picker, search, or filter rules does not currently support Multi-Geo, and the UI supports only sites in the tenant's central location.
The longest retention period is 1 year. Microsoft's Microsoft 365 Backup feature summary lists the retention period for OneDrive, SharePoint, and Exchange Online as 1 year. Since this question concerns SharePoint Online sites, the applicable maximum retention period is one year, not five or ten years.
Therefore, select Upload a list of the sites in a CSV file and 1 year.
From the Microsoft 365 compliance center, you configure a data loss prevention (DLP) policy for a Microsoft SharePoint Online site named Site1. Site1 contains the roles shown in the following table.

Prvi creates the files shown in the exhibit. (Click the Exhibit tab.)

Which files can User1 and User2 open? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:

Reference:
https://sharepointmaven.com/4-security-roles-of-a-sharepoint-site/
https://gcc.microsoftcrmportals.com/blogs/office365-news/190220SPIcons/
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You have a Microsoft Office 365 retention label named Retention1 that is published to Exchange email.
You have a Microsoft Exchange Online retention policy that is applied to all mailboxes. The retention policy contains a retention tag named Retention2.
Which users can assign Retention1 and Retention2 to their emails? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-exchange?view=o365-worldwide
You have a Microsoft 365 subscription.
You create a retention label named Retention1 as shown in the following exhibit.

You apply Retention! to all the Microsoft OneDrive content.
On January 1, 2020, a user stores a file named File1 in OneDrive.
On January 10, 2020, the user modifies File1.
On February 1, 2020, the user deletes File1.
When will File1 be removed permanently and unrecoverable from OneDrive?
Correct Answer: B Vote an answer
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure a Multifactor authentication registration policy that has the following settings:
* Assignments:
* Include: Group1
* Exclude: Group2
* Controls: Requite Microsoft Entra ID multifactor authentication registration
* Policy enforcement: Enabled
You create a conditional access policy that has the following settings:
* Name: Policy1
* Assignments:
* Include: Group1
* Exclude; Group1
* Grant: Require multifactor authentication
* Enable policy. On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each coned selection is one point.
Correct Answer:

Explanation:
User1 will be required to register for MFA on the next sign-in: Yes
User1 is a member of Group1, which is included in the MFA registration policy. Since User1 is not excluded, they will be required to register for MFA on the next sign-in.
User2 will be required to register for MFA on the next sign-in: No
User2 is a member of both Group1 and Group2. Since Group2 is excluded from the MFA registration policy, User2 will not be required to register for MFA.
User3 will be required to register for MFA on the next sign-in: No
User3 is a member of Group2, which is excluded from the MFA registration policy. Therefore, User3 will not be required to register for MFA.
You need to protect the U.S. PII data to meet the technical requirements.
What should you create?
Correct Answer: B Vote an answer
You have a Microsoft 365 E5 subscription that uses Microsoft Intune and contains the devices shown in the following table.

You need to onboard Device1 and Device2 to Microsoft Defender for Endpoint.
What should you use to onboard each device? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:

Explanation:
You have a Microsoft 365 subscription.
You create a Microsoft Defender Threat Intelligence (Defender Tl) project named Project!
You need to add artifacts to Project 1
Which type of artifact can you add to Project1?
Correct Answer: D Vote an answer
Your network contains an Active Directory domain named adatum.com that is synced to Microsoft Entra ID.
The domain contains 100 user accounts.
The city attribute for all the users is set to the city where the user resides.
You need to modify the value of the city attribute to the three-letter airport code of each city.
What should you do?
Correct Answer: C Vote an answer
Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).
You have a Microsoft 365 ES subscription.
From the Microsoft Defender XDR portal, you review your company ' s Microsoft Secure Score.
You discover a large number of recommended actions.
You need to ensure that the actions can be filtered based on specific department names.
What should you create first?
Correct Answer: B Vote an answer