Associate-level certification covering deployment and management of a Microsoft 365 tenant, identity and access, threat protection with Defender XDR, and compliance with Microsoft Purview.
Free sample questions
No account needed. Every question has a worked explanation, just like the full bank.
lock_openFree sampleImplement and Manage Identity and Accessmedium
You need to turn on self-service password reset for a pilot group in the Microsoft Entra admin center. Which role grants the least privilege required to complete the configuration on the Password reset blade?
- AAssign the Authentication Policy Administrator role to the operator.check_circle Correct
- BAssign the Authentication Administrator role to the SSPR operator.
- CAssign the User Administrator role to the SSPR pilot operator.
- DAssign the Global Administrator role to the SSPR pilot operator.
Authentication Policy Administrator is the minimum role to enable SSPR via the Microsoft Entra admin center. The enable-SSPR tutorial states the configuring account needs at least the Authentication Policy Administrator role. That role can open Entra ID > Password reset and change Properties, Authentication methods, Registration, Notifications, and Customization without granting broader directory or user-management rights.
Why A is correct: Correct. The enable-SSPR tutorial states the configuring account needs at least the Authentication Policy Administrator role.
Why B is wrong: This role manages user authentication methods and credentials but does not own the tenant SSPR configuration on the Password reset blade.
Why C is wrong: User Administrator can manage users and reset passwords, but the SSPR enablement steps call out Authentication Policy Administrator as the minimum role.
Why D is wrong: Global Administrator works, but it is not the least-privileged role; the tutorial explicitly names Authentication Policy Administrator as the minimum.
lock_openFree sampleManage Compliance by Using Microsoft Purviewmedium
Which forms can the Primary element of a custom sensitive information type pattern take? (Select 3 answers)
- ARegular expressioncheck_circle Correct
- BKeyword listcheck_circle Correct
- CKeyword dictionarycheck_circle Correct
- DTrainable classifier
- ESensitivity label
Apply the documented Microsoft 365 / Microsoft Entra ID behaviour to the scenario. Primary element options for a custom SIT pattern are: Regular expression, Keyword list, Keyword dictionary, or one of the preconfigured Functions. Trainable classifiers and sensitivity labels are separate Purview features.
Why A is correct: Correct. Regular expression is one of the keyed answers. Primary element options for a custom SIT pattern are: Regular expression, Keyword list, Keyword dictionary, or one of the preconfigured Functions.
Why B is correct: Correct. Keyword list is one of the keyed answers. Primary element options for a custom SIT pattern are: Regular expression, Keyword list, Keyword dictionary, or one of the preconfigured Functions.
Why C is correct: Correct. Keyword dictionary is one of the keyed answers. Primary element options for a custom SIT pattern are: Regular expression, Keyword list, Keyword dictionary, or one of the preconfigured Functions.
Why D is wrong: Trainable classifiers are a separate classification mechanism and cannot be the Primary element of a SIT pattern.
Why E is wrong: Sensitivity labels are applied as a result of classification; they do not define a SIT primary element.
lock_openFree sampleManage Security and Threats by Using Microsoft Defender XDRmedium
You sign in to the Microsoft Defender portal as a Defender for Office 365-only customer. Why do you not see device protection features or the Defender for Endpoint device inventory in the portal?
- AThe portal hides features for products you have not licensed and provisioned.check_circle Correct
- BDevice protection requires a separate browser session at the Endpoint portal.
- CDefender XDR has not been turned on for the tenant from the Settings page.
- DThe Microsoft Entra ID role assigned is missing the Endpoint operator scope.
Apply the documented Microsoft 365 / Microsoft Entra ID behaviour to the scenario. In the Microsoft Defender portal customers see only the security features their subscription includes. With Defender for Office 365 but no Defender for Endpoint license, device protection features are not surfaced.
Why A is correct: Correct. In the Microsoft Defender portal customers see only the security features their subscription includes.
Why B is wrong: There is no separate Endpoint portal; the Defender portal at security.microsoft.com is the unified surface.
Why C is wrong: Turning on Defender XDR does not provision Defender for Endpoint; licensing is the gating factor.
Why D is wrong: Roles control access to surfaced features, not whether unlicensed product features appear at all.
More free MS-102 practice questions with worked answersFrequently asked questions
- How many questions are on the MS-102 exam?
- The Microsoft 365 Administrator (MS-102) exam has Typically 40 to 60 questions questions and runs for 120 minutes. The format is multiple choice, multiple response, and case studies, at a pearson vue testing center or online proctored.
- What score do I need to pass MS-102?
- The pass mark is 700 / 1000. Examworthy gives you a per-domain readiness score so you can see which domains are holding you back before you book.
- How much does the MS-102 exam cost?
- The exam costs 165 USD to sit. Practising on Examworthy is free to start, with a worked explanation on every question.
- Is there a MS-102 practice exam?
- Yes. Examworthy's exam mode runs a timed MS-102 practice exam (mock) paced to match the real exam, scored per domain so you can see exactly where you stand against the blueprint. Timed mocks are free with an account.
- How does Examworthy help me prepare for MS-102?
- Every practice question carries a worked explanation and a per-distractor rationale, mapped to the official blueprint domains. You learn why each answer is right or wrong, not just the letter.
- Is Examworthy affiliated with Microsoft?
- No. Examworthy is not affiliated with or endorsed by Microsoft. Our questions are original, blueprint-aligned practice material; we never reproduce live exam items.
Examworthy is not affiliated with or endorsed by Microsoft. All questions are original, blueprint-aligned practice material. We never reproduce live exam items. MS-102 and related marks belong to their respective owners.
