【26年】MS-102 微软MS 102题库_在线真题试卷与模拟练习_【26年】MS-102 微软MS 102题库

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365. You need to implement a threat policy that will apply a balanced baseline protection profile to protect against spam, phishing, and malware. Solution: You create a Strict preset security policy. Does this meet the goal? 注意：本节包含一个或多个具有相同场景和问题的题目集。每个题目都提供了一个解决问题的独特方案。您需要判断该方案是否符合所述目标。题目集中可能有多个方案可以解决问题，也可能没有任何方案可以解决问题。在您回答本节中的题目后，您将无法返回。因此，这些题目不会出现在审查屏幕上。您拥有一个 Microsoft 365 E5 订阅，并使用 Microsoft Defender for Office 365。您需要实施一个威胁策略，该策略将应用一个平衡的基线保护配置文件，以防止垃圾邮件、网络钓鱼和恶意软件。方案：您创建一个 Strict preset security policy。此方案是否符合目标？

Your network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers. Your company purchases Microsoft 365 and creates an Azure AD tenant named contoso.onmicrosoft.com. You plan to install Azure AD Connect on a member server and implement pass-through authentication. You need to prepare the environment for the planned implementation of pass-through authentication. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 您的网络包含一个名为 contoso.local 的本地 Active Directory 域。该域包含五个域控制器。您的公司购买了 Microsoft 365 并创建了一个名为 contoso.onmicrosoft.com 的 Azure AD 租户。您计划在一台成员服务器上安装 Azure AD Connect 并实施直通身份验证。您需要为计划实施的直通身份验证准备环境。以下哪三项操作应执行？每个正确答案均为解决方案的一部分。注意：每个正确选择都值一分。

You have a Microsoft 365 subscription that contains an Azure AD tenant named contoso.com. The tenant contains the users shown in the following table.

（含图）

You create and assign a data loss prevention (DLP) policy named Policy1. Policy1 is configured to prevent documents that contain Personally Identifiable Information (PII) from being emailed to users outside your organization.

To which users can User1 send documents that contain PII?

您拥有一个 Microsoft 365 订阅，其中包含一个名为 contoso.com 的 Azure AD 租户。该租户包含以下表中显示的用户。

您创建并分配了一个名为 Policy1 的数据丢失防护 (DLP) 策略。Policy1 被配置为防止包含个人身份信息 (PII) 的文档被发送到组织外部的用户。

User1 可以将包含 PII 的文档发送给哪些用户？

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10. You purchase a Microsoft 365 subscription. You implement password hash synchronization and Azure AD Seamless Single Sign-On (Seamless SSO). You need to ensure that users can use Seamless SSO from the Windows 10 computers. What should you do? 您的网络包含一个本地 Active Directory 域。该域包含 2，000 台运行 Windows 10 的计算机。您购买了一个 Microsoft 365 订阅。您实施了密码哈希同步和 Azure AD Seamless Single Sign-On (Seamless SSO)。您需要确保用户可以从 Windows 10 计算机使用 Seamless SSO。您应该怎么做？

You have a Microsoft 365 E5 subscription that contains a user named User1. You create a retention label named Retention1 that is published to all locations. You need to ensure that User1 can label email messages by using Retention1 as soon as possible. Which cmdlet should you run in Microsoft Exchange Online PowerShell? 您拥有一个 Microsoft 365 E5 订阅，其中包含一个名为 User1 的用户。您创建了一个名为 Retention1 的保留标签，并将其发布到所有位置。您需要确保 User1 能尽快使用 Retention1 对电子邮件消息进行标记。您应该在 Microsoft Exchange Online PowerShell 中运行哪个 cmdlet？

You have a Microsoft 365 subscription. You add a domain named contoso.com. When you attempt to verify the domain, you are prompted to send a verification email to [email protected] . You need to change the email address used to verify the domain. What should you do? 你拥有一个 Microsoft 365 订阅。你添加了一个名为 contoso.com 的域。当你尝试验证该域时，系统提示你发送验证邮件到。你需要更改用于验证域的电子邮件地址。你应该怎么做？

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an Active Directory forest. You deploy Microsoft 365. You plan to implement directory synchronization. You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements: • Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable. • User passwords must be 10 characters or more. Solution: Implement password hash synchronization and configure password protection in the Azure AD tenant. Does this meet the goal? 注意：此问题是一个系列问题的一部分，呈现相同的场景。系列中的每个问题都包含一个可能满足既定目标的独特解决方案。某些问题集可能有多个正确解决方案，而其他问题集可能没有正确解决方案。在您回答本部分中的问题后，您将无法返回该问题。因此，这些问题将不会出现在审查屏幕中。您的网络包含一个 Active Directory 森林。您部署了 Microsoft 365。您计划实施目录同步。您需要为同步的身份推荐一个安全解决方案。该解决方案必须满足以下要求： • 如果 Active Directory 不可用，用户必须能够成功认证到 Microsoft 365 服务。 • 用户密码必须为 10 个字符或以上。解决方案：实施 password hash synchronization 并在 Azure AD 租户中配置 password protection。是否满足目标？

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender for Endpoint. You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint. What should you create first? 您拥有一个 Microsoft 365 E5 订阅，其中 Microsoft Defender for Endpoint 已与 Microsoft Intune 集成。设备已注册到 Microsoft Intune，并通过使用 Microsoft Defender for Endpoint 进行接入。您计划根据 Microsoft Defender for Endpoint 计算的设备风险评分结果来阻止设备。您首先应该创建什么？

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You create an account for a new security administrator named SecAdmin1. You need to ensure that SecAdmin1 can manage Microsoft Defender for Office 365 settings and policies for Microsoft Teams, SharePoint, and OneDrive. Solution: From the Microsoft 365 admin center, you assign SecAdmin1 the Teams Administrator role. Does this meet the goal? 注意：此问题是一个系列问题的一部分，呈现相同的场景。系列中的每个问题都包含一个可能满足既定目标的独特解决方案。某些问题集可能有多个正确解决方案，而其他问题集可能没有正确解决方案。在您回答本节中的问题后，您将无法返回该问题。因此，这些问题不会出现在审查屏幕中。您拥有一个 Microsoft 365 E5 订阅。您为一位新的安全管理员 SecAdmin1 创建了一个账户。您需要确保 SecAdmin1 可以管理 Microsoft Defender for Office 365 的设置和策略，包括 Microsoft Teams、SharePoint 和 OneDrive。解决方案：在 Microsoft 365 admin center 中，您为 SecAdmin1 分配了 Teams Administrator 角色。这是否满足目标？

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

（含图）

The domain syncs to an Azure AD tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)

（含图）

User2 fails to authenticate to Azure AD when signing in as

[email protected]

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as

[email protected]

Does this meet the goal?

注意：此问题是一个系列问题的一部分，这些问题呈现相同的场景。系列中的每个问题都包含一个可能满足既定目标的独特解决方案。一些问题集可能有多个正确解决方案，而其他问题集可能没有正确解决方案。

在您回答本节中的问题后，您将无法返回该问题。因此，这些问题不会出现在审查屏幕中。

您的网络包含一个名为 contoso.com 的本地 Active Directory 域。该域包含以下表中列出的用户。

该域与一个名为 contoso.com 的 Azure AD 租户同步，如展示所示。（单击“展示”选项卡。）

User2 在以

身份登录时无法通过 Azure AD 进行身份验证。

您需要确保 User2 可以访问 Azure AD 中的资源。

解决方案：从本地 Active Directory 域中，您为 User2 分配 Allow logon locally 用户权限。您指示 User2 以

身份登录。

此解决方案是否满足目标？

You have a Microsoft 365 E5 tenant.

The Microsoft Secure Score for the tenant is shown in the following exhibit.

（含图）

You plan to enable Security defaults for Azure AD.

Which three improvement actions will this affect?

NOTE: Each correct selection is worth one point.

您拥有一个 Microsoft 365 E5 租户。

租户的 Microsoft Secure Score 如下图所示。

您计划为 Azure AD 启用 Security defaults。

这将影响哪些三个改进操作？

注意：每个正确选择值一分。

You have a Microsoft 365 E5 tenant.

You create a retention label named Retention1 as shown in the following exhibit.

（含图）

When users attempt to apply Retention1, the label is unavailable.

You need to ensure that Retention1 is available to all the users.

What should you do?

你有一个 Microsoft 365 E5 租户。

你创建了一个名为 Retention1 的保留标签，如下图所示。

当用户尝试应用 Retention1 时，该标签不可用。

你需要确保 Retention1 对所有用户可用。

你应该怎么做？

You have a Microsoft 365 subscription that contains more than 2,000 guest users. You need to ensure that when guest users are added to Microsoft 365 groups in the subscription, their membership is validated by the group owner every 30 days. What should you configure? 您拥有一个包含超过 2，000 位来宾用户的 Microsoft 365 订阅。您需要确保当来宾用户被添加到订阅中的 Microsoft 365 组时，组所有者每 30 天验证一次他们的成员资格。您应该配置什么？

You have a Microsoft 365 E5 subscription that contains a group named Group1. The subscription uses Microsoft Defender for Cloud Apps. You configure cloud discovery. You need to ensure that you can create a custom report that details shadow IT usage by the members of Group1. What should you do first? 您拥有一个 Microsoft 365 E5 订阅，其中包含一个名为 Group1 的组。该订阅使用 Microsoft Defender for Cloud Apps。您配置了云发现。您需要确保可以创建一个自定义报告，详细说明 Group1 成员的影子 IT 使用情况。您应该首先做什么？

You have a Microsoft 365 E5 subscription. The subscription contains users that have Windows 11 devices. You plan to onboard the devices to Microsoft Defender for Endpoint. The devices will connect to Defender for Endpoint through a proxy service. You need to ensure that the devices use consolidated URLs and static IP ranges when connecting to Defender for Endpoint. What should you do? 你拥有一个 Microsoft 365 E5 订阅。该订阅包含使用 Windows 11 设备的用户。你计划将设备加入 Microsoft Defender for Endpoint。设备将通过代理服务连接到 Defender for Endpoint。你需要确保设备在连接到 Defender for Endpoint 时使用统一的 URL 和静态 IP 范围。你应该怎么做？

You have a Microsoft 365 E5 tenant. You create an auto-labeling policy to encrypt emails that contain a sensitive info type. You specify the locations where the policy will be applied. You need to deploy the policy. What should you do first? 你有一个 Microsoft 365 E5 租户。你创建了一个自动标签策略，用于加密包含敏感信息类型的电子邮件。你指定了策略将应用的位置。你需要部署该策略。你应该首先做什么？

You have a Microsoft 365 E5 subscription.

You create the users shown in the following table.

（含图）

You plan to use Microsoft Entra ID Protection.

Which users will be added automatically to the Users at risk detected alerts list?

您拥有 Microsoft 365 E5 订阅。

您创建了以下表格中显示的用户。

您计划使用 Microsoft Entra ID Protection。

哪些用户会自动添加到“检测到风险的用户警报列表”中？

You have a Microsoft 365 E5 subscription that contains the labels shown in the following table.

（含图）

You have the items shown in the following table.

（含图）

Which items can you view in Content explorer?

您拥有一个 Microsoft 365 E5 订阅，其中包含以下表格中显示的标签。

您拥有以下表格中显示的项目。

您可以在 Content explorer 中查看哪些项目？

Your network contains an Active Directory forest named contoso.local. You purchase a Microsoft 365 subscription. You plan to move to Microsoft 365 and to implement a hybrid deployment solution for the next 12 months. You need to prepare for the planned move to Microsoft 365. What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer. 您的网络包含一个名为 contoso.local 的 Active Directory 林。您购买了一个 Microsoft 365 订阅。您计划迁移到 Microsoft 365，并在接下来的 12 个月内实施混合部署解决方案。您需要为计划迁移到 Microsoft 365 做好准备。在实施目录同步之前，执行什么操作是最佳选择？可能有多个答案可以实现目标。请选择最佳答案。

You have a Microsoft 365 subscription. You need to configure a compliance solution that meets the following requirements: Defines sensitive data based on existing data samples Automatically prevents data that matches the samples from being shared externally in Microsoft SharePoint or email messages Which two components should you configure? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 你有一个 Microsoft 365 订阅。你需要配置一个合规解决方案，以满足以下要求：基于现有数据样本定义敏感数据自动防止与样本匹配的数据在 Microsoft SharePoint 或电子邮件中被外部共享您应该配置哪两个组件？每个正确答案都是解决方案的一部分。注意：每个正确选择都值一分。