MS-102 Free Practice Test

- (Topic 6)
You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint.
All the devices in your organization are onboarded to Microsoft Defender for Endpoint.
You need to ensure that an alert is generated if malicious activity was detected on a device during the last 24 hours.
What should you do?

1. A. From the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.
2. B. From Alerts queue, create a suppression rule and assign an alert.
3. C. From Advanced hunting, create a query and a detection rule.
4. D. From the Microsoft Purview compliance portal, create an audit log search.

Correct Answer: C

- (Topic 6)
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365 and contains a mailbox named Mailbox1.
You plan to use Mailbox1 to collect and analyze unfiltered email messages.
You need to ensure that Defender for Office 365 takes no action on any inbound emails delivered to Mailbox1.
What should you do?

1. A. Configure a retention policy for Mailbox1.
2. B. Create a mail flow rule.
3. C. Configure Mailbox! as a SecOps mailbox.
4. D. Place a litigation hold on Mailbox1.

Correct Answer: D

- (Topic 3)
You create the planned DLP policies.
You need to configure notifications to meet the technical requirements. What should you do?

1. A. From the Microsoft 365 security center, configure an alert policy.
2. B. From the Microsoft Endpoint Manager admin center, configure a custom notification.
3. C. From the Microsoft 365 admin center, configure a Briefing email.
4. D. From the Microsoft 365 compliance center, configure the Endpoint DLP settings.

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alerts-policies?view=o365-worldwide

DRAG DROP - (Topic 6)
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.
You need to automatically label the documents on Site1 that contain credit card numbers. Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Topic 6)
You have a Microsoft 365 subscription.
You need to identify which administrative users performed eDiscovery searches during the past week.
What should you do from the Security & Compliance admin center?

1. A. Perform a content search
2. B. Create a supervision policy
3. C. Create an eDiscovery case
4. D. Perform an audit log search

Correct Answer: D