MS-102 Which Command Should the Administrator Use Practice Questions

Common Traps on Which Command Should the Administrator Use Practice Questions

·Separate verification commands from configuration commands.
·Read whether the question asks to identify, verify, fix, permit or deny.
·Small command keywords often change the correct answer.

Sample Questions

A company has 500 users across Sales, Marketing, and IT departments. User objects are synced from on-premises Active Directory to Microsoft Entra ID using Azure AD Connect. Each department requires different Microsoft 365 license plans (e.g., Sales needs E3, Marketing needs Business Premium, IT needs E5). The administrator wants to automatically assign the appropriate license based on the department attribute without manual intervention. Which approach should the administrator use?

Explanation: Group-based licensing with dynamic groups allows automatic assignment of licenses based on user attributes like department. You create dynamic groups with membership rules (e.g., user.department -eq "Sales") and assign the appropriate license plan to each group. Licenses will be automatically assigned to new users and removed when the attribute changes.

A company has purchased 1000 Microsoft 365 E5 licenses and wants to automatically assign licenses to users based on their department attribute, which is synchronized from on-premises Active Directory. The department attribute is stored in Azure AD. Which automated method should the administrator use to achieve this?

Explanation: Group-based licensing with Azure AD dynamic groups allows automatic assignment of licenses based on user attributes like department. The administrator can create a dynamic group that includes users with a specific department value, then assign the license to that group. PowerShell scripts or manual assignment are not fully automated or scalable for this purpose.

A company has just purchased Microsoft 365 Business Standard and added the custom domain 'fabrikam.com' to the tenant. They want to verify domain ownership. Which DNS record type must they add to their DNS provider?

Explanation: To verify ownership of a custom domain in Microsoft 365, you need to add a TXT record provided by the Microsoft 365 admin center to your DNS hosting provider. This TXT record contains a unique verification string.

A company (Contoso) frequently collaborates with a partner company (Fabrikam) via B2B collaboration. Contoso wants to require Fabrikam's guest users to perform MFA using Contoso's MFA policies, ignoring any MFA claims from the Fabrikam home tenant. However, Fabrikam's users already have MFA enabled in their home tenant. What should Contoso configure in their cross-tenant access settings?

Explanation: In Microsoft Entra cross-tenant access settings, you can configure which claims (MFA, device compliance, etc.) you trust from external tenants. By default, B2B collaboration trusts MFA claims from the home tenant. To require the resource tenant's MFA, you must disable trust for MFA from the external tenant. Then, if Conditional Access policy requires MFA, the guest user will be prompted for MFA by Contoso.

A company uses Azure AD Identity Protection. The security administrator wants to block user sign-ins when the sign-in risk level is detected as 'High' for a custom SaaS application. Which Conditional Access policy configuration should the administrator use?

Explanation: Conditional Access policies can use 'Sign-in risk' as a condition. By setting the sign-in risk level to 'High' and the access control to 'Block access', the policy will block sign-ins matching that risk. Grant controls like 'Require MFA' would be used for lower risk levels but not block. Session controls are for controlling sessions after access. The policy must be scoped to the specific cloud app. Therefore, the correct approach is a Conditional Access policy that blocks access when sign-in risk is high.

+10 more scenario questions available

Practice all Which Command Should the Administrator Use Practice Questions

Frequently asked questions

How do "Which Command Should the Administrator Use Practice Questions" appear on the real MS-102?

Practise command-choice questions where the task is to identify the correct verification, configuration or troubleshooting command. These appear throughout the MS-102 and require you to apply your knowledge, not just recall facts.

How many scenario questions are on the MS-102 exam?

Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the MS-102. Practicing each scenario type ensures you're ready for any format.

Are these MS-102 scenario practice questions free?

Yes — all scenario practice on Courseiva is completely free. Sign up for a free account to track your progress and see which scenario types you've mastered.

Ready to practice this scenario type?

Launch a full Which Command Should the Administrator Use Practice Questions session with instant scoring and detailed explanations.

Start Scenario Practice →