Courseiva

MS-102 · topic practice

Implement and manage Microsoft Entra identity and access practice questions

Practise Microsoft 365 Administrator MS-102 Implement and manage Microsoft Entra identity and access practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Implement and manage Microsoft Entra identity and access
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Implement and manage Microsoft Entra identity and access

Implement and manage Microsoft Entra identity and access questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Implement and manage Microsoft Entra identity and access exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Practice set

Implement and manage Microsoft Entra identity and access questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

A company uses Microsoft Entra ID for identity management. The security team wants to ensure that users cannot register applications in the tenant to prevent potential data leakage. Which setting should be configured?

Question 2mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your organization is migrating from on-premises Active Directory to Microsoft Entra ID. You need to ensure that users can use their existing on-premises passwords to log in to cloud services, while maintaining password policy enforcement on-premises. Which feature should you implement?

Question 3hardmultiple choice
Read the full NAT/PAT explanation →

A multinational company uses Microsoft Entra ID with Conditional Access policies. They have a policy that requires multi-factor authentication (MFA) for all users when accessing the company's custom SaaS application. However, users from the European branch are reporting that they are prompted for MFA every time, even though they have already authenticated via a compliant device. What is the most likely cause?

Question 4easymultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

You are configuring Microsoft Entra ID Protection. You want to automatically respond to a specific risk level by requiring the user to change their password. Which risk policy should you configure?

Question 5mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

An organization is implementing Microsoft Entra Verified ID for verifiable credentials. They want to issue credentials to employees that can be used to prove employment status to third parties. Which component must be created first?

Question 6hardmultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your company uses Microsoft Entra ID and has a hybrid identity with PHS. You need to ensure that when an on-premises user account is disabled, the corresponding cloud user is also blocked from signing in within 5 minutes. What should you configure?

Question 7mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

A company uses Microsoft Entra ID and has enabled self-service password reset (SSPR). Users are required to register for SSPR. Management wants to ensure that users from the HR department, who handle sensitive data, must use two methods for authentication during SSPR, while other users can use one method. What is the best way to achieve this?

Question 8hardmultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your organization uses Microsoft Defender for Cloud Apps. You want to set up a policy that automatically suspends a user if they download more than 100 files from SharePoint Online within 10 minutes. Which type of policy should you create?

Question 9easymultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

You are configuring Microsoft Entra ID for a new organization. The CIO wants to ensure that all external users who are invited to collaborate via Microsoft Entra B2B must go through an approval process before gaining access. Which setting should you configure?

Question 10mediummulti select
Read the full Implement and manage Microsoft Entra identity and access explanation →

Which TWO of the following are valid authentication methods in Microsoft Entra ID that can be used as part of a Conditional Access policy? (Select two.)

Question 11hardmulti select
Read the full Implement and manage Microsoft Entra identity and access explanation →

Which THREE of the following are required to configure Microsoft Entra ID Governance for automated user provisioning to a third-party SaaS application? (Select three.)

Question 12hardmulti select
Read the full Implement and manage Microsoft Entra identity and access explanation →

Which TWO of the following are valid methods to enforce device compliance in a Conditional Access policy? (Select two.)

Question 13mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

You are reviewing a Conditional Access policy in JSON format. The policy is applied to all users accessing Office 365 from trusted locations. What is the intended behavior of this policy?

Exhibit

Refer to the exhibit.

{
  "conditions": {
    "applications": {
      "includeApplications": ["Office365"]
    },
    "users": {
      "includeUsers": ["All"]
    },
    "clientAppTypes": ["browser", "mobileAppsAndDesktopClients"],
    "locations": {
      "includeLocations": ["AllTrusted"]
    }
  },
  "grantControls": {
    "operator": "OR",
    "builtInControls": ["mfa", "compliantDevice"]
  }
}
Question 14hardmultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

You are reviewing directory settings for Microsoft 365 Groups. Based on the exhibit, which statement is true?

Exhibit

Refer to the exhibit.

PowerShell output:

Get-AzureADDirectorySetting | Select-Object *

Id                                   : 1234-...
DisplayName                          : Group.Unified
TemplateId                           : 62375ab9-...
Values                               : {[EnableGroupCreation, true], [GroupCreationAllowedGroupId, ], [UsageGuidelinesUrl, ], [ClassificationDescriptions, ], [DefaultClassification, ], [PrefixSuffixNamingRequirement, ], [CustomBlockedWordsList, ], [EnableMSStandardBlockedWords, false]}
Question 15mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

An administrator runs the Azure CLI command shown in the exhibit. What is the result of this command?

Network Topology
az ad app createdisplay-name "MyApp"sign-in-audience AzureADMultipleOrgskey-type Passwordpassword "P@ssw0rd"required-resource-accesses "[{\"resourceAppId\":\"00000003-0000-0000-c000-000000000000\"Refer to the exhibit.Azure CLI command:
Question 16easymultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your organization uses Microsoft Entra ID to manage user identities. You need to ensure that users can sign in using their existing social media accounts, such as Google or Facebook. Which identity solution should you configure?

Question 17mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your company has a Microsoft 365 E5 subscription and uses Microsoft Entra ID. Users report that they are frequently prompted for multi-factor authentication (MFA) even after signing in successfully. You want to minimize these prompts while maintaining security. What should you configure?

Question 18hardmultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

You are a Microsoft 365 administrator. Your organization uses Microsoft Entra ID and Microsoft Intune for device management. You need to ensure that only compliant devices can access corporate email via Microsoft Outlook on mobile devices. What should you configure?

Question 19easymultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your organization is implementing a hybrid identity solution. You want to synchronize on-premises Active Directory users to Microsoft Entra ID. Which tool should you use?

Question 20mediummultiple choice
Read the full Implement and manage Microsoft Entra identity and access explanation →

Your company has a Microsoft Entra tenant with 5,000 users. You need to delegate the ability to reset user passwords to the helpdesk team, but only for users in the Sales department. What is the most efficient way to achieve this?

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Implement and manage Microsoft Entra identity and access sessions

Start a Implement and manage Microsoft Entra identity and access only practice session

Every question in these sessions is drawn from the Implement and manage Microsoft Entra identity and access domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Implement and manage Microsoft Entra identity and access questions →Mixed MS-102 session

Related practice questions

Related MS-102 topic practice pages

Move into related areas when this topic feels solid.

Deploy and manage a Microsoft 365 tenant practice questions

Practise MS-102 questions linked to Deploy and manage a Microsoft 365 tenant.

Implement and manage Microsoft Entra identity and access practice questions

Practise MS-102 questions linked to Implement and manage Microsoft Entra identity and access.

Manage security and threats by using Microsoft Defender XDR practice questions

Practise MS-102 questions linked to Manage security and threats by using Microsoft Defender XDR.

Manage compliance by using Microsoft Purview practice questions

Practise MS-102 questions linked to Manage compliance by using Microsoft Purview.

Manage users, groups, licensing, and support practice questions

Practise MS-102 questions linked to Manage users, groups, licensing, and support.

Implement and manage identity and access in Microsoft Entra ID practice questions

Practise MS-102 questions linked to Implement and manage identity and access in Microsoft Entra ID.

MS-102 fundamentals practice questions

Practise MS-102 questions linked to MS-102 fundamentals.

MS-102 scenario practice questions

Practise MS-102 questions linked to MS-102 scenario.

MS-102 troubleshooting practice questions

Practise MS-102 questions linked to MS-102 troubleshooting.

Frequently asked questions

What does the MS-102 exam test about Implement and manage Microsoft Entra identity and access?
Implement and manage Microsoft Entra identity and access questions test whether you can apply the concept in context, not just recognise a definition.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Implement and manage Microsoft Entra identity and access questions in a focused session?
Yes — the session launcher on this page draws every question from the Implement and manage Microsoft Entra identity and access domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other MS-102 topics?
Use the topic links above to move to related areas, or go back to the MS-102 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the MS-102 exam covers. They are not copied from any real exam or dump site.