The answer is that you must enable Microsoft Graph connectivity for the tenant and assign qualifying licenses, such as Microsoft 365 E3 or E5, along with the Copilot add-on license. Enabling Graph connectivity is required because Microsoft 365 Copilot relies on the Microsoft Graph to access and reason over your organizational data—without this connectivity, the AI cannot index emails, files, or calendar events to generate contextual responses. On the MS-102 exam, this question tests your understanding of the prerequisite licensing and infrastructure setup, often appearing as a multi-select item where one distractor suggests enabling Azure AD Connect or configuring Conditional Access. A common trap is assuming any Microsoft 365 license works, but only E3, E5, or specific Business Premium plans qualify for the Copilot add-on. Remember the memory tip: “Graph first, license last”—you must turn on Graph connectivity before users can activate their Copilot seats.
MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
This MS-102 practice question tests your understanding of deploy and manage a microsoft 365 tenant. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which TWO actions are required to enable Microsoft 365 Copilot for your organization?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ensure users have a Microsoft 365 E3 or E5 license with the Copilot add-on.
Microsoft 365 Copilot requires users to have a qualifying license such as Microsoft 365 E3 or E5, plus the Copilot add-on license. Without this specific licensing, the Copilot features cannot be activated or used within the tenant.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
Assign the Global Administrator role to all users.
Why it's wrong here
Global Administrator role is not required.
✗
Disable legacy authentication protocols.
Why it's wrong here
Legacy authentication is not directly related to Copilot.
✓
Ensure users have a Microsoft 365 E3 or E5 license with the Copilot add-on.
Why this is correct
Copilot requires the appropriate license.
Related concept
Read the scenario before looking for a memorised answer.
✓
Enable Microsoft Graph connectivity for the tenant.
Why this is correct
Copilot uses Microsoft Graph to access data.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates may confuse general security hardening (like disabling legacy auth) with a specific prerequisite for Copilot, or assume that any Microsoft 365 license is sufficient without the dedicated Copilot add-on.
Detailed technical explanation
How to think about this question
Microsoft 365 Copilot relies on Microsoft Graph to access user data and context, which is why enabling Graph connectivity (Option E) is required. The Copilot add-on license is a per-user subscription that must be assigned in addition to the base E3/E5 license; without it, the Copilot service will not be provisioned for the user. Under the hood, Copilot uses the Microsoft 365 substrate and the Semantic Index to process queries, which requires both the correct licensing and Graph API access.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this MS-102 question in full detail.
Deploy and manage a Microsoft 365 tenant — This question tests Deploy and manage a Microsoft 365 tenant — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Ensure users have a Microsoft 365 E3 or E5 license with the Copilot add-on. — Microsoft 365 Copilot requires users to have a qualifying license such as Microsoft 365 E3 or E5, plus the Copilot add-on license. Without this specific licensing, the Copilot features cannot be activated or used within the tenant.
What should I do if I get this MS-102 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO actions are required to enable Microsoft 365 Copilot for all users in your tenant?
medium
A.Run a PowerShell script to enable Copilot in the tenant.
B.Ensure the tenant is on a Microsoft 365 E5 plan.
✓ C.Ensure users have a qualifying Microsoft 365 license (e.g., E3, E5, Business Standard).
✓ D.Assign a Microsoft 365 Copilot license to each user.
E.Provision an Azure subscription for Copilot services.
Why C: Option C is correct because Microsoft 365 Copilot requires users to have a qualifying base license such as Microsoft 365 E3, E5, or Business Standard. Without one of these base licenses, the Copilot add-on license cannot be assigned or function properly, as Copilot relies on the underlying Microsoft 365 services (e.g., Exchange Online, SharePoint, Teams) that these plans provide.
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.