Microsoft 365 Administrator (MS-102) practice questions

Sample questions 12 of 111 shown

1. Q1 Deploy and manage a Microsoft 365 tenant (10-15%)

   You have a Microsoft 365 subscription that contains a verified custom domain named contoso.com. You need to add a new domain named fabrikam.com. Which type of DNS record must be created in the public DNS zone to verify domain ownership?

   1. A (Host) record
   2. MX record
   3. TXT record
   4. CNAME record

   To verify ownership of a custom domain in Microsoft 365, you must add a specific TXT record provided by Microsoft to your domain's public DNS zone. The TXT record contains a verification string that Microsoft checks to confirm you control the domain. While MX records are needed for mail flow and CNAME records for other services, TXT records are the standard method for domain ownership verification.
2. Q2 Deploy and manage a Microsoft 365 tenant (10-15%)

   You need to identify all users in a Microsoft 365 subscription who obtain their Office 365 license through group-based licensing. The solution must include the group name used for license assignment. What should you use?

   1. Active users page in the Microsoft 365 admin center
   2. Reports in the Microsoft Purview compliance portal
   3. Licenses blade in the Microsoft Entra admin center
   4. Reports in the Microsoft 365 admin center

   The Licenses blade in the Microsoft Entra admin center (formerly Azure AD) provides a detailed view of group-based licensing. You can select a specific license, view the "Licensed groups" tab, and see which groups are assigned that license along with member status. The Active users page only shows individual users, and reports don't show group-level license assignments.
3. Q3 Deploy and manage a Microsoft 365 tenant (10-15%)

   You have a Microsoft 365 subscription. You need to ensure that only specific users in the IT department can access the Microsoft 365 admin center. What should you configure?

   1. Conditional Access policy targeting the Microsoft 365 admin center app
   2. Custom domain verification
   3. Role assignments in the Microsoft 365 admin center
   4. Azure AD Application Proxy

   To restrict access to the Microsoft 365 admin center to specific users, you should create a Conditional Access policy in Microsoft Entra ID that targets the "Microsoft 365 admin center" cloud app and grants access only to users in the IT security group. This ensures only authorized users can access administrative functions, providing a more granular control than role assignments alone.
4. Q4 Deploy and manage a Microsoft 365 tenant (10-15%)

   You are reviewing service health in the Microsoft 365 admin center. You need to ensure that notifications about service incidents are sent to the IT support team. What should you configure?

   1. An alert policy in the Microsoft 365 Defender portal
   2. Service health notifications in the Microsoft 365 admin center
   3. An Activity alert in the Microsoft Purview compliance portal
   4. A notification in Azure Monitor

   The Microsoft 365 admin center provides a Service health dashboard where you can configure email notifications for service incidents and advisories. You can specify recipients (such as the IT support team) and choose which types of issues to be notified about. This is the built-in mechanism for receiving Microsoft 365 service health updates.
5. Q5 Deploy and manage a Microsoft 365 tenant (10-15%)

   You have a Microsoft 365 subscription. You need to perform bulk user creation by importing a CSV file. Which tool should you use?

   1. Microsoft Graph PowerShell
   2. Microsoft 365 admin center bulk add users
   3. Azure CLI
   4. IdFix tool

   The Microsoft 365 admin center provides a built-in "Bulk add users" feature that allows you to upload a CSV file with user information to create multiple users at once. While Microsoft Graph PowerShell can also be used for bulk operations, the admin center provides a simpler, GUI-based approach for one-time bulk user creation. The IdFix tool is used for preparing on-premises directories for synchronization, not for bulk user creation.
6. Q6 Deploy and manage a Microsoft 365 tenant (10-15%)

   Your organization has a Microsoft 365 E5 subscription. You need to implement Privileged Identity Management (PIM) to enable just-in-time administrative access. What should you configure?

   1. Azure AD roles with PIM activation in Microsoft Entra admin center
   2. Custom roles in the Microsoft 365 admin center
   3. Management units for delegated administration
   4. Exchange admin roles

   Privileged Identity Management (PIM) in Microsoft Entra ID enables just-in-time (JIT) access to Azure AD roles. To implement PIM, you configure Azure AD roles with activation requirements in the Microsoft Entra admin center. Users must activate their role assignment for a limited time when they need elevated permissions. JIT access is a key security requirement mentioned in the exam objectives, and PIM is the tool to achieve this.
7. Q7 Deploy and manage a Microsoft 365 tenant (10-15%)

   You are a Microsoft 365 administrator. You need to delegate user management to a helpdesk team member who should only be able to manage users in the Sales department. You must follow the principle of least privilege. What should you use?

   1. Administrative units in Microsoft Entra ID
   2. Custom Microsoft 365 roles
   3. Group-based licensing
   4. Conditional Access policies

   Administrative units in Microsoft Entra ID allow you to delegate administrative permissions scoped to a specific subset of users. By creating an administrative unit for the Sales department, you can assign the Helpdesk Administrator role scoped only to that unit. This follows the principle of least privilege by limiting the helpdesk member's management scope to just the Sales department users.
8. Q8 Deploy and manage a Microsoft 365 tenant (10-15%)

   You have a Microsoft 365 subscription. You need to configure the organization profile, including the technical contact and preferred language. Where should you configure these settings?

   1. Microsoft 365 admin center, Organization settings
   2. Microsoft Entra admin center, Properties
   3. Microsoft Purview compliance portal
   4. Microsoft 365 Defender portal

   Organization profile settings, including the technical contact, preferred language, and organization information, are configured in the Microsoft 365 admin center under Organization settings > Organization profile. This is the central location for managing your organization's identity in Microsoft 365.
9. Q9 Deploy and manage a Microsoft 365 tenant (10-15%)

   You need to plan a Microsoft 365 tenant deployment and ensure that network connectivity is optimized for users in remote branch offices. Which tool should you use to analyze network connectivity insights?

   1. Microsoft 365 network connectivity test
   2. Azure Network Watcher
   3. Microsoft 365 admin center Network connectivity page
   4. Microsoft Entra Connect Health

   The Microsoft 365 admin center provides a Network connectivity page (also known as Network Insights) under Health > Network connectivity. This tool analyzes network performance from user locations to Microsoft 365 services and provides recommendations for optimizing connectivity. It specifically measures metrics such as network latency, packet loss, and throughput from user locations to the nearest Microsoft 365 service entry points.
10. Q10 Deploy and manage a Microsoft 365 tenant (10-15%)

    You need to delegate permissions to a user who will manage Microsoft Defender XDR policies but should NOT be able to manage user accounts. Which approach should you use?

    1. Assign the Security Administrator role in Microsoft Entra ID
    2. Create a custom role in the Microsoft 365 Defender portal
    3. Add the user to the Global Administrators group
    4. Assign the Compliance Administrator role

    The Security Administrator role in Microsoft Entra ID grants permissions to manage security-related features, including Microsoft Defender XDR policies, while not granting permissions to manage user accounts. This aligns with the principle of least privilege. The Global Administrator has excessive permissions, and Compliance Administrator focuses on compliance rather than security.
11. Q11 Deploy and manage a Microsoft 365 tenant (10-15%)

    You have a Microsoft 365 subscription. You need to configure Microsoft 365 backup for SharePoint sites. What should you use?

    1. Microsoft 365 admin center, Backup tab under Setup
    2. SharePoint Admin Center
    3. Microsoft Purview compliance portal
    4. Microsoft Entra admin center

    Microsoft 365 Backup is configured from the Microsoft 365 admin center under Setup > Backup. This centralized backup management tool allows administrators to configure and manage backups for SharePoint, OneDrive, and Exchange Online data as part of Microsoft's built-in backup offering.
12. Q12 Deploy and manage a Microsoft 365 tenant (10-15%)

    You are configuring a Microsoft 365 trial tenant for a proof of concept. After sign-up, you need to verify the environment and locate the tenant URL. Where should you look?

    1. Power Platform Admin Center
    2. Microsoft 365 admin center
    3. Azure Portal
    4. Microsoft Entra admin center

    After creating a Microsoft 365 trial tenant, the Power Platform Admin Center (admin.powerplatform.microsoft.com) lists all environments including the trial tenant's environment with its URL. While the Microsoft 365 admin center is the primary admin interface, the Power Platform Admin Center specifically shows environment details including the environment URL.

Answer all 111 questions with instant feedback →

Reader reviews 135 ratings

• I work full time and study at night. The MS-102 question bank allowed me to learn efficiently without wasting precious time.

  ★★★★★★ Harper S.

• I let my coworker borrow my MS-102 account to study — he passed too. These questions are legit.

  ★★★★★★ Grayson P.

• Had to renew my MS-102 certification and used this to refresh. Way more efficient than re-reading the official study guide.

  ★★★★★★ Leo D.

• The MS-102 bank has a good mix of easy, medium, and hard questions. Kept me engaged and prevented me from getting complacent.

  ★★★★★★ Skylar M.

• The MS-102 certification opened up a promotion for me at work. These practice questions were a big part of that success.

  ★★★★★★ Ryan J.

• I was pleasantly surprised by the quality of the MS-102 questions for the price. Comparable to much more expensive prep courses.

  ★★★★★★ Blake C.

Frequently asked questions

Free study resources

Community-verified analysis of 52 questions from real test-taker discussions — 16 deep analyses and 0 FAQs.

More Microsoft exams