Spring Sale Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple75

Pass the Microsoft 365 Certified: Enterprise Administrator Expert MS-102 Questions and answers with Dumpstech

Exam MS-102 Premium Access

View all detail and faqs for the MS-102 exam

Go to Exam

Practice at least 50% of the questions to maximize your chances of passing.

Viewing page 6 out of 6 pages

Viewing questions 51-60 out of questions

Questions # 51:

You use Microsoft Defender for Endpoint.

You have the Microsoft Defender for Endpoint device groups shown in the following table

Question # 51

You plan to onboard computers to Microsoft Defender for Endpoint as shown in the following table.

Question # 51

Options:

Questions # 52:

Your network contains an Active Directory domain and an Azure AD tenant.

You implement directory synchronization for all 10.000 users in the organization.

You automate the creation of 100 new user accounts.

You need to ensure that the new user accounts synchronize to Azure AD as quickly as possible.

Which command should you run? To answer, select the appropriate options in the answer area.

Question # 52

Options:

Questions # 53:

You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

Question # 53

You need to create a contact named Contact1 and add Contact1 to a group.

Which two portals can you use to create Contact1, and to which groups can you add Contact1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 53

Options:

Questions # 54:

(Your network contains two on-premises Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com that are connected by using a forest trust.

You have a Microsoft 365 E5 subscription.

You need to sync a subset of users from both forests to Microsoft Entra ID. The solution must support device objects and device writeback.

What should you use?)

Options:

Microsoft Entra Cloud Sync

Microsoft Entra Domain Services

Microsoft Entra Connect Sync

Active Directory Federation Services (AD FS)

Answer

Explanation

The correct answer is Microsoft Entra Connect Sync because it is the only Microsoft-supported solution that meets all of the stated requirements.

1. Support for multiple on-premises AD DS forests

Microsoft Entra Connect Sync is designed to synchronize identities from multiple on-premises Active Directory forests into a single Microsoft Entra tenant. Microsoft documentation explicitly states that when multiple forests are present, they can all be synchronized as long as they are reachable by the same Entra Connect server. A forest trust between contoso.com and fabrikam.com is a supported and common configuration.

2. Ability to sync only a subset of users

Microsoft Entra Connect Sync supports filtering and scoping at multiple levels (domain-based, OU-based, or attribute-based). Microsoft documentation lists pilot deployments and limited user synchronization as a primary use case, allowing administrators to synchronize only selected users from each forest.

3. Support for device objects and hybrid device scenarios

Microsoft Entra Connect Sync supports hybrid device identity , including Microsoft Entra hybrid joined devices. These devices are registered both in on-premises Active Directory and in Microsoft Entra ID, which is required for many Microsoft 365 and Conditional Access scenarios.

4. Device writeback support

Device writeback is a feature that allows device objects from Microsoft Entra ID to be written back into on-premises Active Directory. Microsoft documentation clearly identifies device writeback as a feature of Microsoft Entra Connect Sync .

Important documented behavior:

Device writeback is supported when device objects and users are correctly located and configured in the same forest.

Device writeback is not a feature of Cloud Sync or federation services.

Why the other options are incorrect

A. Microsoft Entra Cloud Sync

Cloud Sync is a lightweight provisioning agent and does not provide the full hybrid identity feature set required for this scenario. Microsoft documentation associates advanced device features and device writeback with Microsoft Entra Connect Sync, not Cloud Sync.

B. Microsoft Entra Domain Services

Microsoft Entra Domain Services is a managed domain service used to run legacy, domain-joined workloads in Azure. It does not synchronize on-premises forests into Microsoft Entra ID and is not a replacement for Entra Connect in hybrid identity scenarios.

D. Active Directory Federation Services (AD FS)

AD FS is an authentication and federation service. It does not synchronize users or devices to Microsoft Entra ID and does not support device writeback. Microsoft documentation positions AD FS as an authentication method, not a directory synchronization solution.

Questions # 55:

Yout network contains an on-premises Active Directory Domain Services (AD DS) domain. The domain contains a usei named Userl.

You have a Microsoft Entra tenant that contains a user named User2.

You plan to use Microsoft Entra Cloud Sync to sync the AD DS domain and the Microsoft Entra tenant.

You need to ensure that User1 can install Microsoft Entra Cloud Sync in the domain, and User2 can configure Microsoft Entra Cloud Sync in the tenant. The solution must follow the principle of least privilege.

To which group should you add User1, and which role should you assign to User2? To answer, select the appropriate options in the answer area.

Question # 55