exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 54 discussion

Actual exam question from Microsoft's MS-102
Question #: 54
Topic #: 1
[All MS-102 Questions]

HOTSPOT -

You have an Azure AD tenant that contains the administrative units shown in the following table.



You have the following users:

• A user named User1 that is assigned the Password Administrator for AU1 and AU2.
• A user named User2 that is assigned the User Administrator for AU1.
• A user named User3 that is assigned the User Administrator for the tenant.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.




Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
gbartumeu
Highly Voted 1 year, 9 months ago
I think is Y,Y,Y. "If an administrator forgets their own password, ...": "Ask another administrator to reset it for you. In this case, the other administrator must be either a Global admin, a User Management admin, or a Password admin. However, if the administrator who forgot their password is a Global admin, another Global administrator must reset it for them." https://learn.microsoft.com/es-es/training/modules/manage-secure-access-microsoft-365/2-manage-user-passwords
upvoted 16 times
Be41223
1 year, 9 months ago
The answer is N,Y,N. User1 can't reset password of User3, not only are they in different administrative units, password administrators can only reset the passwords of non-admins and other password administrators. User2 can update the display name of User1, User2 is a User administrator and is in the same Administrative unit as User1 allowing them control to do so. User1 can't reset the password of User2, as User2 is a different admin. https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide#commonly-used-microsoft-365-admin-center-roles
upvoted 60 times
JensV
1 year, 9 months ago
https://learn.microsoft.com/en-us/azure/active-directory/roles/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
upvoted 8 times
...
...
basak
1 year, 1 month ago
wrong: Password Administrator - Can reset passwords for non-administrators and Password Administrators. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
upvoted 6 times
Ruslan23
3 months, 1 week ago
Nope, he can reset password only for Directory Readers, Guest Inviter, Password Administrator and Uses (no role). https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
upvoted 1 times
...
...
Exam2us
1 year, 3 months ago
I think this is not correct. Review this link for more information - https://learn.microsoft.com/en-us/azure/active-directory/roles/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
upvoted 1 times
...
benpatto
1 year, 6 months ago
I'd like to agree but this is why there are global admins. There's always at least one global administrator in a tenant which has the ability to do anything it needs to - no bars held. So I think N, Y, N
upvoted 1 times
...
...
correction
Most Recent 1 month, 4 weeks ago
N Y N https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords
upvoted 1 times
...
EubertT
2 months, 1 week ago
Based on the image and the provided information, here are the correct answers: User1 can reset the password of User3. Answer: No User1 is a Password Administrator for AU1 and AU2, but User3 is not a member of AU1, and although User3 is in AU2, User1 is not a User Administrator for AU2, and Password Administrators cannot reset passwords of users outside their scope unless they are also User Administrators. User2 can update the display name of User1. Answer: No User2 is a User Administrator for AU1, and both User1 and User2 are members of AU1. However, a User Administrator cannot manage other administrators, which includes User1, who is a Password Administrator. User1 can reset the password of User2. Answer: Yes User1 is a Password Administrator for AU1, and both User1 and User2 are in AU1. Therefore, User1 can reset the password of User2. Final Answers: User1 can reset the password of User3: No User2 can update the display name of User1: No User1 can reset the password of User2: Yes _________________________________________________________
upvoted 1 times
...
Jalonso
2 months, 3 weeks ago
No,Yes,Yes
upvoted 1 times
...
StudyBM
4 months, 2 weeks ago
Ignore my last comment, I decided to do a real test, and it is N, N, Y. I could see User3's account, but when I tried to reset I was told I don't have the permissions, the display name did not have any configuration options for any of the accounts, and I was able to successfully reset user2's password.
upvoted 1 times
...
StudyBM
4 months, 2 weeks ago
Its Y, N, Y User1 can reset the password of User3? Yes. User1, as a Password Administrator for AU2, can reset the password of User3, who is in AU2. User2 can update the display name of User1? No. User2 is a User Administrator for AU1, and while User1 is in AU1, the User Administrator role does not have permissions to update the display names of other administrators. User1 can reset the password of User2? Yes. User1, as a Password Administrator for AU1, can reset the password of User2, who is in AU1
upvoted 1 times
...
JunetGoyal
7 months ago
NYN is correct, as Password admin role is described bellow Assign the Password admin role to a user who needs to reset passwords for non-administrators and Password Administrators. https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/about-admin-roles?view=o365-worldwide
upvoted 3 times
...
MR_Eliot
9 months, 1 week ago
Correct: Password Administrator Can reset passwords for non-administrators and Password Administrators.
upvoted 1 times
...
yaboo1617
9 months, 3 weeks ago
Correct, password admin can’t reset other types of admin passwords.
upvoted 1 times
...
wael_kodmani
9 months, 3 weeks ago
correct answers
upvoted 1 times
...
APK1
10 months, 1 week ago
N,Y,N correct answer
upvoted 1 times
...
LakesWizard
11 months, 3 weeks ago
User1 can reset the password of User3. Yes, it can, because of User3 is the User Administrator for the tenant not for the AD User2 can update the display name of User1 Yes User1 can reset the password of User2 No
upvoted 2 times
...
mikl
1 year, 1 month ago
The thing to pay attention to here is that a Password Administrator cannot change password of a user administrator - that's why its N, Y, N for me.
upvoted 3 times
...
ismaelo
1 year, 2 months ago
Correct answer: Y,Y,Y If we read this document https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords, we can see how the password manager can change even that of the global administrator
upvoted 1 times
Nico282
11 months, 3 weeks ago
You are reading the table the wrong way. Look at the COLUMN "Password Admin", the role can reset password only of Users, Directory readers, Guest inviters and other Password admins
upvoted 2 times
...
...
Amir1909
1 year, 4 months ago
Correct
upvoted 1 times
...
SBGM
1 year, 4 months ago
Link provided by JensV: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/privileged-roles-permissions?tabs=admin-center#who-can-reset-passwords "For example, a Password Administrator can reset the password for Directory Readers, Guest Inviter, Password Administrator, and users with no administrator role. If a user is assigned any other role, the Password Administrator cannot reset their password."
upvoted 1 times
...
m2L
1 year, 6 months ago
Agree with Be41223
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...