Exam MS-102 topic 1 question 144 discussion

Actual exam question from Microsoft's MS-102

Question #: 144
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You have an Azure AD tenant named contoso.com that contains the following users:

• Admin1
• Admin2
• User1

Contoso.com contains an administrative unit named AU1 that has no role assignments. User1 is a member of AU1.

You create an administrative unit named AU2 that does NOT have any members or role assignments.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by cb0900 at Sept. 15, 2023, 9:59 a.m.

Comments

Submit Cancel

cb0900

Highly Voted 1 year, 9 months ago

Y Y Y https://www.examtopics.com/discussions/microsoft/view/96500-exam-ms-100-topic-3-question-100-discussion/

upvoted 27 times

Paul_white

1 year, 8 months ago

THANK YOU BROTHER

upvoted 4 times

...

APK1

Highly Voted 10 months, 1 week ago

Who am I? I must be Global Admin for my Tenant - so the answer should be YYY

upvoted 11 times

...

Rodrigo_VI

Most Recent 4 months, 3 weeks ago

Copilot says: Y Y Y Yes, you can assign Admin2 the User administrator role for AU1. In Azure AD, you can assign roles to users within specific administrative units (AUs). Even though AU1 currently has no role assignments, you can still assign roles to users within that AU.

upvoted 2 times

...

Khattak3143

10 months ago

and here I thought Microsoft exam creators claimed, they aren't in the business of tricking

upvoted 4 times

...

martinods

1 year ago

ok but what is my role :-) ?

upvoted 5 times

e6d6bf4

11 months, 4 weeks ago

Since the question stated "You create an administrative unit named AU2 that does NOT have any members or role assignments." --> to be able to create AU, you have to be "Global Admin or Privilege Role Admin". So it is safe to assume, "You" in this question has one of those role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-manage?tabs=ms-powershell

upvoted 8 times

...

de0e20a

1 year, 1 month ago

For the “You can assign Admin2 the User administrator role for AU1” I think the trick in assumption here is in the not in the fact you could do this action, but as the tenant is setup currently you need to do additional steps. As it stands Admin2 is not an assigned security principal for AU1 nor is AU1 assigned the user administrator role currently. So you would fist need to assign that role to the AU and then assign that user to the AU and then it would be given the User Administrator role. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-assign-roles

upvoted 1 times

...

Greatone1

1 year, 8 months ago

Should be Y,Y,Y

upvoted 5 times

...