Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 268 discussion

Actual exam question from Microsoft's MS-102

Question #: 268
Topic #: 1

Your company has a Microsoft Entra tenant named contoso.com and a Microsoft 365 subscription.

All users use Windows 10 devices to access Microsoft Office 365 apps.

All the devices are in a workgroup.

You plan to implement password less sign-in to contoso.com.

You need to recommend changes to the infrastructure for the planned implementation.

What should you include in the recommendation?

A. Join all the devices to contoso.com.
B. Deploy Microsoft Entra Application Proxy.
C. Deploy X.509.3 certificates to all the users.
D. Deploy the Microsoft Authenticator app.

Show Suggested Answer

Suggested Answer: A 🗳️

by TonyTe0 at Jan. 12, 2024, 6:46 p.m.

Comments

Submit Cancel

Nuance

Highly Voted 1 year, 1 month ago

Selected Answer: A

A. Join all the devices to contoso.com

upvoted 8 times

...

TonyTe0

Highly Voted 1 year, 6 months ago

Correct: D https://www.examtopics.com/discussions/microsoft/view/75062-exam-ms-100-topic-4-question-1-discussion/

upvoted 6 times

Khanbaba43

11 months, 1 week ago

Not correct. You first need to add devices to a domain. They are in a workgroup. Answer should be A

upvoted 4 times

Ody

8 months, 3 weeks ago

Windows 10 devices not joined to the tenant can access Microsoft 365 Apps

upvoted 1 times

sbermejor

7 months ago

planned changes are "implement password less sign-in to contoso.com" not accessing to Microsoft 365 Apps. Answer should be A

upvoted 3 times

...

Frank_2022

Most Recent 3 months, 1 week ago

Selected Answer: D

While Microsoft Entra join or hybrid join is beneficial for device management, it is not strictly required for passwordless sign-in. The Authenticator app can be used regardless of device join state.

upvoted 1 times

...

GetEsn

9 months, 3 weeks ago

Selected Answer: D

upvoted 1 times

...

APK1

11 months, 3 weeks ago

Question clearly says "all users use windows 10" - Interestingly there is no Microsoft Authenticator App for Windows - So answer is A

upvoted 2 times

...

TonyManero

1 year, 3 months ago

Selected Answer: A

The best recommendation to implement passwordless sign-in for your scenario is: A. Join all the devices to contoso.com Here's why the other options are not ideal: B. Deploy Microsoft Entra Application Proxy: This is not necessary for passwordless sign-in. Application Proxy publishes on-premises applications to Azure Active Directory (Azure AD) but doesn't directly affect passwordless login functionality. C. Deploy X.509.3 certificates to all the users: While certificates can be used for passwordless authentication, it's a more complex solution compared to Azure AD joined devices. D. Deploy the Microsoft Authenticator app: While the Microsoft Authenticator app can be used for multi-factor authentication (MFA) which can be part of a passwordless solution, it requires Azure AD joined devices to leverage Windows Hello for passwordless sign-in. Since your users are already using Windows 10 devices and you want passwordless sign-in, joining the devices to the Azure AD domain (contoso.com) allows them to leverage Windows Hello for passwordless login with features like fingerprint or facial recognition. This is a simpler and more efficient approach for your scenario.

upvoted 3 times

...

arsh807

1 year, 3 months ago

Selected Answer: A

How do you plan to use Authenticator without joining the devices to the domain?

upvoted 3 times

...