Exam MS-102 topic 1 question 303 discussion

Actual exam question from Microsoft's MS-102

Question #: 303
Topic #: 1

HOTSPOT
-

You have a Microsoft Entra tenant that has security defaults enabled.

You create a user named Admin1.

You need to ensure that Admin1 can create and apply Conditional Access policies.

Which two settings should you configure? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by HelloItsSam at Oct. 20, 2024, 3:32 a.m.

Comments

Submit Cancel

0b29bdf

Highly Voted 10 months ago

1. Roles and administrators. 2. Properties.

upvoted 15 times

JohnDoe47

9 months, 3 weeks ago

Correct You need to disable Security Defaults before you can use Conditional access. https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults#move-from-security-defaults-to-conditional-access

upvoted 6 times

...

IgoKostadin

Most Recent 2 months, 3 weeks ago

✅ Roles and Administration - Admin1 needs appropriate role assignments to create and apply Conditional Access policies. - Assigning the Security Administrator or Conditional Access Administrator role will grant the necessary permissions. ✅ Security - The Security settings section in Microsoft Entra ID allows configuration of Conditional Access policies. - Admin1 must have access to security-related configurations to manage policy enforcement.

upvoted 1 times

...

Tr619899

10 months ago

1. Roles and Administrator 2. Licenses Explanation: Roles and Administrator: You need to assign Admin1 an appropriate role that grants the necessary permissions to create and manage Conditional Access policies. Typically, this would be the Global Administrator or Conditional Access Administrator role. Licenses: Admin1 needs to have a license that includes the features necessary for Conditional Access. The Microsoft 365 E5 license (or equivalent) provides access to Conditional Access policies.

upvoted 2 times

justITtopics

6 months, 3 weeks ago

No, the correct answer is Roles and administrators and Properties. First, you assign the role "Conditional Access Administrator" to Admin1. Second, you need the license (at least Entra ID P1) in order to create Conditional Access, but first, you have to disable security defaults, otherwise, you will not be able to. https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults#move-from-security-defaults-to-conditional-access "After administrators disable security defaults, organizations should immediately enable Conditional Access policies to protect their organization"

upvoted 3 times

...

Bonds_11

10 months ago

First answer is correct second is Properties

upvoted 2 times

...

HelloItsSam

10 months ago

1 answer should be "Properties" as security defaults must be disabled before enabling CA Second answer should be Security, as CA can be available there

upvoted 3 times

mido3100

9 months, 3 weeks ago

agree with properties but the first one is Role and administrators to give the admin1 the appropriate permission.

upvoted 1 times

...