Are you feeling a little overwhelmed preparing for the Microsoft MS-102 exam? Don’t panic, I understand the pain of “no direction in reviewing”. Therefore, I decided to share the 15 latest free practice questions with you directly online. I carefully organized these questions based on the 2025 exam syllabus, covering core content such as Microsoft 365 management and compliance. Next, I will show these 15 questions in this article and talk about my preparation experience. If you want to go further, I would also recommend an artifact-Leads4Pass, where complete exam preparation resources are waiting for you. Are you ready? Let’s get started!
How reliable are these 15 free questions?
You may be thinking: “Are the free questions too watery?” Don’t worry, these 15 questions are interesting. They are based on Microsoft’s official MS-102 syllabus and include multiple-choice and scenario-based questions. For example, the fourth question is: “You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2. What should you configure for each group?” I will answer directly online, along with ideas. In this way you can not only practice with it, but also learn practical skills. In the following paragraphs, I will list these 15 questions and their answers. Learn while reading to double your efficiency!
15 MS-102 free practice questions are taught online!
Okay, without further ado, here are 15 free practice questions, which I will share with you directly online.
Question 1:
Your network contains three Active Directory forests. There are forest trust relationships between the forests.
You create an Azure AD tenant.
You plan to sync the on-premises Active Directory to Azure AD.
You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.
What should you include in the recommendation?
A. one Azure AD Connect sync server and one Azure AD Connect sync server in staging mode
B. three Azure AD Connect sync servers and one Azure AD Connect sync server in staging mode
C. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
D. three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
Correct Answer: A
Azure AD Connect can be active on only one server. You can install Azure AD Connect on another server for redundancy, but the additional installation would need to be in Staging mode. An Azure AD connect installation in Staging mode is
configured and ready to go, but it needs to be manually switched to Active to perform directory synchronization.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install- custom
Question 2:
HOTSPOT
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
Each user has a device with the Microsoft Authenticator app installed.
From Microsoft Authenticator settings for the subscription, the Enable and Target settings are configured as shown in the exhibit. (Click the Exhibit tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 3:
HOTSPOT
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
These questions are the types that I encounter most often when preparing for exams, and they are very practical. Want to see all 15 questions? Keep scrolling!
The full version of 15 questions is broadcast online, so take notes quickly!
Question 4:
HOTSPOT
You have a Microsoft 365 E5 subscription that contains two security groups named Group1 and Group2.
You need to enable multi-factor authentication (MFA) for the members of Group1 and Group2. The solution must meet the following requirements:
The Group1 members must be prompted for MFA only when authenticating to Microsoft Entra ID from Android devices.
The Group2 members must be prompted for MFA only when accessing Microsoft Exchange Online from outside the corporate network.
Administrative effort must be minimized.
What should you configure for each group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 5:
HOTSPOT
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
You configure a multi-factor authentication (MFA) registration policy that has the following settings:
Correct Answer:
Statement 1 = Yes – User 1 is part of group 1 with MFA status disabled and, as per the MFA registration policy, will need to register for MFA.
Statement 2 = No – Although part of group one and two, they already have MFA enabled, so will not need to register for it
Statement 3 = No – does not have MFA enabled already, is part of group 2, so is excluded from registration policy, therefore will not need to register.
Question 6:
You need to notify the manager of the human resources department when a user in the department shares a file or folder from the department’s Microsoft SharePoint Online site. What should you do?
A. From the SharePoint Online site, create an alert.
B. From the SharePoint Online admin center, modify the sharing settings.
C. From the Microsoft 365 Defender portal, create an alert policy.
D. From the Microsoft Purview compliance portal, create a data loss prevention (DLP) policy.
Correct Answer: C
Question 7:
You have a Microsoft 365 E5 tenant.
You need to be notified when emails with attachments that contain sensitive personal data are sent to external recipients.
Which two policies can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. a data loss prevention (DLP) policy
B. a sensitivity label policy
C. a Microsoft Cloud App Security file policy
D. a communication compliance policy
E. a retention label policy
Correct Answer: AD
Question 8:
You purchase a new computer that has Windows 10, version 2004 preinstalled.
You need to ensure that the computer is up-to-date. The solution must minimize the number of updates installed.
What should you do on the computer?
A. Install all the feature updates released since version 2004 and all the quality updates released since version 2004 only.
B. install the West feature update and the latest quality update only.
C. install all the feature updates released since version 2004 and the latest quality update only.
D. install the latest feature update and all the quality updates released since version 2004.
Correct Answer: B
Question 9:
You have a Microsoft 365 E5 subscription that uses Microsoft Intune.
You need to access service health alerts from a mobile phone.
What should you use?
A. the Microsoft Authenticator app
B. the Microsoft 365 Admin mobile app
C. Intune Company Portal
D. the Intune app
Correct Answer: B
Question 10:
You have a Microsoft 365 tenant.
You plan to implement Endpoint Protection device configuration profiles.
Which platform can you manage by using the profile?
A. Ubuntu Linux
B. macOS
C. iOS
D. Android
Correct Answer: B
Intune device configuration profiles can be applied to Windows 10 devices and macOS devices
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
Windows 10
macOS
Other incorrect answer options you may see on the exam include the following:
Android Enterprise
Windows 8.1
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-configure
Question 11:
HOTSPOT
You have a Microsoft 365 tenant that has Enable Security defaults set to No in Azure Active Directory (Azure AD).
The tenant has two Compliance Manager assessments as shown in the following table.
The SP800 assessment has the improvement actions shown in the following table.
You perform the following actions:
For the Data Protection Baseline assessment, change the Test status of Establish a threat intelligence program to Implemented.
Enable multi-factor authentication (MFA) for all users.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 12:
You have a Microsoft 365 subscription.
You view the Service health Overview as shown in the following exhibit.
You need to ensure that a user named User1 can view the advisories to investigate service health issues.
Which role should you assign to User1?
A. Message Center Reader
B. Reports Reader
C. Service Support Administrator
D. Compliance Administrator
Correct Answer: C
Service Support admin
Assign the Service Support admin role as an additional role to admins or users who need to do the following in addition to their usual admin role:
-Open and manage service requests
-View and share message center posts
-Monitor service health
Incorrect:
* Message center reader
Assign the Message center reader role to users who need to do the following:
-Monitor message center notifications
-Get weekly email digests of message center posts and updates
-Share message center posts
– Have read-only access to Azure AD services, such as users and groups
* Reports reader
Assign the Reports reader role to users who need to do the following:
– View usage data and the activity reports in the Microsoft 365 admin center
–
Get access to the Power BI adoption content pack
–
Get access to sign-in reports and activity in Azure AD
-View data returned by Microsoft Graph reporting API
Question 13:
HOTSPOT
Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table.
The groups have the members shown in the following table.
You are configuring synchronization between fabrikam.com and an Azure AD tenant.
You configure the Domain/OU Filtering settings in Azure AD Connect as shown in the Domain/OU Filtering exhibit (Click the Domain/OU Filtering tab.)
You configure the Filtering settings in Azure AD Connect as shown in the Filtering exhibit. (Click the Filtering tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 14:
HOTSPOT
You have a Microsoft 365 subscription.
Your network uses an IP address space of 51.40.15.0/24.
An Exchange Online administrator recently created a role named Role1 from a computer on the network.
You need to identify the name of the administrator by using an audit log search.
For which activities should you search and by which field should you filter in the audit log search? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 15:
You have a Microsoft 365 subscription that contains the domains shown in the following exhibit.
Which domain name suffixes can you use when you create users?
A. only Sub1.contoso221018.onmicrosoft.com
B. onlycontoso.com and Sub2.contoso221018.onmicrosoft.com
C. onlvcontoso221018.onmicrosoft.com, Sub.contoso221018.onmicrosoft.com, and Sub2.contoso221018.onmicrosoft.com
D. all the domains in the subscription
Correct Answer: D
These questions were extracted from actual practice and community discussions (such as Microsoft Tech Community), covering 80% of the exam key points. Watching and practicing at the same time is definitely better than memorizing by rote!
Leads4Pass: An exam preparation accelerator beyond free questions
These 15 free questions will keep you busy for a while, but if you want to truly master the MS-102 exam, I’ve got to recommend Leads4Pass. I used their full question bank to prepare for another certification—over 500 questions plus mock exams—and it took me from ‘barely passing’ to scoring 920. Their materials are updated quickly, syncing almost instantly with Microsoft’s syllabus changes. Ready to upgrade from these 15 questions to a systematic review? Check out Leads4Pass. With PDF and VCE at your fingertips, your prep efficiency will soar.
Preparing for MS-102, my real tips
Finally, I want to tell you a few words of sincerity: Preparing for MS-102 is not just for the certificate, but also to understand the essence of Microsoft 365. These 15 free questions are small gifts I share online, hoping to help you open up your mind. If you find it useful, don’t forget to try the complete resources of Leads4Pass. There is a saying in the Microsoft community that I like very much: “Good tools get twice the result with half the effort.”
Comments are closed, but trackbacks and pingbacks are open.