Discuss Microsoft MS-102 Exam Topic 1 Question 3

You have a Microsoft 365 E5 subscription.

Conditional Access is configured to block high-risk sign-ins for all users.

All users are in France and are registered for multi-factor authentication (MFA).

Users in the media department will travel to various countries during the next month.

You need to ensure that if the media department users are blocked from signing in while traveling, the users can remediate the issue without administrator intervention.

What should you configure?

Aan exclusion group

Bthe MFA registration policy

Cnamed locations

Dself-service password reset (SSPR)

Suggested Answer: D

Self-remediation with self-service password reset

If a user has registered for self-service password reset (SSPR), then they can also remediate their own user risk by performing a self-service password reset.

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate-unblock

Get Premium MS-102 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Edgar 11 months ago

Wait, can they really fix this without admin help?

Denae 11 months ago

Exclusion groups could work too, right?

Mona 11 months ago

Not sure if that's the best option, though.

Miss 11 months ago

Totally agree, named locations make sense for travel!

Barrett 12 months ago

I think named locations would help here.

Catina 12 months ago

Self-service password reset seems unrelated here, but I wonder if it could help users regain access if they get locked out while traveling.

Kate 1 year ago

I practiced a similar question, and I feel like configuring the MFA registration policy could be relevant, but I'm not confident it directly addresses the travel issue.

Genevieve 1 year ago

I'm not entirely sure, but I remember something about exclusion groups. Could that help with allowing certain users to bypass the high-risk sign-in block?

Alline 1 year ago

I think we might need to set up named locations to allow the media department users to sign in from different countries without being blocked.

Billye 1 year ago

Hmm, I'm a bit unsure about this one. The question mentions "virtual secure elements" which makes me think it could be related to secure element provisioning, but I'm not entirely sure. I'll have to think this through carefully.

Jerry 1 year ago

I've got this! The total number of jobs is seven - the five word processors, one proofreader, and one supervisor.

Alyce 1 year ago

The rewriter functionality is an important detail to remember. I'll make sure I understand when it's enabled and why.

Microsoft MS-102 Exam - Topic 1 Question 3 Discussion