Microsoft 365 Administrator Expert MS-102 Practice Question

A Microsoft 365 tenant has two Conditional Access (CA) policies that are both On and assigned to All users:

  • Policy-A: Grant access only if the user completes multifactor authentication (MFA) when accessing any cloud app.
  • Policy-B: Block access when the sign-in risk detected by Microsoft Entra ID Protection is High.

A user's sign-in is evaluated as High risk and the user tries to open Outlook on the web.
What is the result of the sign-in attempt?

  • The user gains access without MFA because the two policies conflict and cancel each other.

  • The sign-in is blocked only if it originates from outside a trusted location defined in Named locations.

  • The user gains access after completing MFA because Policy-A is processed before Policy-B.

  • The sign-in is blocked because the block control in Policy-B overrides the grant control in Policy-A.

Microsoft 365 Administrator Expert MS-102
Implement and manage Microsoft Entra identity and access
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot