Microsoft 365 Administrator Expert MS-102 Practice Question

You manage a hybrid Microsoft Entra tenant synchronized with an on-premises Active Directory forest. You deployed Microsoft Entra Password Protection by installing the DC agent on every writable domain controller. Several days later, users can still set weak passwords such as Contoso2023, and Event ID 30009 on the DCs indicates that no password policy is available. Which action will enable the domain controllers to download and enforce the banned-password lists?

  • Install and register the Microsoft Entra Password Protection proxy service on a domain-joined server.

  • Turn on password hash synchronization in Microsoft Entra Connect Sync.

  • Enable password writeback in the self-service password reset (SSPR) configuration.

  • Create a firewall rule that allows outbound LDAP (TCP 389) from the domain controllers to Microsoft Entra ID.

Microsoft 365 Administrator Expert MS-102
Implement and manage Microsoft Entra identity and access
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot