Microsoft 365 Administrator Expert MS-102 Practice Question

Your company uses Microsoft Entra Privileged Identity Management (PIM). Policy requires that on-call engineers obtain the Exchange Administrator role only when needed, for a maximum of eight hours, with MFA and approval from the messaging lead. You have created a security group that contains the on-call engineers.

You need to configure the role assignment in PIM with the least administrative effort.

Which configuration should you use?

  • Create an eligible assignment for each engineer that requires justification only and allows a 24-hour maximum activation.

  • Assign the security group as active for the Exchange Administrator role with a permanent end date and require MFA at sign-in.

  • Assign the security group as eligible for the Exchange Administrator role and configure the role settings to require MFA, one approver, and an eight-hour maximum activation.

  • Create a recurring time-bound active assignment for the security group that starts and ends during each on-call week and requires approval from the messaging lead.

Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot