Microsoft 365 Administrator Expert MS-102 Practice Question
Your Microsoft 365 tenant contains an administrative unit (AU) named "EMEA-Sales" that includes all user accounts for the company's European sales teams. You must allow four regional service-desk technicians to perform these tasks only for the users that reside in the AU:
Reset user passwords
Force users to register or re-register multifactor authentication (MFA) methods
The technicians must not be able to manage guest accounts or users that are outside the AU, and they must receive no additional privileges.
Which role assignment strategy meets the requirement?
Assign the technicians the Helpdesk Administrator role scoped to the EMEA-Sales administrative unit.
Assign the technicians the Privileged Authentication Administrator role scoped to the EMEA-Sales administrative unit.
Assign the technicians the Authentication Administrator role scoped to the EMEA-Sales administrative unit.
Assign the technicians the Global Reader role at the tenant root scope.
The Authentication Administrator role supports administrative-unit scoping and grants the ability to reset user passwords and require re-registration of MFA for non-administrator accounts. Assigning this role at the tenant level would let the technicians manage every user, and assigning Helpdesk Administrator would let them reset passwords but not force MFA re-registration. Global Reader and Privileged Authentication Administrator either do not provide the needed write permissions or cannot be AU-scoped. Therefore, assigning the Authentication Administrator role scoped to the EMEA-Sales administrative unit is the only option that gives the required capabilities while limiting the technicians to that specific subset of users.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is an Administrative Unit (AU) in Microsoft 365?
Open an interactive chat with Bash
Why is the Authentication Administrator role suitable for resetting passwords and managing MFA registration?
Open an interactive chat with Bash
How does role scoping improve security in Microsoft 365?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .