MS-102 – Manage Users, Licenses, Guests & Contacts (Q25)
1. Which identity exists only in Microsoft Entra ID?
Cloud identity
Synchronized identity
Federated identity
Cloud identities exist only in Microsoft Entra ID.
2. Which identity model syncs users from on-prem AD DS?
Synchronized identity
Cloud identity
Guest identity
Synchronized identities use Entra Connect or Cloud Sync.
3. Which identity model provides true SSO using AD FS?
Federated identity
Cloud identity
Synchronized identity
Federated identities authenticate via trusted IdP (AD FS).
4. What tool synchronizes on-prem AD to Microsoft Entra ID?
Microsoft Entra Connect Sync
AD FS
Users and Computers
Entra Connect Sync links AD DS with Entra ID.
5. Which method is simplest for creating a single user?
Microsoft 365 admin center
Bulk CSV import
PowerShell only
Admin center is simplest for individual users.
6. Bulk user creation requires which file type?
CSV file
XML
JSON
Bulk operations use CSV templates.
7. Which PowerShell module replaces MSOnline?
Microsoft Graph PowerShell
AzureAD Preview
Exchange Online
Microsoft Graph PowerShell is the supported module.
8. Which cmdlet creates a cloud user?
New-MgUser
Add-Mailbox
Set-MgUserLicense
New-MgUser provisions user accounts.
9. Where must hybrid users be managed?
On-prem Active Directory
Microsoft 365 admin center
Purview portal
Hybrid users are managed on-prem and synced.
10. Which role can assign licenses?
User Management Admin
Helpdesk Admin
Reports Reader
Global Admin and User Management Admin can manage licenses.
11. What happens when a license is removed from a user?
Data recoverable for 30 days
Data deleted immediately
License locked permanently
Service data has a 30-day grace period.
12. Which property is required before assigning a license?
UsageLocation
JobTitle
Department
UsageLocation must be a valid ISO country code.
13. Which cmdlet shows available SKUs?
Get-MgSubscribedSku
Get-MgUser
Get-Mailbox
Displays license availability per plan.
14. Deleted users can be restored for how long?
30 days
7 days
90 days
Deleted users are soft-deleted for 30 days.
15. Which cmdlet restores deleted users?
Restore-MgDirectoryDeletedItem
Undo-MgUser
Recover-Mailbox
Restores objects from deleted items container.
16. Guest users are created using which feature?
B2B collaboration
Directory Sync
Cloud Sync
External collaboration uses Entra B2B.
17. Guest UPNs contain which identifier?
#EXT#
@onmicrosoft.com
_guest
B2B guest accounts include #EXT# in UPN.
18. Default guest permission level?
Limited access
Same as members
Restricted
Guests have limited directory visibility by default.
19. Guest invitations expire?
They do not expire
After 30 days
After redemption window
B2B invitations do not expire.
20. Where do you view guest users?
Users → Guest users
Billing
Reports
Guest users appear under Users section.
21. What enables guest access to SharePoint sites?
B2B + M365 Groups + SharePoint sharing
Teams policy only
Site permissions only
All three layers must allow guest access.
22. What object appears in the GAL for external email?
Mail contact
Guest user
Mail user
Mail contacts represent external addresses.
23. Mail contacts have email addresses?
Outside the organization
Inside the tenant
Onmicrosoft only
Mail contacts point to external domains.
24. Which cmdlet creates a mail contact?
New-MailContact
New-MgUser
Add-Contact
Exchange Online PowerShell manages contacts.
25. When a user is deleted, what happens to the license?
It becomes available for reassignment
It is locked for 30 days
It is permanently removed
Deleted users release licenses immediately.