Microsoft MS-102 Exam Dumps

Safe Attachments for SharePoint, OneDrive, and Microsoft Teams

In organizations with Microsoft Defender for Office 365, Safe Attachments for SharePoint, OneDrive, and Microsoft Teams provides an additional layer of protection against malware. After files are asynchronously scanned by the common virus detection engine in Microsoft 365, Safe Attachments opens files in a virtual environment to see what happens (a process known as detonation). Safe Attachments for SharePoint, OneDrive, and Microsoft Teams also helps detect and block existing files that are identified as malicious in team sites and document libraries.

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-attachments-for-spo-odfb-teams-about

A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

Users with the Security Reader role have global read-only access on security-related features, including all information in Microsoft 365 security center, Microsoft Entra ID, Identity Protection, Privileged Identity Management, as well as the ability to read Microsoft Entra ID sign-in reports and audit logs, and in Office 365 Security & Compliance Center.

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

The correct answer is Hybrid join the devices. The devices already belong to an on-premises AD DS domain and run Windows 11, so the lowest-impact approach is to configure Microsoft Entra hybrid join. A Microsoft Entra hybrid joined device remains joined to the on-premises AD DS domain while also being registered in Microsoft Entra ID, which is the correct identity state for existing domain-joined Windows devices that need cloud access with single sign-on behavior. Microsoft's hybrid join guidance shows that Microsoft Entra Connect can be used to configure Microsoft Entra hybrid join through Configure device options, minimizing manual device-by-device work.

Password hash synchronization and pass-through authentication are user sign-in methods; they do not by themselves join or register the Windows 11 devices to Microsoft Entra ID. They address how credentials are validated, not whether the device has a cloud device identity for seamless access. Joining the devices directly to the tenant would mean Microsoft Entra joining them, which is more disruptive for existing AD DS domain-joined devices. Microsoft Entra joined devices are joined only to Microsoft Entra ID, while hybrid joined devices are intended for organizations that still use on-premises AD DS.

Therefore, select C. Hybrid join the devices.