All Practice Exams

200+ Free MS-102 Practice Questions

Pass your Microsoft 365 Administrator Expert (MS-102) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
200+ Questions
100% Free
1 / 200
Question 1
Score: 0/0

You add `contoso.com` to a Microsoft 365 tenant and need to prove ownership before assigning it to users. Which DNS record is most commonly used for the initial verification?

A
B
C
D
to track
2026 Statistics

Key Facts: MS-102 Exam

40-60 Q

Typical Question Count

Microsoft exam-experience policy

100 min

Exam Duration

Microsoft associate/expert exam policy

700/1000

Passing Score

Microsoft

US$165

US Exam Fee

Microsoft pricing PDF

4 domains

Objective Areas

MS-102 study guide

Learn allowed

Open-Book Policy

Associate/expert exams only

MS-102 is a Microsoft expert-level administrator exam with a 700 passing score. Current Microsoft policy says most certification exams include 40-60 questions, associate and expert exams get 100 minutes, and Microsoft Learn is available during the exam. The current English version was updated on November 10, 2025, and the study guide weights tenant management at 25-30%, identity and access at 25-30%, Defender XDR security at 30-35%, and Purview compliance at 10-15%.

Sample MS-102 Practice Questions

Try these sample questions to test your MS-102 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 200+ question experience with AI tutoring.

1You add `contoso.com` to a Microsoft 365 tenant and need to prove ownership before assigning it to users. Which DNS record is most commonly used for the initial verification?
A.TXT record
B.MX record
C.SRV record
D.PTR record
Explanation: Microsoft 365 commonly uses a TXT record to verify that you control the public DNS zone for the domain. MX, SRV, and other service records are usually configured later for workload-specific routing and discovery.
2New accounts are still being created with `@contoso.onmicrosoft.com` after `contoso.com` was added and verified. What should the administrator change?
A.Rename the tenant
B.Set `contoso.com` as the default domain
C.Convert the domain to an admin unit
D.Enable targeted release
Explanation: Setting the new domain as the default domain makes new users and groups use that suffix by default. Verifying a domain alone does not automatically change the default naming behavior for future objects.
3An admin tries to remove `fabrikam.com` from the tenant and receives a dependency error. What should be checked first?
A.Whether the tenant has Microsoft 365 Backup enabled
B.Whether the Message center has unread posts
C.Whether any users, groups, shared mailboxes, or aliases still use the domain
D.Whether the domain has an SPF record
Explanation: A custom domain cannot be removed while it is still referenced by user principal names, email addresses, proxy addresses, groups, contacts, or shared mailboxes. Domain removal failures are usually caused by one of these remaining dependencies rather than by DNS or service health issues.
4Your IT pilot group should receive new Microsoft 365 admin and end-user features before the rest of the company. Which tenant setting should you use?
A.Current Channel for all devices
B.Self-service purchase
C.Mailbox auditing bypass
D.Targeted release for selected users
Explanation: Targeted release for selected users is designed for pilot groups that should see Microsoft 365 changes before the broad tenant rollout. This lets IT validate feature impact in production without exposing the whole organization to the same change at once.
5The company has fully adopted a custom domain and wants to delete the original `tenantname.onmicrosoft.com` domain. What should you tell them?
A.It cannot be removed because every tenant keeps its initial onmicrosoft.com domain
B.It can be removed after all licenses are reassigned
C.It can be removed once no users are synced from on-premises
D.It can be removed after DNS TTL expires
Explanation: Every Microsoft 365 tenant retains its original onmicrosoft.com domain. Even after you add and standardize on custom domains, that initial tenant domain remains part of the service identity.
6After verifying `contoso.com`, inbound mail for that domain still goes to the old mail system. Which DNS change is required so Exchange Online can receive the mail?
A.Create a PTR record for every user
B.Update the MX record to point to Microsoft 365
C.Add a new TXT verification record every day
D.Delete the Autodiscover CNAME
Explanation: Exchange Online receives inbound mail only after the domain's MX record is pointed to Microsoft 365. Domain verification proves ownership, but it does not redirect mail flow by itself.
7All HR employees should be added automatically to the same group whenever their Department attribute equals HR. Which group design best fits?
A.A distribution list with manual membership
B.A shared mailbox with delegates
C.A dynamic group based on a membership rule
D.An admin unit
Explanation: A dynamic group evaluates user attributes such as Department and adjusts membership automatically as those values change. That removes manual upkeep and is useful for both access assignment and group-based licensing scenarios.
8Which Microsoft 365 feature should an admin monitor for planned changes, feature retirements, and new rollout announcements?
A.Service health
B.Audit logs
C.Billing notifications
D.Message center
Explanation: Message center is where Microsoft posts planned changes, retirements, and feature announcements for tenant admins. Service health is for incidents and advisories, not for roadmap-style operational communications.
9Users report that Exchange Online is unavailable, and the admin wants to know whether Microsoft has already identified a broader service issue. Where should the admin look first?
A.Adoption Score
B.Service health
C.Microsoft 365 Backup
D.Domains
Explanation: Service health is the primary dashboard for current incidents, advisories, and service degradation affecting Microsoft 365 workloads. It helps an admin quickly distinguish between a tenant-local problem and a broader Microsoft-managed event.
10Your operations team wants automatic alerts when Microsoft posts a new Exchange Online incident or advisory. What should an admin configure?
A.Service health notification preferences
B.A targeted release profile
C.A Microsoft 365 group welcome message
D.A domain forwarding rule
Explanation: Service health notification preferences let admins subscribe to workload-specific incident and advisory alerts. That is the correct way to deliver proactive operational notifications without changing release tracks or messaging settings.

About the MS-102 Exam

MS-102 is the Microsoft exam that validates Microsoft 365 administrator skills across tenant management, Microsoft Entra identity and access, Microsoft Defender XDR security operations, and Microsoft Purview compliance. It is the required exam in the Microsoft 365 Administrator Expert certification path.

Questions

50 scored questions

Time Limit

100 minutes

Passing Score

700/1000

Exam Fee

US$165 (Microsoft / Pearson VUE)

MS-102 Exam Content Outline

25-30%

Deploy and Manage a Microsoft 365 Tenant

Tenant creation, domains, organizational settings, service health, network connectivity insights, Microsoft 365 Apps management, backup, users, groups, licensing, roles, admin units, and privileged access

25-30%

Implement and Manage Microsoft Entra Identity and Access

Identity synchronization, Entra Connect Sync and Cloud Sync, Connect Health, authentication methods, SSPR, password protection, Conditional Access, MFA, and identity protection

30-35%

Manage Security and Threats by Using Microsoft Defender XDR

Exposure management, secure score, incidents and alerts, threat intelligence, Defender for Office 365, attack simulation training, restricted entities, Defender for Endpoint, and Defender for Cloud Apps

10-15%

Manage Compliance by Using Microsoft Purview

Sensitive information types, retention labels and policies, sensitivity labels, Content Explorer, Activity Explorer, label reports, DLP policies, and Endpoint DLP

How to Pass the MS-102 Exam

What You Need to Know

  • Passing score: 700/1000
  • Exam length: 50 questions
  • Time limit: 100 minutes
  • Exam fee: US$165

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

MS-102 Study Tips from Top Performers

1Use the November 10, 2025 study guide weights, not older copies of the outline, when planning your study time.
2Practice in the Microsoft 365 admin center, Entra admin center, Defender portal, and Purview portal so portal navigation feels routine.
3Know synchronization tradeoffs between Entra Connect Sync and Cloud Sync, including what each tool can and cannot do.
4Treat Conditional Access questions as policy design questions: users, conditions, controls, exclusions, and report-only validation all matter.
5Expect scenario questions that combine Defender for Office 365, Defender for Endpoint, and Defender for Cloud Apps in the same incident workflow.
6Do not neglect Purview even though it is the smallest domain. DLP, labels, and retention still account for a meaningful share of questions.
7During the real exam, use Microsoft Learn selectively for confirmation, not as a primary search strategy, because the timer keeps running.

Frequently Asked Questions

What is the MS-102 exam?

MS-102 is the Microsoft exam for administrators who manage Microsoft 365 at the tenant level. It focuses on Microsoft 365 tenant administration, Microsoft Entra identity and access, Microsoft Defender XDR security operations, and Microsoft Purview compliance.

How many questions and how much time does MS-102 have?

Microsoft’s current exam-experience policy says most certification exams contain 40-60 questions, though the exact number can vary by form. Associate and expert exams, including MS-102, allow 100 minutes, and the passing score is 700 out of 1000.

What are the current MS-102 domain weightings?

The current study guide, updated for the English exam on November 10, 2025, weights the four domains as follows: Deploy and manage a Microsoft 365 tenant (25-30%), Implement and manage Microsoft Entra identity and access (25-30%), Manage security and threats by using Microsoft Defender XDR (30-35%), and Manage compliance by using Microsoft Purview (10-15%).

Do I need a prerequisite before taking MS-102?

You can sit the exam without first holding another certification, but earning the Microsoft 365 Administrator Expert credential requires both passing MS-102 and holding at least one qualifying associate certification such as Endpoint Administrator Associate, Messaging Administrator Associate, Teams Administrator Associate, Identity and Access Administrator Associate, or Information Security Administrator Associate.

What 2026 changes matter most for MS-102 candidates?

The current 2026 exam version reflects Microsoft’s November 10, 2025 skills update. Important current-policy items are Microsoft Learn access during associate and expert exams, the built-in five-minute unscheduled-break allowance counted within exam time, Microsoft 365 Backup appearing in the tenant-management domain, and the use of Microsoft Defender XDR terminology in the security domain.

How should I prepare for MS-102?

Most candidates should expect several weeks of focused study plus hands-on Microsoft 365 admin experience. Prioritize the largest domains first: Defender XDR security, tenant management, and Entra identity, then finish with Purview compliance and timed practice to improve decision speed.