10% OFF VCF Special Offer – Limited Seats Available! Claim my offer
Microsoft · hands-on lab

MS-102 Lab 4: Manage Secure User Access and Privileged Identity Management

Require MFA with Conditional Access, deploy Pass-through Authentication and Smart Lockout, and configure PIM with admin, self and teammate approval.
  • 180 minutesTime in the lab
  • AdvancedLevel
  • 17 tasksChecked automatically
  • CertificateVerifiable link when you finish

What you will do

  1. Exercise 1 · Task 1: Create a Conditional Access policy to implement MFA
  2. Exercise 1 · Task 2: Test MFA for both an included and excluded user
  3. Exercise 1 · Task 3: Deploy Microsoft Entra Pass-Through Authentication
  4. Exercise 1 · Task 4: Deploy Microsoft Entra Smart Lockout
  5. Exercise 2 · Task 1: Configure the Global Administrator role to require approval
  6. Exercise 2 · Task 2: Assign an eligible group to the Global Admin role
  7. Exercise 2 · Task 3: Submit a request for the Global Admin role
  8. Exercise 2 · Task 4: Approve the request for the Global Admin role
  9. Exercise 3 · Task 1: Create an eligible group for the Helpdesk Admin role
  10. Exercise 3 · Task 2: Configure the Helpdesk Administrator role for self-activation
  11. Exercise 3 · Task 3: Self-activate the Helpdesk Admin role
  12. Exercise 3 · Task 4: Verify a PIM notification was issued
  13. Exercise 4 · Task 1: Create an eligible group for the Intune Admin role
  14. Exercise 4 · Task 2: Configure the Intune Administrator role to require approval
  15. Exercise 4 · Task 3: Submit a request for the Intune Admin role
  16. Exercise 4 · Task 4: Approve the request for the Intune Admin role
  17. Exercise 4 · Task 5: Verify a PIM notification was issued

How it works

The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.