Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 151:

  You have a Microsoft 365 subscription that contains a user named User1.

  You need to ensure that User1 receives Microsoft 365 feature and service updates before the updates are released to all users.

  What should you do in the Microsoft 365 admin center?

  A. Modify the privileged access management settings.

  B. Modify Office software download settings.

  C. Modify the Release preferences settings.

  D. Submit a new service request.

  Correct Answer: C

  Reference: https://practical365.com/blog/first-steps-configure-office-365-first-release-settings/

• Question 152:

  You have a Microsoft 365 E5 subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com.

  You purchase 100 Microsoft 365 Business Voice add-on licenses.

  You need to ensure that the members of a group named Voice are assigned a Microsoft 365 Business Voice add-on license automatically.

  What should you do?

  A. From the Azure Active Directory admin center, modify the settings of the Voice group.

  B. From the Microsoft 365 admin center, modify the settings of the Voice group.

  C. From the Licenses page of the Microsoft 365 admin center, assign the licenses.

  Correct Answer: A

  Read the mission statement carefully:

  "You need to ensure that the members of a group named Voice are assigned a Microsoft 365 Business Voice add-on license automatically."

  There is already a group created with the name Voice. The goal is to have these licenses assigned automatically to its members, current or new. The key word is automatically.

  This can only be accomplished by editing said group in Azure AD. What you have to do is go to the group in question -> Licenses -> Assignments and assign the license Microsoft 365 Business Voice add-on.

• Question 153:

  You have a Microsoft 365 E5 subscription.

  You need to ensure that users are prompted for multi-factor authentication (MFA) when they attempt to access Microsoft SharePoint Online resources. Users must NOT be prompted for MFA when they attempt to access other Microsoft 365

  services.

  What should you do?

  A. From the Microsoft Endpoint Manager admin center, create an app protection policy.

  B. From the multi-factor authentication page, configure the users settings.

  C. From the Azure Active Directory admin center, create a conditional access policy.

  D. From the Cloud App Security admin center, create an app access policy.

  Correct Answer: C

  Multi-factor authentication (MFA) is configured through conditional access policies.

  Reference: https://docs.microsoft.com/en-us/appcenter/general/configuring-aad-conditional-access

• Question 154:

  You have a Microsoft 365 E5 subscription.

  All users are assigned a license to Microsoft 365 Apps for enterprise.

  The users report that they do not have the option to install Microsoft 365 apps on their device as shown in the following exhibit.

  

  You need to ensure that the users can install Microsoft 365 apps from the Office 365 portal. What should you do?

  A. From the Microsoft 365 admin center, modify the user license settings.

  B. From the Microsoft Endpoint Manager admin center, create a Microsoft 365 Apps app and assign the app to the devices.

  C. From the Microsoft Endpoint Manager admin center, create a Microsoft 365 Apps app and assign the app to the users.

  D. From the Microsoft 365 admin center, modify the Services and add-ins settings.

  Correct Answer: D

• Question 155:

  You have a DNS zone named contoso.com that contains the following records.

  

  You purchase a Microsoft 365 subscription.

  You plan to migrate mailboxes to Microsoft Exchange Online.

  You need to configure Sender Policy Framework (SPF) to support Exchange Online.

  What should you do?

  A. Add an additional TXT record.

  B. Modify the TXT record.

  C. Modify the expire interval of the SOA record.

  D. Modify the default TTL of the SOA record.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-spf-in-office-365-to-help-prevent-spoofing?view=o365-worldwide#next-steps-after-you-set-up-spf-for-office-365

• Question 156:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.

  

  Azure AD Connect has the following settings:

  1.

  Password Hash Sync: Enabled

  2.

  Password writeback: Enabled

  3.

  Group writeback: Enabled

  You need to add User2 to Group 2.

  Solution: You use the Security and Compliance admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Security and Compliance admin center is not used to manage users.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center

• Question 157:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.

  

  Azure AD Connect has the following settings:

  1.

  Password Hash Sync: Enabled

  2.

  Password writeback: Enabled

  3.

  Group writeback: Enabled

  You need to add User2 to Group 2.

  Solution: You use the Azure Active Directory admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  User2 and Group2 are objects in Windows Server Active Directory (AD)

• Question 158:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.

  

  Azure AD Connect has the following settings:

  1.

  Password Hash Sync: Enabled

  2.

  Password writeback: Enabled

  3.

  Group writeback: Enabled

  You need to add User2 to Group 2.

  Solution: From Azure PowerShell, you run the Set-AzureADGroupcmdlet.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The Set-AzureADGroup cmdlet updates a group in Azure Active Directory (AD) but User2 and Group2 are objects in Windows Server AD.

• Question 159:

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

  

  You configure Azure AD Connect to sync contoso.com to Azure Active Directory. Which objects will sync to Azure AD?

  A. Group1, User1, and User2

  B. Group1 and User1 only

  C. User1 and User2 only

  D. Group1 only

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-user-and-contacts

• Question 160:

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You plan to use Exchange Online to manage email for a DNS domain.

  An administrator adds the DNS domain to the subscription.

  The DNS domain has a status of incomplete setup.

  You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege.

  Which user should you identify?

  A. User1

  B. User2

  C. User3

  D. User4

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/setup/add-domain?view=o365-worldwide