Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 161:

  HOTSPOT

  You are configuring an on-premises application named TestApp in Microsoft Azure as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Translate URLs in Application Body to Yes.

  If you set Translate URLs in application body to Yes, when your users access this application, the proxy will automatically scan for internal URLs that have been published through Application Proxy on your tenant.

  Box 2: Use Http-Only Cookie to Yes.

  The Use Http-Only Cookie setting allows Application Proxy to include the HTTPOnly flag in HTTP response headers. This flag provides additional security benefits, for example, it prevents client-side scripting (CSS) from copying or modifying

  the cookies.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-configure-hard-coded-link-translation

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-configure-cookie-settings

• Question 162:

  HOTSPOT

  You have a Microsoft 365 Enterprise subscription.

  You create a password policy as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  By default, smart lockout locks the account from sign-in attempts for one minute after 10 failed attempts. In this question, the lockout threshold if 5 failed attempts. The account locks again after each subsequent failed sign-in attempt, for one

  minute at first and longer in subsequent attempts.

  Password evaluation goes through several steps including normalization and Substring matching which is used on the normalized password to check for the user's first and last name as well as the tenant name.

  The next step is to identify all instances of banned passwords in the user's normalized new password. Then:

  1.

  Each banned password that is found in a user's password is given one point.

  2.

  Each remaining unique character is given one point.

  3.

  A password must be at least five (5) points for it to be accepted.

  Conto$01Pa$$word contains two banned passwords and no remaining unique characters so is given a score of 2 points. This is less than the required 5 points so will be rejected.

  Pa$$w0rd contains a banned password and no remaining unique characters so is given a score of 1 point. This is less than the required 5 points so will be rejected.

  AzureAD!!111 contains a banned password (AzureAD!!) and has three remaining characters. However, the remaining characters are all the same (they’re all 1s) so that is only one unique character. So that password will be given a score of

  2. One for the banned password and 1 for the unique character. This is less than the required 5 points so will be rejected.

  Password11 does not contain a banned password. Password11 contains 10 characters. However, there are two ‘s’ and two ‘1’ so there are 8 unique characters. Therefore, the password will be given a score of 8 points. This is more than

  the required 5 points so the password will be accepted.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-smart-lockout

• Question 163:

  HOTSPOT

  You create a Microsoft 365 subscription.

  You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company.

  You prepare the following XML file for the planned deployment.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  Office 365 ProPlus feature updates will be installed once every six months.

  The Channel element in the configuration file is set to ‘Targeted’. This means Semi-Annual Targeted.

  To help your organization prepare for a Semi-Annual Channel release, Microsoft provides Semi-Annual Channel (Targeted). The primary purpose of this update channel is to give pilot users and application compatibility testers in your

  organization a chance to work with the upcoming Semi-Annual Channel release

  Box 2:

  Office 365 ProPlus security updates will be installed every six months in March and September.

  A Semi-Annual Channel (Targeted) release with new features is expected to be released twice a year, in March and September.

  The March and September feature releases for Semi-Annual Channel (Targeted) also include security and non-security updates that have been released previously in Monthly Channel.

  Reference:

  https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool#updates-element

  https://docs.microsoft.com/en-us/deployoffice/overview-of-update-channels-for-office-365-proplus

• Question 164:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You use the Microsoft Office Deployment tool to install Office 365 ProPlus.

  You create a configuration file that contains the following settings.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  The C2R (click-to-run) version of Microsoft Visio only will be uninstalled from the computers.

  To remove the MSI version of Microsoft Visio, you would need to specify the RemoveMSI parameter. The RemoveMSI parameter is not configured in the configuration file in this question. Therefore, only the C2R version will be installed.

  Box 2:

  If the Office share on Server1 is missing the Japanese language pack, Office 365 ProPlus will be installed in English only.

  In the configuration file, English is the first in the list above Japanese. Therefore, English is the primary language and the installation will continue in English only.

  Reference:

  https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool

• Question 165:

  HOTSPOT

  Your company has 500 client computers that run Windows 10.

  You plan to deploy Microsoft Office 365 ProPlus to all the computers.

  You create the following XML file for the planned deployment.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  When the installation is complete, all users will be prompted to install several updates.

  In the configuration file, the Updates Enabled element is set to True. This means that Office will check for updates after the installation.

  The Channel element set to Broad means that all semi-annual channel updates will be installed.

  Deadline will prompt users to install updates:

  https://docs.microsoft.com/en-us/deployoffice/office-deployment-tool-configuration-options#deadline-attribute-part-of-updates-element

  Box 2:

  Office 365 ProPlus will be installed only on the computers that run a 64-bit version of Windows 10.

  The OfficeClientEdition element defines whether the 32-bit or 64-bit edition of Office 365 ProPlus is downloaded or installed. In the configuration file, it is set to ‘64’. The 64-bit version will only install on a 64-bit client computer.

  Reference:

  https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool

• Question 166:

  HOTSPOT

  Your network contains an on-premises Active Directory domain. The domain contains a server named Server1. Server1 has a share named Share1 that contains the files shown in the following table.

  

  You have a hybrid deployment of Microsoft 365.

  You create a Microsoft SharePoint site collection named Collection1.

  You plan to migrate Share1 to a document library in Collection1.

  You configure the SharePoint Migration Tool as shown in the exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  File1.txt will not be migrated as it was created before Jan 1 2019

  Box 2: Yes

  File2.txt will be migrated as it was created after Jan 1 2019 and was modified after Mar 1 2019.

  Box 3: Yes

  File3.txt will be migrated as it was created after Jan 1 2019 and was modified after Mar 1 2019.

  Reference:

  https://docs.microsoft.com/en-us/sharepointmigration/spmt-settings

• Question 167:

  HOTSPOT

  Your company uses Gmail as a corporate email solution.

  You purchase a Microsoft 365 subscription and plan to move all email data to Microsoft Exchange Online.

  You plan to perform the migration by using the Exchange admin center.

  You need to recommend which type of migration to use and which type of data to migrate.

  What should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  You’ll need to use the IMAP migration method. You can use the setup wizard in the Microsoft 365 admin center for an IMAP migration to migrate mailboxes from Gmail to Microsoft 365.

  IMAP migration will only migrate emails, not calendar and contact information. Users can import their own email, contacts, and other mailbox information to Office 365 after the mailboxes have been migrated.

  Reference:

  https://docs.microsoft.com/en-us/exchange/mailbox-migration/migrating-imap-mailboxes/migrate-g-suite-mailboxes

• Question 168:

  HOTSPOT

  Your company is based in the United Kingdom (UK).

  Users frequently handle data that contains Personally Identifiable Information (PII).

  You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based in the information presented in the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The text in the Policy Settings section of the exhibit explains what will happen.

  If a user sends between 1 and 10 instances of the sensitive info (passport number), then a notification email and will be sent to the user and a policy tip will be displayed. The email will not be blocked though. Therefore, it will be allowed.

  If a user sends more than 10 instances of the sensitive info (passport number), the email will be blocked and a high-severity alert generated. However, the user can override the block.

  Reference:

  https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies

• Question 169:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You create an alert policy as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The ‘Activity is’ setting is configured as ‘Detected malware in file’. This setting means the policy is applied to files stored in SharePoint or OneDrive.

  The Aggregation settings has a 120 minute window. This means that if there 20 detections in 120 minutes, an email will be generated. Therefore, the maximum number of emails generated in 24 hours is 12.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies

• Question 170:

  HOTSPOT

  You have a Microsoft 365 Enterprise E5 subscription.

  You add a cloud-based app named App1 to the Microsoft Azure Active Directory (Azure AD) enterprise applications list.

  You need to ensure that two-step verification is enforced for all user accounts the next time they connect to App1.

  Which three settings should you configure from the policy? To answer, select the appropriate settings in the answer area.

  Hot Area:

  

  Correct Answer:

  

  In the Cloud Apps section, you need to select the name of the app (App1) that the policy will apply to.

  In the Grant section under Access Controls, there is a checkbox named “Require Multi-factor Authentication”. That checkbox needs to be ticked.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/best-practices

  https://techcommunity.microsoft.com/t5/Enterprise-Mobility-Security/Conditional-Access-now-in-the-new-Azure-portal/ba-p/250060