Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 251:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  You have a user named Grady Archie. The solution must meet the following requirements:

  Grady Archie must be able to add payment methods to your Microsoft Office 365 tenant.

  The solution must minimize the number of licenses assigned to users.

  The solution must use the principle of least privilege.

  A. See explanation below.

  Correct Answer: A

  You need to assign the ‘Billing Administrator’ role to Grady Archie.

  1.

  Go to the Azure Active Directory admin center.

  2.

  Select Users.

  3.

  Select the Grady Archie account to open the account properties page.

  4.

  Select ‘Assigned roles’.

  5.

  Click the ‘Add Assignments’ button.

  6.

  Select Billing Administrator then click the Add button.

  References: https://docs.microsoft.com/en-us/office365/admin/add-users/about-admin-roles?view=o365-worldwide

• Question 252:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  You need to create a group named Group2. Users who are added to Group2 must be licensed automatically for Microsoft Offline 365.

  A. See explanation below.

  Correct Answer: A

  You need to create the group and assign a license to the group. Anyone who is added to the group will automatically be assigned the license that is assigned to the group.

  1.

  Go to the Azure Active Directory admin center.

  2.

  Select the Azure Active Directory link then select Groups.

  3.

  Click the New Group link.

  4.

  Select ‘Security’ as the group type and enter ‘Group2’ for the group name.

  5.

  Click the Create button to create the group.

  6.

  Back in the Groups list, select Group2 to open the properties page for the group.

  7.

  Select ‘Licenses’.

  8.

  Select the ‘+ Assignments’ link.

  9.

  Tick the box to select the license.

  10.

  Click the Save button to save the changes.

  References: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign

• Question 253:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  You hire a new Microsoft 365 administrator named Nestor Wilke. Nestor Wilke will begin working for your organization in several days.

  You need to ensure that Nestor Wilke is prevented from using his account until he begins working.

  A. See explanation below.

  Correct Answer: A

  You need to sign-in status for the account to ‘Blocked’. Blocking doesn't stop the account from receiving email and it doesn't delete any data.

  1.

  On the home page of the Microsoft 365 admin center, type the user's name into the Search box.

  2.

  Select the Nestor Wilke account in the search results.

  3.

  In the ‘Sign-in status’ section of the account properties, click the Edit link.

  4.

  Select ‘Block the user from signing in’ and click the Save button.

• Question 254:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  A user named Johanna Lorenz recently left the company. A new employee named Ben Smith will handle the tasks of Johanna Lorenz.

  You need to create a user named Ben Smith. Ben Smith must be able to sign in to http://myapps.microsoft.com and open Microsoft Word Online.

  A. See explanation below.

  Correct Answer: A

  You need to create a user account and assign a license to the account. You then

  To create the user account and mailbox:

  In the Microsoft 365 admin center, go to User management, and select Add user.

  Enter the name Ben Smith in the First Name and Last Name fields.

  Enter Ben.Smith in the username field and click Next.

  Assign a Microsoft 365 license to the account.

  Click Next.

  Click Next again.

  Click ‘Finish adding’.

• Question 255:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  You need to modify Christie Cline to meet the following requirements:

  Christie Cline must be able to view the service dashboard and the Microsoft Office 365 Message center.

  Christie Cline must be able to create Microsoft support requests.

  The solution must use the principle of least privilege.

  A. See explanation below.

  Correct Answer: A

  You need to assign Christie the ‘Service Support Admin’ role.

  1.

  In the Microsoft 365 Admin Center, click ‘Roles’.

  2.

  Scroll down to the Service Support Admin role and click on the role name.

  3.

  Click the ‘Assigned Admins’ link.

  4.

  Click the ‘Add’ button.

  5.

  Start typing the name Christie then select her account when it appears.

  6.

  Click Save.

  References: https://docs.microsoft.com/en-US/azure/active-directory/users-groups-roles/directory-assign-admin-roles

• Question 256:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality

  (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are

  able to complete the lab(s) and all other sections of the exam in the time provided.

  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Lab information

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:[email protected]

  Microsoft 365 Password: 3andYWyjse-6-d

  If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 10887751

  Your organization has an office in Seattle.

  You plan to create 100 users who will work in the Seattle office. The city attribute for all the users will be Seattle.

  You need to create a group named Group1 that will automatically contain all the Seattle office users.

  A. See explanation below.

  Correct Answer: A

  You need to create a Dynamic group. User accounts with the city attribute set to ‘Seattle’ will automatically be added to the group.

  1.

  Go to the Azure Active Directory admin center.

  2.

  Select Azure Active Directory then select Groups.

  3.

  Click on the New Group link.

  4.

  Give the group a name such as Seattle Users.

  5.

  Select Users as the membership type.

  6.

  Select ‘Add dynamic query’.

  7.

  Select ‘City’ in the Property drop-down box.

  8.

  Select ‘Equals’ in the Operator drop-down box.

  9.

  Enter Seattle as the Value. You should see the following text in the Expression box: user.city -eq "Seattle"

  10.

  Click Save to create the group.

  References: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership

• Question 257:

  Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.

  You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

  You need to identify an authentication strategy for the planned Microsoft 365 deployment. The solution must meet the following requirements:

  1.

  Ensure that users can access Microsoft 365 by using their on-premises credentials.

  2.

  Use the existing server infrastructure only.

  3.

  Store all user passwords on-premises only.

  4.

  Be highly available.

  Which authentication strategy should you identify?

  A. pass-through authentication and seamless SSO

  B. pass-through authentication and seamless SSO with password hash synchronization

  C. password hash synchronization and seamless SSO

  D. federation

  Correct Answer: A

  Azure AD Pass-through Authentication. Provides a simple password validation for Azure AD authentication services by using a software agent that runs on one or more on-premises servers. The servers validate the users directly with your on- premises Active Directory, which ensures that the password validation doesn't happen in the cloud.

  Incorrect Answers:

  B: Password hash synchronization replicates passwords to Azure Active Directory. This does not meet the following requirement: Store all user passwords on-premises only

  C: Password hash synchronization replicates passwords to Azure Active Directory. This does not meet the following requirement: Store all user passwords on-premises only

  D: Federation requires additional servers running Active Directory Federation Services. This does not meet the following requirement: Use the existing server infrastructure only.

  Reference: https://docs.microsoft.com/en-us/azure/security/fundamentals/choose-ad-authn

• Question 258:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company plans to deploy several Microsoft Office 365 services.

  You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:

  1.

  Users must be able to authenticate during business hours only.

  2.

  Authentication requests must be processed successfully if a single server fails.

  3.

  When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

  4.

  Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

  Solution: You design an authentication strategy that uses federation authentication by using Active Directory Federation Services (AD FS). The solution contains two AD FS servers and two Web Application Proxies.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  This solution meets the following requirements:

  1.

  Users must be able to authenticate during business hours only.

  2.

  Authentication requests must be processed successfully if a single server fails.

  3.

  When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

  The following requirement is not met:

  Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

  To meet this requirement, you would need to configure seamless Single Sign-on (SSO)

  Reference:

  https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

• Question 259:

  Your network contains an Active Directory domain named contoso.com.

  All users authenticate by using a third-party authentication solution.

  You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

  You need to recommend an identity strategy that meets the following requirements:

  1.

  Provides seamless SSO

  2.

  Minimizes the number of additional servers required to support the solution

  3.

  Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)

  4.

  Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

  You are evaluating the implementation of federation.

  Which two requirements are met by using federation? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. minimizes the number of additional servers required to support the solution

  B. provides seamless SSO

  C. stores the passwords of all the users in Azure AD

  D. ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

  Correct Answer: BD

  When you choose this federation as the authentication method, Azure AD hands off the authentication process to a separate trusted authentication system, such as on-premises Active Directory Federation Services (AD FS), to validate the user's password. AD FS can use on-premise Active Directory as an authentication provider. AD FS can also provide SSO when using Active Directory as an authentication provider.

  Incorrect Answers:

  A: Additional servers are required to support the AD FS infrastructure.

  C: The passwords are not synchronised to Azure AD.

  Reference: https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

• Question 260:

  Your company has three main offices and one branch office. The branch office is used for research.

  The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

  You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

  What should you include in the recommendation?

  A. Microsoft Azure Active Directory (Azure AD) conditional access.

  B. Microsoft Azure Active Directory (Azure AD) password protection.

  C. a Microsoft 365 Device Management device compliance policy.

  D. a Microsoft 365 Device Management device configuration profile.

  Correct Answer: A

  With Azure Active Directory (Azure AD) Conditional Access, you can control how authorized users can access your cloud apps. The location condition of a Conditional Access policy enables you to tie access controls settings to the network locations of your users.

  For this question, we need to configure a location condition in a conditional access policy and apply the policy to users in that location (the branch office). The conditional access policy can be required to `Allow Access' but `Required MFA'.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition