Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 321:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.

  You suspect that an imposter is signing in to Azure AD by using the credentials of User1.

  You need to ensure that an administrator named Admin1 can view all the sign in details of User1 from the past 24 hours.

  To which three roles should you add Admin1? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Security administrator

  B. Password administrator

  C. User administrator

  D. Compliance administrator

  E. Reports reader

  F. Security reader

  Correct Answer: AEF

  Users in the Security Administrator, Security Reader, Global Reader, and Report Reader roles can view the sign in details.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

• Question 322:

  You have Windows 10 devices that are managed by using Microsoft Endpoint Manager. All the devices have Microsoft Office 365 apps installed.

  You need to configure the proofing tool settings for the Office 365 apps.

  From the Microsoft Endpoint Manager admin center, what should you create?

  A. a device compliance policy

  B. an app configuration policy

  C. an app

  D. a device configuration profile

  Correct Answer: B

  An app configuration setting, for example, might require you to specify any of the following details:

  1.

  A custom port number

  2.

  Language settings

  3.

  Security settings

  4.

  Branding settings such as a company logo

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-configuration-policies-overview

• Question 323:

  You publish an enterprise application named App1 that processes financial data.

  You need to ensure that access to App1 is revoked for users who no longer require viewing the processed financial data.

  What should you configure?

  A. an owner

  B. an app protection policy

  C. an access review

  D. a conditional access policy

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

• Question 324:

  Your network contains a single Active Directory domain and two Microsoft Azure Active Directory (Azure AD) tenants.

  You plan to implement directory synchronization for both Azure AD tenants. Each tenant will contain some of the Active Directory users.

  You need to recommend a solution for the planned directory synchronization.

  What should you include in the recommendation?

  A. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering.

  B. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using domain-based filtering

  C. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering.

  D. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using domain-based filtering.

  Correct Answer: A

  There's a 1:1 relationship between an Azure AD Connect sync server and an Azure AD tenant. For each Azure AD tenant, you need one Azure AD Connect sync server installation. Therefore, we need to deploy two servers that run Azure AD Connect for the two Azure AD tenants.

  Each user account can only be synchronized to one Azure AD tenant. Therefore, we need a way of splitting the users between the two Azure AD tenants. Azure AD Connect offers three ways to filter which users get synchronized to an Azure AD tenant. You can use domain-based filtering if you have multiple domains in a forest, attribute-based filtering or OU-based filtering.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-azure-ad-tenants https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering

• Question 325:

  Your company has a Microsoft 365 subscription.

  You plan to move several archived PST files to Microsoft Exchange Online mailboxes.

  You need to create an import job for the PST files.

  Which three actions should you perform before you create the import job? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Create a Microsoft Azure Storage account.

  B. From Security and Compliance, retrieve the SAS key.

  C. Run azcopy.exe to copy the PST files to Microsoft Azure Storage

  D. Use Microsoft Azure Storage Explorer to copy the PST files to Azure Storage.

  E. Create a PST import mapping file.

  Correct Answer: BCE

  The first step is to download and install the Azure AzCopy tool, which is the tool that you run in Step 2 to upload PST files to Office 365. You also copy the SAS URL for your organization. This URL is a combination of the network URL for the Azure Storage location in the Microsoft cloud for your organization and a Shared Access Signature (SAS) key. This key provides you with the necessary permissions to upload PST files to your Azure Storage location.

  Now you're ready to use the AzCopy.exe tool to upload PST files to Office 365. This tool uploads and stores them in an Azure Storage location in the Microsoft cloud.

  After the PST files have been uploaded to the Azure Storage location for your Office 365 organization, the next step is to create a comma-separated value (CSV) file that specifies which user mailboxes the PST files will be imported to. You'll submit this CSV file when you create a PST Import job.

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/use-network-upload-to-import-pst-files

• Question 326:

  Your company has a Microsoft Azure Active Directory (Azure AD) directory tenant named contoso.onmicrosoft.com.

  All users have client computers that run Windows 10 Pro and are joined to Azure AD.

  The company purchases a Microsoft 365 E3 subscription.

  You need to upgrade all the computers to Windows 10 Enterprise. The solution must minimize administrative effort.

  You assign licenses from the Microsoft 365 admin center.

  What should you do next?

  A. Add a custom domain name to the subscription.

  B. Deploy Windows 10 Enterprise by using Windows Autopilot.

  C. Create a provisioning package, and then deploy the package to all the computers.

  D. Instruct all the users to log off of their computer, and then to log in again.

  Correct Answer: B

  With Windows Autopilot the user can set up pre-configure devices without the need consult their IT administrator.

  Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-deployment-scenarios https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

• Question 327:

  Your company has an on-premises Microsoft Exchange Server 2016 organization. The organization is in the company's main office in Melbourne. The main office has a low-bandwidth connection to the Internet.

  The organization contains 250 mailboxes.

  You purchase a Microsoft 365 subscription and plan to migrate to Exchange Online next month.

  In 12 months, you plan to increase the bandwidth available for the Internet connection.

  You need to recommend the best migration strategy for the organization. The solution must minimize administrative effort.

  What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

  A. network upload

  B. cutover migration

  C. hybrid migration

  D. staged migration

  Correct Answer: C

  With a hybrid migration, you can migrate the mailboxes in small batches over a period of time which will help to avoid saturating the bandwidth. With the migration wizard, you can configure a migration batch to start outside office hours which

  would minimize bandwidth usage during office hours.

  With a hybrid migration, you do not need to reconfigure Outlook to connect to the migrated mailbox. Outlook will automatically detect the new mailbox location. This reduces administrative effort.

  Incorrect Answers:

  A: `Network upload' is not a defined migration strategy.

  B: With a cutover migration, all mailboxes are migrated in one go. This is not suitable for a low bandwidth Internet connection. You would also need to manually reconfigure Outlook for each user which does not meet the requirement of minimizing administrative effort.

  D: With a staged migration, mailboxes are migrated in batches. However, Microsoft recommends using a staged migration when you have more than 2000 mailboxes. You would also need to manually reconfigure Outlook for each user which does not meet the requirement of minimizing administrative effort.

  Reference: https://docs.microsoft.com/en-us/exchange/mailbox-migration/mailbox-migration

• Question 328:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the

  main office connection.

  Users use Microsoft Outlook 2016 to connect to a Microsoft Exchange Server mailbox hosted in the main office.

  The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

  You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

  You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

  Solution: You enable Cached Exchange Mode for all the Outlook profiles.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The question states that the branch offices connect to the Internet by using the main office connections. Therefore, all Internet traffic goes over the WAN link between the branch office and main office. After the migration, the users connect to

  their mailboxes hosted in Exchange Online over the Internet and therefore over the WAN link.

  If the WAN link goes down, the branch office users will not be able to connect to the Internet and therefore will not be able to access their email using Outlook.

  Using Cached mode would enable users to access emails that have already been downloaded as they would be cached in Outlook. However, the users would not be able to download new email or send email if the WAN link failed.

  The solution is to add a direct connection to the Internet from the branch offices, so their Internet traffic does not go over the WAN link.

• Question 329:

  Your network contains an Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has a share named Share1.

  You have a hybrid deployment of Microsoft 365.

  You need to migrate the content in Share1 to Microsoft OneDrive.

  What should you use?

  A. Windows Server Migration Tools

  B. Microsoft SharePoint Migration Tool

  C. Storage Migration Service

  Correct Answer: B

  The SharePoint Migration Tool lets you migrate content to SharePoint Online and OneDrive from the following locations:

  1.

  SharePoint Server 2013

  2.

  SharePoint Server 2010

  3.

  Network and local file shares Reference: https://docs.microsoft.com/en-us/sharepointmigration/migrating-content-to-onedrive-for-business

  https://docs.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool

• Question 330:

  You have a Microsoft 365 subscription. All users have client computers that run Windows 10 and have Microsoft Office 365 ProPlus installed.

  Some users in the research department work for extended periods of time without an Internet connection.

  How many days can the research department users remain offline before they are prevented from editing Office documents?

  A. 10

  B. 30

  C. 90

  D. 120

  Correct Answer: B

  After 30 days, Microsoft Office 365 ProPlus will go into reduced functionality mode. When this happens, users will be able to open files but they won't be able to edit them.

  As part of the installation process, Office 365 ProPlus communicates with the Office Licensing Service and the Activation and Validation Service to obtain and activate a product key. Each day, or each time the user logs on to their computer, the computer connects to the Activation and Validation Service to verify the license status and extend the product key. As long as the computer can connect to the Internet at least once every 30 days, Office remains fully functional. If the computer goes offline for more than 30 days, Office enters reduced functionality mode until the next time a connection can be made.

  Reference: https://docs.microsoft.com/en-us/deployoffice/overview-of-licensing-and-activation-in-office-365-proplus