Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 331:

  Your network contains the servers shown in the following table.

  

  You purchase Microsoft 365 Enterprise E5 and plan to move all workloads to Microsoft 365 by using a hybrid identity solution and a hybrid deployment for all workloads.

  You need to identify which server must be upgraded before you move to Microsoft 365.

  What should you identify?

  A. Server2

  B. Server3

  C. Server5

  D. Server1

  E. Server4

  Correct Answer: B

  Exchange Server 2007 is not supported for a hybrid deployment.

  Reference: https://docs.microsoft.com/en-us/exchange/hybrid-deployment-prerequisites

• Question 332:

  Your on-premises network contains five file servers. The file servers host shares that contain user data.

  You plan to migrate the user data to a Microsoft 365 subscription.

  You need to recommend a solution to import the user data into Microsoft OneDrive.

  What should you include in the recommendation?

  A. Configure the settings of the OneDrive client on your Windows 10 device.

  B. Configure the Sync settings in the OneDrive admin center.

  C. Run the SharePoint Hybrid Configuration Wizard.

  D. Run the SharePoint Migration Tool.

  Correct Answer: D

  The SharePoint Migration Tool lets you migrate content to SharePoint Online and OneDrive from the following locations:

  1.

  SharePoint Server 2013

  2.

  SharePoint Server 2010

  3.

  Network and local file shares

  Reference: https://docs.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool

• Question 333:

  Your network contains two Active Directory forests. Each forest contains two domains.

  You plan to configure Hybrid Azure AD join for the computers.

  You create a Microsoft Azure Active Directory (Azure AD) tenant.

  You need to ensure that the computers can discover the Azure AD tenant.

  What should you create?

  A. a new computer account for each computer

  B. a new service connection point (SCP) for each domain

  C. a new trust relationship for each forest

  D. a new service connection point (SCP) for each forest

  Correct Answer: D

  Your devices use a service connection point (SCP) object during the registration to discover Azure AD tenant information. In your on-premises Active Directory instance, the SCP object for the hybrid Azure AD joined devices must exist in the configuration naming context partition of the computer's forest. There is only one configuration naming context per forest. In a multi-forest Active Directory configuration, the service connection point must exist in all forests that contain domain-joined computers.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-manual

• Question 334:

  You have an on-premises Microsoft SharePoint Server 2016 environment.

  You create a Microsoft 365 tenant.

  You need to migrate some of the SharePoint sites to SharePoint Online. The solution must meet the following requirements:

  1.

  Microsoft OneDrive sites must redirect users to online content.

  2.

  Users must be able to follow both on-premises and cloud-based sites.

  3.

  Users must have a single SharePoint profile for both on-premises and on the cloud.

  4.

  When users search for a document by using keywords, the results must include online and on-premises results.

  From the SharePoint Hybrid Configuration Wizard, you select the following features:

  1.

  Hybrid business to business (B2B) sites

  2.

  Hybrid OneDrive

  3.

  Hybrid Search

  Which two requirements are met by using the SharePoint Hybrid Configuration Wizard features? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Users must have a single SharePoint profile for both on-premises and on the cloud.

  B. OneDrive sites must redirect users to online content.

  C. Users must be able to follow both on-premises and cloud-based sites.

  D. When users search for a document by using keywords, the results must include online and on-premises results.

  Correct Answer: BD

  Hybrid OneDrive - Choosing this option will redirect on-premises My Sites/OneDrive for Business sites to SharePoint Online OneDrive for Business in Office 365. Once the wizard completes, any click of the OneDrive link from on-premises will redirect to OneDrive for Business in the cloud. This meets the following requirement: OneDrive sites must redirect users to online content.

  Cloud hybrid search - Choosing this option creates a cloud Search service application in SharePoint Server and connects the cloud Search service application to your Office 365 tenant. This meets the following requirement: When users search for a document by using keywords, the results must include online and on-premises results.

  Reference: https://docs.microsoft.com/en-us/sharepoint/hybrid/hybrid-picker-in-the-sharepoint-online-admin-center

• Question 335:

  You create a Microsoft 365 Enterprise subscription.

  You assign licenses for all products to all users.

  You need to prepare the environment to ensure that all Microsoft Office 365 ProPlus installations occur from a network share. The solution must prevent the users from installing Office 365 ProPlus from the Internet.

  You download the Office Deployment Tool (ODT).

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From your computer, run setup.exe /download downloadconfig.xml.

  B. Create an XML download file.

  C. From the Microsoft 365 admin center, deactivate the Office 365 licenses for all the users.

  D. From each client computer, run setup.exe /configure installconfig.xml.

  E. From the Microsoft 365 admin center, configure the Software download settings.

  Correct Answer: BDE

  You can use the Office Deployment Tool (ODT) to download the installation files for Office 365 ProPlus from a local source on your network instead of from the Office Content Delivery Network (CDN).

  The first step is to create the configuration file. You can download an XML template file and modify that.

  The next step to install Office 365 ProPlus is to run the ODT executable in configure mode with a reference to the configuration file you just saved. In the following example, the configuration file is named installconfig.xml. setup.exe /configure

  installconfig.xml

  After running the command, you should see the Office installation start.

  To prevent the users from installing Office 365 ProPlus from the Internet, you need to configure the Software download settings (disallow downloads) in the Microsoft 365 admin center.

  Reference:

  https://docs.microsoft.com/en-us/deployoffice/overview-of-the-office-2016-deployment-tool#download-the-installation-files-for-office-365-proplus-from-a-local-source

• Question 336:

  Your company has an on-premises Microsoft Exchange Server 2013 organization.

  The company has 100 users.

  The company purchases Microsoft 365 and plans to move its entire infrastructure to the cloud.

  The company does NOT plan to sync the on-premises Active Directory domain to Microsoft Azure Active Directory (Azure AD).

  You need to recommend which type of migration to use to move all email messages, contacts, and calendar items to Exchange Online.

  What should you recommend?

  A. cutover migration

  B. IMAP migration

  C. remote move migration

  D. staged migration

  Correct Answer: A

  A cutover migration and an IMAP migration do not require the company to sync the on-premises Active Directory domain to Microsoft Azure Active Directory (Azure AD). Only a cutover migration meets the requirements in this question. With a cutover migration, user accounts will need to be created in Azure Active Directory for each user. The mailboxes are all migrated in one go and MX records configured to redirect email to Microsoft 365.

  Incorrect Answers:

  B: Contacts, calendar items and tasks cannot be migrated with an IMAP migration.

  C: A remote move migration requires a hybrid exchange configuration which requires that the on-premises Active Directory domain is synced to Microsoft Azure Active Directory (Azure AD).

  D: A staged migration is recommended when your source email system is Microsoft Exchange Server 2003 or Microsoft Exchange Server 2007. You can't use a staged migration to migrate Exchange 2013 or Exchange 2010 mailboxes to Office 365. A staged migration also requires that the on-premises Active Directory domain is synced to Microsoft Azure Active Directory (Azure AD).

  Reference: https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365

  https://docs.microsoft.com/en-us/exchange/mailbox-migration/what-to-know-about-a-staged-migration

• Question 337:

  You have a Microsoft 365 subscription.

  All users have their email stored in Microsoft Exchange Online

  In the mailbox of a user named User, you need to preserve a copy of all the email messages that contain the word ProjectX.

  What should you do first?

  A. From the Exchange admin center, start a mail flow message trace.

  B. From the Security and Compliance admin center, start a message trace.

  C. From the Security and Compliance admin center, create a label and label policy.

  D. From the Exchange admin center, create a mail flow rule.

  Correct Answer: C

  When you configure conditions for a label, you can automatically assign a label to a document or email. In this case, we would create a label to label all email messages that contain the word ProjectX. We would then create a label policy to preserve a copy of all message that have the label assigned.

  Reference: https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-classification

• Question 338:

  You have a Microsoft 365 subscription.

  Your company purchases a new financial application named App1.

  From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.

  You need to prevent the missing information from affecting the score.

  What should you configure from the Cloud Discover settings?

  A. App tags

  B. Score metrics

  C. Organization details

  D. Default behavior

  Correct Answer: B

  An app's score in Cloud Discovery is based on categories such as General, Security, Compliance and Legal. Each category has several parameters. For example, the domain registration and consumer popularity parameters are part of the General category. These parameters are known as Score Metrics.

  You can modify the default weights given to the Cloud Discovery score configuration. By default, all the various parameters evaluated are given an equal weight. If there are certain parameters that are more or less important to your organization, you can adjust the weight of each score metric.

  In this case, we need to lower the weight of the domain registration and consumer popularity score metrics.

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/risk-score

• Question 339:

  You have an on-premises web application that is published by using a URL of https://app.contoso.local.

  You purchase a Microsoft 365 subscription.

  Several external users must be able to connect to the web application.

  You need to recommend a solution for external access to the application. The solution must support multi-factor authentication.

  Which two actions should you recommend? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From an on-premises server, install a connector, and then publish the app.

  B. From the Azure Active Directory admin center, enable an Application Proxy.

  C. From the Azure Active Directory admin center, create a conditional access policy.

  D. From an on-premises server, install an Authentication Agent.

  E. Republish the web application by using https://app.contoso.com.

  Correct Answer: AB

  Azure Active Directory (Azure AD) has an Application Proxy service that enables users to access on-premises applications by signing in with their Azure AD account. The application proxy enables you to take advantage of Azure AD security

  features like Conditional Access and Multi-Factor Authentication.

  To use Application Proxy, install a connector on each Windows server you're using with the Application Proxy service. The connector is an agent that manages the outbound connection from the on-premises application servers to Application

  Proxy in Azure AD.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-add-on-premises-application

• Question 340:

  You have a Microsoft 365 subscription.

  From the Security and Compliance admin center, you create a content search of all the mailboxes that contain the word ProjectX.

  You need to export the results of the content search.

  What do you need to download the report?

  A. an export key

  B. a password

  C. a user certificate

  D. a certification authority (CA) certificate

  Correct Answer: A

  When you export a report, the data is temporarily stored in a unique Azure Storage area in the Microsoft cloud before it's downloaded to your local computer. To download the report from the Azure Storage Area, you need an export key.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/export-a-content-search-report