Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 371:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You create a device configuration profile from the Intune admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager.

  To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-

  enrolled in Microsoft Intune. You need to add Device1 to the Device Collection. You do not need to create a device configuration profile from the Intune admin center. Therefore, this solution does not meet the requirements.

  Reference:

  https://docs.microsoft.com/en-us/configmgr/comanage/how-to-enable

• Question 372:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

  You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

  You configure a pilot for co-management.

  You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

  You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

  Solution: You add Device1 to an Active Directory group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager.

  To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-

  enrolled in Microsoft Intune. You need to add Device1 to the Device Collection, not an Active Directory Group. Therefore, this solution does not meet the requirements.

  Reference:

  https://docs.microsoft.com/en-us/configmgr/comanage/how-to-enable

• Question 373:

  Your company has on-premises servers and a Microsoft Azure Active Directory (Azure AD) tenant.

  Several months ago, the Azure AD Connect Health agent was installed on all the servers.

  You review the health status of all the servers regularly.

  Recently, you attempted to view the health status of a server named Server1 and discovered that the server is NOT listed on the Azure Active Directory Connect Servers list.

  You suspect that another administrator removed Server1 from the list.

  You need to ensure that you can view the health status of Server1.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. From Windows PowerShell, run the Register-AzureADConnectHealthSyncAgent cmdlet.

  B. From Azure Cloud shell, run the Connect-AzureAD cmdlet.

  C. From Server1, change the Azure AD Connect Health services Startup type to Automatic (Delayed Start).

  D. From Server1, change the Azure AD Connect Health services Startup type to Automatic.

  E. From Server1, reinstall the Azure AD Connect Health agent.

  Correct Answer: AE

• Question 374:

  You have a Microsoft 365 subscription.

  You suspect that several Microsoft Office 365 applications or services were recently updated.

  You need to identify which applications or services were recently updated.

  What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. From the Microsoft 365 admin center, review the Message center blade.

  B. From the Office 365 Admin mobile app, review the messages.

  C. From the Microsoft 365 admin center, review the Products blade.

  D. From the Microsoft 365 admin center, review the Service health blade.

  Correct Answer: AB

  The Message center in the Microsoft 365 admin center is where you would go to view a list of the features that were recently updated in the tenant. This is where Microsoft posts official messages with information including new and changed

  features, planned maintenance, or other important announcements.

  The messages displayed in the Message center can also be viewed by using the Office 365 Admin mobile app.

  Reference:

  https://docs.microsoft.com/en-us/office365/admin/manage/message-center?view=o365-worldwide

  https://docs.microsoft.com/en-us/office365/admin/admin-overview/admin-mobile-app?view=o365-worldwide

• Question 375:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a Microsoft Office 365 tenant.

  You suspect that several Office 365 features were recently updated.

  You need to view a list of the features that were recently updated in the tenant.

  Solution: You use Monitoring and reports from the Compliance admin center.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Depending on what your organization's Office 365 subscription includes, the Dashboard in Security and Compliance includes several widgets, such as Threat Management Summary, Threat Protection Status, Global Weekly Threat Detections,

  Malware, etc. The Compliance admin center in Microsoft 365 contains much of the same information but also includes additional entries focusing on alerts, data insights.

  The Monitoring and reports section from the Compliance admin center does not display a list of the features that were recently updated in the tenant so this solution does not meet the goal.

  To meet the goal, you need to use Message center in the Microsoft 365 admin center.

  Reference:

  https://docs.microsoft.com/en-us/office365/admin/manage/message-center?view=o365-worldwide

• Question 376:

  Your network contains an Active Directory forest named adatum.local. The forest contains 500 users and uses adatum.com as a UPN suffix.

  You deploy a Microsoft 365 tenant.

  You implement directory synchronization and sync only 50 support users.

  You discover that five of the synchronized users have usernames that use a UPN suffix of onmicrosoft.com.

  You need to ensure that all synchronized identities retain the UPN set in their on-premises user account.

  What should you do?

  A. From the Microsoft 365 admin center, add adatum.com as a custom domain name.

  B. From Windows PowerShell, run the Set-ADDomain -AllowedDNSSuffixes adatum.com command.

  C. From Active Directory Users and Computers, modify the UPN suffix of the five user accounts.

  D. From the Microsoft 365 admin center, add adatum.local as a custom domain name.

  Correct Answer: C

  The question states that only five of the synchronized users have usernames that use a UPN suffix of onmicrosoft.com. Therefore the other 45 users have the correct UPN suffix. This tells us that the adatum.com domain has already been

  added to Office 365 as a custom domain.

  The forest is named adatum.local and uses adatum.com as a UPN suffix. User accounts in the domain will have adatum.local as their default UPN suffix. To use adatum.com as the UPN suffix, each user account will need to be configured to

  use adatum.com as the UPN suffix.

  Any synchronized user account that has adatum.local as a UPN suffix will be configured to use a UPN suffix of onmicrosoft.com because adatum.local cannot be added to Office 365 as a custom domain. Therefore, the reason that the five

  synchronized users have usernames with a UPN suffix of onmicrosoft.com is because their accounts were not configured to use the UPN suffix of contoso.com.

  Reference:

  https://docs.microsoft.com/en-us/office365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization

• Question 377:

  Your company has a main office and 20 branch offices in North America and Europe. Each branch connects to the main office by using a WAN link. All the offices connect to the Internet and resolve external host names by using the main

  office connections.

  You plan to deploy Microsoft 365 and to implement a direct Internet connection in each office.

  You need to recommend a change to the infrastructure to provide the quickest possible access to Microsoft 365 services.

  What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

  A. For all the client computers in the branch offices, modify the MTU setting by using a Group Policy object (GPO).

  B. In each branch office, deploy a proxy server that has user authentication enabled.

  C. In each branch office, deploy a firewall that has packet inspection enabled.

  D. In the branch offices, configure name resolution so that all external hosts are redirected to public DNS servers directly.

  Correct Answer: D

  Being a cloud service, Office 365 would be classed as an external host to the office computers.

  All the offices connect to the Internet and resolve external host names by using the main office connections. This means that all branch office computers perform DNS lookups and connect to the Internet over the WAN link.

  Each branch office will have a direct connection to the Internet so the quickest possible access to Microsoft 365 services would be by using the direct Internet connections. However, the DNS lookups would still go over the WAN links to main office. The solution to provide the quickest possible access to Microsoft 365 services is to configure DNS name resolution so that the computers use public DNS servers for external hosts. That way DNS lookups for Office 365 and the connections to Office 365 will use the direct Internet connections.

• Question 378:

  Your company has a Microsoft 365 subscription.

  You upload several archive PST files to Microsoft 365 by using the Security and Compliance admin center.

  A month later, you attempt to run an import job for the PST files.

  You discover that the PST files were deleted from Microsoft 365.

  What is the most likely cause of the files being deleted? More than one answer choice may achieve the goal. Select the BEST answer.

  A. The PST files were corrupted and deleted by Microsoft 365 security features.

  B. PST files are deleted automatically from Microsoft 365 after 30 days.

  C. The size of the PST files exceeded a storage quota and caused the files to be deleted.

  D. Another administrator deleted the PST files.

  Correct Answer: B

  You can use the Office 365 Import Service to bulk-import PST files to Office 365 mailboxes.

  When you use the network upload method to import PST files, you upload them to an Azure blob container named ingestiondata. If there are no import jobs in progress on the Import page in the Security and Compliance Center), then all PST files in the ingestiondata container in Azure are deleted 30 days after the most recent import job was created in the Security and Compliance Center.

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/faqimporting-pst-files-to-office-365

• Question 379:

  Your company has a Microsoft 365 subscription.

  You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.

  What should you use?

  A. the Licenses blade in the Azure portal

  B. Reports in the Microsoft 365 admin center

  C. Active users in the Microsoft 365 admin center

  D. Reports in Security and Compliance admin center

  Correct Answer: A

  In the Azure AD Admin Center, select Azure Active Directory then select Licenses to open the Licenses blade. From there you need to click on the ‘Managed your purchased licenses link’. Select a license you want to view, for example Office 365 E3. This will then display a list of all users with that license. In the ‘Assignment Paths’ column, it will say ‘Direct’ for a license that has been assigned directly to a user or ‘Inherited (Group Name)’ for a license that has been assigned through a group.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign

• Question 380:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

  

  Group2 is a member of Group1.

  You assign a Microsoft Office 365 Enterprise E3 license to Group1.

  How many Office 365 E3 licenses are assigned?

  B. 2

  C. 3

  D. 4

  Correct Answer: C

  Group-based licensing currently does not support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied. Therefore, User2 will not be assigned a license.

  When Azure AD assigns group licenses, any users without a specified usage location inherit the location of the directory. Therefore, User3 will be assigned a license and his usage location will be set to the location of the directory.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced