Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 391:

  You have a Microsoft 365 E5 subscription.

  You need to recommend a solution for monitoring and reporting application access. The solution must meet the following requirements:

  Support KQL for querying data.

  Retain report data for at least one year.

  What should you include in the recommendation?

  A. Microsoft 365 usage analytics

  B. a security report in Microsoft 365 Defender

  C. Azure Monitor workbooks

  D. Endpoint analytics

  Correct Answer: C

  Explanation:

  User retention analysis for web applications with Application Insights, The Retention workbook

  The retention feature in Application Insights helps you analyze how many users return to your app, and how often they perform particular tasks or achieve goals.

  Workbook capabilities:

  By default, retention shows all users who did anything and then came back and did anything else over a defined period. You can select different combinations of events to narrow the focus on specific user activities.

  Note: Workbooks provide a flexible canvas for data analysis and the creation of rich visual reports within the Azure portal. They allow you to tap into multiple data sources from across Azure and combine them into unified interactive

  experiences. Workbooks let you combine multiple kinds of visualizations and analyses, making them great for freeform exploration.

  Incorrect:

  Not D: Endpoint analytics is part of the Microsoft Adoption Score. These analytics give you insights for measuring how your organization is working and the quality of the experience you're delivering to your users. Endpoint analytics can help

  identify policies or hardware issues that may be slowing down devices and help you proactively make improvements before end-users generate a help desk ticket. For more information on the Microsoft Adoption Score and other new tools.

  Reference:

  https://learn.microsoft.com/en-us/azure/azure-monitor/app/usage-retention

  https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-overview

  https://learn.microsoft.com/en-us/mem/analytics/overview

• Question 392:

  You have a Microsoft 365 subscription that contains Microsoft 365 Apps for enterprise.

  Users report that they cannot install Microsoft Office 365 apps from the Office portal.

  You need to ensure that the users can install Office 365 apps.

  What should you do?

  A. From the Microsoft 365 admin center, configure Office on the web.

  B. From the Microsoft 365 admin center, configure Office installation options.

  C. From the Microsoft 365 admin center, configure Office Scripts.

  D. From the Microsoft 365 admin center, enable user consent to apps.

  Correct Answer: B

  Explanation:

  Manage Microsoft 365 installation options in the Microsoft 365 admin center

  As a Microsoft 365 admin, you can choose to do the following tasks on the Microsoft 365 installation options page in the Microsoft 365 admin center:

  Choose how often to get feature updates for Office

  Manage which version of Office is installed, including

  Roll back to a previous version

  Skip an upcoming version

  Choose whether users can install Office on their own devices

  Reference:

  https://learn.microsoft.com/en-us/deployoffice/manage-software-download-settings-office-365

• Question 393:

  You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

  You have the devices shown in the following table.

  

  You plan to use Endpoint analytics to monitor device health and user experience. Which devices can you monitor?

  A. Device1 only

  B. Device1 and Device2 only

  C. Device1, Device2, and Device3 only

  D. Device1, Device2 and Device4 only

  E. Device1, Device2, Device3, and Device4

  Correct Answer: C

• Question 394:

  You have a Microsoft 365 subscription.

  You plan to create configuration files for deploying Microsoft 365 Apps for enterprise.

  You need to ensure that you can deploy the following:

  Microsoft 365 Apps for enterprise only

  Microsoft 365 Apps for enterprise and Microsoft Visio only Microsoft 365 Apps for enterprise and Microsoft Project only Microsoft 365 Apps for enterprise, Microsoft Visio, and Project

  All the deployments must be available in both 32-bit and 64-bit versions. What is the minimum number of configuration files required?

  A. 3

  B. 4

  C. 6

  D. 8

  E. 16

  Correct Answer: C

• Question 395:

  Your on-premises network contains an Active Directory domain and a Microsoft Exchange Server 2019 organization.

  You have a Microsoft 365 E5 subscription.

  You plan to implement a hybrid directory and messaging infrastructure by using Azure AD Connect cloud sync.

  Which two features does Azure AD Connect cloud sync support? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Exchange hybrid writeback

  B. security group filtering

  C. pass-through authentication

  D. the synchronization of device objects

  E. the synchronization of multiple disconnected on-premises Active Directory forests

  Correct Answer: AE

  Explanation:

  Azure AD Connect cloud sync

  (A)

  Supports Exchange hybrid writeback

  (E)

  Supports connect to multiple on-premises AD forests

  Does not support for Pass-Through Authentication

  Does not support device objects

  E: How is Azure AD Connect cloud sync different from Azure AD Connect sync?

  With Azure AD Connect cloud sync, provisioning from AD to Azure AD is orchestrated in Microsoft Online Services. An organization only needs to deploy, in their on-premises or IaaS-hosted environment, a light-weight agent that acts as a

  bridge between Azure AD and AD. The provisioning configuration is stored in Azure AD and managed as part of the service.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/what-is-cloud-sync

• Question 396:

  Your company has multiple offices worldwide.

  The company has a Microsoft 365 E5 subscription.

  You need to enable a user named Admin1 to use Microsoft 365 network connectivity. The solution must use the principle of least privilege.

  Which role should you assign to Admin1?

  A. Helpdesk Administrator

  B. Message Center Reader

  C. Office Apps Administrator

  D. Service Support Administrator

  Correct Answer: D

  Explanation:

  Service Support Administrator

  Users with this role can create and manage support requests with Microsoft for Azure and Microsoft 365 services, and view the service dashboard and message center in the Azure portal and Microsoft 365 admin center.

  Actions include:

  microsoft.office365.network/performance/allProperties/read

  Read all network performance properties in the Microsoft 365 admin center

  Reference:

  https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

• Question 397:

  You are building a Microsoft Office Add-in for Outlook that will use the Microsoft Graph REST API to retrieve a users documents from a Microsoft SharePoint Online site. What should the add-m provide to retrieve the documents on behalf of the user?

  A. a refresh token

  B. an identity token

  C. a single sign-on (SSO) token

  D. an access token

  Correct Answer: D

• Question 398:

  You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD). Currently. App1 can read user profile information

  You need to allow App1 to read the user's calendar.

  Solution: From the Azure portal, edit the API permission list for App1. Add the Microsoft Graph API and the Calendars-Read permissions and then grant tenant admin consent.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 399:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  Which users can review the Adoption Score in the Microsoft 365 admin center?

  A. User1 only

  B. User2 only

  C. User1 and User2 only

  D. User1 and User3 only

  E. User1, User2, and User3

  Correct Answer: E

  Explanation:

  To view the entire Adoption Score, you need be one of the following admin roles:

  Global Administrator

  Exchange Administrator (User2)

  SharePoint Administrator

  Skype for Business Administrator

  Teams Service Administrator

  Teams Communications Administrator

  Global Reader

  Reports Reader (User1)

  Usage Summary Reports Reader

  User Experience Success Manager (User3)

  Organizational Messages Writer Role

  Reference:

  https://learn.microsoft.com/en-us/microsoft-365/admin/adoption/privacy

• Question 400:

  Your company recently purchased a Microsoft 365 subscription.

  You enable Microsft Azure Multi-Factor Authentication (MFA) for all 500 users in the Azure Active Directory (Azure tenant)

  You need to generate a report that lists all the users who Azure registeration process.

  What is the best approach to achieve the goal? More than one answer choice achieve the goal. Select the Best answer.

  A. From Azure Cloud Shell, run the Get-Msoluser cndlet.

  B. From the Azure Active Directory admin center, use the Risky sign-ins blade.

  C. From the Azure Active Directory admin center, use the Multi-factor Authentication Server Status blade.

  D. From Azure Cloud Shell, run the Get-AzureADUser cndlet.

  Correct Answer: A