Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 401:

  Your company has a sales system that emails an alert to all the members of the sales department when a new sale is made. You need to ensure that a notification is posted to a team channel when a new sale is made. The solution must

  minimize development effort.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Post XML to the webhook URL from the existing sales system.

  B. Set the configurationUrl property of a connector in the manifest

  C. Get an incoming webhook for the channel

  D. Post JSON to the webhook URL from the existing sales system.

  Correct Answer: AC

• Question 402:

  Your company has three main offices and one branch office. The branch office is used for research.

  The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

  You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office

  What should you include in the recommendation?

  A. Azure AD password protection

  B. a Microsoft Endpoint Manager Device compliance policy

  C. Azure AD conditional access

  D. a Microsoft Endpoint Manager Device configuration profile

  Correct Answer: B

• Question 403:

  You have a Microsoft 365 E5 subscription.

  Users access Microsoft 365 from both their laptop and a corporate Virtual Desktop infrastructure (VCH) solution.

  From Azure AD Identity Protection, you enable a sign-in risk policy.

  Users report that when they use the VDI solution, they are regularly blocked when they attempt to access Microsoft 365.

  What should you configure?

  A. the Microsoft 365 network connectivity settings

  B. a Conditional Access policy exclusion

  C. the Tenant restrictions settings in Azure AD

  D. trusted location

  Correct Answer: B

  You should configure a Conditional Access policy exclusion. Conditional Access allows you to configure policies that specify the conditions under which users are allowed to access your organization's resources. In this case, you should create a policy exclusion that exempts users who are accessing Microsoft 365 from the corporate VDI solution. This will allow them to access Microsoft 365 without being blocked by the sign-in risk policy.

• Question 404:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a Microsoft 365 tenant.

  You suspect that several Office 365 features were recently updated.

  You need to view a list of the features that were recently updated in the tenant.

  Solution: You use Reports from the Microsoft Purview compliance portal.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 405:

  Your company has 10,000 users who access all applications from an on-premises data center.

  You plan to create a Microsoft 365 subscription and to migrate data to the cloud.

  You plan to implement directory synchronization.

  User account and group accounts must sync to Microsoft Azure Directory (Azure AD) successfully.

  You discover that several user accounts fail to sync to Azure AD.

  You need to identify which user accounts failed to sync. You must resolve the issue as quickly as possible.

  What should you do?

  A. From Active Directory Administrative Center, search for all the users, and then modify the properties of the user accounts.

  B. Run idfix.exe, and then click Complete.

  C. From Windows PowerShell, run the Start-AdSyncSyncCycle olicyType Delta command.

  D. Run idfix.exe, and then click Edit.

  Correct Answer: D

  IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory. IdFix is intended for the Active Directory administrators responsible for directory synchronization with Azure Active Directory.

  Reference: https://docs.microsoft.com/en-us/office365/enterprise/prepare-directory-attributes-for-synch-with-idfix https://www.microsoft.com/en-gb/download/details.aspx?id=36832

• Question 406:

  You have a Microsoft 365 subscription.

  You need to add additional onmicrosoft.com domains to the subscription. The additional domains must be assignable as email addresses for users.

  What is the maximum number of onmicrosoft.com domains the subscription can contain?

  A. 1

  B. 2

  C. 5

  D. 10

  Correct Answer: A

• Question 407:

  You have a Microsoft 365 Enterprise E5 subscription.

  You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.

  What should you do?

  A. Create on activity policy.

  B. Create a Sign-in risk policy.

  C. Create a session policy.

  D. Create an app permission policy.

  Correct Answer: B

  You can configure a sign-in risk policy that applies to the Finance department users. The policy can be configured to 'Allow access' but with multi-factor authentication as a requirement.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

• Question 408:

  You have a Microsoft 365 subscription.

  All users are assigned Microsoft 365 Apps for enterprise licenses.

  You need to ensure that reports display the names of users that have activated Microsoft 365 apps and on how many devices

  What should you modify in the Microsoft 365 admin center?

  A. Organization information

  B. Org settings for Reports

  C. the Reports reader role

  D. Org settings for Privacy profile

  Correct Answer: B

  You should modify Org settings for Reports in the Microsoft 365 admin center. In the Microsoft 365 admin center, you can configure the Org settings for Reports to generate usage reports that display the names of users who have activated Microsoft 365 apps and the number of devices they have activated the apps on. This information is especially useful for keeping track of usage and ensuring that users have access to the apps they need.

• Question 409:

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

  

  Group2 is a member of Group1.

  You assign a Microsoft Office 365 Enterprise E3 license to Group1.

  You need to identity how many Office 365 E3 licenses are assigned.

  What should you identify?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: C

  Group-based licensing currently does not support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied. Therefore, User2 will not be assigned a license.

  When Azure AD assigns group licenses, any users without a specified usage location inherit the location of the directory. Therefore, User3 will be assigned a license and his usage location will be set to the location of the directory.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced

• Question 410:

  You have a Microsoft 365 subscription that uses an Azure Directory (Azure AD) tenant named Contoso.com. The tenant contains the users shown in the following table.

  

  You add another user named user5 to the User administrator role.

  You need to identify which management tasks User5 can perform.

  Which two tasks should you identify? Each correct answer presents a complete solution.

  A. Reset the password of any user in Azure AD.

  B. Delete any user in Azure AD.

  C. Reset the password of User2 and User4 only.

  D. Reset the password of User4 only.

  E. Delete User1, User2, and User4 only.

  F. Delete User2 and User4 only.

  Correct Answer: CF

  Users with the User Administrator role can create users and manage all aspects of users with some restrictions (see below). Only on users who are non-admins or in any of the following limited admin roles:

  1.

  Directory Readers

  2.

  Guest Inviter

  3.

  Helpdesk Administrator

  4.

  Message Center Reader

  5.

  Reports Reader

  6.

  User Administrator

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles