Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 411:

  You have a Microsoft 365 E5 subscription. You plan to use supervised chat in Microsoft Teams. You need to configure chat permission roles. Which policy type should you use?

  A. teams

  B. messaging

  C. setup

  D. permission

  Correct Answer: A

• Question 412:

  You manage multiple devices by using Microsoft Endpoint Manager. The devices run on the following operating systems:

  1.

  Android 8.0, Android 8.1.0, and Android 9

  2.

  iOS 12 and iOS 13

  3.

  MacOS 10.14

  4.

  Windows 10

  You need to deploy Microsoft 365 apps to the devices.

  From the Microsoft Endpoint Manager admin center, what is the minimum number of apps you should create?

  A. 1

  B. 3

  C. 4

  D. 7

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add

• Question 413:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains:

  1.

  Contoso.com

  2.

  East.contoso.com

  An Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant.

  You deploy a new domain named west.contoso.com to the forest.

  You need to ensure that west.contoso.com syncs to the Azure AD tenant.

  Solution: From the Azure AD Connect server in contoso.com, you return the setup wizard and include the west.contoso.com domain.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 414:

  You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1.

  You enable Azure AD Identity Protection.

  You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.

  To which role should you add User1?

  A. Security reader

  B. Service administrator

  C. Compliance administrator

  D. Global administrator

  Correct Answer: A

  Security Reader Users with this role have global read-only access on security-related feature, including all information in Microsoft 365 security center, Azure Active Directory, Identity Protection, Privileged Identity Management, as well as the ability to read Azure Active Directory sign-in reports and audit logs, and in Office 365 Security and Compliance Center.

  In Identity Protection Center can read all security reports and settings information for security features:

  1.

  Anti-spam

  2.

  Encryption

  3.

  Data loss prevention

  4.

  Anti-malware

  5.

  Advanced threat protection

  6.

  Anti-phishing

  7.

  Mail flow rules Incorrect:

  * Service administrator

  Previously, this role was called "Service Administrator" in Azure portal and Microsoft 365 admin center. We have renamed it to "Service Support Administrator" to align with the existing name in Microsoft Graph API and Azure AD PowerShell.

  Service Support Administrator

  Users with this role can create and manage support requests with Microsoft for Azure and Microsoft 365 services, and view the service dashboard and message center in the Azure portal and Microsoft 365 admin center.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

• Question 415:

  Your network contains an Active Directory domain.

  You have an Azure Active Directory (Azure AD) tenant that has Security defaults enabled.

  Azure AD Connect is configured for directory synchronization. Password hash synchronization and pass-through authentication are disabled.

  You need to enable Azure AD Identity Protection to detect leaked credentials.

  What should you do first?

  A. From the Azure Active Directory admin center, disable Security defaults.

  B. From Azure AD Connect, enable pass-through authentication.

  C. From the Azure Active Directory admin center, configure verifiable credentials.

  D. From Azure AD Connect, enable password hash synchronization.

  Correct Answer: D

  Azure AD Identity Protection requires Password Hash Sync regardless of which sign-in method you choose, to provide the Users with leaked credentials report.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

• Question 416:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You enable Microsoft 365 usage analytics for Microsoft Power BI.

  Which users can use Power BI to connect to Microsoft 365 usage analytics and review usage analytics reports?

  A. Admin3 only

  B. Admin1 and Admin2 only

  C. Admin3 and Admin4 only

  D. Admin1, Admin2, and Admin3 only

  E. Admin1, Admin2, Admin3, and Admin4

  Correct Answer: B

  Admin1 and Admin2 only.

  Who can connect to Microsoft 365 usage analytics?

  You have to be either a Global admin, Exchange admin (Admin1), Skype for Business admin, SharePoint admin (Admin2), Global reader (Admin3), Report reader, Usage Summary Reports Reader (Admin4) in order to establish the

  connection to the template app.

  Note: Global Reader and Usage Summary Reports Reader only allow access to tenant level aggregates in Microsoft 365 usage analytics and they don't have the permission to view the user activity reports (not Admin3, not Admin4).

  Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/usage-analytics/usage-analytics

• Question 417:

  You have a Microsoft 365 E5 subscription that uses Microsoft Teams.

  You need to provide Teams administrators with early access to Teams preview features.

  What should you configure?

  A. Release preferences in the Microsoft 365 admin center

  B. Teams upgrade settings in the Microsoft Teams admin center

  C. Office installation options in the Microsoft 365 admin center

  D. Teams update policies in the Microsoft Teams admin center

  Correct Answer: B

  Get early access to new Teams features.

  Join the Microsoft Teams public preview program to get early access to new features and share your feedback directly with the Teams team.

  Switch to the Teams public preview

  1.

  Select Settings and more to the left of your profile picture at the top of Teams.

  2.

  Select About > Public preview.

  3.

  In the notice that appears, select Switch to public preview.

  Reference: https://support.microsoft.com/en-us/office/get-early-access-to-new-teams-features-a6e387fe-1cad-4f90-ad78-1a311c77b36d

• Question 418:

  You have a Microsoft 365 subscription that contains a user named User1. User1 requires admin access to perform the following tasks:

  1.

  Manage Microsoft Exchange Online settings.

  2.

  Create Microsoft 365 groups.

  You need to ensure that User1 only has admin access for eight hours and requires approval before the role assignment takes place.

  What should you use?

  A. Microsoft Entra Verified ID

  B. Azure Active Directory (Azure AD) Identity Protection

  C. Conditional Access

  D. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

  Correct Answer: D

  Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management:

  1.

  Provide just-in-time privileged access to Azure AD and Azure resources

  2.

  Assign time-bound access to resources using start and end dates

  3.

  Require approval to activate privileged roles

  4.

  Enforce multi-factor authentication to activate any role

  5.

  Use justification to understand why users activate

  6.

  Get notifications when privileged roles are activated

  7.

  Conduct access reviews to ensure users still need roles

  8.

  Download audit history for internal or external audit

  9.

  Prevents removal of the last active Global Administrator and Privileged Role Administrator role assignments. Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 419:

  You have a Microsoft 365 subscription.

  You create a new Conditional Access policy named CAPolicy1.

  You need to be able to review how CAPolicy1 has affected users after 90 days.

  What should you do?

  A. From the Microsoft 365 admin center, view the Email activity report.

  B. Run the Get-AzureADAuditSignInLogscmdlet.

  C. From the Azure Active Directory admin center, review the sign-in logs for each user.

  D. Deploy the Conditional Access insights and reporting workbook.

  Correct Answer: D

  Conditional Access insights and reporting The Conditional Access insights and reporting workbook enables you to visualize Conditional Access queries and see the impact of a policy over time. You can examine the impact of an individual policy or all policies. Conditional Access insights and reporting uses Azure Monitor (Log Analytics) to store data over time, so you’ll have to set-up a Log Analytics workspace first.

  Reference: https://allthingscloud.blog/conditional-access-policies-in-report-only-mode-now-what/

• Question 420:

  You have a Microsoft 365 subscription.

  You plan to use Productivity Score and need to ensure that it can obtain device and software metrics.

  What should you do?

  A. Enable privileged access.

  B. Configure Support integration:

  C. Enable Endpoint analytics.

  D. Run the Microsoft 365 network connectivity test on each device.

  Correct Answer: C

  Adoption Score also has a "technology experience category" that's described as showing "the efficient use of Microsoft 365." It's based on using Adoption Score's Endpoint Analytics service, which shows hardware and software "performance and health issues." Endpoint Analytics gets turned on within Microsoft Intune, which is Microsoft's mobile management service.

  Note: 08/26/2022. Microsoft on Thursday announced the rollout of Adoption Score, a service that tracks Microsoft 365 use in organizations that was formerly called "Productivity Score."

  Reference: https://redmondmag.com/articles/2022/08/26/microsoft-adoption-score-product-replaces-productivity-score-for-tracking-microsoft-365-apps-use.aspx