Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 431:

  You have a Microsoft 365 E5 subscription.

  You plan to implement Microsoft 365 usage analytics reports in Microsoft Power BI.

  You need to ensure that the Microsoft 365 usage analytics template app can access Microsoft 365 usage data.

  Which Authentication method should you select for Power BI?

  A. Anonymous

  B. OAuth2

  C. Key

  D. Basic

  Correct Answer: A

• Question 432:

  Your company purchases Microsoft Office 2021 Professional Plus for 100 users.

  You plan to use the Office Customization Tool (OCT) to deploy Office to the users.

  You need to create a configuration file for the deployment.

  What should you use to create the file?

  A. the Microsoft 365 admin center

  B. the Microsoft Endpoint Manager admin center

  C. the Office portal

  D. the Microsoft 365 Apps admin center

  Correct Answer: D

  Save and manage configuration files in the cloud

  To work with configuration files in the cloud, sign in to the Microsoft 365 Apps admin center and go to the Device Configuration page under Customization. From that page, you can do the following actions:

  To create a new file, select Create, create a configuration file, and then select Done. The configuration file is automatically saved to the cloud as part of your tenant.

  To edit an existing file, select the name of the file, make your changes, and then select Done.

  To get a link to a configuration file, select the file, select Get Link, and then select Copy. You can use the link to refer to the configuration file when you use the Office Deployment Tool.

  Reference: https://learn.microsoft.com/en-us/deployoffice/admincenter/overview-office-customization-tool

• Question 433:

  You have a Microsoft 365 E5 subscription.

  You need to configure third-party app access to the data in Microsoft 365. The solution must meet the following requirements:

  1.

  Prevent users from approving access.

  2.

  Ensure that users can request admin consent for access. Which portal should you use?

  A. the Microsoft 365 compliance center

  B. the Azure Active Directory admin center

  C. the Microsoft 365 admin center

  D. the Microsoft 365 Defender portal

  Correct Answer: B

  Enable the admin consent workflow.

  To enable the admin consent workflow and choose reviewers:

  1.

  Sign-in to the Azure portal with one of the roles listed in the prerequisites.

  2.

  Search for and select Azure Active Directory. In the left navigation pane in the Azure portal, click Azure Active Directory. The Azure Active Directory admin center is displayed.

  3.

  Select Enterprise applications.

  4.

  Under Manage, select User settings. Under Admin consent requests, select Yes for Users can request admin consent to apps they are unable to consent to .

  5.

  Etc.

  Note: The admin consent workflow gives admins a secure way to grant access to applications that require admin approval. When a user tries to access an application but is unable to provide consent, they can send a request for admin approval. The request is sent via email to admins who have been designated as reviewers. A reviewer takes action on the request, and the user is notified of the action.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow https://learn.microsoft.com/en-us/microsoft-365/compliance/use-your-free-azure-ad-subscription-in-office-365:

• Question 434:

  You have a Microsoft 365 subscription that contains an enterprise application named App1.

  App1 requires user consent to access user profile and email address information.

  You need to ensure that when a user accesses App1, users are granted consent automatically without being prompted. The solution must NOT affect any other apps in the subscription.

  What should you do?

  A. From the Azure Active Directory admin center, configure permissions for App1.

  B. From the Azure Active Directory admin center, configure the User consent settings.

  C. From the Microsoft 365 admin center, disable user consent to apps.

  D. From the Microsoft 365 admin center, enable privileged access.

  Correct Answer: A

  Grant tenant-wide admin consent in Enterprise apps You can grant tenant-wide admin consent through Enterprise applications if the application has already been provisioned in your tenant. For example, an app could be provisioned in your tenant if at least one user has already consented to the application.

  To grant tenant-wide admin consent to an app listed in Enterprise applications:

  1.

  Sign in to the Azure portal with one of the roles listed in the prerequisites section.

  2.

  Select Azure Active Directory, and then select Enterprise applications.

  3.

  Select the application to which you want to grant tenant-wide admin consent, and then select Permissions. Screenshot shows how to grant tenant-wide admin consent.

  4.

  Carefully review the permissions that the application requires. If you agree with the permissions the application requires, select Grant admin consent.

  Incorrect:

  Not B: Configure how users consent to applications

  Configure user consent settings

  To configure user consent settings through the Azure portal:

  1.

  Sign in to the Azure portal as a Global Administrator.

  2.

  Select Azure Active Directory > Enterprise applications > Consent and permissions > User consent settings.

  3.

  Under User consent for applications, select which consent setting you want to configure for all users.

  4.

  Select Save to save your settings.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-user-consent

• Question 435:

  You have a Microsoft 365 subscription that uses Microsoft OneDrive.

  You need to prevent users from syncing .exe and .mp3 files from their local device to OneDrive.

  What should you do?

  A. From the Microsoft 365 admin center, configure directory synchronization.

  B. From the SharePoint admin center, configure the Site storage limits settings.

  C. From the Microsoft 365 Apps admin center, create a policy.

  D. From the SharePoint admin center, configure the Sync settings.

  Correct Answer: D

  Block syncing of specific file types

  You can prevent users from uploading specific file types when they sync their OneDrive files.

  To block uploading of specific file types

  1.

  Go to Settings in the SharePoint admin center, and sign in with an account that has admin permissions for your organization.

  2.

  Select Sync.

  3.

  Sync settings in the SharePoint admin center

  4.

  Select the Block upload of specific file types check box.

  5.

  Enter the file name extensions you want to block, for example: exe or mp3.

  6.

  Select Save.

  Reference: https://docs.microsoft.com/en-us/onedrive/block-file-types

• Question 436:

  You have a Microsoft 365 tenant.

  A partner company has an email domain named contoso.com.

  You need to prevent out-of-office replies from being sent to contoso.com.

  What should you create?

  A. a rule

  B. an organization relationship

  C. a remote domain

  D. a connector

  Correct Answer: C

  The following table shows the types of replies you can control in a remote domain and the settings that each remote domain setting overrides.

  *

  Out-of-office messages - Specify whether an out-of-office message should be sent to people on the remote domain, and if so, which message to use. You can select either the reply that the user on your domain set up for people outside your organization, or the one for people inside your organization. The default is to send the out-of-office reply for people outside your organization.

  *

  Etc.

  Note: There are many reasons why you might want to control the types and the format of messages that your users send from Exchange Online to recipients in external domains. For example:

  *

  You work with an organization that you don't want to receive automatic messages from (for example, non-delivery reports and out-of-office replies).

  *

  You have a business partner that's outside your organization, and you'd like that partner to receive the same out-of-office replies as those received by people inside your organization.

  To accomplish this, you use what's called a remote domain.

  Users might have an out-of-office reply set up for people outside the organization, but if a sender from a remote domain sends mail to them, and the remote domain is not set to receive out-of-office replies, no out-of-office reply is sent. To

  change the settings, you can:

  Create a remote domain for a specific domain, and set unique properties for emails sent to that domain.

  Reference:

  https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/remote-domains/remote-domains

• Question 437:

  Your company has a main office and three new branch offices.

  The company has a Microsoft 365 subscription.

  From the Microsoft 365 admin center, you open Microsoft 365 network connectivity.

  You need to configure the prerequisites for enabling Microsoft 365 network connectivity.

  What should you do first?

  A. Select a SD-WAN solution and the data location.

  B. Enable Productivity Score.

  C. Update the organization information.

  D. Add location data to Microsoft 365.

  Correct Answer: D

  Pre-requisites for network connectivity assessments to appear To get started, turn on your location opt-in setting to automatically collect data from devices using Windows Location Services, go to your Locations list to add or upload location data, or run the Microsoft 365 network connectivity test from your office locations. These three options for office location information are detailed below. Whilst network connectivity can be evaluated across the organization, any network design improvements will need to be done for specific office locations. Network connectivity information is provided for each office location once those locations can be determined. There are three options for getting network assessments from your office locations:

  1.

  Enable Windows Location Services

  2.

  Add locations and provide LAN subnet information

  3.

  Manually gather test reports with the Microsoft 365 network connectivity test tool Reference: https://docs.microsoft.com/en-us/microsoft-365/enterprise/office-365-network-mac-perf-overview

• Question 438:

  You have Windows 10 devices that are managed by using Microsoft Endpoint Manager as shown in the following exhibit.

  

  You create an Office 365 Suite app as shown in the exhibit. (Click the Exhibit tab.) and assign the app to Group1.

  

  On which devices will Office 365 be installed?

  A. Device1, Device2, and Device4 only

  B. Device1, Device2, Device3, and Device4

  C. Device2 and Device4 only

  D. Device1 and Device2 only

  E. Device2 only

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/apps-add-office365

• Question 439:

  You have a Microsoft 365 E5 subscription that uses Microsoft Teams.

  You need to deploy the Microsoft Power Platform Center of Excellence (CoE) solution to a Microsoft Dataverse for Teams environment.

  What should you do first?

  A. From the Teams client add PowerApps.

  B. From the Teams client import the CoE solution.

  C. Create a new team.

  D. Create a canvas app.

  Correct Answer: D

  If you decide to use a Dataverse for Teams environment:

  Decide which team to add the CoE Starter Kit solution to, or create a new team.

  Install the Power Apps personal app in Microsoft Teams.

  Create your first app. At least one app is required in the environment to enable the solution import experience.

  Before setting up the CoE Starter Kit, Prepare your environment

  Reference: https://docs.microsoft.com/en-us/power-platform/guidance/coe/setup

• Question 440:

  Your network contains an on-premises Active Directory domain named contoso.com.

  For all user accounts, the Logon Hours settings are configured to prevent sign-ins outside of business hours.

  You plan to sync contoso.com to an Azure Active Directory (Azure AD) tenant.

  You need to recommend a solution to ensure that the logon hour restrictions apply when synced users sign in to Azure AD.

  What should you include in the recommendation?

  A. password synchronization

  B. conditional access policies

  C. pass-through authentication

  D. Azure AD Identity Protection policies

  Correct Answer: C

  Reference: https://nickblog.azurewebsites.net/2016/10/17/azure-ad-pass-through-authentication/