Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 41:

  HOTSPOT

  You plan to implement a new task pane in Microsoft Office.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 42:

  HOTSPOT

  Your network contains an on-premises Active Directory domain. The domain contains the users shown in the following table.

  

  You have a Microsoft 365 subscription that is linked to an Azure AD tenant named contoso.com.

  You configure Azure AD Connect to sync the on-premises domain to contoso.com as shown in the following exhibit.

  

  You create a synchronization rule for the users. The scoping filters for the rule are configured as shown in the following exhibit. Add scoping filters, or click next to skip this step.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  User1 is not in OU2 and not in Canada.

  Note:

  Sync selected domain and OUs. OU1 and Users are selected for synchronization.

  There are two separate Scoping Filters. The first is set for OU OU2, and the second for Country CA (Canada).

  Note: You can use multiple filtering options at the same time. For example, you can use OU-based filtering to only include objects in one OU. At the same time, you can use attribute-based filtering to filter the objects further. When you use multiple filtering methods, the filters use a logical "AND" between the filters. Box 2: Yes

  User2 is in Canada.

  Box 3: Yes User3 is in OU2. Reference: https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts

• Question 43:

  HOTSPOT

  Your network contains an on-premises Active Directory domain.

  You have a Microsoft 365 E5 subscription.

  You plan to implement directory synchronization.

  You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege

  What should you use? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

• Question 44:

  HOTSPOT You have a multitenant app named App1. You need to ensure that App1 supports token acquisition when a user accesses the app by using a web browser that has a popup blocker extension enabled. How should you complete the Microsoft Authentication Library (MSAL) for

  JavaScript v2.0 code? To answer, select the appropriate options m the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: https://login.microsoftonline.com/common/

  The authority is a URL that indicates a directory that MSAL can request tokens from.

  * https://login.microsoftonline.com/common/

  Sign in users with work and school accounts or personal Microsoft accounts.

• Question 45:

  HOTSPOT

  You have a Microsoft 365 subscription you use Active Directory (Azure AD) tenant named contoso.com. The tenant contains the Windows 10 devices shown in the following table.

  

  All the devices are managed by using Microsoft Endpoint Manager and are members of a group named Group1.

  From the Microsoft Endpoint Manager admin center, you create an app suite named App1 for Microsoft Office 365 apps.

  You configure the App1 settings as shown in the exhibit. (Click the Exhibit tab.)

  

  You assign App1 to Group1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Note: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 46:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You have an Azure AD tenant named contoso.com that contains the following users:

  1.

  Admin1

  2.

  Admin2

  3.

  User1

  Contoso.com contains an administrative unit named AU1 that has no role assignments. User1 is a member of AU1.

  You create an administrative unit named AU2 that does NOT have any members or role assignments.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  Box 2: Yes A user can be a member of different AUs. Box 3: No

  You must first add Admin2 to AU1.

  Reference: https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units

• Question 47:

  HOTSPOT

  You have a Microsoft 365 tenant that contains 300 users.

  The users have Domestic and International Calling Plan licenses.

  What is the maximum user phone numbers and toll-free service phone numbers can you acquire? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoftteams/how-many-phone-numbers-can-you-get

• Question 48:

  HOTSPOT

  You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

  

  Password writeback is disabled in Azure AD Connect.

  You enable self-service password reset (SSPR) for Group1.

  You configure password protection for contoso.com as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  With the password policy, VeRYC0MplexPa55w.rd. is an acceptable password.

  Box 1: Yes

  User1 is an Azure AD account so User1 can reset his password.

  Box 2: No

  User2 is a Windows Server Active Directory Account. User2 could change the password for the Azure AD account. However, as Password Writeback is disabled, the password change will not be written back to the Windows Server Active

  Directory account.

  Box 3: No

  The Azure AD Tenant is named contoso.com. User3 is a guest account from a different directory named outlook.com. You cannot use SSPR in one directory to change the password for an account in a different directory.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

• Question 49:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You configure a multi-factor authentication (MFA) registration policy that has the following settings:

  Assignments:

  -Include: Group1

  -Exclude: Group2 Access controls: Require Azure MFA registration Enforce Policy: On

  You create a conditional access policy that has the following settings:

  Name: Policy1 Assignments:

  -Include: Group2

  -Exclude: Group1 Access controls:

  -Grant, Require multi-factor authentication Enable policy: On

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  The MFA policy applies to User1 so he will be prompted to register for MFA. He has 14 days to complete the registration. During this 14-day period, he can bypass registration but at the end of the period he will be required to register before

  he can complete the sign-in process.

  The Conditional Access Policy does not apply to User1 so MFA is not required.

  Box 2: No

  User2's MFA status is Enabled which means he has been enrolled in MFA but has not yet completed the registration.

  The Conditional Access Policy does not apply to User2 because Group1 is excluded so MFA is not required.

  Box 3: Yes

  The Conditional Access Policy does apply to User3 so MFA will be required. He will need to be enrolled for MFA first.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy

  https://docs.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication?view=o365-worldwide

• Question 50:

  HOTSPOT

  You need to ensure that a user named User1 can create documents by using Office for the web.

  Which two Microsoft Office 365 license options should you turn on for User1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct section is worth one point.

  Hot Area:

  

  Correct Answer: