Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 491:

  Your company Microsoft Azure Active Directory (Azure AD) tenant includes four users that are configured with the Privileged role administrator, the User administrator, the Security administrator, and the Billing administrator roles respectively.

  A security group has been included in the tenant for the purpose of managing administrative accounts.

  Which of the four roles can be used to create a guest user account?

  A. The Privileged role administrator role.

  B. The User administrator role.

  C. The Security administrator role.

  D. The Billing administrator role.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

• Question 492:

  Your company Microsoft Azure Active Directory (Azure AD) tenant includes four users that are configured with the Privileged role administrator, the User administrator, the Security administrator, and the Billing administrator roles respectively.

  A security group has been included in the tenant for the purpose of managing administrative accounts.

  Which of the four roles can be used to add a user with the Security administrator role to the security group?

  A. The Privileged role administrator role.

  B. The User administrator role.

  C. The Security administrator role.

  D. The Billing administrator role.

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

• Question 493:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company currently has an on-premises Active Directory forest.

  You have been tasked with assessing the application of Microsoft 365 and the utilization of an authentication strategy.

  You have been informed that the authentication strategy should permit sign in via smart card-based certificates, and also permitting the use of SSO to connect to on-premises and Microsoft 365 services.

  Solution: You recommend the use of password hash synchronization and seamless SSO as the authentication strategy.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 494:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company currently has an on-premises Active Directory forest.

  You have been tasked with assessing the application of Microsoft 365 and the utilization of an authentication strategy.

  You have been informed that the authentication strategy should permit sign in via smart card-based certificates, and also permitting the use of SSO to connect to on-premises and Microsoft 365 services.

  Solution: You recommend the use of federation with Active Directory Federation Services (AD FS) as the authentication strategy.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

• Question 495:

  Your company Microsoft Azure Active Directory (Azure AD) tenant includes four users. Three of the users are each configured with the Password administrator, Security administrator, and the User administrator roles respectively. The fourth user has no role configured.

  Which of the following are the users that are able to reset the password of the fourth user?

  A. The users with the Password administrator and the User administrator roles.

  B. The users with the Security administrator and the User administrator roles.

  C. The users with the Password administrator and the Security administrator roles.

  D. The user with the Password administrator role only.

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

• Question 496:

  You need to consider the underlined segment to establish whether it is accurate.

  You have been tasked with deploying a Windows 10 Enterprise image to a large number of Windows 8.1 devices. These devices are joined to an Active Directory domain.

  You use the in-place upgrade Windows 10 deployment method for the task.

  Select adjustment required ? if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

  What should you recommend?

  A. No adjustment required.

  B. Windows Autopilot

  C. Windows Update

  D. Azure AD Connect

  Correct Answer: A

  How to allow Windows 10 to sideload apps on your computer

  1.

  Open Settings.

  2.

  Click on Update and security.

  3.

  Click on For developers.

  4.

  Under "Use developer features," select the Sideload apps option.

  Reference: https://www.windowscentral.com/how-enable-windows-10-sideload-apps-outside-store https://docs.microsoft.com/en-us/windows/application-management/sideload-apps-in-windows-10 https://docs.microsoft.com/en-us/microsoft-365/enterprise/windows10-infrastructure

• Question 497:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company currently has an on-premises Active Directory forest.

  You have been tasked with assessing the application of Microsoft 365 and the utilization of an authentication strategy.

  You have been informed that the authentication strategy should permit sign in via smart card-based certificates, and also permitting the use of SSO to connect to on-premises and Microsoft 365 services.

  Solution: You recommend the use of pass-through authentication and seamless SSO with password hash synchronization as the authentication strategy.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 498:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  After acquiring a Microsoft 365 Enterprise subscription, you are tasked with migrating your company Microsoft Exchange Server 2016 mailboxes and groups to Exchange Online.

  You have started a new migration batch. You, subsequently, receive complaints from on-premises Exchange Server users about slow performance. Your analysis shows that the issue has resulted from the migration. You want to make sure

  that the effect the mailbox migration has on users is decreased.

  Solution: You modify the migration endpoint settings. Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

• Question 499:

  You work for a company manages all their identities in the cloud.

  After acquiring a new domain name, you are tasked with making sure that the primary email address of all new mailboxes uses the new domain.

  Which of the following is the Microsoft Exchange Online PowerShell cmdlet that you should run?

  A. Update-EmailAddressPolicy

  B. Update-OfflineAddressBook

  C. Set-AddressBookPolicy

  D. Set-EmailAddressPolicy

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/powershell/module/exchange/email-addresses-and-address-books/set-emailaddresspolicy?view=exchangeps

• Question 500:

  You are responsible for your company Microsoft 365 subscription.

  The company introduces a security policy that requires DLP incident reports to be automatically sent to legal department users.

  You are required to configure the reports to be delivered via email as often you can.

  Which of the following is the option you should use?

  A. Annually

  B. Monthly

  C. Weekly

  D. Quarterly

  Correct Answer: C