Microsoft Microsoft Certifications MS-100 Questions & Answers

• Question 51:

  HOTSPOT

  You plan to deploy two Microsoft Power Platform environments as shown in the following table.

  

  Which environment type should you use for each environment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/power-platform/admin/environments-overview

• Question 52:

  HOTSPOT

  Your company has a Microsoft 365 tenant named litwareinc.com.

  The Guest access settings in Microsoft Teams are configured as shown in the following exhibit.

  

  The External access settings in Microsoft Teams are configured as shown in the following exhibit.

  

  The company has a third-party supplier named adventureworks.com. Users in litwareinc.com collaborate with the following users by using Microsoft Teams:

  1.

  [email protected]

  2.

  [email protected] For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

  The answer to this question depends on whether User1 and User2 have been added as guests. The question does not say that they are guests so we would have to assume they’re not.

  External Access is turned off. Even with the Contoso.com domain added as an allowed domain, the Off settings override this. If the external access settings were ‘On’, they would be on for only the Contoso.com domain.

  Box 1: No

  If External Access was On, the answer to this would still be No. If User2 was a guest, the answer to this would be Yes.

  Box 2: No If External Access was On, the answer to this would still be No. External Access does not enable Meet Now for the external user. If User1 was a guest, the answer to this would be Yes. Box 3: No

  If External Access was On, the answer to this would still be No. External Access does not allow blocking. If User1 was a guest, the answer to this would be Yes.

  Reference: https://docs.microsoft.com/en-us/microsoftteams/set-up-guests https://docs.microsoft.com/en-us/microsoftteams/communicate-with-users-from-other-organizations

• Question 53:

  HOTSPOT

  You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

  In the subscription, an administrator adds two custom domains named sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com and the objects shown in the following table.

  

  You plan to delete sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com.

  Which objects must you delete or modify manually before you can delete the domains? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  You can't delete a domain with any resources still assigned to that domain. Even if using PS and using a -Force the operation will fail. https://docs.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/remove-a-domain?view=o365-worldwide

• Question 54:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains a Microsoft SharePoint Online site named Site1 and the accounts shown in the following table.

  

  You have an on-premises server named Server1 that contains a folder named Folder1. Folder1 contains the files shown in the following table.

  

  The User1, User2, and Group1 accounts have the security identifiers (SIDs) shown in the following table.

  

  You use the SharePoint Migration Tool to migrate Folder1 to Site1. You preserve the file share permissions and use the following user mapping file. S-1-5-21-4534338-1127018997-2609994386-1304, [email protected], FALSE

  S-1-5-21-4534338-1127018997-2609994386-1228, [email protected], FALSE S-1-5-21-4534338-1127018997-2609994386-1106, GroupA, TRUE For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

• Question 55:

  HOTSPOT

  You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.

  

  You have an on-premises web app named AppA. Group1 has permissions to access AppA.

  You configure an Azure Active Directory (Azure AD) Application Proxy.

  You add an Application Proxy entry for AppA as shown the exhibit. (Click the Exhibit tab.)

  

  You assign the AppA enterprise application in Azure to Group2.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  User1 is in Group2. The enterprise app is assigned to Group2. However, the authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Only Group1 has access to the web app. Therefore,

  User1 will not be able to access the web app.

  Box 2: Yes.

  User2 is in Group1 and Group2. The enterprise app is assigned to Group2. The authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Group1 has access to the web app. Therefore, User2

  will be able to access the web app in MyApps.

  Box 3: No

  User3 is in Group1. Group1 has access to the web app so User3 could access the app on-premises. However, the enterprise app is assigned to Group2 which User3 is not a member of. Therefore, User3 will not be able to access the external

  URL of the web app.

• Question 56:

  HOTSPOT

  You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

  

  From the Sign-ins blade of the Azure Active Directory admin center, for which users can User1 and User2 view the sign-ins? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Who can access the activity reports data?

  1.

  Users in the Security Administrator, Security Reader, Global Reader, and Report Reader roles

  2.

  Global Administrators

  3.

  Any user (non-admins) can access their own sign-ins

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

• Question 57:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains five domain controllers.

  Your company purchases Microsoft 365 and creates a Microsoft Azure Directory (Azure AD) tenant named contoso.onmicrosoft,com.

  You plan to establish federation authentication between on-premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).

  You need to establish the federation.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The on-premises Active Directory domain is named contoso.com. Before you can configure federation authentication between on-premises Active Directory and the Azure AD tenant, you need to add the domain contoso.com to Microsoft 365.

  You do this by adding a custom domain name.

  The next step is to establish the federation. You can configure AD FS by using Azure AD Connect.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom#configuring-federation-with-ad-fs

• Question 58:

  HOTSPOT

  Your company has a Microsoft Office 365 subscription that contains the groups shown in the following table.

  

  You have the licenses shown in the following table.

  

  Another administrator removes User1 from Group1 and adds Group2 to Group1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  User1, User2 and User3 have each been assigned a SharePoint license directly. Therefore, they are all licensed for SharePoint Online.

  Changing the group memberships will only affect whether or not they are licensed for Exchange Online because the Exchange Online licenses are assigned to Group1.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-licensing-whatis-azure-portal

• Question 59:

  HOTSPOT

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

  

  Group2 is a member of Group1.

  You assign a Microsoft Office 365 Enterprise E3 license to User2 as shown in the following exhibit.

  

  You assign Office 365 Enterprise E3 licenses to Group1 as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Group-based licensing currently does not support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied.

  Therefore, the license granted to Group1 will not filter down to Group2.

  Box 1: Yes.

  User1 is in Group1 which has been assigned a license to use Exchange Online.

  Box 2: No

  User2 has been assigned a license to use SharePoint online. However, the license to use Exchange Online does not apply to User2.

  Box 3: No

  The license to use Exchange Online is granted to Group1. However, the license granted to Group1 will not filter down to Group2. Therefore, User3 will not be licensed to use Exchange Online.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced

• Question 60:

  HOTSPOT

  Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

  

  You need to identify which users can perform the following administrative tasks:

  1.

  Reset the password of User4.

  2.

  Modify the value for the manager attribute of User4.

  Which users should you identify for each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1:

  A Password Administrator or a User Administrator can reset the password non-administrative users.

  Box 2: A User Administrator can configure other attributes such as the Manager attribute of non-administrative users.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

  Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.