Verified & Correct MS-100 Practice Test Reliable Source Aug 15, 2023 Updated
Free Microsoft MS-100 Exam Files Downloaded Instantly
The Microsoft MS-100: Microsoft 365 Identity & Services exam is a prerequisite test associated with the Microsoft 365 Certified: Enterprise Administrator Expert certification. This exam is designed to evaluate the capability of the candidates to complete certain technical tasks. The applicants planning to take this test should have practical knowledge of Microsoft 365 workloads, including SharePoint, Exchange, Windows as a Service, and Skype for Business. It’s also recommended that they have an understanding of IT fundamentals, PowerShell, Active Directory, server administration, and networking.
Microsoft MS-100 exam covers a range of topics related to Microsoft 365 identity and services. These topics include managing user identity and roles, managing access and authentication, implementing and managing Azure AD Connect, managing Microsoft 365 tenant and service, and implementing and managing Microsoft 365 services. MS-100 exam is designed to test the candidate's ability to manage Microsoft 365 services in a real-world scenario.
NEW QUESTION # 171
Your company has a hybrid deployment of Azure Active Directory (Azure AD).
You purchase a Microsoft 365 subscription.
Your company has a hybrid deployment of Azure Active Directory (Azure AD).
You purchase a Microsoft 365 subscription.
You plan to migrate the Home folder of each user to Microsoft 365 during several weeks. Each user has a device that runs Windows 10.
You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Each user has a device that runs Windows 10.
You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Copy the One Drive Adiministrative Templates to your computer
2 - From Group Policy Management Editor,configure the OneDrive setting.
3 - Instruct the users to run gpupdate.exe /force at a command prompt on each device.
Reference:
https://practical365.com/clients/onedrive/migrate-home-drives-to-onedrive-for-business/
NEW QUESTION # 172
You have a Microsoft 365 subscription.
You use the Microsoft Office Deployment tool to install Office 365 ProPlus.
You create a configuration file that contains the following settings.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1:
The C2R (click-to-run) version of Microsoft Visio only will be uninstalled from the computers.
To remove the MSI version of Microsoft Visio, you would need to specify the RemoveMSI parameter. The RemoveMSI parameter is not configured in the configuration file in this question. Therefore, only the C2R version will be installed.
Box 2:
If the Office share on Server1 is missing the Japanese language pack, Office 365 ProPlus will be installed in English only.
In the configuration file, English is the first in the list above Japanese. Therefore, English is the primary language and the installation will continue in English only.
Reference:
https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool
NEW QUESTION # 173
You are securing a wet API by using the Microsoft identity Platform. The web API must meet the following requirements:
* Authenticated Azure Active Directory (Azure AD) users must be able to retrieve user information from Azure AD.
* Authenticated Azure AD users must be able to manage Microsoft 365 groups.
You need to grant permissions for the web API. The solution must use the principle of least privilege. What should you grant? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 174
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
An external user has a Microsoft account that uses an email address of [email protected].
An administrator named Admin1 attempts to create a user account for the external user and receives the
error message shown in the following exhibit.
You need to ensure that Admin1 can add the user.
What should you do from the Azure Active Directory admin center?
- A. Modify the Authentication methods.
- B. Add a custom domain name named outlook.com.
- C. Modify the External collaboration settings.
- D. Assign Admin1 the Security administrator role.
Answer: C
NEW QUESTION # 175
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes a user named User1.
You enable multi-factor authentication for contoso.com and configure the following two fraud alert settings:
Set Allow users to submit fraud alerts: On
Automatically block users who report fraud: On
You need to instruct the users in your organization to use the fraud reporting features correctly.
What should you tell the users to do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Code to report fraud during initial greeting: When users receive a phone call to perform two-step verification, they normally press # to confirm their sign-in. To report fraud, the user enters a code before pressing #. This code is 0 by default, but you can customize it.
Block user when fraud is reported: If a user reports fraud, their account is blocked for 90 days or until an administrator unblocks their account. An administrator can review sign-ins by using the sign-in report, and take appropriate action to prevent future fraud. An administrator can then unblock the user's account.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#fraud-alert
NEW QUESTION # 176
You have a Microsoft 365 subscription and a DNS domain. The domain is hosted by a third-party DNS service.
You plan to add the domain to the subscription.
You need to use Microsoft Exchange Online to send and receive emails for the domain.
Which type of DNS record should you add to the DNS zone of the domain for each task? To answer, drag the appropriate records to the correct tasks. Each record may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide
NEW QUESTION # 177
Your company has a hybrid deployment of Azure Active Directory (Azure AD).
You purchase a Microsoft 365 subscription.
Your company has a hybrid deployment of Azure Active Directory (Azure AD).
You purchase a Microsoft 365 subscription.
You plan to migrate the Home folder of each user to Microsoft 365 during several weeks. Each user has a device that runs Windows 10.
You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Each user has a device that runs Windows 10.
You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.
Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Instruct the users to run gpupdate.exe /force at a command prompt on each device.
2 - From SharePoint Online, create 10 libraries.
3 - From Group Policy Management Editor, configure the Folder Redirection settings.
NEW QUESTION # 178
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com You purchase a domain named contoso.com from a register and add all the required DNS records.
You create a user account named User 1 is configured to sign in as user 1 @contoso.onmicrosoft.com.
You need to configure User1 to sign in as [email protected].
Which three actions should you perform in sequent? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 179
Note: This question is part of a series of questions that present the same scenario. Each question
in the series contains a unique solution that might meet the stated goals. Some question sets
might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your network contains an Active Directory forest.
You deploy Microsoft 365.
You plan to implement directory synchronization.
You need to recommend a security solution for the synchronized identities. The solution must meet the
following requirements:
Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes
unavailable.
Users passwords must be 10 characters or more.
Solution: Implement pass-through authentication and configure password protection in the Azure AD
tenant.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION # 180
You create a SharePoint Framewort (SPFx) web pact and include MSGraphClient by using the following manifest.
Which two actions can the web part perform? Each correct answer presents part of the solution.
NOTE Each correct selection is worth one point
- A. Access the user information of the current user only.
- B. Send an email on behalf of another user.
- C. Create a file in the current user's Microsoft OneDrive
- D. Send an email on behalf of the current user.
- E. Access the user information of all users.
Answer: A,D
NEW QUESTION # 181
Your company has a Microsoft 365 tenant named litwareinc.com.
The Guest access settings in Microsoft Teams are configured as shown in the following exhibit.
The External access settings in Microsoft Teams are configured as shown in the following exhibit.
The company has a third-party supplier named adventureworks.com. Users in litwareinc.com collaborate with the following users by using Microsoft Teams:
[email protected]
[email protected]
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoftteams/set-up-guests
https://docs.microsoft.com/en-us/microsoftteams/communicate-with-users-from-other-organizations
NEW QUESTION # 182
You have a Microsoft 365 subscription that contains the users shown in the following table.
You have the named locations shown in the following table.
You create a conditional access policy that has the following configurations:
Users and groups:
* Include: Group1
* Exclude: Group2
Cloud apps: Include all cloud apps
Conditions:
* Include: Any location
* Exclude: Montreal
Access control: Grant access, Require multi-factor authentication
User1 is on the multi-factor authentication (MFA) blocked users list.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation
The Blocked User list is used to block specific users from being able to receive Multi-Factor Authentication requests. Any authentication attempts for blocked users are automatically denied. Users remain blocked for 90 days from the time that they are blocked.
Box 1: Yes
133.107.10.20 is in the Montreal named location. The conditional access policy excludes Montreal so the policy does not apply. Therefore, User1 can access Microsoft Office 365.
Box 2: No
193.77.10.15 is in the Toronto named location. The conditional access policy applies to Group1 which User1 is a member of and all locations except for Montreal. Therefore, the conditional access policy applies in this case. The policy requires MFA but User1 is on the MFA blocked list so he is unable to use MFA. Therefore, User1 cannot access Microsoft 365.
Box 3: Yes
User2 is in Group1 and Group2. The conditional access policy applies to Group1 but excludes Group2.
Therefore, the conditional access policy does not apply in this case so User2 can access Microsoft Office 365.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
NEW QUESTION # 183
You have an on-premises Microsoft Exchange Server organization that contains 100 mailboxes.
You have a hybrid Microsoft 365 tenant.
You run the Hybrid Configuration wizard and migrate the mailboxes to the tenant.
You need to ensure that Microsoft 365 spam filtering is applied to incoming email.
What should you do?
- A. Update the MX record to point to Exchange Online.
- B. Update the Sender Policy Framework (SPF) TXT record to point to the on-premises Exchange IP address.
- C. Run the Azure Active Directory Connect wizard again.
- D. Run the Hybrid Configuration wizard again.
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/manage-mailboxes-using-microsoft-365-or-office-365
NEW QUESTION # 184
You have a Microsoft 365 subscription.
You are configuring permissions for Security & Compliance.
You need to ensure that the users can perform the tasks shown in the following table.
The solution must use the principle of least privilege.
To which role should you assign each user? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Security Reader: Members can manage security alerts (view only), and also view reports and settings of security features.
Security Administrator, Compliance Administrator and Organization Management can manage alerts.
However, Security Administrator has the least privilege.
Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/permissions-in-the-security-and-compliance-cent
NEW QUESTION # 185
You need to develop a leave request app that will use Microsoft Outlook and adaptive cards. The leave requests of an employee will be sent as an actionable message to the employee's managers. When one of the managers performs an action on the actionable message, the other managers must see only the updated message and the action performed by the manager.
How should you complete the adaptive card JSON? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/outlook/actionable-messages/auto-invoke
NEW QUESTION # 186
......
What Is the Content of MS-100?
The content of the Microsoft MS-100 test includes the following topics:
- Manage User Identity & Roles. It is the third theme that weighs between 35 and 40% in the test items. Applicants will need to demonstrate that they have developed skills related to Azure AD Connect and how they manage the user roles. It also checks one's readiness to handle Azure identity management, administer Azure AD identities, managing access reviews, and perform bulk user management. In addition, the identity synchronization provided with the help of Azure AD is covered.
- Design & Implement Microsoft 365 Services. This domain covers up to 30% of all the questions of the test. It focuses on the skills needed to configure different user identities as well as planning of the Microsoft 365 implementation. To complete this chapter successfully, candidates have to learn how to set-up and maintain Microsoft 365 subscription and tenancy together with user and data migration planning.End-to-end implementation of Microsoft 365 is well covered in this section as it teaches how to plan Microsoft 365 infrastructure and authentication solutions. Microsoft 365 subscription, creating tenant, upgrading current subscriptions, and monitoring license allocations are also covered extensively.
- Plan Office 365 Workloads & Applications. This topic covers around 15% of the tasks. It targets Office 365 workload deployment including planning for connectivity, building migration strategies, and working with data flow, among the rest.This section also has a lot to offer for those interested in apps. The test-takers will learn about Microsoft 365 apps management as well as tools and techniques required for enterprise Microsoft 365 app development.
- Manage Access & Authentication. This section represents up to 25% of the whole exam. It is related to authentication management, multi-factor authentication implementation, application access configuration, and external users' access to Microsoft 365 environment. Skills like designing an MFA solution, reporting MFA utilization, performing MFA app configuration, and administering an MFA solution will be well-covered in this section.
Pass Microsoft MS-100 exam Dumps 100 Pass Guarantee With Latest Demo: https://www.validbraindumps.com/MS-100-exam-prep.html
The MS-100 PDF Dumps Greatest for the Microsoft Exam Study Guide!: https://drive.google.com/open?id=19VAUebWcEOD_-8vjvPndrknZi_DdYnWC