Microsoft MS-100 Exam Dumps

Microsoft 365 Identity and Services

Microsoft MS-100 Sample Questions

Question # 1

You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.Corporate policy states that user passwords must not include the word ContosoWhat should you do to implement the corporate policy?

A. From the Azure Active Directory admin center, configure the Password protection settings.
B. From the Microsoft 365 admin center, configure the Password policy settings.
C. From Azure AD Identity Protection, configure a sign-in risk policy.
D. From the Azure Active Directory admin center, create a conditional access policy.

Answer: A

Show Answer

Question # 2

You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.A temporary employee at your company uses an email address of user1@outlook.com.You need to ensure that the temporary employee can sign in to contoso.com by using the user1@outlook.com account.What should you do?

A. From the Azure Active Directory admin center, create a new user.
B. From the Microsoft 365 admin center, create a new contact.
C. From the Azure Active Directory admin center, create a new guest user.
D. From the Microsoft 365 admin center, create a new user.

Answer: C

Show Answer

Question # 3

You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1.You enable Azure AD Identity Protection.You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1? 

A. Security reader
B. User administrator
C. Service administrator
D. Reports reader

Answer: A

Show Answer

Question # 4

You have Windows 10 devices that are managed by using Microsoft Endpoint Manager. All the devices have Microsoft Office 365 apps installed.You need to configure the proofing tool settings for the Office 365 apps.From the Microsoft Endpoint Manager admin center, what should you create?

A. a device compliance policy
B. an app configuration policy
C. an app
D. a device configuration profile

Answer: B

Show Answer

Question # 5

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains 10,000 users.The company has a Microsoft 365 subscription.You enable Azure Multi-Factor Authentication (MFA) for all the users in contoso.com.You run the following query.search "SigninLogs" | where ResultDescription == "User did not pass the MFA challenge."The query returns blank results.You need to ensure that the query returns the expected results.What should you do?

A. From the Azure Active Directory admin center, configure the diagnostics settings to archive logs to an Azure Storage account.
B. From the Security & Compliance admin center, turn on auditing.
C. From the Security & Compliance admin center, enable Office 365 Analytics.
D. From the Azure Active Directory admin center, configure the diagnostics settings to send logs to an Azure Log Analytics workplace.

Answer: D

Show Answer

Question # 6

Your network contains an on-premises Active Directory domain named contoso.com that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.The on-premises network contains a file server named Server1. Server1 has a share named Share1 that contains company documents.Your company purchases a Microsoft 365 subscription.You plan to migrate data from Share1 to Microsoft 365. Only data that was created or modified during the last three months will be migrated.You need to identify all the files in Share1 that were modified or created during the last 90 days.What should you use?

A. Server Manager
B. Microsoft SharePoint Migration Tool
C. Resource Monitor
D. Usage reports from the Microsoft 365 admin center

Answer: B

Show Answer

Question # 7

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.You purchase a Microsoft 365 subscription.You implement password hash synchronization and Azure Active Directory (Azure AD) Seamless Single Sign-On (Seamless SSO).You need to ensure that users can use Seamless SSO from the Windows 10 computers.What should you do?

A. Create a conditional access policy in Azure AD.
B. Deploy an Azure AD Connect staging server.
C. Join the computers to Azure AD.
D. Modify the Intranet zone settings by using Group Policy

Answer: D

Show Answer

Question # 8

A user receives the following message when attempting to sign in to https://myapps.microsoft.com:"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might be signing in from a new location, device, or app. Before you can continue, we need to verify your identity. Please contact your admin." Which configuration prevents the users from signing in? 

A. Security & Compliance supervision policies
B. Security & Compliance data loss prevention (DLP) policies
C. Microsoft Azure Active Directory (Azure AD) conditional access policies
D. Microsoft Azure Active Directory (Azure AD) Identity Protection policies

Answer: C

Show Answer

Question # 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains:Contoso.comEast.contoso.comAn Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant.You deploy a new domain named west.contoso.com to the forest.You need to ensure that west.contoso.com syncs to the Azure AD tenant.Solution: You install a new Azure AD Connect server in west.contoso.com and set AD Connect to staging mode.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 10

Your network contains three Active Directory forests.You create a Microsoft Azure Active Directory (Azure AD) tenant.You plan to sync the on-premises Active Directory (Azure AD).You need to recommend a synchronization solution. The solution must ensure that the synchronization cancomplete successfully and as quickly as possible if a single server fails.What should you include in the recommendation?

A. Three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
B. One Azure AD Connect sync servers one Azure AD Connect sync servers in staging mode
C. Three Azure AD Connect sync servers and one Azure AD Connect sync servers in staging mode
D. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode

Answer: B

Show Answer

Question # 11

Your network contains an Active Directory domain named adatum.com that is synced to Microsoft Azure Active Directory (Azure AD).The domain contains 100 user accounts.The city attribute for all the users is set to the city where the user resides.You need to modify the value of the city attribute to the three-letter airport code of each city.What should you do?

A. From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
B. From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
C. From Azure Cloud Shell, run the Get-MsolUser and Set-MSOluser cmdlets.
D. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.

Answer: A

Show Answer

Question # 12

Your company uses email, calendar, contact, and task services in Microsoft Outlook.com.You purchase a Microsoft 365 subscription and plan to migrate all users from Outlook.com to Microsoft 365.You need to identify which user data can be migrated to Microsoft 365.Which type of data should you identify?

A. task
B. email
C. calendar
D. contacts

Answer: B

Show Answer

Question # 13

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:admin@LODSe426243.onmicrosoft.comMicrosoft 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751Your company has a web application named App1.The company plans to publish App1 by using a URL of https://app1.contoso.com.You need to register App1 to your Microsoft Office 365 tenant.See explanation below. 

Answer: .

Show Answer

Question # 14

Your network contains an Active Directory domain named contoso.com.All users authenticate by using a third-party authentication solution.You purchase Microsoft 365 and plan to implement several Microsoft 365 services.You need to recommend an identity strategy that meets the following requirements:Provides seamless SSOMinimizes the number of additional servers required to support the solutionStores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)Ensures that all the users authenticate to Microsoft 365 by using their on-premises user accountYou are evaluating the implementation of federation.Which two requirements are met by using federation? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. minimizes the number of additional servers required to support the solution
B. provides seamless SSO
C. stores the passwords of all the users in Azure AD
D. ensures that all the users authenticate to Microsoft 365 by using their on-premises user account.

Answer: B,D

Show Answer

Question # 15

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains:Contoso.comEast.contoso.comAn Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant. You deploy a new domain named west.contoso.com to the forest. You need to ensure that west.contoso.com syncs to the Azure AD tenant.Solution: You install a new Azure AD Connect server in west.contoso.com and set AD Connect to active modeDoes this meet the goal?

A. Yes
B. No

Answer: A

Show Answer

Question # 16

You have a Microsoft 365 subscription.You add a domain named contoso.com.When you attempt to verify the domain, you are prompted to send a verification email to admin@contoso.com.D18912E1457D5D1DDCBD40AB3BF70D5DYou need to change the email address used to verify the domain.What should you do?

A. From the domain registrar, modify the contact information of the domain
B. Add a TXT record to the DNS zone of the domain
C. Modify the NS records for the domain
D. From the Microsoft 365 admin center, change the global administrator of the Microsoft 365 subscription

Answer: A

Show Answer

Question # 17

Which migration solution should you recommend for Project1? 

A. From the Microsoft 365 admin center, start a data migration and click Exchange as the data service.
B. From the Exchange admin center, start a migration and select Cutover migration.
C. From the Exchange admin center, start a migration and select Staged migration.
D. From the Microsoft 365 admin center, start a data migration and click Upload PST as the data service.

Answer: A

Show Answer

Question # 18

Which migration solution should you recommend for Project1? 

A. From the Exchange admin center, start a migration and select Staged migration.
B. From the Microsoft 365 admin center, start a data migration and click Exchange as the data service.
C. From the Microsoft 365 admin center, start a data migration and click Outlook as the data service.
D. From the Exchange admin center, start a migration and select Cutover migration.

Answer: B

Show Answer

Question # 19

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company plans to deploy several Microsoft Office 365 services.You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:* Users must be able to authenticate during business hours only.* Authentication requests must be processed successfully if a single server fails.* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and configure seamless SSO.Does this meet the goal?

A. Yes
B. No

Answer: A

Show Answer

Question # 20

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.Your network contains an Active Directory domain named contoso.com that is synced to Microsoft AzureActive Directory (Azure AD).You manage Windows 10 devices by using Microsoft System Center Configuration Manager (CurrentBranch).You configure a pilot for co-management.You add a new device named Device1 to the domain. You install the Configuration Manager client onDevice1.You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.Solution: You add Device1 to an Active Directory group.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 21

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have a Microsoft 365 subscription.You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users areconnected to your on-premises network.Solution: From the Microsoft 365 admin center, you configure the Organization profile settings.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer

Question # 22

Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenantnamed contoso.onmicrosoft.com.An external vendor has a Microsoft account that has a username of user1@outlook.com.You plan to provide user1@outlook.com with access to several resources in the subscription.You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that theexternal vendor can authenticate by using user1@outlook.com.What should you do?

A. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify –UserPrincipalNameuser1@outlook.com.
B. From the Microsoft 365 admin center, add a contact, and then specify user1@outlook.com as the emailaddress.
C. From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.
D. From the Azure portal, add a custom domain name, and then create a new Azure AD user and useuser1@outlook.com as the username.

Answer: C

Show Answer

Question # 23

A user receives the following message when attempting to sign in to https://myapps.microsoft.com:"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might besigning in from a new location, device, or app. Before you can continue, we need to verify your identity.Please contact your admin."Which configuration prevents the users from signing in?

A. Security & Compliance supervision policies
B. Security & Compliance data loss prevention (DLP) policies
C. Microsoft Azure Active Directory (Azure AD) conditional access policies
D. Microsoft Azure Active Directory (Azure AD) Identity Protection policies

Answer: C

Show Answer

Question # 24

You have a Microsoft 365 subscription.You configure a data loss prevention (DLP) policy.You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.You need to prevent the users from bypassing the DLP policy.What should you configure?

A. actions
B. exceptions
C. incident reports
D. user overrides

Answer: D

Show Answer

Question # 25

You have a Microsoft 365 subscription.Your company purchases a new financial application named App1.From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover thatmany applications have a low score because they are missing information about domain registration andconsumer popularity.You need to prevent the missing information from affecting the score.What should you configure from the Cloud Discover settings?

A. App tags
B. Score metrics
C. Organization details
D. Default behavior

Answer: B

Show Answer

Question # 26

You have a Microsoft 365 subscription.You need to prevent phishing email messages from being delivered to your organization.What should you do?

A. From the Exchange admin center, create an anti-malware policy.
B. From Security & Compliance, create a DLP policy.
C. From Security & Compliance, create a new threat management policy.
D. From the Exchange admin center, create a spam filter policy.

Answer: C

Show Answer

Question # 27

Your network contains an Active Directory domain named contoso.com.You have a Microsoft 365 subscription.You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.You implement directory synchronization.The developers at your company plan to build an app named App1. App1 will connect to the Microsoft GraphAPI to provide access to several Microsoft Office 365 services.You need to provide the URI for the authorization endpoint that App1 must use.What should you provide?

A. https://login.microsoftonline.com/
B. https://contoso.com/contoso.onmicrosoft.com/app1
C. https://login.microsoftonline.com/contoso.onmicrosoft.com/
D. https://myapps.microsoft.com

Answer: C

Show Answer

Question # 28

You have a Microsoft 365 subscription that contains a Microsoft Azure Directory (Azure AD) tenantContoso.com. The tenant includes a user named user1.You enable Azure AD Identity protection.You need to ensure that User1 can review the list in Azure AD identity protection of users flagged for risk.The solution must use the principle of least privilege.To which role should you add User1?

A. Security administrator
B. Report
C. Global reader
D. Owner

Answer: A

Show Answer

Question # 29

Your company has 20 employees, Each employees has a mailbox hosted in Outlook.com.The company purchases a Microsoft 365 subcription.You plan to migrate all the mailboxes to Microsoft 365.You need to recommend which type of migration to use for the mailboxes.What should recommend?

A. Cutover migration
B. Staged migration
C. IMAP migration
D. Minimal hybrid migration

Answer: C

Show Answer

Question # 30

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have a Microsoft 365 subscription.You discover that some external users accessed content on a Microsoft SharePoint site. You modify theSharePoint sharing policy to prevent sharing outside your organization.You need to be notified if the SharePoint policy is modified in the future.Solution: From the SharePoint admin center, you modify the sharing settings.Does this meet the goal?

A. Yes
B. No

Answer: B

Show Answer