Microsoft 365 Identity and Services MS-100 Exam Questions

Page: 1 / 14
Total 429 questions
Question 1

Your company has a Microsoft 365 subscription that has multi-factor authentication configured for all users.

Users on the network report that they are prompted for multi-factor authentication multiple times a day.

You need to reduce the number of times the users are prompted for multi-factor authentication on their company-owned devices.

What should you do?



Answer : B

The remember Multi-Factor Authentication feature for devices and browsers that are trusted by the user is a free feature for all Multi-Factor Authentication users. Users can bypass subsequent verifications for a specified number of days, after they've successfully signed-in to a device by using Multi-Factor Authentication. The feature enhances usability by minimizing the number of times a user has to perform two-step verification on the same device.


https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

Question 2

You are developing an app that will query the tenant for the names of all the Microsoft Teams teams in the organization. What permission will the app require? Your solution must follow the principle of least privilege.



Answer : D


Question 3

Your company has a Microsoft 365 E5 subscription.

Users in the research department work with sensitive data.

You need to prevent the research department users from accessing potentially unsafe websites by using

hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.

What should you do from the Security & Compliance admin center?



Answer : D

ATP Safe Links, a feature of Office 365 Advanced Threat Protection (ATP), can help protect your organization from malicious links used in phishing and other attacks. If you have the necessary permissions for the Office 365 Security & Compliance Center, you can set up ATP Safe Links policies to help ensure that when people click web addresses (URLs), your organization is protected. Your ATP Safe Links policies can be configured to scan URLs in email and URLs in Office documents.


https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-atp-safe-links-policies#policies-that-apply-to-specific-email-recipients

Question 4

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Microsoft 365 Username:

admin@LODSe1211885.onmicrosoft.com

Microsoft 365 Password: oL9z0=?Nq@ox

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11098651

You need to ensure that all the users in your organization are prompted to change their password every 180 days.

To answer the question, sign in to the Microsoft 365 portal.



Answer : A

You need to configure the Password Expiration Policy.

1. Sign in to the Microsoft 365 Admin Center.

2. In the left navigation pane, expand the Settings section then select the Settings option.

3. Click on Security and Privacy.

4. Select the Password Expiration Policy.

5. Ensure that the checkbox labelled ''Set user passwords to expire after a number of days'' is ticked.

6. Enter 180 in the ''Days before passwords expire'' field.

7. Click the 'Save changes' button.


Question 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities. The solution must meet the following requirements:

Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

Users passwords must be 10 characters or more.

Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant.

Does this meet the goal?



Answer : B


https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization

Question 6

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

You configure Azure AD Connect to sync contoso.com to Azure Active Directory.

Which objects will sync to Azure AD?



Answer : A

Global Security Group is a scope for the group and is set for created groups: https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/active-directory-security-groups#group-scope


Question 7

You have an on premises web application that is published by using a URL of https://app.contoso.local.

You purchase a Microsoft 36S subscription.

Several external users must be able to connect to the web application

You need to recommend a solution for external access to the application. The solution must support multi-factor authentication.

Which two actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.



Answer : A, B

Azure Active Directory (Azure AD) has an Application Proxy service that enables users to access on-premises applications by signing in with their Azure AD account. The application proxy enables you to take advantage of Azure AD security features like Conditional Access and Multi-Factor Authentication.

To use Application Proxy, install a connector on each Windows server you're using with the Application Proxy service. The connector is an agent that manages the outbound connection from the on-premises application servers to Application Proxy in Azure AD.


https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-add-on-premises-application

Page:    1 / 14   
Total 429 questions