Pass4itsure share these resources with you. Both VCE and PDF dumps contain the latest Microsoft MS-100 exam questions, which will ensure your MS-100 exam 100% passed! You can get MS-100 VCE dumps and MS-100 PDF dumps from Pass4itsure. Please get the latest Pass4itsure MS-100 dumps here: https://www.pass4itsure.com/ms-100.html (273 QA Dumps).
- Thousands of satisfied customers.
- Good grades are 100% guaranteed.
- 100% verified by Expert panel.
- Up to date exam data.
- 100% money-back guarantee.
Microsoft MS-100 exam dumps with actual exam questions
QUESTION 1
SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few
minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a
live environment. While most functionality will be available to you as it would be in a live environment, some
functionality
(e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matter how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as
much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are
able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: *yfLo7Ir2andyIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser
tab.
The following information is for technical support purposes only:
Lab Instance: 10811525
Your organization recently implemented a new data retention policy. The policy requires that all files stored in an
employee\\’s Microsoft OneDrive folders be retained for 60 days after the employee is terminated from the organization.
The human resources (HR) department of the organization deletes the user accounts of all terminated employees.
You need to ensure that the organization meets the requirements of the data retention policy.A. See below.
Correct Answer: A
You need to configure the OneDrive retention period for deleted users.
1.
Go to the OneDrive admin center.
2.
Select Storage.
3.
Set the “Days to retain files in OneDrive after a user account is marked for deletion” option to 60.
4.
Click Save to save the changes.
References: https://docs.microsoft.com/bs-latn-ba/onedrive/set-retention
QUESTION 2
HOTSPOT
Your company has a Microsoft 365 subscription that contains the domains shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Only the Contoso20198.onmicrosoft.com domain has a status of Setup Complete. The other two statuses mean that the
domain setup is not complete or has issues that need to be corrected before they can be used.
Reference: https://support.office.com/en-gb/article/what-do-domain-statuses-mean-inoffice-365-3ecf1fef-3b31-497c-98bc-e57e2413b4e5
QUESTION 3
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains
a user named User1.
You suspect that an imposter is signing in to Azure AD by using the credentials of User1.
You need to ensure that an administrator named Admin1 can view all the sign in details of User1 from the past 24
hours.
To which three roles should you add Admin1? Each correct answer presents a complete solution. NOTE: Each correct
selection is worth one point.
A. Security administrator
B. Password administrator
C. User administrator
D. Compliance administrator
E. Reports reader
F. Security reader
Correct Answer: AEF
Users in the Security Administrator, Security Reader, Global Reader, and Report Reader roles can view the sign in
details.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins
QUESTION 4
SIMULATION Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may
take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available,
click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most
functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability
to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matter how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as
much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are
able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: *yfLo7Ir2andy-If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser
tab.
The following information is for technical support purposes only:
Lab Instance: 10811525
Your organization recently partnered with another organization named Fabrikam, Inc.
You plan to provide a Microsoft 365 license to an external user named [email protected], and then to share
documents with the user.
You need to invite [email protected] to access your organization.
A. See below.
Correct Answer: A
You need to create a guest account for user1.
1.
Go to the Azure Active Directory admin center.
2.
Select Users.
3.
Click the ‘New guest user’ link.
4.
Select the ‘Invite user’ option.
5.
Give the account a name (User1) and enter [email protected] in the email address field.
6.
Click the ‘Invite’ button.
References: https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal
QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following
domains:
1.
Contoso.com
2.
East.contoso.com
An Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure
AD) tenant.
You deploy a new domain named west.contoso.com to the forest.
You need to ensure that west.contoso.com syncs to the Azure AD tenant.
Solution: You create an Azure DNS zone for west.contoso.com. On the on-premises DNS servers, you create a
conditional forwarder for west.contoso.com.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 6
HOTSPOT
Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory
(Azure AD) by using the Azure AD Connect Express Settings. Password writeback is disabled.
You create a user named User1 and enter Pass in the Password field as shown in the following exhibit.
The Azure AD password policy is configured as shown in the following exhibit.
Hot Area:
Correct Answer:
Box 1: Yes
The question states that User1 is synced to Azure AD. This tells us that the short password (Pass) meets the onpremise Active Directory password policy and you were able to create the on-premise account for User1. The onpremise
Active Directory password policy applies over the Azure AD password policy for synced user accounts.
Box 2: No
Self-Service Password Reset would need to be configured.
Box 3: Yes
The password for the Azure AD User1 account will expire after 90 days according to the Azure AD password policy. If
the on-premise password policy has a shorter password expiration period, User1 would have the change his/her onpremise AD password. The new password would then sync to Azure AD.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express
QUESTION 7
SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few
minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a
live environment. While most functionality will be available to you as it would be in a live environment, some
functionality
(e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matter how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are
able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab. Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username: [email protected]
Microsoft 365 Password: m3t^We$Z7andxy
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser
tab.
The following information is for technical support purposes only:
Lab Instance: 11440873
You need to ensure that all the users in your organization are prompted to change their password every 60 days. The
solution must ensure that the users are reminded that their password must be changed 10 days before the required
change.
To answer, sign in to the Microsoft 365 portal.
Correct Answer: See below.
You need to configure the Password Expiration Policy.
1.
Sign in to the Microsoft 365 Admin Center.
2.
In the left navigation pane, expand the Settings section then select the Settings option.
3.
Click on Security and Privacy.
4.
Select the Password Expiration Policy.
5.
Ensure that the checkbox labelled “Set user passwords to expire after a number of days” is ticked.
6.
Enter 60 in the “Days before passwords expire” field.
7.
Enter 10 in the “Days before a user is notified about expiration” field.
8.
Click the ‘Save changes’ button.
QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain.
You deploy a Microsoft Azure Active Directory (Azure AD) tenant.
Another administrator configures the domain to synchronize to Azure AD.
You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user
accounts synchronized successfully.
You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.
You need to ensure that the 10 user accounts are synchronized to Azure AD.
Solution: From Azure AD Connect, you modify the Azure AD credentials.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
The question states that “all the user account synchronizations completed successfully”. Therefore, the Azure AD
credentials are configured correctly in Azure AD Connect. It is likely that the 10 user accounts are being excluded from
the synchronization cycle by a filtering rule.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering
QUESTION 9
Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.
The network uses a firewall that contains a list of allowed outbound domains.
You begin to implement directory synchronization.
You discover that the firewall configuration contains only the following domain names in the list of allowed domains:
1.
*.microsoft.com
2.
*.office.com
Directory synchronization fails.
You need to ensure that directory synchronization completes successfully.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST
answer.
A. From the firewall, allow the IP address range of the Azure data center for outbound communication.
B. From Azure AD Connect, modify the Customize synchronization options task.
C. Deploy an Azure AD Connect sync server in staging mode.
D. From the firewall, create a list of allowed inbound domains.
E. From the firewall, modify the list of allowed outbound domains.
Correct Answer: E
Azure AD Connect needs to be able to connect to various Microsoft domains such as login.microsoftonline.com.
Therefore, you need to modify the list of allowed outbound domains on the firewall.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports
QUESTION 10
Your company has a hybrid deployment of Microsoft 365.
Users authenticate by using pass-through authentication. Several Microsoft Azure AD Connect Authentication Agents
are deployed.
You need to verify whether all the Authentication Agents are used for authentication.
What should you do?
A. From the Azure portal, use the Troubleshoot option on the Pass-through authentication page.
B. From Performance Monitor, use the #PTA authentications counter.
C. From the Azure portal, use the Diagnostics settings on the Monitor blade.
D. From Performance Monitor, use the Kerberos authentications counter.
Correct Answer: A
On the Troubleshoot page, you can view how many agents are configured. If you click on the agents link, you can view
the status of each agent. Each agent will have a status of Active or Inactive.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-pass-through-authentication
QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a
WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using
the
main office connection.
Users use Microsoft Outlook 2016 to connect to a Microsoft Exchange Server mailbox hosted in the main office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
QUESTION 12
You have a Microsoft 365 subscription.
You recently configured a Microsoft SharePoint Online tenant in the subscription.
You plan to create an alert policy.
You need to ensure that an alert is generated only when malware is detected in more than five documents stored in
SharePoint Online during a period of 10 minutes.
What should you do first?
A. Enable Microsoft Office 365 Cloud App Security.
B. Deploy Windows Defender Advanced Threat Protection (Windows Defender ATP).
C. Enable Microsoft Office 365 Analytics.
Correct Answer: B
An alert policy consists of a set of rules and conditions that define the user or admin activity that generates an alert, a
list of users who trigger the alert if they perform the activity, and a threshold that defines how many times the activity has
to
occur before an alert is triggered.
In this question, we would use the “Malware detected in file” activity in the alert settings then configure the threshold (5
detections) and the time window (10 minutes).
The ability to configure alert policies based on a threshold or based on unusual activity requires Advanced Threat
Protection (ATP).
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/alert-policies
QUESTION 13
Your network contains an Active Directory domain named contoso.com.
You have a Microsoft 365 subscription.
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You implement directory synchronization.
The developers at your company plan to build an app named App1. App1 will connect to the Microsoft Graph API to
provide access to several Microsoft Office 365 services.
You need to provide the URI for the authorization endpoint that App1 must use.
What should you provide?
A. https://login.microsoftonline.com/
B. https://contoso.com/contoso.onmicrosoft.com/app1
C. https://login.microsoftonline.com/contoso.onmicrosoft.com/
D. https://myapps.microsoft.com
Correct Answer: C
In a single tenant application, sign-in requests are sent to the tenant\\’s sign-in endpoint. For example, for
contoso.onmicrosoft.com the endpoint would be: https://login.microsoftonline.com/contoso.onmicrosoft.com. Requests
sent to a tenant\\’s endpoint can sign in users (or guests) in that tenant to applications in that tenant.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-convert-app-to-be-multi-tenant
Money-Back guarantee with MS-100 exam dumps
Pass4itsure provides free answers to the Microsoft MS-100 practice questions, which show the quality of the MS-100 exam dump. We make sure that your Pass4itsure is one of the most reliable websites for Microsoft MS-100 exam preparation. Download our MS-100 dumps PDF for free and pass the exam completely.
Very effective helpful Microsoft MS-100 dumps PDF
Will provide you with exactly the same MS-100 real exam questions, and provide valid answers in the PDF file to help you easily prepare.
[drive.google] Microsoft MS-100 dumps PDF Free Download https://drive.google.com/file/d/1WAX7yHAmN45-z3i06Rj5wxXtyiIQq2Y2/view?usp=sharing
Increase your confidence and improve your MS-100 exam preparation.
What Pass4itsure customers say
Pass4itsure Features
Pass4itsure discount code 2020
The latest discount code “2020PASS” is provided below. 12% off .
P.S.
Free to share the latest Microsoft MS-100 PDF, MS-100 online practice questions, MS-100 learning video for you. It is not easy to pass the Microsoft MS-100 exam. For this, you should use https://www.pass4itsure.com/ms-100.html Microsoft MS-100 exam dumps preparation questions, which can help you prepare according to the standard. Study hard to pass the exam easily!
Free Download and study the Microsoft MS-100 dumps https://drive.google.com/file/d/1WAX7yHAmN45-z3i06Rj5wxXtyiIQq2Y2/view?usp=sharing
