Valid Microsoft MS-100 questions shared by Pass4itsure for helping to pass the Microsoft MS-100 exam! Get the newest Pass4itsure Microsoft MS-100 exam dumps with VCE and PDF here: https://www.pass4itsure.com/ms-100.html (277 Q&As Dumps).
[Free PDF] Microsoft MS-100 pdf Q&As https://drive.google.com/file/d/1CkGKTbaKTcG9Ul77s9djeddD52YHvg_U/view?usp=sharing
Suitable for MS-100 complete Microsoft learning pathway
The content is rich and diverse, and learning will not become boring. You can learn in multiple ways through the Microsoft MS-100 exam.
- Download
- Answer practice questions, the actual Microsoft MS-100 test
Microsoft MS-100 Microsoft 365 Identity and Services
Free Microsoft MS-100 dumps download
[PDF] Free Microsoft MS-100 dumps pdf download https://drive.google.com/file/d/1CkGKTbaKTcG9Ul77s9djeddD52YHvg_U/view?usp=sharing
Pass4itsure offers the latest Microsoft MS-100 practice test free of charge 1-13
QUESTION 1
HOTSPOT
Your company has a Microsoft 365 subscription that contains the domains shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer: 
Only the Contoso20198.onmicrosoft.com domain has the status of Setup Complete. The other two statuses mean that the
domain setup is not complete or has issues that need to be corrected before they can be used.
Reference: https://support.office.com/en-gb/article/what-do-domain-statuses-mean-inoffice-365-3ecf1fef-3b31-497c-98bc-e57e2413b4e5
QUESTION 2
Your company has a Microsoft 365 E3 subscription.
All devices run Windows 10 Pro and are joined to Microsoft Azure Active Directory (Azure AD).
You need to change the edition of Windows 10 to Enterprise the next time users sign in to their computer. The solution
must minimize downtime for the users.
What should you use?
A. Subscription Activation
B. Windows Update
C. Windows Autopilot
D. an in-place upgrade
Correct Answer: C
When initially deploying new Windows devices, Windows Autopilot leverages the OEM-optimized version of Windows 10
that is preinstalled on the device, saving organizations the effort of having to maintain custom images and drivers for
every model of device being used. Instead of re-imaging the device, your existing Windows 10 installation can be
transformed into a “business-ready” state, applying settings and policies, installing apps, and even changing the edition
of Windows 10 being used (e.g. from Windows 10 Pro to Windows 10 Enterprise) to support advanced features.
Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot
QUESTION 3
Your company is based in the United Kingdom (UK).
Users frequently handle data that contains Personally Identifiable Information (PII).
You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is
configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based in the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
The text in the Policy Settings section of the exhibit explains what will happen.
If a user sends between 1 and 10 instances of the sensitive info (passport number), then a notification email and will be
sent to the user and a policy tip will be displayed. The email will not be blocked though. Therefore, it will be allowed.
If a user sends more than 10 instances of the sensitive info (passport number), the email will be blocked and a high-severity alert generated. However, the user can override the block.
Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies
QUESTION 4
HOTSPOT
You have a Microsoft 365 subscription that uses a default domain named litwareinc.com. The subscription has a
Microsoft SharePoint site collection named Collection1.
From the Azure Active Directory admin center, you configure the External collaboration settings as shown in the
External Collaboration Settings exhibit. (Click the External Collaboration Settings tab.)
From the SharePoint admin center, you configure the sharing settings as shown in the SharePoint Sharing exhibit.
(Click the SharePoint Sharing tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
Box 1: Yes
In the first exhibit, “Allow invitations to be sent to any domain (most inclusive) is enabled”. Also, everyone is allowed to
‘invite’. The Target Domains setting will have no effect. This would only apply if one of the Allow/Deny invitations to
the
specified domain options were selected.
There is a restriction that blocks invitations being sent to contoso.com. However, this restriction does not apply to
Fabrikam.com. Therefore, you can share the files in Collection1 to [email protected].
Box 2: Yes
As noted above, external sharing is enabled for any domain except contoso.com. The Target Domains setting in the first
exhibit will have no effect. Therefore, you can share Collection1 with [email protected].
Box 3: Yes
As noted above, external sharing is enabled for any domain except contoso.com. Blocking sharing to contoso.com does
not block sharing to us.contoso.com. Therefore, you can share Collection1 with [email protected].
Reference: https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
QUESTION 5
You need to ensure that all the sales department users can authenticate successfully during Project1 and Project2.
Which authentication strategy should you implement for the pilot projects?
A. password hash synchronization and seamless SSO
B. pass-through authentication
C. password hash synchronization
D. pass-through authentication and seamless SSO
Correct Answer: A
1.
Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.
2.
Project2: After the successful completion of Project1, Microsoft Teams and Skype for Business will be enabled in
Microsoft 365 for the sales department users.
3.
After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications
automatically.
4.
Fabrikam does NOT plan to implement identity federation.
5.
After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint
sites by using their UPN.
You need to enable password hash synchronization to enable the users to continue to authenticate to their mailbox and
to SharePoint sites by using their UPN.
You need to enable SSO to enable all users to be signed in to on-premises and cloud-based applications automatically.
References: https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn
QUESTION 6
You have a Microsoft 365 subscription.
You view the service advisories shown in the following exhibit.
You need to ensure that users who administer Microsoft SharePoint Online can view the advisories to investigate health
issues. Which role should you assign to the users?
A. SharePoint administrator
B. Message Center reader
C. Reports reader
D. Service administrator
Correct Answer: D
People who are assigned the global admin or service administrator role can view service health. To allow Exchange,
SharePoint, and Skype for Business admins to view service health, they must also be assigned the Service admin role.
For more information about roles that can view service health.
Reference: https://docs.microsoft.com/en-us/office365/enterprise/view-service-health
QUESTION 7
You need to assign User2 the required roles to meet the security requirements and the technical requirements. To
which two roles should you assign User2? Each correct answer presents part of the solution. NOTE: Each correct
selection is worth one point.
A. the Exchange View-only Organization Management role
B. the Microsoft 365 Records Management role
C. the Exchange Online Help Desk role
D. the Microsoft 365 Security Reader role
E. the Exchange Online Compliance Management role
Correct Answer: DE
User2 must be able to view reports and schedule the email delivery of security and compliance reports.
The Security Reader role can view reports but not schedule the email delivery of security and compliance reports.
The Exchange Online Compliance Management role can schedule the email delivery of security and compliance
reports.
Reference:
https://docs.microsoft.com/en-us/exchange/permissions-exo/permissions-exo
QUESTION 8
Your company has a hybrid deployment of Microsoft 365.
An on-premises user named User1 is synced to Microsoft Azure Active Directory (Azure AD).
Azure AD Connect is configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
User1 cannot change her password from any Microsoft portals because Password Writeback is disabled in the Azure
AD Connect configuration.
If the password for User1 is changed in Active Directory, the password will be synchronized to Azure AD because
Password Synchronization is enabled in the Azure AD Connect configuration.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom
QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active
Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure a pilot for co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
Device1 has the Configuration Manager client installed so you can manage Device1 by using Configuration Manager.
To manage Device1 by using Microsoft Intune, the device has to be enrolled in Microsoft Intune. In the Co-management
Pilot configuration, you configure a Configuration Manager Device Collection that determines which devices are auto-enrolled in Microsoft Intune. You need to add Device1 to the Device Collection so that it auto-enrolls in Microsoft Intune.
You will then be able to manage Device1 using Microsoft Intune.
Reference:
https://docs.microsoft.com/en-us/configmgr/comanage/how-to-enable
QUESTION 10
SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few
minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a
live environment. While most functionality will be available to you as it would be in a live environment, some
functionality
(e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matter how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as
much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are
able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign inbox and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: 3andYWyjse-6-d
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser
tab.
The following information is for technical support purposes only:
Lab Instance: 10887751
You plan to provide an external user named [email protected] with access to several resources in your
Microsoft 365 tenant.
You need to ensure that the external user can be added to Office 365 groups.
A. See below.
Correct Answer: A
You need to create a guest account for the external user.
1.
Go to the Azure Active Directory admin center.
2.
Select Users.
3.
Click the ‘New guest user’ link.
4.
Select the ‘Invite user’ option.
5.
Give the account a name and enter [email protected] in the email address field.
6.
Click the ‘Invite’ button.
References: https://docs.microsoft.com/en-us/azure/active-directory/b2b/b2b-quickstart-add-guest-users-portal
QUESTION 11
You have a Microsoft 365 Enterprise subscription.
You have a conditional access policy to force multi-factor authentication when accessing Microsoft SharePoint from a
mobile device.
You need to view which users authenticated by using multi-factor authentication.
What should you do?
A. From the Microsoft 365 admin center, view the Security and Compliance reports.
B. From the Azure Active Directory admin center, view the user sign-ins.
C. From the Microsoft 365 admin center, view the Usage reports.
D. From the Azure Active Directory admin center, view the audit logs.
Correct Answer: B
With the sign-ins activity report in the Azure portal, you can get the information you need to determine how your
environment is doing. The sign-ins report can provide you with information about the usage of managed applications
and user sign-in activities, which includes information about multi-factor authentication (MFA) usage. The MFA data
gives you insights into how MFA is working in your organization. It enables you to answer questions like:
1.
Was the sign-in challenged with MFA?
2.
How did the user complete MFA?
3.
Why was the user unable to complete MFA?
4.
How many users are challenged for MFA?
5.
How many users are unable to complete the MFA challenge?
6.
What are the common MFA issues end-users are running into?
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting
QUESTION 12
You need to meet the security requirements for User3. The solution must meet the technical requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
1.
User3 must be able to manage Office 365 connectors.
2.
The principle of least privilege must be used whenever possible.
Office 365 connectors are configured in the Exchange Admin Center.
You need to assign User3 the Organization Management role to enable User3 to manage Office 365 connectors.
A Global Admin could manage Office 365 connectors but the Organization Management role has less privilege.
Reference:
https://docs.microsoft.com/en-us/office365/SecurityCompliance/eop/feature-permissions-in-eop
QUESTION 13
SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few
minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a
live environment. While most functionality will be available to you as it would be in a live environment, some
functionality
(e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matters how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as
much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are
able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab. Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign-in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username: [email protected]
Microsoft 365 Password: m3t^We$Z7andxy
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser
tab.
The following information is for technical support purposes only:
Lab Instance: 11440873
Pass4itsure Microsoft exam dumps discount code share
Summarize:
[Q1-Q13] Free Microsoft MS-100 pdf download https://drive.google.com/file/d/1CkGKTbaKTcG9Ul77s9djeddD52YHvg_U/view?usp=sharing
Share all the resources: Latest Microsoft MS-100 practice questions, latest Microsoft MS-100 pdf dumps. The latest updated Microsoft MS-100 dumps https://www.pass4itsure.com/ms-100.html Study hard and practices a lot. This will help you prepare for the Microsoft MS-100 exam. Good luck!
