MS-100 Actual Questions Answers Pass With Real MS-100 Exam Dumps
MS-100 Dumps Prepare Your Exam With 431 Questions
The MS-100 exam is a part of the Microsoft 365 Certified: Enterprise Administrator Expert certification. Microsoft 365 Identity and Services certification is designed to validate your expertise in managing and implementing Microsoft 365 services in an enterprise environment. Microsoft 365 Identity and Services certification also demonstrates your ability to design and implement Microsoft 365 solutions that meet the business requirements of your organization.
NEW QUESTION # 113
Your company has an on-premises Microsoft Exchange Server 2016 organization and a Microsoft 365 Enterprise subscription.
You plan to migrate mailboxes and groups to Exchange Online.
You start a new migration batch.
Users report slow performance when they use the on-premises Exchange Server organization.
You discover that the migration is causing the slow performance.
You need to reduce the impact of the mailbox migration on the end-users.
What should you do?
- A. Modify the migration endpoint settings.
- B. Create a throttling policy.
- C. Configure back pressure.
- D. Create a mail flow rule.
Answer: A
Explanation:
Section: [none]
Explanation:
The migration is causing the slow performance. This suggests that the on-premise Exchange server is struggling under the load of copying the mailboxes to Exchange Online. You can reduce the load on the on- premise server by reducing the maximum number of concurrent mailbox migrations. Migrating just a few mailboxes at a time will have less of a performance impact than migrating many mailboxes concurrently.
Reference:
https://support.microsoft.com/en-gb/help/2797784/how-to-manage-the-maximum-concurrent-migration- batches-in-exchange-onl
NEW QUESTION # 114
Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory (Azure AD) by using the Azure AD Connect Express Settings. Password writeback is disabled.
You create a user named User1 and enter Pass in the Password field as shown in the following exhibit.
The Azure AD password policy is configured as shown in the following exhibit.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express
NEW QUESTION # 115
You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites. What should you do?
- A. From the SharePoint admin center, configure the sharing settings.
- B. From SharePoint Online Management Shell, run the set-SPOSite cmdlet.
- C. From the Azure Active Directory adman center, configure a conditional access policy.
- D. From the Microsoft 365 admin center, configure a partner relationship.
Answer: A
Explanation:
Explanation
You need to set the Sharing settings to 'Existing Guests'. This setting allows sharing only with guests who are already in your directory. These guests may exist in your directory because they previously accepted sharing invitations or because they were manually added.
Reference:
https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
NEW QUESTION # 116
Your network contains an Active Directory forest. The forest contains two domains named contoso.com and adatum.com.
Your company recently purchased a Microsoft 365 subscription.
You deploy a federated identity solution to the environment.
You use the following command to configure contoso.com for federation.
Convert-MsolDomaintoFederated -DomainName contoso.com
In the Microsoft 365 tenant, an administrator adds and verifies the adatum.com domain name.
You need to configure the adatum.com Active Directory domain for federated authentication.
Which two actions should you perform before you run the Azure AD Connect wizard? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From the federation server, remove the Microsoft Office 365 relying party trust.
- B. From Windows PowerShell, run the Update-MSOLFederatedDomain
-DomainName contoso.com -SupportMultipleDomain command. - C. From Windows PowerShell, run the Convert-MsolDomaintoFederated
-DomainName contoso.com -SupportMultipleDomain command. - D. From Windows PowerShell, run the New-MsolFederatedDomain
-SupportMultipleDomain -DomainName contoso.com command. - E. From Windows PowerShell, run the New-MsolFederatedDomain
-DomainName adatum.com command.
Answer: A,C
NEW QUESTION # 117
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.
Group2 is a member of Group1.
You assign a Microsoft Office 365 Enterprise E3 license to User2 as shown in the following exhibit.
You assign Office 365 Enterprise E3 licenses to Group1 as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced
NEW QUESTION # 118
Your network contains an on-premises Active Directory domain. The domain contains the users shown in the following table.
You have a Microsoft 365 subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com. You configure Azure AD Connect to sync the on-premises domain to contoso.com as shown in the following exhibit.
Answer:
Explanation:
NEW QUESTION # 119
You have three devices enrolled in Microsoft Intune as shown in the following table.
The device compliance policies in Intune are configured as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Device 1:
No because Device1 is in group3 which has Policy1 assigned which requires BitLocker.
Device 2:
No because Device2 is in group3 which has Policy1 assigned which requires BitLocker. Device2 is also in Group2 which has Policy2 assigned but the BitLocker requirement is not configured in Policy2.
Device3:
Yes because Device3 is in Group2 which has Policy2 assigned but the BitLocker requirement is not configured in Policy2.
Reference:
https://blogs.technet.microsoft.com/cbernier/2017/07/11/windows-10-intune-windows-bitlocker-management-yes/
NEW QUESTION # 120
Your network contain*, an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.
You need to recommend an authentication strategy that meets the following requirements:
* Allows users to sign in by using smart card-based certificates
* Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?
- A. pass-through authentication and seamless SSO
- B. password hash synchronization and seamless SSO
- C. federation with Active Directory Federation Services (AD FS)
Answer: C
Explanation:
References:
Explanation:
Federation with Active Directory Federation Services (AD FS) is required to allow users to sign in by using smart card-based certificates.
Federated authentication
When you choose this authentication method, Azure AD hands off the authentication process to a separate trusted authentication system, such as on-premises Active Directory Federation Services (AD FS), to validate the user's password.
The authentication system can provide additional advanced authentication requirements. Examples are smartcard-based authentication or third-party multifactor authentication.
Reference:
https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn
NEW QUESTION # 121
You have a Microsoft 365 Enterprise subscription.
You create a password policy as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-smart-lockout
NEW QUESTION # 122
You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.
What information must be configured for each user before the user can perform a self-service password reset?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Microsoft enforces a strong default two-gate password reset policy for any Azure administrator role. This policy may be different from the one you have defined for your users and cannot be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned.
With a two-gate policy, administrators don't have the ability to use security questions.
The two-gate policy requires two pieces of authentication data, such as an email address, authenticator app, or a phone number.
User3 is not assigned to an Administrative role so the configured method of Security questions only applies to User3.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-passwo
NEW QUESTION # 123
To which Azure AD role should you add User4 to meet the security requirement?
- A. Password administrator
- B. Privileged role administrator
- C. Global administrator
- D. Security administrator
Answer: C
Explanation:
User4 must be able to reset User3 password.
User3 is assigned the Customer Lockbox Access Approver role. Only global admins can reset the passwords of people assigned to this role as it's considered a privileged role.
Reference:
https://techcommunity.microsoft.com/t5/Security-Privacy-and-Compliance/Customer-Lockbox-Approver-Role-Now-Available/ba-p/223393
NEW QUESTION # 124
You have a data loss prevention (DLP) policy.
You need to increase the likelihood that the DLP policy will apply to data that contains medical terms from the International Classification of Diseases (ICD-9-CM). The solution must minimize the number of false positives.
Which two settings should you modify? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies
https://docs.microsoft.com/en-us/office365/securitycompliance/what-the-sensitive-information-types-look-for#international-classification-HYPERLINK "https://docs.microsoft.com/en-us/office365/securitycompliance/what-the-sensitive-information-types-look-for#international-classification-of-diseases-icd-9-cm"of-diseases-icd-9-cm
NEW QUESTION # 125
You have a Microsoft 365 subscription.
You have the devices shown in the following table.
You need to onboard the devices to Windows Defender Advanced Threat Protection (ATP). The solution must avoid installing software on the devices whenever possible.
Which onboarding method should you use for each operating system? To answer, drag the appropriate methods to the correct operating systems. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/onboard-downlevel-
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/configure-endpoints-
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/configure-server-end Box 1:
To onboard down-level Windows client endpoints to Microsoft Defender ATP, you'll need to:
Configure and update System Center Endpoint Protection clients.
Install and configure Microsoft Monitoring Agent (MMA) to report sensor data to Microsoft Defender ATP Box 2:
For Windows 10 clients, the following deployment tools and methods are supported:
Group Policy
System Center Configuration Manager
Mobile Device Management (including Microsoft Intune)
Local script
Box 3:
Windows Server 2016 can be onboarded by using Azure Security Centre. When you add servers in the Security Centre, the Microsoft Monitoring Agent is installed on the servers.
NEW QUESTION # 126
Your company has 500 client computers that run Windows 10.
You plan to deploy Microsoft Office 365 ProPlus to all the computers.
You create the following XML file for the planned deployment.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool
NEW QUESTION # 127
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username: [email protected]
Microsoft 365 Password: m3t^We$Z7&xy
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance: 11440873
Your organization plans to start a new collaborative project that will contain email and chat communications, as well as regular meetings.
You need to create a team in Microsoft Teams for the planned project. The team must have the following configurations:
* Be named Project1.
* Have an owner named Lee Gu.
* Have a channel named Channel1.
To answer, sign in to the Microsoft 365 portal.
Answer:
Explanation:
See explanation below.
Explanation
You need to create a team. You can create a team in the Microsoft Teams Admin Center or in the Microsoft Teams app. However, to be able to specify the team owner when creating the team, you need to use the Teams Admin Center.
1. Go to the Microsoft Teams Admin Center.
2. In the left navigation pane, expand the Teams section and select 'Manage Teams'.
3. Click the '+ Add' link to add a new team.
4. Give the team the name Project1.
5. In the Team Owner field, remove your name which is there by default and add Lee Gu.
6. Click the 'Create a team' button to create the team.
7. In the teams list, select the Project1 team.
8. Click on 'Channels'.
9. Click the '+ Add' link to add a new channel.
10. Give the channel the name Channel1.
11. Click the Apply button to create the channel.
NEW QUESTION # 128
Your network contains an Active Directory domain named fabrikam.com. The domain contains the objects shown in the following table.
The group have the members shown in the following table.
You are configure synchronization between fabrikam.com and a Microsoft Azure Active Director (Azure AD) tenant.
You configure the domain/OU Filtering settings in Azure AD Connect as shown in the Domain>OU Filtering exhibit. (Click the Domain/OU Filtering tab.) You configure the Filtering in Azure Connect as shown in the Filtering exhibit. (Click the Filtering tab.) NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#group-based-filtering
NEW QUESTION # 129
You have a multitenant app named App1.
You need to ensure that App1 supports token acquisition when a user accesses the app by using a web browser that has a popup blocker extension enabled. How should you complete the Microsoft Authentication Library (MSAL) for JavaScript v2.0 code? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 130
You have a Microsoft 365 subscription that contains the users shown in the following table.
You plan to use Exchange Online to manage email for a DNS domain.
An administrator adds the DNS domain to the subscription.
The DNS domain has a status of incomplete setup.
You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege.
Which user should you identify?
- A. User4
- B. User3
- C. User2
- D. User1
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/admin/setup/add-domain?view=o365-worldwide
NEW QUESTION # 131
......
Important Things (Audience & Prerequisites)
The Microsoft MS-100 exam is intended for those individuals who have a good grasp of Microsoft 365 workloads and have been working as an Administrator for at least one Microsoft 365 workload: Windows as a Service, Exchange, Skype for Business, or SharePoint.
Anyone who is thinking about taking the Microsoft MS-100 exam should make sure that he or she possesses the requisite expertise. This is because the Microsoft 365 Certified: Enterprise Administrator Expert certification is designed for those professionals who are able to deploy, plan, migrate, evaluate, and manage Microsoft 365 services. It is also recommended that any person who goes for this certificate have some experience with PowerShell, Active Directory, and DNS.
The Microsoft MS-100 exam consists of multiple-choice questions that evaluate the candidate's knowledge of Microsoft 365 services, including Azure AD and Intune. The questions are designed to test the candidate's ability to configure, manage, and monitor these services. Candidates must also demonstrate their knowledge of identity protection, device management, and access management in Microsoft 365.
New MS-100 Dumps - Real Microsoft Exam Questions: https://vcetorrent.passreview.com/MS-100-exam-questions.html