Microsoft MS-100 Deluxe Study Guide with Online Test Engine
MS-100 dumps review - Professional Quiz Study Materials
What Knowledge Should One Have to Be Eligible for It?
MS-100 exam candidates must have hands-on skills for working with Microsoft 365 workloads and possess experience being an administrator for at least one of these workloads such as Skype for Business, Windows as a Service, SharePoint, or Exchange. Their knowledge of server administration, IT fundamentals (PowerShell, AD, DNS), and networking is also a big plus.
The MS-100 exam tests the candidates' knowledge related to managing user identity and roles, implementing and managing Azure AD, managing access and authentication, implementing and managing Microsoft 365 services, and managing client devices. MS-100 exam is targeted towards individuals who have a good understanding of technologies such as Active Directory, Exchange, SharePoint, and Skype for Business. Passing the MS-100 exam validates that a candidate has the necessary skills and knowledge to manage and implement Microsoft 365 services and identity solutions in an enterprise environment.
NEW QUESTION # 191
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: 3&YWyjse-6-d
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance: 10887751
You plan to create 1,000 users in your Microsoft 365 subscription.
You need to ensure that all the users can use the @contoso.com suffix in their username.
Another administrator will perform the required information to your DNS zone to complete the operation.
Answer:
Explanation:
You need to add the contoso.com domain to Microsoft 365 then set the domain as the default.
1. In the Admin Center, click Setup then click Domains.
2. Click the 'Add Domain' button.
3. Type in the domain name (contoso.com) and click the 'Use this domain' button.
4. The question states that another administrator will perform the required information to your DNS zone. Therefore, you just need to click the 'Verify' button to verify domain ownership.
5. Click Finish.
6. In the domains list, select the contoso.com domain.
7. Select 'Set as default'.
Reference:
https://docs.microsoft.com/en-us/office365/admin/setup/add-domain?view=o365-worldwide
NEW QUESTION # 192
You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named
contoso.com. Contoso.com contains the users shown in the following table.
Contoso.com is configured as shown in the following exhibit.
You need to ensure that guest users can be created in the tenant.
Which setting should you modify?
- A. Guests users permissions are limited.
- B. Admins and users in the guest inviter role can invite.
- C. Deny invitations to the specified domains.
- D. Members can invite.
- E. Guests can invite.
Answer: B
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/users-default-permissions
NEW QUESTION # 193
You create the Microsoft 365 tenant.
You implement Azure AD Connect as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 194
Your network contains an Active Directory domain named contoso.com. The domain contains the file servers shown in the following table.
A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2. Three apps named App1, App2, and App3 all open files that have the .abc file extension.
You implement Windows Information Protection (WIP) by using the following configurations:
Exempt apps: App2
Protected apps: App1
Windows Information Protection mode: Block
Network boundary: IPv4 range of 192.168.1.1-192.168.1.255
You need to identify the apps from which you can open File1.abc
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
References:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure
NEW QUESTION # 195
You company has a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts.
You need to identify which users can perform the following administrative tasks:
* Create guest user accounts.
* Add User3 to Admin1.
Which users should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles
NEW QUESTION # 196
You have a Microsoft 365 Enterprise subscription.
You create a password policy as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-smart-lockout
NEW QUESTION # 197
You need to ensure that users can initiate private conversations with HRBot. The solution must meet the technical requirements for HRApp. How should you configure the HRApp manifest?
- A. In the tots section, change the scopes collection value from teams to personal.
- B. In the configureble Tabs section, add groupchat to the scopes collection
- C. In the staticTabs section, add perioral to the scopes collection.
- D. In the dots section, add personal to the scopes collection.
Answer: B
NEW QUESTION # 198
You need to create the UserLicenses group. The solution must meet the security requirements.
Which group type and control method should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
NEW QUESTION # 199
Your company has a Microsoft 365 subscription.
Your plan to add 100 newly hired temporary users to the subscription next week.
You create the user accounts for the new users.
You need to assign licenses to the new users.
Which command should you run?
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
Explanation:
Explanation
The first line gets all users from the Temp department that have a UsageLocation assigned and stores them in the $NewStaff variable. You cannot use PowerShell to assign a license to a user that does not have a UsageLocation configured.
The second line adds the licenses to each user in the $NewStaff variable.
Reference:
https://docs.microsoft.com/en-us/office365/enterprise/powershell/assign-licenses-to-user-accounts-with-office-36
NEW QUESTION # 200
You need to prepare the environment for Project1.
You create the Microsoft 365 tenant.
Which three actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
NEW QUESTION # 201
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: *yfLo7Ir2&y-
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance: 10811525
Your organization plans to open an office in New York, and then to add 100 users to the office. The city attribute for all new users will be New York.
You need to ensure that all the new users in the New York office are licensed for Microsoft Office 365 automatically.
Answer:
Explanation:
See explanation below
Explanation:
You need create a dynamic group based on the city attribute. You then need to assign a license to the group. User accounts with the city attribute set to 'New York will automatically be added to the group. Anyone who is added to the group will automatically be assigned the license that is assigned to the group.
1. Go to the Azure Active Directory admin center.
2. Select Azure Active Directory then select Groups.
3. Click on the New Group link.
4. Give the group a name such as New York Users.
5. Select Users as the membership type.
6. Select 'Add dynamic query'.
7. Select 'City' in the Property drop-down box.
8. Select 'Equals' in the Operator drop-down box.
9. Enter 'New York' as the Value. You should see the following text in the Expression box: user.city -eq "New York"
10. Click Save to create the group.
11. In the Groups list, select the new group to open the properties page for the group.
12. Select 'Licenses'.
13. Select the '+ Assignments' link.
14. Tick the box to select the license.
15. Click the Save button to save the changes.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-assign
NEW QUESTION # 202
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.
Lab information
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:[email protected]
Microsoft 365 Password:m3t^We$Z7&xy
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance:11440873
You need to create a policy that allows a user named Lee Gu to use Outlook Web App to review 50 percent of the outbound email messages sent by a user named Joni Sherman.
To answer, sign in to the Microsoft 365 portal.
Answer:
Explanation:
See explanation below.
Explanation
You need to configure a Supervision Policy.
1. Go to https://protection.office.com or navigate to the Security & Compliance admin center.
2. In the left navigation pane, select Supervision.
3. Click the '+Create' button to create a new supervision policy.
4. Give the policy a name such as 'Joni Sherman' and click Next.
5. In the 'Supervised users' section, click '+Add users or groups'.
6. Select Joni Sherman from the users list and click the Add button.
7. Deselect the 'Teams chats' and 'Skype for Business Conversations' checkboxes leaving only the 'Exchange Email' checkbox ticked and click Next.
8. Under 'Direction is', deselect Inbound leaving only Outbound selected and click Next.
9. In the 'Percentage to review' section, enter 50 and click Next.
10. In the 'Reviewers' section, start typing Lee Gu then select his account when it appears.
11. Click Next.
12. On the 'Review your settings' page, check the settings are correct the click the Finish button to create the policy.
NEW QUESTION # 203
From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the
You need to reduce the likelihood that the sign-ins are identified as risky.
What should you do?
- A. From the Security & Compliance admin center, create a classification label.
- B. From the Security & Compliance admin center, add the users to the Security Readers role group.
- C. From the Conditional access blade in the Azure Active Directory admin center, create named locations.
- D. From the Azure Active Directory admin center, configure the trusted IPs for multi-factor authentication.
Answer: C
Explanation:
Explanation
A named location can be configured as a trusted location. Typically, trusted locations are network areas that are controlled by your IT department. In addition to Conditional Access, trusted named locations are also used by Azure Identity Protection and Azure AD security reports to reduce false positives for risky sign-ins.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition
NEW QUESTION # 204
You have a Microsoft 365 subscription that contains several Microsoft SharePoint Online sites.
You discover that users from your company can invite external users to access files on the SharePoint sites.
You need to ensure that the company users can invite only authenticated guest users to the sites.
What should you do?
- A. From the Azure Active Directory admin center, configure a conditional access policy.
- B. From the SharePoint admin center, configure the sharing settings.
- C. From SharePoint Online Management Shell, run the Set-SPOSitecmdlet.
- D. From the Microsoft 365 admin center, configure a partner relationship.
Answer: B
Explanation:
Section: [none]
Explanation:
You need to set the Sharing settings to 'Existing Guests'. This setting allows sharing only with guests who are already in your directory. These guests may exist in your directory because they previously accepted sharing invitations or because they were manually added.
Reference:
https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off
NEW QUESTION # 205
You have several Microsoft SharePoint document libraries in your on-premises environment.
You have a Microsoft 365 tenant that has directory synchronization implemented.
You plan to move all the document libraries to SharePoint Online.
You need to recommend a migration strategy for the document libraries.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
The SharePoint Migration Tool lets you migrate content to SharePoint Online and OneDrive from the following locations:
* SharePoint Server 2013
* SharePoint Server 2010
* Network and local file shares
The first step is to create new SharePoint sites in SharePoint online. These sites will host the document libraries which will host the migrated content.
The second step is to create the document libraries in the SharePoint sites to host the migrated content.
The final step is to use the SharePoint Migration Tool to migrate the content.
Reference:
https://docs.microsoft.com/en-us/sharepointmigration/how-to-use-the-sharepoint-migration-tool
NEW QUESTION # 206
You implement Microsoft Azure Advanced Threat Protection (Azure ATP).
You have an Azure ATP sensor configured as shown in the following exhibit.
Updates
How long after the Azure ATP cloud service is updated will the sensor update?
- A. 48 hours
- B. 7 days
- C. 24 hours
- D. 12 hours
- E. 1 hour
Answer: C
Explanation:
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-whats-new
NEW QUESTION # 207
You need to meet the application requirement for the Office 365 ProPlus applications.
You create a XML file that contains the following settings.
Use the drop-down menus to select the choice that complete each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 208
You need to add the custom domain names to Office 365 to support the planned changes as quickly as possible.
What should you create to verify the domain names successfully?
- A. three text (TXT) records
- B. three alias (CNAME) records
- C. one alias (CNAME) record
- D. one text (TXT) record
Answer: A
Explanation:
Contoso plans to provide email addresses for all the users in the following domains:
* East.adatum.com
* Contoso.adatum.com
* Humongousinsurance.com
To verify three domain names, you need to add three TXT records.
Reference:
https://docs.microsoft.com/en-us/office365/admin/setup/add-domain?view=o365-worldwide Design and Implement Microsoft 365 Services Testlet 3 This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam.
You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Overview
Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.
Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.
Existing Environment
Active Directory Environment
The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication.
Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.
All users authenticate to on-premises applications by signing in to their device by using a UPN format of [email protected].
Fabrikam does NOT plan to implement identity federation.
Network Infrastructure
Each office has a high-speed connection to the Internet.
Each office contains two domain controllers. All domain controllers are configured as a DNS server.
The public zone for fabrikam.com is managed by an external DNS server.
All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.
All shared company documents are stored on a Microsoft SharePoint Server farm.
Requirements
Planned Changes
Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.
Fabrikam plans to implement two pilot projects:
* Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft
365.
* Project2: After the successful completion of Project1, Microsoft Teams & Skype for Business will be enabled in Microsoft 365 for the sales department users.
Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.
Technical Requirements
Fabrikam identifies the following technical requirements:
* All users must be able to exchange email messages successfully during Project1 by using their current email address.
* Users must be able to authenticate to cloud services if Active Directory becomes unavailable.
* A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.
* Microsoft Office 365 ProPlus applications must be installed from a network share only.
* Disruptions to email access must be minimized.
Application Requirements
Fabrikam identifies the following application requirements:
* An on-premises web application named App1 must allow users to complete their expense reports online.
* The installation of feature updates for Office 365 ProPlus must be minimized.
Security Requirements
Fabrikam identifies the following security requirements:
* After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.
* The memberships of UserLicenses must be validated monthly. Unused user accounts must be removed from the group automatically.
* After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.
* The principle of least privilege must be used.
NEW QUESTION # 209
Your network contains a single Active Directory domain and two Microsoft Azure Active Directory (Azure
AD) tenants.
You plan to implement directory synchronization for both Azure AD tenants. Each tenant will contain some
of the Active Directory users.
You need to recommend a solution for the planned directory synchronization.
What should you include in the recommendation?
- A. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using
organizational unit (OU)-based filtering. - B. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using
domain-based filtering. - C. Deploy one server that runs Azure AD Connect, and then specify two sync groups.
- D. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using
organizational unit (OU)-based filtering.
Answer: D
Explanation:
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-azure-ad-
tenants
NEW QUESTION # 210
Your company has a Microsoft 365 subscription that contains the users shown in the following table.
You need to identify which users can perform the following administrative tasks:
Modify the password protection policy.
Create guest user accounts.
Which users should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-operations
NEW QUESTION # 211
Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.
You purchase a Microsoft 365 E5 subscription.
You need to implement Azure AD Connect cloud sync.
What should you install first and on which server? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 212
You need to meet the security requirement for Group1.
What should you do?
- A. Configure all users to sign in by using multi-factor authentication.
- B. Modify the properties of Group1.
- C. Assign Group1 a management role.
- D. Modify the Password reset properties of the Azure AD tenant.
Answer: D
Explanation:
Section: [none]
Explanation:
* The members of Group1 must be required to answer a security question before changing their password.
If SSPR (Self Service Password Reset) is enabled, you must select at least one of the following options for the authentication methods. Sometimes you hear these options referred to as "gates." Mobile app notification Mobile app code Email Mobile phone Office phone Security questions You can specify the required authentication methods in the Password reset properties of the Azure AD tenant.
In this case, you should set the required authentication method to be 'Security questions'.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
NEW QUESTION # 213
......
Exam Questions Answers Braindumps MS-100 Exam Dumps PDF Questions: https://www.free4torrent.com/MS-100-braindumps-torrent.html
MS-100 Test Prep Training Practice Exam Questions Practice Tests: https://drive.google.com/open?id=1ESP4Fg-_5oHlgVd_XeW8B_C2LOqJrdU0