MS-100 Microsoft 365 Identity and Services Dumps

If you are looking for free MS-100 dumps than here we have some sample question answers available. You can prepare from our Microsoft MS-100 exam questions notes and prepare exam with this practice test. Check below our updated MS-100 exam dumps.

DumpsGroup are top class study material providers and our inclusive range of MS-100 Real exam questions would be your key to success in Microsoft Microsoft 365 Certification Exam in just first attempt. We have an excellent material covering almost all the topics of Microsoft MS-100 exam. You can get this material in Microsoft MS-100 PDF and MS-100 practice test engine formats designed similar to the Real Exam Questions. Free MS-100 questions answers and free Microsoft MS-100 study material is available here to get an idea about the quality and accuracy of our study material.


discount banner

Sample Question 4

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You need to modify Christie Cline to meet the following requirements:Christie Cline must be able to view the service dashboard and the Microsoft Office 365 Message center.Christie Cline must be able to create Microsoft support requests.The solution must use the principle of least privilege.See explanation below.


Sample Question 5

You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.Corporate policy states that user passwords must not include the word ContosoWhat should you do to implement the corporate policy?

A. From the Azure Active Directory admin center, configure the Password protection settings.
B. From the Microsoft 365 admin center, configure the Password policy settings.
C. From Azure AD Identity Protection, configure a sign-in risk policy.
D. From the Azure Active Directory admin center, create a conditional access policy.


Sample Question 6

You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.A temporary employee at your company uses an email address of [email protected] need to ensure that the temporary employee can sign in to contoso.com by using the [email protected] account.What should you do?

A. From the Azure Active Directory admin center, create a new user.
B. From the Microsoft 365 admin center, create a new contact.
C. From the Azure Active Directory admin center, create a new guest user.
D. From the Microsoft 365 admin center, create a new user.


Sample Question 7

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751A user named Johanna Lorenz recently left the company. A new employee named Ben Smith will handle thetasks of Johanna Lorenz.You need to create a user named Ben Smith. Ben Smith must be able to sign in to http://myapps.microsoft.com and open Microsoft Word Online.See explanation below. 


Sample Question 8

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You need to prevent the users in your organization from establishing voice calls from Microsoft Skype for Business to external Skype users.See explanation below.


Sample Question 9

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the labYou may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525Alex Wilber must be able to reset the password of each user in your organization. The solution must preventAlex Wilber from modifying the password of global administrators.See explanation below.


Sample Question 10

You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1.You enable Azure AD Identity Protection.You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1? 

A. Security reader
B. User administrator
C. Service administrator
D. Reports reader


Sample Question 11

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You plan to allow the users in your organization to invite external users as guest users to your Microsoft 365tenant.You need to prevent the organization’s users from inviting guests who have an email address that uses a suffixof @gmail.com.See explanation below.


Sample Question 12

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525Your organization plans to open an office in New York, and then to add 100 users to the office. The city attribute for all new users will be New York.You need to ensure that all the new users in the New York office are licensed for Microsoft Office 365 automatically. See explanation below. 


Sample Question 13

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525Your organization recently partnered with another organization named Fabrikam, Inc.You plan to provide a Microsoft 365 license to an external user named [email protected], and then to share documents with the user.You need to invite [email protected] to access your organization.See explanation below.


Sample Question 14

You have Windows 10 devices that are managed by using Microsoft Endpoint Manager. All the devices have Microsoft Office 365 apps installed.You need to configure the proofing tool settings for the Office 365 apps.From the Microsoft Endpoint Manager admin center, what should you create?

A. a device compliance policy
B. an app configuration policy
C. an app
D. a device configuration profile


Sample Question 15

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You plan to create 1,000 users in your Microsoft 365 subscription.You need to ensure that all the users can use the @contoso.com suffix in their username.Another administrator will perform the required information to your DNS zone to complete the operation.See explanation below.


Sample Question 16

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains 10,000 users.The company has a Microsoft 365 subscription.You enable Azure Multi-Factor Authentication (MFA) for all the users in contoso.com.You run the following query.search "SigninLogs" | where ResultDescription == "User did not pass the MFA challenge."The query returns blank results.You need to ensure that the query returns the expected results.What should you do?

A. From the Azure Active Directory admin center, configure the diagnostics settings to archive logs to an Azure Storage account.
B. From the Security & Compliance admin center, turn on auditing.
C. From the Security & Compliance admin center, enable Office 365 Analytics.
D. From the Azure Active Directory admin center, configure the diagnostics settings to send logs to an Azure Log Analytics workplace.


Sample Question 17

Your network contains an on-premises Active Directory domain named contoso.com that is synced to a Microsoft Azure Active Directory (Azure AD) tenant.The on-premises network contains a file server named Server1. Server1 has a share named Share1 that contains company documents.Your company purchases a Microsoft 365 subscription.You plan to migrate data from Share1 to Microsoft 365. Only data that was created or modified during the last three months will be migrated.You need to identify all the files in Share1 that were modified or created during the last 90 days.What should you use?

A. Server Manager
B. Microsoft SharePoint Migration Tool
C. Resource Monitor
D. Usage reports from the Microsoft 365 admin center


Sample Question 18

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.You purchase a Microsoft 365 subscription.You implement password hash synchronization and Azure Active Directory (Azure AD) Seamless Single Sign-On (Seamless SSO).You need to ensure that users can use Seamless SSO from the Windows 10 computers.What should you do?

A. Create a conditional access policy in Azure AD.
B. Deploy an Azure AD Connect staging server.
C. Join the computers to Azure AD.
D. Modify the Intranet zone settings by using Group Policy


Sample Question 19

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525Your organization recently implemented a new data retention policy. The policy requires that all files stored inan employee’s Microsoft OneDrive folders be retained for 60 days after the employee is terminated from theorganization.The human resources (HR) department of the organization deletes the user accounts of all terminatedemployees.You need to ensure that the organization meets the requirements of the data retention policy.See explanation below. 


Sample Question 20

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You need to prevent non-administrators in your organization from registering applications.See explanation below.


Sample Question 21

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You plan to invite several guest users to access the resources in your organization.You need to ensure that only guests who have an email address that uses the @contoso.com suffix can connectto the resources in your Microsoft 365 tenant.See explanation below. 


Sample Question 22

A user receives the following message when attempting to sign in to https://myapps.microsoft.com:"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might be signing in from a new location, device, or app. Before you can continue, we need to verify your identity. Please contact your admin." Which configuration prevents the users from signing in? 

A. Security & Compliance supervision policies
B. Security & Compliance data loss prevention (DLP) policies
C. Microsoft Azure Active Directory (Azure AD) conditional access policies
D. Microsoft Azure Active Directory (Azure AD) Identity Protection policies


Sample Question 23

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You have a user named Grady Archie. The solution must meet the following requirements:Grady Archie must be able to add payment methods to your Microsoft Office 365 tenant.The solution must minimize the number of licenses assigned to users.The solution must use the principle of least privilege.See explanation below.


Sample Question 24

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You plan to provide an external user named [email protected] with access to several resources inyour Microsoft 365 tenant.You need to ensure that the external user can be added to Office 365 groups.See explanation below. 


Sample Question 25

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You plan to provide several users in your organization with the ability to join their Windows 10 device toMicrosoft Azure Active Directory (Azure AD).You need to ensure that all the users who join a device use multi-factor authentication.See explanation below.


Sample Question 26

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided. Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You hire a new Microsoft 365 administrator named Nestor Wilke. Nestor Wilke will begin working for yourorganization in several days.You need to ensure that Nestor Wilke is prevented from using his account until he begins working.See explanation below.


Sample Question 27

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains:Contoso.comEast.contoso.comAn Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant.You deploy a new domain named west.contoso.com to the forest.You need to ensure that west.contoso.com syncs to the Azure AD tenant.Solution: You install a new Azure AD Connect server in west.contoso.com and set AD Connect to staging mode.Does this meet the goal?

A. Yes
B. No


Sample Question 28

Your network contains three Active Directory forests.You create a Microsoft Azure Active Directory (Azure AD) tenant.You plan to sync the on-premises Active Directory (Azure AD).You need to recommend a synchronization solution. The solution must ensure that the synchronization cancomplete successfully and as quickly as possible if a single server fails.What should you include in the recommendation?

A. Three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
B. One Azure AD Connect sync servers one Azure AD Connect sync servers in staging mode
C. Three Azure AD Connect sync servers and one Azure AD Connect sync servers in staging mode
D. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode


Sample Question 29

Your network contains an Active Directory domain named adatum.com that is synced to Microsoft Azure Active Directory (Azure AD).The domain contains 100 user accounts.The city attribute for all the users is set to the city where the user resides.You need to modify the value of the city attribute to the three-letter airport code of each city.What should you do?

A. From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
B. From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
C. From Azure Cloud Shell, run the Get-MsolUser and Set-MSOluser cmdlets.
D. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.


Sample Question 30

Your company uses email, calendar, contact, and task services in Microsoft Outlook.com.You purchase a Microsoft 365 subscription and plan to migrate all users from Outlook.com to Microsoft 365.You need to identify which user data can be migrated to Microsoft 365.Which type of data should you identify?

A. task
B. email
C. calendar
D. contacts


Sample Question 31

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751Your company has a web application named App1.The company plans to publish App1 by using a URL of https://app1.contoso.com.You need to register App1 to your Microsoft Office 365 tenant.See explanation below. 


Sample Question 32

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in anew browser tab.The following information is for technical support purposes only:Lab Instance: 10887751Your organization has an office in Seattle.You plan to create 100 users who will work in the Seattle office. The city attribute for all the users will beSeattle.You need to create a group named Group1 that will automatically contain all the Seattle office users.See explanation below.


Sample Question 33

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You need to ensure that all mobile devices that connect to Microsoft Exchange Online meet the following requirements:A password must be used to access the devices.Data on the devices must be encrypted.See explanation below.


Sample Question 34

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You hire a new global administrator named Irvin Sayers to manage your Microsoft 365 tenant.You need to modify Irvin Sayers to meet the following requirements:Uses at least two methods of user authenticationHas the highest Microsoft Office 365 administrative privilegesSee explanation below.


Sample Question 35

Your network contains an Active Directory domain named contoso.com.All users authenticate by using a third-party authentication solution.You purchase Microsoft 365 and plan to implement several Microsoft 365 services.You need to recommend an identity strategy that meets the following requirements:Provides seamless SSOMinimizes the number of additional servers required to support the solutionStores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)Ensures that all the users authenticate to Microsoft 365 by using their on-premises user accountYou are evaluating the implementation of federation.Which two requirements are met by using federation? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. minimizes the number of additional servers required to support the solution
B. provides seamless SSO
C. stores the passwords of all the users in Azure AD
D. ensures that all the users authenticate to Microsoft 365 by using their on-premises user account.


Sample Question 36

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your network contains an on-premises Active Directory forest named contoso.com. The forest contains the following domains:Contoso.comEast.contoso.comAn Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant. You deploy a new domain named west.contoso.com to the forest. You need to ensure that west.contoso.com syncs to the Azure AD tenant.Solution: You install a new Azure AD Connect server in west.contoso.com and set AD Connect to active modeDoes this meet the goal?

A. Yes
B. No


Sample Question 37

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: 3&YWyjse-6-dIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10887751You need to create a group named Group2. Users who are added to Group2 must be licensed automatically for Microsoft Offline 365.See explanation below.


Sample Question 38

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:[email protected] 365 Password: *yfLo7Ir2&yIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You plan to migrate data from an on-premises email system to your Microsoft 365 tenant.You need to ensure that Debra Berger can import a PST file.See explanation below.


Sample Question 39

You have a Microsoft 365 subscription.You add a domain named contoso.com.When you attempt to verify the domain, you are prompted to send a verification email to [email protected] need to change the email address used to verify the domain.What should you do?

A. From the domain registrar, modify the contact information of the domain
B. Add a TXT record to the DNS zone of the domain
C. Modify the NS records for the domain
D. From the Microsoft 365 admin center, change the global administrator of the Microsoft 365 subscription


Sample Question 40

Which migration solution should you recommend for Project1? 

A. From the Microsoft 365 admin center, start a data migration and click Exchange as the data service.
B. From the Exchange admin center, start a migration and select Cutover migration.
C. From the Exchange admin center, start a migration and select Staged migration.
D. From the Microsoft 365 admin center, start a data migration and click Upload PST as the data service.


Sample Question 41

Which migration solution should you recommend for Project1? 

A. From the Exchange admin center, start a migration and select Staged migration.
B. From the Microsoft 365 admin center, start a data migration and click Exchange as the data service.
C. From the Microsoft 365 admin center, start a data migration and click Outlook as the data service.
D. From the Exchange admin center, start a migration and select Cutover migration.


Sample Question 42

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company plans to deploy several Microsoft Office 365 services.You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:* Users must be able to authenticate during business hours only.* Authentication requests must be processed successfully if a single server fails.* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and configure seamless SSO.Does this meet the goal?

A. Yes
B. No


Sample Question 43

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.Your network contains an Active Directory domain named contoso.com that is synced to Microsoft AzureActive Directory (Azure AD).You manage Windows 10 devices by using Microsoft System Center Configuration Manager (CurrentBranch).You configure a pilot for co-management.You add a new device named Device1 to the domain. You install the Configuration Manager client onDevice1.You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.Solution: You add Device1 to an Active Directory group.Does this meet the goal?

A. Yes
B. No


Sample Question 44

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have a Microsoft 365 subscription.You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users areconnected to your on-premises network.Solution: From the Microsoft 365 admin center, you configure the Organization profile settings.Does this meet the goal?

A. Yes
B. No


Sample Question 45

Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenantnamed contoso.onmicrosoft.com.An external vendor has a Microsoft account that has a username of [email protected] plan to provide [email protected] with access to several resources in the subscription.You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that theexternal vendor can authenticate by using [email protected] should you do?

A. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify –[email protected].
B. From the Microsoft 365 admin center, add a contact, and then specify [email protected] as the emailaddress.
C. From the Azure portal, add a new guest user, and then specify [email protected] as the email address.
D. From the Azure portal, add a custom domain name, and then create a new Azure AD user and [email protected] as the username.


Sample Question 46

A user receives the following message when attempting to sign in to https://myapps.microsoft.com:"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might besigning in from a new location, device, or app. Before you can continue, we need to verify your identity.Please contact your admin."Which configuration prevents the users from signing in?

A. Security & Compliance supervision policies
B. Security & Compliance data loss prevention (DLP) policies
C. Microsoft Azure Active Directory (Azure AD) conditional access policies
D. Microsoft Azure Active Directory (Azure AD) Identity Protection policies


Sample Question 47

You have a Microsoft 365 subscription.You configure a data loss prevention (DLP) policy.You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.You need to prevent the users from bypassing the DLP policy.What should you configure?

A. actions
B. exceptions
C. incident reports
D. user overrides


Sample Question 48

You have a Microsoft 365 subscription.Your company purchases a new financial application named App1.From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover thatmany applications have a low score because they are missing information about domain registration andconsumer popularity.You need to prevent the missing information from affecting the score.What should you configure from the Cloud Discover settings?

A. App tags
B. Score metrics
C. Organization details
D. Default behavior


Sample Question 49

You have a Microsoft 365 subscription.You need to prevent phishing email messages from being delivered to your organization.What should you do?

A. From the Exchange admin center, create an anti-malware policy.
B. From Security & Compliance, create a DLP policy.
C. From Security & Compliance, create a new threat management policy.
D. From the Exchange admin center, create a spam filter policy.


Sample Question 50

Your network contains an Active Directory domain named contoso.com.You have a Microsoft 365 subscription.You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.You implement directory synchronization.The developers at your company plan to build an app named App1. App1 will connect to the Microsoft GraphAPI to provide access to several Microsoft Office 365 services.You need to provide the URI for the authorization endpoint that App1 must use.What should you provide?

A. https://login.microsoftonline.com/
B. https://contoso.com/contoso.onmicrosoft.com/app1
C. https://login.microsoftonline.com/contoso.onmicrosoft.com/
D. https://myapps.microsoft.com


Sample Question 51

You have a Microsoft 365 subscription that contains a Microsoft Azure Directory (Azure AD) tenantContoso.com. The tenant includes a user named user1.You enable Azure AD Identity protection.You need to ensure that User1 can review the list in Azure AD identity protection of users flagged for risk.The solution must use the principle of least privilege.To which role should you add User1?

A. Security administrator
B. Report
C. Global reader
D. Owner


Sample Question 52

Your company has 20 employees, Each employees has a mailbox hosted in Outlook.com.The company purchases a Microsoft 365 subcription.You plan to migrate all the mailboxes to Microsoft 365.You need to recommend which type of migration to use for the mailboxes.What should recommend?

A. Cutover migration
B. Staged migration
C. IMAP migration
D. Minimal hybrid migration


Sample Question 53

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You have a Microsoft 365 subscription.You discover that some external users accessed content on a Microsoft SharePoint site. You modify theSharePoint sharing policy to prevent sharing outside your organization.You need to be notified if the SharePoint policy is modified in the future.Solution: From the SharePoint admin center, you modify the sharing settings.Does this meet the goal?

A. Yes
B. No


Sample Question 54

Your network contains an Active Directory domain named contoso.com. The domain contains five domaincontrollers.You purchase Microsoft 365 and plan to implement several Microsoft 365 services.You need to identify an authentication strategy for the planned Microsoft 365 deployment. The solution mustmeet the following requirements:Ensure that users can access Microsoft 365 by using their on-premises credentials.Use the existing server infrastructure only.Store all user passwords on-premises only.Be highly available.Which authentication strategy should you identify?

A. pass-through authentication and seamless SSO
B. pass-through authentication and seamless SSO with password hash synchronization
C. password hash synchronization and seamless SSO
D. federation


Sample Question 55

You have a Microsoft 365 subscription.You plan to enable Microsoft Azure Information Protection.You need to ensure that only the members of a group named PilotUsers can protect content.What should you do?

A. Run the Add-AadrmRoleBaseAdministrator cmdlet.
B. Create an Azure Information Protection policy.
C. Configure the protection activation status for Azure Information Protection.
D. Run the Set-AadrmOnboardingControlPolicy cmdlet.


Sample Question 56

Your network contains an on-premises Active Directory domain.Your company has a security policy that prevents additional software from being installed on domaincontrollers.You need to monitor a domain controller by using Microsoft Azure Advanced Threat Protection (ATP).What should you do? More than once choice may achieve the goal. Select the BEST answer.

A. Deploy an Azure ATP standalone sensor, and then configure port mirroring.
B. Deploy an Azure ATP standalone sensor, and then configure detections.
C. Deploy an Azure ATP sensor, and then configure detections.
D. Deploy an Azure ATP sensor, and then configure port mirroring.


Sample Question 57

Your network contain*, an on-premises Active Directory forest.You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.You need to recommend an authentication strategy that meets the following requirements:• Allows users to sign in by using smart card-based certificates• Allows users to connect to on premises and Microsoft 365 services by using SSOWhich authentication strategy should you recommend?

A. password hash synchronization and seamless SSO
B. federation with Active Directory Federation Services (AD FS)
C. pass-through authentication and seamless SSO


Sample Question 58

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result these questionswill not appear in the review screen.Your company has a main office and three branch offices. All the branch offices connect to the main office byusing a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to theInternet by using the main office connection.Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the mainoffice.The users report that when the WAN link in their office becomes unavailable, they cannot access theirmailbox.You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN linkfails.Solution: You deploy a site-to-site VPN from each branch office to Microsoft Azure.Does this meet the goal?

A. Yes
B. NO


Sample Question 59

Your network contains an Active Directory forest named local.You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that willuse password hash synchronization.From the Microsoft 365 admin center, you verify the contoso.com domain name. You need to prepare theenvironment foe the planned directory synchronization solution.What should you do first?

A. From the public DNS zone of contoso.com, add a new mail exchanger (MX) record.
B. From Active Directory Domains and Trusts, add contoso.com as a UPN suffix
C. From the Microsoft 365 admin center, verify the contoso.com domain name.
D. From Active Directory Users and Computers, modify the UPN suffix for all users.


Sample Question 60

Your company has a Microsoft 365 E5 subscription.Users in the research department work with sensitive data.You need to prevent the research department users from accessing potentially unsafe websites by usinghyperlinks embedded in email messages and documents. Users in other departments must not be restricted.What should you do from the Security & Compliance admin center?

A. Create a data loss prevention (DLP) policy that has a Content contains condition.
B. Create a data loss prevention (DLP) policy that has a Content is shared condition.
C. Modify the default safe links policy.
D. Create a new safe links policy.


Sample Question 61

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.Your network contains an Active Directory forest.You deploy Microsoft 365.You plan to implement directory synchronization.You need to recommend a security solution for the synchronized identities. The solution must meet thefollowing requirements:Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomesunavailable.Users passwords must be 10 characters or more.Solution: Implement password hash synchronization and configure password protection in the Azure ADtenant.Does this meet the goal?

A. Yes
B. No


Sample Question 62

You have a Microsoft 365 Enterprise E5 subscription.You need to enforce multi-factor authentication on all cloud-based applications for the users in the financedepartment.What should you do?

A. Create an activity policy.
B. Create a new app registration.
C. Create a conditional access policy.
D. Create a session policy.


Sample Question 63

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have morethan one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.Your network contains an Active Directory domain named contoso.com that is synced to Microsoft AzureActive Directory (Azure AD).You manage Windows 10 devices by using Microsoft System Center Configuration Manager (CurrentBranch).You configure a pilot for co-management.You add a new device named Device1 to the domain. You install the Configuration Manager client onDevice1.You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.Solution: You create a device configuration profile from the Intune admin center.Does this meet the goal?

A. Yes
B. No


Sample Question 64

Your company has 10 offices.The network contains an Active Directory domain named contoso.com. The domain contains 500 clientcomputers. Each office is configured as a separate subnet.You discover that one of the offices has the following:Computers that have several preinstalled applicationsComputers that use nonstandard computer namesComputers that have Windows 10 preinstalledComputers that are in a workgroupYou must configure the computers to meet the following corporate requirements:All the computers must be joined to the domain.All the computers must have computer names that use a prefix of CONTOSO.All the computers must only have approved corporate applications installed.You need to recommend a solution to redeploy the computers. The solution must minimize the deploymenttime.

A. a provisioning package
B. wipe and load refresh
C. Windows Autopilot
D. an in-place upgrade


Sample Question 65

You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenantnamed contoso.com. The tenant includes a user named User1You enable Azure AD Identity Protection.You need to ensure that User1 can review the list in Azure AD Identity Protection of users nagged for risk.The solution must use the principle of least privilege.To which role should you add User1?

A. Security reader
B. Compliance administrator
C. Reports reader
D. Global administrator


Sample Question 66

Your company has a Microsoft 365 subscription.You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through agroup membership. The solution must include the name of the group used to assign the license.What should you use?

A. the Licenses blade in the Azure portal
B. Reports in the Microsoft 365 admin center
C. Active users in the Microsoft 365 admin center
D. Report in Security & Compliance


Sample Question 67

You publish an enterprise application named App1 that process financial data.You need to ensure that access to App1 is revoked for users who no longer require view the processedfinancial data.What should you configure?

A. An access review
B. An app protection policy
C. A conditional access policy
D. An owner



Exam Code: MS-100
Exam Name: Microsoft 365 Identity and Services
Last Update: May 07, 2024
Questions: 428