Certification Exam Prep Questions For (MS-100): Microsoft 365 Identity and Services
QuickStart is now offering assessment questions for (MS-100): Microsoft 365 Identity and Services. Whether you are deciding which exam to sign up for, or simply want to practice the materials necessary to complete certification for this course, we have provided a practice assessment to better aid in certification. 100% of the questions are real questions; from a recent version of the test you will take for (MS-100): Microsoft 365 Identity and Services.
![Arrow](https://di3xp7dfi3cq.cloudfront.net/media/wysiwyg/infortis/ultimo/custom/icons/arrow-point-to-down-3.png)
![](https://di3xp7dfi3cq.cloudfront.net/media/wysiwyg/infortis/ultimo/custom/icons/module_1.png)
Your company’s network is configured as an Active Directory Domain Services (AD DS) domain. There are 3000 mailboxes in the on-premises Exchange 2007 mail solution the company is using. Outlook Anywhere is configured on your on-premises Exchange Server. It is decided that an Exchange Online mail solution will be implemented, replacing replace the current mail solution. The on-premises domain is verified with Microsoft 365. Company’s AD DS domain and Azure Active Directory (Azure AD) domain are synchronized. To migrate to Exchange Online, you have to use Exchange Admin Center. Solution: A remote move migration, also known as hybrid deployment should be planned. Does this solution meet the goal?
You add a new domain to your subscription using Microsoft 365 Admin center. The domain name added is owned by your organization. For domain verification, you would have to configure DNS. The organization manages its own DNS resource records. Solution: A TXT resource record is created by you for domain ownership verification Does this solution meet the goal?
You add a new domain to your subscription using Microsoft 365 Admin center. The domain name added is owned by your organization. For domain verification, you would have to configure DNS. The organization manages its own DNS resource records. Solution: A CNAME resource record is created by you for domain ownership verification. Does this solution meet the goal?
You add a new domain to your subscription using Microsoft 365 Admin center. The domain name added is owned by your organization. For domain verification, you would have to configure DNS. The organization manages its own DNS resource records. Solution: An MX resource record is created by you for domain ownership verification. Does this solution meet the goal?
You work for an organization that has a Microsoft 365 tenant. Microsoft 365 tenant contains SharePoint Online. There is a partner company and one of its users needs temporary access to your organization’s SharePoint Online site. There must be a custom group for the partner company’s user and the group will be named as SharePoint Reviewers. What would you do to configure the environment and meet these requirements?
- A. Configure delegated administration.
-
Incorrect.
- B. Create a guest account.
-
Correct!
- C. Add the user to the User administrator role.
-
Incorrect.
- D. Enable Privileged Identity Management (PIM).
-
Incorrect.
A Microsoft 365 subscription is created by you for your company. Can you identify the Powershell cmdlet you would run to determine the number of licenses still available to be assigned to users at your company?
- A. Get-MsolAccountSku
-
Incorrect.
- B. Get-AzureADUser I Select-Object LicenseType
-
Incorrect.
- C. Get-MsolUser
-
Incorrect.
- D. Get-AzureADSubscribedSku I Select SkuPartNumber
-
Correct!
You are required to create a guest account in Microsoft 365 Admin Center. You log in to Microsoft 365 Admin only to find there is no option to create a guest account on the Guest users page. Identify the tools you would use to create the guest account. (opt any TWO)
- A. Azure Active Directory (Azure AD) Portal
-
Correct!
- B. Power BI
-
Incorrect.
- C. Azure Command-Line Interface (CLI)
-
Incorrect.
- D. PowerShell
-
Correct!
You work for an organization whose network is configured as a single Active Directory Domain Services (AD DS) domain. The AD DS domain is named Organization1.local and it is owned by your organization. There are two domain controllers (DCs) in your network. One is a writeable DC and the other is a read-only domain controller RODC. You have an Azure Active Directory (Azure AD) tenant. organizationl.onmicrosoft.com is the default domain on the Azure AD tenant. A synchronization is supposed to be set up so the users in the Sales and Support organizational units (OUs) can synchronize with Azure AD. What would you do first if you want to prepare for Azure AD Connect installation?
- A. Add DNS resource records to support synchronization.
-
Incorrect.
- B. Create a domain security group that contains all users in the Sales and Service organizational units (OUs).
-
Incorrect.
- C. Add and verify Company1.local in Azure AD.
-
Incorrect.
- D. Rename your domain as Company1.com.
-
Correct!
Your organization has a Microsoft 365 tenant that you are managing. There is an Office 365 Professional Plus in the tenant. You configure updates for Office using the Office Deployment Tool (ODT). Following are the contents for an XML file you created: Configuration Add OfficeClientEdition="32" OfficeMgmtCOM="True" > Product ID="0365ProPlusRetair> Language ID="en-us" /> You are required to ensure updates are received by users in the organization as soon as they are available. Which of the following steps do you think you would take?
- D. Set the Channel attribute of the Add element to Broad.
-
Incorrect.
You work for an organization where you are tasked to create an Azure Active Directory (Azure AD) tenant. The Azure AD tenant will have 100 users. A review needs to be done for the roles assigned to users. For this to happen the appropriate Azure tool needs to be selected. Can you identify the right Azure service to use?
- A. Security Center
-
Incorrect.
- B. Advisor
-
Incorrect.
- C. Privileged Identity Management (PIM)
-
Correct!
- D. Monitor
-
Incorrect.
You work for a payment portal service company as an IT manager. 99% uptime must be maintained as stated in the SLA for all your business partners. The location of your office is critical as there is a river close by, with a tendency to flood. An appropriate disaster recovery scheme must be chosen for your company to prepare for an event that disrupts normal operations. The data processing applications should always stay uninterrupted and the data must be mirrored in case there is a loss of primary servers. Which of the following would you use?
- A. Warm site
-
Incorrect.
- B. Bare metal restore
-
Incorrect.
- C. Hot site
-
Correct!
- D. Cold site
-
Incorrect.
Your company has a Windows Active Directory (AD). Two forest root domains are supported by The Windows AD. The forest root domains are named company1.com and companya.com. An Azure Active Directory (Azure AD) is created by you. The Azure AD Connect installation wizard is run by you and you also configure pass-through authentication (PTA) with the domain company1.com. Identify the two PowerShell cmdlets you would run if you want to add synchronization for companya.com? (opt any TWO)
You are managing a Microsoft 365 tenant for your organization. The Powershell script shared ahead is provided to you by an administrator: $dispName="John Doe" $roleName="SharePoint Service Administrator" Add-MsolRoleMember -RoleMemberEmailAddress (Get-MsolUser -All I Where DisplayName -eq $dispName).UserPrincipalName -RoleName $roleName Choose from the options below one that correctly represents what this script does.
- A. It assigns John Doe to a shared mailbox named SharePoint Administrator in Exchange Online.
-
Incorrect.
- B. It assigns John Doe to the SharePoint Administrator role in Azure Active Directory (Azure AD).
-
Correct!
Your organization operates an on-premises Active Directory (AD) domain. You want password hashes to be sent to Azure Active Directory for which a hybrid authentication system is implemented. Users should be able to reset passwords through a link received in their emails. There is one reset method implemented for password reset. You are required to configure Azure AD so that the changes made to password are in sync with the on-premises AD tenant. The solution you suggest should not bring changes to existing infrastructure. What would you choose to do?
- A. Enable multi-factor authentication (MFA).
-
Incorrect.
- C. Enable password writeback.
-
Correct!
- D. Change the number of reset methods to 2.
-
Incorrect.
Your company’s network is a hybrid identity network. There are 500 users in the network. The company has an Azure Active Directory (Azure AD) Premium tenant having all users synched with it. Azure multi-factor authentication (MFA) is enabled and users are bulk enrolled. The impact on access to managed applications is tracked with information about failed attempts while accessing commonly used managed applications in focus. Which of the following would you use?
- A. Get-MsolUser
-
Incorrect.
- B. Azure AD sign-in report
-
Correct!
- C. Azure AD audit logs
-
Incorrect.
- D. Azure AD risky sign-ins report
-
Incorrect.
A Microsoft 365 Enterprise Premium subscription is created by you for your company. Following is the PowerShell cmdlet you run: Get-MsolAccountSku I Select-Object ActiveUnits The cmdlet returns the number 0. Can you conclude what this number indicates?
- C. There are no users in the Microsoft 365 tenant that have permission to use the license.
-
Incorrect.
- D. There are no licenses assigned to users.
-
Incorrect.
An organization you work for has a domain named quickstart.com. The domain is planned to be used in its Microsoft 365 infrastructure. Users must be able to receive e-mail messages on ids like john@quickstart.com. Microsoft 365 should manage the required DNS records. You are required to execute tasks that will allow this. Choose two tasks from the options below that you would execute. (opt any TWO)
The company you work for has a network with an Active Directory Domain Services (AD DS) domain and an Azure Active Directory (Azure AD) tenant. Hybrid federation is placed and organizational unit (OU) filtering is used. It is now required by the company to add a second Azure AD tenant. The configuration must be changed keeping that in mind. Synchronization will be divided into two tenants now. In order to remove two OUs from the current configuration, the OU filtering has to be modified. It is projected that a maximum of 800 users should be deleted from the current Azure AD. You want to make sure you receive a warning in case more than 800 users are deleted, and the synchronization must stop if that happens. Identify the two PowerShell cmdlets you would use? (opt any TWO)
- A. Set-MsolDirSyncConfiguration
-
Correct!
- B. Enable-ADSyncExportDeletionThreshold
-
Correct!
- C. Set-MsolDirSyncEnabled
-
Incorrect.
- D. Set-MsolDirSyncFeature
-
Incorrect.
The organization you work for uses an Azure Active Directory (Azure AD) domain. You purchase an Office 365 subscription with 25 licenses. There are 20 employees in the Marketing department to which you want to give Office 365 subscription access. You don’t want give access to any other employee in the company. What would you do if keeping in mind the licensing configured has management minimized?
Your organization has a network that is configured as a Windows Active Directory (AD) domain. The domain is named CompanyA.com. An on-premises Exchange 2007 mail server included in the server supports 1000 users. You purchase a Microsoft 365 Enterprise E3 subscription. Gradually migration to Exchange Online is planned. There are three main items required to be migrated. User inboxes, contacts. and calendar items. Which migration would you choose to make sure it is the appropriate migration path in this situation?
You are working in an organization managing a Microsoft 365 tenant. There is a corresponding Azure Active Directory (Azure AD) tenant as well. There are 100 users in the tenant. Application proxy is required to be deployed in the organization. Can you identify from the options below which two on-premises requirements your server meet? (opt any TWO)
- C. It should allow outbound HTTP and HTTPS traffic.
-
Correct!
- D. It should have TLS 1.2 or later enabled.
-
Correct!
You work for an organization managing its Microsoft 365 tenant. If you want to identify all users with the Global administrator role assigned to them, which PowerShell cmdlet would you use?
- A. Get-MsolRoleMember
-
Correct!
- B. Get-MsolUser
-
Incorrect.
- C. Get-AzRoleDefinition
-
Incorrect.
- D. Get-AzureADDirectoryRole
-
Incorrect.
Your organization is running a network configured with a hybrid identity. There is an Azure Active Directory (Azure AD) Premium tenant. Add on-premises users are synced with Azure AD. A cloud-based Azure Multi-Factor Authentication (MFA) is installed in the organization to ensure access to data and applications is secure. It is decided by the organization to use Azure MFA with RADIUS authentication. Your existing RADIUS authentication infrastructure must be supported by the configuration of your on-premises network. A Network Policy Server (NPS) is configured in your on-premises network and users are registered for MFA. What would be your next step of action?
- A. Enable Azure AD Identity Protection.
-
Incorrect.
- B. Configure the Application Proxy service in Azure AD and install the Application Proxy connector on an on-premises server.
-
Incorrect.
- C. Configure a Conditional Access policy in Azure AD.
-
Incorrect.
You are working for an organization managing its Microsoft 365 tenant. The tenant uses Exchange Online and SharePoint Online. A user of a partner company is invited to access your company’s SharePoint Online. The invitation is accepted by the user. Using the principle of least privilege, you must provide the user access to SharePoint Online. Identify the cmdlet you would use?
- A. Set-MsolUser
-
Incorrect.
- B. New-AzureADUserAppRoleAssignment
-
Correct!
- C. Add-MsolRoleMember
-
Incorrect.
- D. Add-AzureADDirectoryRoleMember
-
Incorrect.
You are working for a company that is growing in size, managing a Microsoft 365 tenant. Due to growth, it is now becoming difficult for you alone to manage the entire tenant. The company chooses another resource to be provided the ability to administer Exchange Online. What would be your next step of action keeping in mind you should use the principle of least privilege?
- B. Configure delegated administration for the user.
-
Correct!
- C. Assign the user the User administrator role.
-
Incorrect.
- D. Assign the user the Global administrator role.
-
Incorrect.
- Home
- Sample Question - Microsoft 365 Identity and Services (MS-100)
Sample Question - Microsoft 365 Identity and Services (MS-100)
More Information:
- Learning Style: On Demand
- Learning Style: Practice Exam
- Difficulty: Beginner
- Course Duration: 1 Hour
- Course Info: Download PDF
- Certificate: See Sample
Contact a Learning Consultant
Need Training for 5 or More People?
Customized to your team's need:
- Annual Subscriptions
- Private Training
- Flexible Pricing
- Enterprise LMS
- Dedicated Customer Success Manager
Course Information