MS-100 Free Practice Test

- (Exam Topic 1)
Your Network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers.
Your company purchases Microsoft 365 and creates a Microsoft Anne Active Directory (Azure AD) tenant named .contoso.onmicrosoft.com.
You plan to implement pass- through authentication.
You need to prepare the environment for the planned implementation of pass-through authentication. Which three actions should you perform? Each correct answer presents pan of the solution.
NOTE: Each correct selection is worth one point.

1. A. Modify the email address attribute for each user account.
2. B. From the Azure portal, add a custom domain name.
3. C. From Active Directory Domains and Trusts, add a UPN suffix.
4. D. Modify the User logon name for each user account.
5. E. From the Azure portal, configure an authentication method.
6. F. From a domain controller, install an authentication Agent.

Correct Answer: BCD

- (Exam Topic 2)
You need to meet the security requirement for the vendors. What should you do?

1. A. From the Azure portal, add an identity provider.
2. B. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the –UserPrincipalName parameter.
3. C. From the Azure portal, create guest accounts.
4. D. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the –UserType parameter.

Correct Answer: C

- (Exam Topic 1)
Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription.
You implement a directory synchronization solution that uses pass-through authentication.
You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.

You discover that Active Directory users can use the passwords in the custom banned passwords list. You need to ensure that banned passwords are effective for all users.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. From a domain controller, install the Azure AD Password Protection Proxy.
2. B. From a domain controller, install the Microsoft AAD Application Proxy connector.
3. C. From Custom banned passwords, modify the Enforce custom list setting.
4. D. From Password protection for Windows Server Active Directory, modify the Mode setting.
5. E. From all the domain controllers, install the Azure AD Password Protection DC Agent.
6. F. From Active Directory, modify the Default Domain Policy.

Correct Answer: ACE

- (Exam Topic 1)
You have a Microsoft 365 Enterprise E5 subscription.
You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.
What should you do?

1. A. Create on activity policy.
2. B. Create a Sign- in risk policy.
3. C. Create a session policy.
4. D. Create an app permission policy.

Correct Answer: B
References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

- (Exam Topic 1)
You create a Microsoft 365 subscription.
You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company. You prepare the following XML file for the planned deployment.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Solution:
References:
https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2016-deployment-tool#updat https://docs.microsoft.com/en-us/deployoffice/overview-of-update-channels-for-office-365-proplus

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A