MS-100

MS-100 practice questions, page 5 of 18, with answer review and explanations.

Question 21

Your company's Microsoft Azure Active Directory (Azure AD) tenant includes four users. Two of the users are configured with the Global administrator, Password administrator roles respectively. A third user has both the Security administrator and the Guest inviter roles configured. The fourth user has no roles configured. Which of the following is the user that has the necessary permissions to alter the password protection policy? (Choose all that apply.)

  1. The user with the Global administrator role.
  2. The user with the Password administrator role.
  3. The user with the Security administrator and Guest inviter roles.
  4. The user with no roles.

Question 22

Your company's Microsoft Azure Active Directory (Azure AD) tenant includes four users. Two of the users are configured with the Global administrator, Password administrator roles respectively. A third user has both the Security administrator and the Guest inviter roles configured. The fourth user has no roles configured. Which of the following is the user that has the necessary permissions to create guest users? (Choose all that apply.)

  1. The user with the Global administrator role.
  2. The user with the Password administrator role.
  3. The user with the Security administrator and Guest inviter roles.
  4. The user with no roles.

Question 23

You have been tasked with enable Microsoft Azure Information Protection for your company's Microsoft 365 subscription. You are informed that only the members of a group, named Group1, are able to protect content. To achieve your goal, you plan to run a PowerShell cmdlet. Which of the following is the cmdlet you should run?

  1. The Add-AadrmRoleBaseAdministrator cmdlet.
  2. The Set-AadrmDoNotTrackUserGroup cmdlet.
  3. The Clear-AadrmSuperUserGroup cmdlet.
  4. The Set-AadrmOnboardingControlPolicy cmdlet.

Question 24

Your company has acquired Microsoft 365 for their Active Directory domain, which includes five domain controllers. Prior to implementing a number of Microsoft 365 services, you are tasked with making use of an authentication solution that allows users to access Microsoft 365 by using their on-premises credentials. The solution should also only make use of the current server infrastructure. Furthermore, must allow for all user passwords to only be stored on-premises, and be highly available. Solution: You configure the use of password hash synchronization only. Does the solution meet the goal?

  1. Yes
  2. No

Question 25

Your company has acquired Microsoft 365 for their Active Directory domain, which includes five domain controllers. Prior to implementing a number of Microsoft 365 services, you are tasked with making use of an authentication solution that allows users to access Microsoft 365 by using their on-premises credentials. The solution should also only make use of the current server infrastructure. Furthermore, must allow for all user passwords to only be stored on-premises, and be highly available. Solution: You configure the use of pass-through authentication only. Does the solution meet the goal?

  1. Yes
  2. No