Access to Free Microsoft MS-100 Sample Questions and Answers

1. Your network contains an Active Directory forest named contoso.local.

You purchase a Microsoft 365 subscription.

You plan to move to Microsoft and to implement a hybrid deployment solution for the next 12 months.

You need to prepare for the planned move to Microsoft 365.

What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

2. Your on-premises network contains an Active Directory domain.

You have a Microsoft 365 E5 subscription.

You plan to implement a hybrid configuration that has the following requirements:

• Minimizes the number of times users are prompted for credentials when they access Microsoft 365 resources

• Supports the use of Azure Active Directory (Azure AD) Identity Protection

You need to configure Azure AD Connect to support the planned implementation.

Which two options should you select? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

3. HOTSPOT

You company has a Microsoft 365 subscription that contains the domains shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

4. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant.

Your company implements Windows Information Protection (WIP).

You need to modify which users and applications are affected by WIP.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. You have a Microsoft 365 Enterprise E5 subscription.

You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.

What should you do?

6. You have a Microsoft 365 subscription.

You add a domain named contoso.com.

When you attempt to verify the domain, you are prompted to send a verification email to [email protected].

You need to change the email address used to verify the domain.

What should you do?

7. You are Developing a human resources application that will show users where they are in their company's organization chart. You are adding a new feature that will display the name of a user's manager inside the application. You need to create a REST query to retrieve the information. The solution must minimize me amount of data retrieved.

Which Query should you use?

8. You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You add an app named App1 to the enterprise applications in contoso.com.

You need to configure self-service for App1.

What should you do first?

9. From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the Exhibit tab.)





You need to reduce the likelihood that the sign-ins are identified as risky.

What should you do?

10. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

Does this meet the goal?

11. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: From Azure AD Connect, you modify the filtering settings.

Does this meet the goal?

12. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You have a user named Grady Archie.

The solution must meet the following requirements:

✑ Grady Archie must be able to add payment methods to your Microsoft Office 365 tenant.

✑ The solution must minimize the number of licenses assigned to users.

✑ The solution must use the principle of least privilege.

13. You have a Microsoft 365 E5 subscription that uses Microsoft Teams and SharePoint Online.

You create a team and a SharePoint Online site for a new project named Project1.

You need to manage access to the team and the site.

The solution must meet the following requirements:

• Members of Project1 must be able to control who has access to the team and the site.

• Only users in the subscription must be ab*e to request access to the team and the site.

• Access to the team and the site must be removed after 12 months.

• Access to the team and the site must be reviewed every month.

What should you create first?

14. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: oL9z0=?Nq@ox

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11098651





You need to ensure that all the users in your organization are prompted to change their password every 180 days.

To answer the question, sign in to the Microsoft 365 portal.

15. You have a hybrid deployment of Microsoft 365 and an Azure Active Directory (Azure AD) tenant.

The tenant contains the users shown in the following table.





Password protection in Azure AD is configured as shown in the following exhibit.





Which users will be prevented from using the word “Contoso” as part of their password?

16. You have a Microsoft 365 subscription that contains the users shown in the following table.





You plan to use Exchange Online to manage email for a DNS domain.

An administrator adds the DNS domain to the subscription.

The DNS domain has a status of incomplete setup.

You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege.

Which user should you identify?

17. HOTSPOT

You have a Microsoft 365 subscription.

You use the Microsoft Office Deployment tool to install Office 365 ProPlus.

You create a configuration file that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

18. This question requires that you evaluate the underlined text to determine if it is correct-In Microsoft Word on Windows, before you can sideload a Microsoft Office Add-in, you must firs: upload the manifest to Microsoft OneDrive instructions: Review the underlined text. If it makes the statement correct select "No change is needed," If the statement is incorrect select the answer choice that makes the statement correct

19. You have a backend service that will access the Microsoft Graph API. The backend service is hosted on-premises. You need to configure the service to authenticate by using the most secure authentication method.

What should you configure the service to use?

20. Your organization has an on-premises Microsoft Exchange Server 2016 organization. The organization is in the company’s main office in Melbourne. The main office has a low-bandwidth connection to the Internet.

The organization contains 250 mailboxes.

You purchase a Microsoft 365 subscription and plan to migrate to Exchange Online next month.

In 12 months, you plan to increase the bandwidth available for the Internet connection.

You need to recommend the best migration strategy for the organization. The solution must minimize administrative effort.

What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

21. You have a Microsoft 365 subscription that uses an Azure Directory (Azure AD) tenant named Contoso.com.

The tenant contains the users shown in the following table.





You add another user named user5 to the User administrator role.

You need to identify which management tasks User5 can perform.

Which two tasks should you identify? Each correct answer presents a complete solution.

22. You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You need to access service health alerts from a mobile phone.

What should you use?

23. Your company has a Microsoft 365 subscription.

You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.

What should you use?

24. Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the objects shown in the following table.





You configure Azure AD Connect to sync contoso.com to Azure Active Directory.

Which objects will sync to Azure AD?

25. HOTSPOT

Your network contains an on premises Active Directory domain named contoso.com. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You plan to establish federation authentication between on premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).

You need to establish the federation.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

26. You have a Microsoft 365 subscription.

All users have their email stored in Microsoft Exchange Online

In the mailbox of a user named User, you need to preserve a copy of all the email messages that contain the word ProjectX.

What should you do first?

27. You plan to create a single-tenant console app that will use the Microsoft identity platform.

You need to ensure that the app can use the device code flow to access Microsoft Graph and read email on behalf of the authenticated user.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

28. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure

Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You create a device configuration profile from the Intune admin center.

Does this meet the goal?

29. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant

Solution: You review the Product Feedback in the Microsoft 365 admin center

Does this meet the goal?

30. HOTSPOT

You have three devices enrolled in Microsoft Intune as shown in the following table.





The device compliance policies in Intune are configured as shown in the following table.





The device compliance policies have the assignment shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

31. You have an on-premises Microsoft Exchange Server organization that contains 500 mailboxes and a third-party email archive solution.

You have a Microsoft 365 tenant that contains a user named User1.

You plan to use the User1 account to perform a PST import of the archive mailboxes to the tenant.

Which two roles does User1 require to perform the import? The solution must use the principle of least privilege. Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

32. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You add Device1 to an Active Directory group.

Does this meet the goal?

33. HOTSPOT

Your company has a Microsoft 365 subscription that contains the following domains:

Contoso.onmicrosoft.com

Contoso.com

You plan to add the following domains to Microsoft 365 and to use them with Exchange Online:

✑ Sub1.contoso.onmicrosoft.com

✑ Sub2.contoso.com

✑ Fabrikam.com

You need to identify the minimum number of DNS records that must be added for Exchange Online to receive inbound email messages for the three domains.

How many DNS records should you add? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.

What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

35. HOTSPOT

You work at a company named Contoso, Ltd.

Contoso has a Microsoft 365 subscription that is configured to use the DNS domains shown in the following table.





Contoso purchases a company named Fabrikam, Inc.

Contoso plans to add the following domains to the Microsoft 365 subscription:

✑ fabrikam.com

✑ east.fabrikam.com

✑ west.contoso.com

You need to ensure that the devices in the new domains can register by using Autodiscover.

How many domains should you verify, and what is the minimum number of enterprise registration DNS records you should add? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

36. You have Windows 10 devices that are managed by using Microsoft Endpoint Manager. All the devices have Microsoft Office 365 apps installed.

You need to configure the proofing tool settings for the Office 365 apps.

From the Microsoft Endpoint Manager admin center, what should you create?

37. HOTSPOT

You create a Microsoft 365 subscription.

You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company.

You prepare the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

38. You have a Microsoft 365 subscription.

Your company deploys an Active Directory Federation Services (AD FS) solution.

You need to configure the environment to audit AD FS user authentication.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

39. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the SharePoint site, you create an alert.

Does this meet the goal?

40. DRAG DROP

You have a Microsoft 365 subscription.

You build a Microsoft Teams app named App1.

You need to publish App1 to the app catalog.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

41. Topic 4 NEW Case Study



Case Study

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.



Existing Environment

Microsoft 365

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Microsoft SharePoint/Microsoft Exchange

Contoso has a Microsoft 365 subscription that uses a domain named contoso.com. Each user is assigned a Microsoft 365 Enterprise E5 licence.



Problem Statement

Contoso moves all email accounts to Microsoft 365.

Contoso migrates the SharePoint Server 2013 intranet sites of the research department to SharePoint Online.



Requirements

Business Goals

Contoso identifies the following issues:

* Users in the sales department report that prepanng quotations is time-consuming as it requires manually copying and pasting data from multiple sources.

* Users in the HR department must use multiple apps to manage the hiring process.

* The solution to claim expenses requires multiple manual steps.



Planned Changes

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Technical Requirements

Contoso plans to implement the following changes;

* Redesign the SharePoint Online sites of the research department to provide users with an expenence that is consistent with the Microsoft 365 portal. The research department has a third-party project management solution that uses the Microsoft identity platform in Azure AD.

* Create an email workflow solution for expense claims. Users will submit their expense claims and the system will email an approval request to their manager.

* Implement a bring your own device (BYOD) model that supports Windows 10, macOS, and Android devices.

* Develop a custom Microsoft 365 app named SalesApp for the sales department.

* Develop a custom Microsoft 365 app named HRApp for the HR department



Security Requirement

Contoso identifies the following technical requirements for app development:

* The expense claims solution must provide managers with claim information and the ability to manage the claim by using Microsoft Outlook. Outlook on the web, or Outlook for iOS and Android.

* HRApp must include a bot named HRBot that will answer HR questions. Users must be able to access the bot by ©mentioning HRBot in a Microsoft Teams channel or private chat.

* HRApp must enable users to query a third-party HR system by using a tab from within a Microsoft Teams channel.

* HRApp must include a messaging extension that enables users to search jobs by job title or job ID.

* SalesApp must be integrated with Microsoft Word and must combine images and text from multiple sources to create a quotation as a DOCX file.

* The distribution of SalesApp must be automatic and require minimal user interaction.

* Solutions for SharePoint Online and Microsoft Office must follow the current Office user interface (Ul) design.

* Development tools and solutions must support Windows and non-Windows devices.

* Development effort must be minimized.



HRApp Manifest

All solutions must support the Microsoft identity platform in Azure AD.

Intranet components must not share access tokens.



You need to recommend which API object the SharePoint Framework (SPFx) intranet components will use to access the research department s project management solution.

What should you recommend?

42. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Administrator role. From the Exchange admin center, you add User2 to the View-Only Management role.

Does this meet the goal?

43. Your on-premises network contains an Active Directory domain that syncs with an Azure Active Directory (Azure AD) tenant named contoso.com by using Azure AD Connect. Your company purchases another company that has an on-premises Active Directory domain named lrtwareinc.com. You need to sync litwarein.com with contoso.com.

What should you install in the litwarein.com domain?

44. HOTSPOT

Your network contains an Active Directory domain named fabrikam.com.

The domain contains the objects shown in the following table.





The group have the members shown in the following table.





You are configure synchronization between fabrikam.com and a Microsoft Azure Active Director (Azure AD) tenant.

You configure the domain/OU Filtering settings in Azure AD Connect as shown in the Domain>OU Filtering exhibit. (Click the Domain/OU Filtering tab.)





You configure the Filtering in Azure Connect as shown in the Filtering exhibit. (Click the Filtering tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. NOTE: Each correct selection is worth one point.

45. HOTSPOT

You have a Microsoft 365 subscription.

You need to provide an administrator named Admin1 with the ability to place holds on mailboxes, SharePoint Online sites, and OneDrive for Business locations. The solution must use the principle of least privilege.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

46. Your network contains an Active Directory domain named contoso.com.

All users authenticate by using a third-party authentication solution.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to recommend an identity strategy that meets the following requirements:

✑ Provides seamless SSO

✑ Minimizes the number of additional servers required to support the solution

✑ Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)

✑ Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

You are evaluating the implementation of federation.

Which two requirements are met by using federation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

47. You have a Microsoft 365 subscription that contains a user named User1.

You need to ensure that User1 receives Microsoft 365 feature and service updates before the updates are

released to all users.

What should you do in the Microsoft 365 admin center?

48. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: oL9z0=?Nq@ox



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11098651







You recently discovered that several users in your organization have permissions on the mailbox of another user in the organization.

You need to ensure that Lee Gu receives a notification when a user is granted permissions on another user’s mailbox.

To answer the question, sign in to the Microsoft 365 portal.

49. Your network contains an Active Directory forest named local.

You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that will use password hash synchronization.

From the Microsoft 365 admin center, you verify the contoso.com domain name. You need to prepare the environment foe the planned directory synchronization solution.

What should you do first?

50. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to create a policy that allows a user named Lee Gu to use Outlook Web App to review 50 percent of the outbound email messages sent by a user named Joni Sherman.

To answer, sign in to the Microsoft 365 portal.

51. HOTSPOT

You are developing a single-page application (SPA) named App1 that will be used by the public.

Many users of App1 restrict pop-up windows from opening in their browser.

You need to authenticate the users by using the Microsoft identity platform.

The solution must meet the following requirements:

• Ensure that App1 can read the profile of a user.

• Minimize user interaction during authentication.

• Prevent App1 from requiting admin consent for any permissions.

How should you complete the code? To answer, select the appropriate options in the answer area.

52. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as [email protected].

Does this meet the goal?

53. Your Network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Anne Active Directory (Azure AD) tenant named.contoso.onmicrosoft.com.

You plan to implement pass- through authentication.

You need to prepare the environment for the planned implementation of pass-through authentication.

Which three actions should you perform? Each correct answer presents pan of the solution. NOTE: Each correct selection is worth one point.

54. Your network contains an on-premises Active Directory domain named contoso.com that is synced to a

Microsoft Azure Active Directory (Azure AD) tenant.

The on-premises network contains a file server named Server1. Server1 has a share named Share1 that

contains company documents.

Your company purchases a Microsoft 365 subscription.

You plan to migrate data from Share1 to Microsoft 365. Only data that was created or modified during the last three months will be migrated.

You need to identify all the files in Share1 that were modified or created during the last 90 days.

What should you use?

55. You are developing a daemon application mat reads all the emails in the Inbox of a specific Microsoft 365 mailbox. Some emails contain meeting dates and room mailbox names.

The application has the following requirements:

• Move each processed email to a subfolder in the mailbox

• If an email contains meeting data, create an event in the corresponding room mailbox calendar.

Which Microsoft Graph permissions should you grant for the application?

56. You need to ensure that all the sales department users can authenticate successfully during Project1and Project2.

Which authentication strategy should you implement for the pilot projects?

57. You are developing a new Microsoft Teams app that will contain the following functionality:

• Start a new chat

• Prompt users to install an app.

• Make a Microsoft Graph API call.

• Trigger a search-based command.

Which two functionalities can be implemented by using a deep link? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

58. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory.

Does this meet the goal?

59. Your company has 10 offices.

The network contains an Active Directory domain named contoso.com. The domain contains 500 client

computers. Each office is configured as a separate subnet.

You discover that one of the offices has the following:

✑ Computers that have several preinstalled applications

✑ Computers that use nonstandard computer names

✑ Computers that have Windows 10 preinstalled

✑ Computers that are in a workgroup

You must configure the computers to meet the following corporate requirements:

✑ All the computers must be joined to the domain.

✑ All the computers must have computer names that use a prefix of CONTOSO.

✑ All the computers must only have approved corporate applications installed.

You need to recommend a solution to redeploy the computers. The solution must minimize the deployment time.

60. You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites.

What should you do?

61. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



You plan to provide several users in your organization with the ability to join their Windows 10 device to Microsoft Azure Active Directory (Azure AD).

You need to ensure that all the users who join a device use multi-factor authentication.

62. You create a Microsoft 365 Enterprise subscription.

You assign licenses for all products to all users.

You need to ensure that all Microsoft Office 365 ProPlus installations occur from a network share. The solution must prevent the users from installing Office 365 ProPlus from the Internet.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

63. Which migration solution should you recommend for Project1?

64. You are developing a mobile application that will display the current signed-in user's display name and the application settings. The application settings are stored as a Microsoft Graph extension of the user profile.

Users of the application have intermittent network connectivity

You need to retrieve the least amount of data by using a single REST request. The solution must minimize network traffic.

Which URI should you use to retrieve the data?

65. HOTSPOT

You have a Microsoft 365 subscription.

You create an alert policy as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic. NOTE: Each correct selection is worth one point.

66. You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently, App1 can read user profile information.

You need to allow App1 to read the user's calendar.

Solution: Add https: //graph.windows.net/user, read to the list of scopes during the initial login request

Does this meet the goal?

67. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



Your organization recently implemented a new data retention policy. The policy requires that all files stored in an employee’s Microsoft OneDrive folders be retained for 60 days after the employee is terminated from the organization.

The human resources (HR) department of the organization deletes the user accounts of all terminated employees.

You need to ensure that the organization meets the requirements of the data retention policy.

68. You manage multiple devices by using Microsoft Endpoint Manager.

The devices run on the following operating systems:

✑ Android 8.0, Android 8.1.0, and Android 9

✑ iOS 12 and iOS 13

✑ MacOS 10.14

✑ Windows 10

You need to deploy Microsoft 365 apps to the devices.

From the Microsoft Endpoint Manager admin center, what is the minimum number of apps you should create?

69. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has 3,000 users. All the users are assigned Microsoft 365 E3 licenses.

Some users are assigned licenses for all Microsoft 365 services. Other users are assigned licenses for only certain Microsoft 365 services.

You need to determine whether a user named User1 is licensed for Exchange Online only.

Solution: You run the Get-MsolAccountSku cmdlet.

Does this meet the goal?

70. You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently. App1 can read user profile information

You need to allow App1 to read the user's calendar.

Solution: From the Azure portal, edit the API permission list for App1. Add the Microsoft Graph API and the Calendars-Read permissions and then grant tenant admin consent.

Does this meet the goal?

71. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. The solution contains two servers that have an Authentication Agent installed and password hash synchronization configured.

Does this meet the goal?

72. HOTSPOT

Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.





An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan’s account from Microsoft 365 and notice that his username is set to [email protected].

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

73. HOTSPOT

You have a Microsoft 365 subscription that uses a default named contoso.com.

Three files were created on February 1, 2019, as shown in the following table.





On March 1, 2019, you create two retention labels named Label1 and label2.

The settings for Label1 are configured as shown in the Label1 exhibit. (Click the Label1 tab.)

Label 1





The settings for Label2 are configured as shown in the Label1 exhibit. (Click the Label2 tab.)

Label 2





You apply the retention labels to Exchange email, SharePoint sites, and OneDrive accounts.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

74. Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use Message center in the Microsoft 365 admin center.

Does this meet the goal?

75. You have a SharePoint Framework (SPFx) web part mat displays the weather. Users can set the city within the web part.

Which component is invoked to provide the users with the ability to configure the settings for the web part?

76. You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named

contoso.com.

A temporary employee at your company uses an email address of [email protected].

You need to ensure that the temporary employee can sign in to contoso.com by using the [email protected] account.

What should you do?

77. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the Azure Active Directory admin center, you assign User2 the Security reader role. You instruct User2 to sign in as [email protected].

Does this meet the goal?

78. HOTSPOT

You need to meet the application requirements for the Office 365 ProPlus applications.

You create an XML files that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

79. Your company recently purchased a Microsoft 365 subscription.

You enable Microsoft Azure Multi-Factor Authentication (Ml A) for all 500 users in the Azure Active Directory (Azure AD) tenant.

You need to generate a report that lists all the users who completed the Azure MFA registration process.

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

80. You have a Microsoft 365 tenant that contains a Microsoft Power Platform environment.

You need to ensure that only specific users can create new environments.

What should you do in the Power Platform admin center?

81. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



Your organization plans to open an office in New York, and then to add 100 users to the office. The city attribute for all new users will be New York.

You need to ensure that all the new users in the New York office are licensed for Microsoft Office 365 automatically.

82. You implement Microsoft Azure Advanced Threat Protection (Azure ATP).

You have an Azure ATP sensor configured as shown in the following exhibit.





How long after the Azure ATP cloud service is updated will the sensor update?

83. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to create a SharePoint site named Project1. Users from your organization must be able to share content from the site to external users.

To answer, sign in to the Microsoft 365 portal.

84. HOTSPOT

You need to meet the security requirements for User3. The solution must meet the technical requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

85. HOTSPOT

Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).

You have users in contoso.com as shown in the following table.





The users have the passwords shown in the following table.





You implement password protection as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

86. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant.

Solution: You review the Security & Compliance report in the Microsoft 365 admin center.

Does this meet the goal?

87. Your company recently purchased a Microsoft 365 subscription.

You enable Microsft Azure Multi-Factor Authentication (MFA) for all 500 users in the Azure Active Directory (Azure tenant)

You need to generate a report that lists all the users who Azure registeration process.

What is the best approach to achieve the goal? More than one answer choice achieve the goal. Select the Best answer.

88. HOTSPOT

You have a Microsoft 365 subscription.

You have a group named Support. Users in the Support group frequently send email messages to external users.

The manager of the Support group wants to randomly review messages that contain attachments.

You need to provide the manager with the ability to review messages that contain attachments sent from the Support group users to external users. The manager must have access to only 10 percent of the messages.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

89. Your company has three main offices and one branch office. The branch office is used for research.

The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

What should you include in the recommendation?

90. HOTSPOT

Your company has 500 client computers that run Windows 10.

You plan to deploy Microsoft Office 365 ProPlus to all the computers.

You create the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

91. You use Microsoft System Center Configuration manager (Current Branch) to manage devices.

Your company uses the following types of devices:

✑ Windows 10

✑ Windows 8.1

✑ Android

✑ iOS

Which devices can be managed by using co-management?

92. SIMULATION

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn ’ t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





Your organization recently purchased a projector that can be moved easily between conference rooms.

You need to ensure that any user in the organization can add the projector to a Microsoft Outlook meeting request. The solution must ensure that a user named Lee Gu must approve all meeting requests.

To answer, sign in to the Microsoft 365 portal.

93. HOTSPOT

You are configuring an enterprise application named TestApp in Microsoft Azure as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

94. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Device Management admin center, you a trusted location and compliance policy.

Does this meet the goal?

95. HOTSPOT

You are confirming an enterprise application named Test App in Microsoft Azur as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

96. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.





Multi-factor authentication (MFA) is configured to use 131.107.50/24 for trusted IPs.

The tenant contains the named locations shown in the following table.





You create a conditional access policy that has the following configurations:

✑ Users and groups assignment: All users

✑ Cloud apps assignment: App1

✑ Conditions: Include all trusted locations

✑ Grant access: require multi-factor authentication

For each of the following statements, select Yes if the statement is true. otherwise, select No. NOTE: Each correct selection is worth one point.

97. You publish an enterprise application named App1 that process financial data.

You need to ensure that access to App1 is revoked for users who no longer require view the processed financial data.

What should you configure?

98. HOTSPOT

You have a Microsoft 365 subscription that contains a guest user named User1. User1 is assigned the User administrator role.

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. Contoso.com is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

99. You have a Microsoft 365 subscription.

You configure a data loss prevention (DLP) policy.

You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

You need to prevent the users from bypassing the DLP policy.

What should you configure?

100. Topic 2, Fabrikam, Inc



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.

Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.



Existing Environment

Active Directory Environment

The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication.



Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.



All users authenticate to on-premises applications by signing in to their device by using a UPN format of [email protected].



Fabrikam does NOT plan to implement identity federation.



Network Infrastructure

Each office has a high-speed connection to the Internet.

Each office contains two domain controllers. All domain controllers are configured as a DNS server.

The public zone for fabrikam.com is managed by an external DNS server.

All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.

All shared company documents are stored on a Microsoft SharePoint Server farm.



Requirements

Planned Changes

Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.



Fabrikam plans to implement two pilot projects:

✑ Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.

✑ Project2: After the successful completion of Project1, Microsoft Teams & Skype for Business will be enabled in Microsoft 365 for the sales department users.

Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.



Technical Requirements

Fabrikam identifies the following technical requirements:

✑ All users must be able to exchange email messages successfully during Project1 by using their current email address.

✑ Users must be able to authenticate to cloud services if Active Directory becomes unavailable.

✑ A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

✑ Microsoft Office 365 ProPlus applications must be installed from a network share only.

✑ Disruptions to email address must be minimized.



Application Requirements

Fabrikam identifies the following application requirements:

✑ An on-premises web application named App1 must allow users to complete their expense reports online.

✑ The installation of feature updates for Office 365 ProPlus must be minimized.



Security Requirements

Fabrikam identifies the following security requirements:

✑ After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.

✑ The memberships of UserLicenses must be validated monthly. Unused user accounts must be removed from the group automatically.

✑ After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.

✑ The principle of least privilege must be used.



HOTSPOT

You create the Microsoft 365 tenant.

You implement Azure AD Connect as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

101. You plan to develop a diem-side JavaScript web app that will be registered to the Microsoft identity platform and use Microsoft Authentication Library (MSAL) v2.0.

Which type of authorization flow should you use?

102. Your network contain*, an on-premises Active Directory forest.

You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.

You need to recommend an authentication strategy that meets the following requirements:

• Allows users to sign in by using smart card-based certificates

• Allows users to connect to on premises and Microsoft 365 services by using SSO

Which authentication strategy should you recommend?