Free Microsoft 365 Identity and Services MS-100 Exam Practice Test

You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1.You enable Azure AD Identity Protection.You need to ensure that User1 can review the list in Azure AD Identity Protection of users flagged for risk. The solution must use the principle of least privilege.To which role should you add User1?

• Security reader
• User administrator
• Service administrator
• Reports reader

You have an on-premises Microsoft Exchange Server organization that contains 500 mailboxes and a third-party email archive solution.You have a Microsoft 365 tenant that contains a user named User1.You plan to use the User1 account to perform a PST import of the archive mailboxes to the tenant.Which two roles does User1 require to perform the import? The solution must use the principle of least privilege. Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

• Mail Recipients
• Exchange admin
• Records Management
• Mailbox Import Export
• eDiscovery Manager

Your network contains an on-premises Active Directory domain. The domain contains 2,000 computers that run Windows 10.You purchase a Microsoft 365 subscription.You implement password hash synchronization and Azure Active Directory (Azure AD) Seamless Single Sign-On (Seamless SSO).You need to ensure that users can use Seamless SSO from the Windows 10 computers.What should you do?

• Create a conditional access policy in Azure AD.
• Deploy an Azure AD Connect staging server.
• Join the computers to Azure AD.
• Modify the Intranet zone settings by using Group Policy

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your network contains an Active Directory domain.You deploy a Microsoft Azure Active Directory (Azure AD) tenant.Another administrator configures the domain to synchronize to Azure AD.You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.You need to ensure that the 10 user accounts are synchronized to Azure AD.Solution: You run idfix.exe and report the 10 user accounts.Does this meet the goal?

• Yes
• No

You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites. What should you do?

• From the Microsoft 365 admin center, configure a partner relationship.
• From SharePoint Online Management Shell, run the set-SPOSite cmdlet.
• From the Azure Active Directory adman center, configure a conditional access policy.
• From the SharePoint admin center, configure the sharing settings.

You have a Microsoft 365 E5 subscription.Users access Microsoft 365 from both their laptop and a corporate Virtual Desktop infrastructure (VCH) solution.From Azure AD Identity Protection, you enable a sign-in risk policy.Users report that when they use the VDI solution, they are regularly blocked when they attempt to access Microsoft 365.What should you configure?

• the Microsoft 365 network connectivity settings
• a Conditional Access policy exclusion
• the Tenant restrictions settings in Azure AD
• trusted location

You have a Microsoft 365 E5 subscription.You need to ensure that users are prompted for multi-factor authentication (MFA) when they attempt to access Microsoft SharePoint Online resources. Users must NOT be prompted for MFA when they attempt to access other Microsoft 365 services.What should you do?

• From the Microsoft Endpoint Manager admin center, create an app protection policy.
• From the multi-factor authentication page, configure the users settings.
• From the Azure Active Directory admin center, create a conditional access policy.
• From the Cloud App Security admin center, create an app access policy.

Your company has a main office and three new branch offices.The company has a Microsoft 365 subscription.From the Microsoft 365 admin center, you open Microsoft 365 network connectivityYou need to configure the prerequisites for enabling Microsoft 365 network connectivity.What should you do first?

• Add location data to Microsoft 365.
• Update organization information.
• Enable Productivity Score.
• Select a SD-WAN solution and the data location.

You need to provide users with access to SalesApp. The solution must meet the technical requirements What should you include in the solution?

• Microsoft AppSource
• sideloading
• Centralized Deployment
• App Catalog in SharePoint Online

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.You may now click next to proceed to the lab.Lab informationUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:admin@M365x981607.onmicrosoft.comMicrosoft 365 Password: *yfLo7Ir2&y-If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 10811525You plan to invite several guest users to access the resources in your organization.You need to ensure that only guests who have an email address that uses the @contoso.com suffix can connect to the resources in your Microsoft 365 tenant.

• A . Explanation:
  You need to add contoso.com as an allowed domain in the 'External collaboration settings'.
  1. Go to the Azure Active Directory admin center.
  2. Select Users then select 'User settings'.
  3. Under External Users, select the 'Manage external collaboration settings'.
  4. Under 'Collaboration restrictions', select the 'Allow invitations only to the specified domains (most restrictive)' option.
  5. Under, Target Domains, type in the domain name 'contoso.com'
  6. Click the Save button at the top of the screen to save your changes.