Free 100-490 exam questions in PDF & AI Tutor

Sylvester Jafta on: December 19, 2024
nibasiwe laway
EUROPEAN UNION

AI Explanation - verified by User6684 on: June 03, 2026
Question 16:
Answer: A (User1 and User3 only)
Explanation:

This question tests Pass-Through Authentication (PTA) vs Password Hash Synchronization (PHS) in Azure AD Connect.

PTA authentication requires an on-premises PTA agent to reach Azure AD to validate credentials. If the on-prem internet access is lost, PTA sign-ins cannot be completed because Azure AD cannot contact the PTA agent.

Accounts that use Password Hash Synchronization (PHS) authenticate directly with Azure AD (no on-prem contact needed). Those accounts can still sign in even when on-prem internet is down.

Therefore, only the users whose accounts are configured for PHS (or are cloud-only) can sign in; PTA-based users cannot without connectivity.

In short: with no internet from on-prem, PTA users are blocked; PHS users succeed. The correct option indicating “User1 and User3” can sign in implies those two are configured for PHS, while User2 is PTA-based. If you share the exact table, I can map which user uses which method.
Surat, India

Jessie on: June 02, 2026
Very easy to use! Thank you!
Fairfax, United States

AI Explanation - verified by User5471 on: June 02, 2026
Question 3:
Answer: B
Explanation:

The objective of testing includes verifying requirements and reducing risk. A metric like “Percentage of requirements covered” shows how much of the specified requirements are tested, which directly indicates testing effectiveness.

A (average days between defect discovery and resolution) is a defect-management/triage metric, not a direct measure of testing effectiveness.

C (lines of code per developer per day) is a development productivity metric, not related to testing effectiveness.

D (percentage of test effort spent on regression testing) is a process/mix metric, not a direct measure of whether testing achieved its objectives.

Nairobi, Kenya

AI Explanation - verified by User5471 on: June 02, 2026
Question 1:
Answer: D
Explanation:

Senior management (non-test specialists) needs high-level information about progress and risks, not technical details of how testing is performed.

A detailed overview of the risk-based test approach is a technical, process-level detail better suited for the test team or project managers.

Review of the options:

A: Product risks mitigated and outstanding — should be reported to show risk exposure and progress.

B: Recommendations for taking controlling actions — appropriate to guide decisions and actions.

C: Status compared against the started exit criteria — important KPI for determining if testing can end.

D: Detailed overview of the risk-based test approach — too detailed for senior management; keep it to high-level results and risks.

Nairobi, Kenya

AI Explanation - verified by User8403 on: June 02, 2026
ENGLISH
Got it — English. How would you like to proceed?
Options:

Pick a specific question (1–5) and I’ll explain it step-by-step using ITIL objectives.

I’ll define the key terms from these questions (e.g., operating model, partners and suppliers, sponsor, value creation).

I’ll compare the answer choices for a chosen question and explain why one is correct or incorrect (without adding new questions).

Tell me which question or topic you want to review, and I’ll tailor the explanation.
Chennai, India

ketanaa on: June 02, 2026
easy to read
Vijayawada, India

Teto123 on: June 02, 2026
pregunta 325 Esta mal La respuesta es la A) OSPFv3 La misma pregunta dice una red interna si no dijera eso fuera BGP y recordemos que BGP se usa para enrutamiento externo como interno. Pero si nos ponemos especificos lo ideal seria OSPFv3
Panama City, Panama

Teto123 on: June 02, 2026
Pregunta 290: esta mal es la respuesta C) VLAN DE DATOS Si el teléfono IP funciona, significa que: El puerto del switch está activo. La VLAN de voz está funcionando. Hay conectividad hacia la red de telefonía. o sea que falta conexion con la VLAN DE DATOS.
Panama City, Panama

AI Explanation - verified by User8210 on: June 02, 2026
Question 2:
C — Develop a summarization chatbot.

Why: The task is to read legal documents and extract key points. A summarization chatbot uses an LLM to produce concise summaries that highlight the document’s main points, findings, and implications, which aligns with the requirement to extract key points.

Why the others don’t fit:

- A Named Entity Recognition focuses on identifying entities (names, dates, organizations) but not the overall key points or a concise summary. - B Recommendation engine is for suggesting items, not extracting document key points. - D Translation handles language conversion, not extracting key points from content.
Tip: In practice, you might combine summarization with optional extraction of structured bullet points and include a human-in-the-loop review for legal accuracy.
Cape Town, South Africa

AI Explanation - verified by User3705 on: June 02, 2026
Question 3:
The correct answer is B: Plan ahead and define the best way to review the deliverables with the customer.
Why:

In iterative delivery, reviews should be scheduled with clear expectations. If the customer is often unavailable, the PM should collaborate with the customer to establish a predictable review cadence and method (e.g., fixed review windows, demos, or asynchronous feedback). This minimizes rework caused by missed or delayed feedback and keeps the cadence intact.

Why the other options are weaker:

A: Including the customer in daily activities is impractical and adds unnecessary overhead.

C: Asking the customer to clarify all requirements at the start of each iteration ignores the iterative nature of refinement and doesn’t address the recurring review delays.

D: Reviewing only based on the customer’s availability is reactive and unreliable; it still risks delays and rework.

In short, upfront planning of the review process with the customer aligns with agile principles and reduces rework due to unavailable feedback.
Cheras, Malaysia

AI Explanation - verified by User9181 on: June 02, 2026
Question 15:
Here’s the explanation for Question 15.

Goal: Prevent syncing of on-prem users where extensionAttribute15 is NoSync.

Correct approach: Create an inbound synchronization rule for the Active Directory Domain Services (AD DS) connector. This rule controls what objects flow from on-prem AD to Azure AD, so you can filter out users with extensionAttribute15 = NoSync.

Why this is correct:

- Inbound rules govern data from AD DS to Azure AD. By adding a scoping/filter on extensionAttribute15, you exclude those users from being synchronized. - The other options don’t achieve the filtering: - Inbound rule for the Windows Azure Active Directory connector would affect data coming from Azure AD back to WAAD, not from on-prem to Azure AD. - Full Import run profile just reimports all objects, no filtering. - Export run profile would push Azure AD data back to on-prem, not prevent initial sync.

Quick note: You’d typically use the Synchronization Rules Editor to add a scoping filter on the inbound AD DS rule, e.g., exclude objects where extensionAttribute15 equals NoSync.

If you want, I can outline the exact steps in the AD Connect UI.
Navsari, India

AI Explanation - verified by User9181 on: June 02, 2026
Question 14:
Here's the explanation for Question 14.

Goal: Let a contractor use their own credentials (user1@outlook.com) to access App1 in contoso.com.

Correct approach: Create a guest user account in contoso.com (Azure AD B2B collaboration). Invite user1@outlook.com as a guest, then assign them access to App1.

Why this works:

- B2B guest accounts let external users authenticate with their home tenant while gaining access to apps in your tenant. - You don’t need to create a new internal user or federate with WS-Fed.

Why the other options aren’t suitable:

- New-AzADUser would create a new user in contoso.com, which isn’t the same as granting access to an external contractor using their own identity. - “Configure external collaboration settings” controls how external users are allowed to collaborate, but doesn’t by itself grant access to App1. - “Add a WS-Fed identity provider” is for federation with another identity system and is unnecessary for standard Azure AD B2B guest access.

Quick steps (high level):

- In Azure AD > Users > New guest user (Invite user) ? enter user1@outlook.com. - Accept the invitation in the contractor’s account. - In App1’s access settings, add the new guest (or add to a group that has App1 access).

Result: Contractor authenticates with user1@outlook.com and can access App1 as a guest user.

Navsari, India

AI Explanation - verified by User9536 on: June 02, 2026
Question 16:
Here’s why question 16 is answered with Global Reach (Box 1) and Private (Box 2):

What the scenario asks for

- You have two on-prem datacenters (NYC and Seattle) connected to Azure via ExpressRoute. - The goal is to ensure all data between the two datacenters travels over the ExpressRoute circuits (not the internet), and to minimize cost.

Why the right choice is ExpressRoute Global Reach (Box 1)

- ExpressRoute Global Reach lets you interconnect your two ExpressRoute circuits so traffic between the two on-prem networks uses Microsoft’s backbone. This makes the inter-datacenter path private and avoids going over the public internet.

Why the right choice is Private (Box 2)

- With Global Reach, you can link the circuits to create a private connection between on-prem networks. Choosing Private ensures the traffic between NYC and Seattle stays on a private network path rather than traversing public routes.

Why not FastPath

- FastPath optimizes traffic between on-prem and a single VNet by bypassing the gateway, but it doesn’t address inter-datacenter traffic via ExpressRoute circuits.
In short: enable ExpressRoute Global Reach to connect the two circuits, and use the Private option so inter-datacenter traffic stays on a private Microsoft backbone, minimizing cost and avoiding the internet.
Bengaluru, India

AI Explanation - verified by User9181 on: June 02, 2026
Question 1:

Conclusion: 4 licenses are used.

Why:

- Group-based licensing counts unique users who are members of the licensed group. - Group1 members you gave: User1, User3, Group2 (dynamic membership includes User2), Group4 (includes User4). - Unique users = User1, User2, User3, User4 ? total 4.

Notes:

- Devices don’t consume Microsoft 365 E5 licenses; it’s per user. - If a user is in multiple licensed groups, they still count once.
So with the given membership, the correct license usage is 4 (option 4, not 2). If you want, I can walk through how dynamic and nested group memberships are evaluated in Azure AD.
Navsari, India

AI Explanation - verified by User2364 on: June 02, 2026
Question 4:
Answer: No.
Reasoning:

Deploying Azure virtual machines is an Infrastructure as a Service (IaaS) task. You manage the VM, its OS, patches, and software.

SaaS (Software as a Service) provides ready-made applications over the internet; you don’t manage the underlying VM or OS.

PaaS (Platform as a Service) hosts apps and services where you focus on code, not the OS/VM, but it’s not about deploying individual VMs.

Therefore, the proposed solution (use SaaS) does not meet the goal. The correct approach is to use IaaS for VM deployment.

Chennai, India

AI Explanation - verified by User5325 on: June 02, 2026
Question 11:

Question 11 asks which formats you can create for HR Document templates in ServiceNow, and it says the answer is A and C in the page’s key.

Based on ServiceNow HRSD practices, the two actual template formats you typically create are:

- Word document templates - PDF document templates

Why those, not the others:

- A) “Document Templates” is a generic category, not a specific file format. - D) “Text document templates” isn’t a standard HR template format in ServiceNow. - The page’s key (A and C) conflicts with the common formats; the practical formats are B and C (Word and PDF).

Quick takeaway: When selecting template types, look for Word or PDF options as the actual formats to create. If you want, I can walk through how to set up a Word or PDF HR document template in ServiceNow.

Chennai, India

Hariraj S on: June 02, 2026
Very helpful and appreciative!
Chennai, India

AI Explanation - verified by User5325 on: June 02, 2026
Question 3:
For Question 3, the four Filter by options are:

Upload File

User Criteria

HR Profiles

HR Criteria

Why these are the four:

The Filter by dropdown is used to decide which records (users or HR data) will be included when creating bulk cases.

Upload File lets you import a list of records to base the bulk creation on.

User Criteria allows filtering by standard user attributes (location, department, etc.).

HR Profiles uses HR-specific profile data to filter eligible records.

HR Criteria uses HR-related fields to filter records.

The remaining options are templates (e.g., Document Template, HR Service Template, HR Template) and are used to define the content/structure of cases rather than act as filters, so they’re not in the Filter by list. If you want, I can walk through what each template-type is used for.
Chennai, India

AI Explanation - verified by User3285 on: June 02, 2026
Question 43:
Here's the explanation for Question 43.

Scenario: You want to merge two tables (Customer and Contacts) where Contacts is filled from a web form. The data is not sanitized, so names may not exactly match.

Correct approach: Enable fuzzy matching (Option B). Why: with unsanitized data, exact string matching on Customer Name vs. Customer_Name will miss valid matches. Fuzzy matching allows approximate string comparisons and can find near-matches (e.g., minor typos, extra spaces).

Additional context:

You’d typically use a Left Outer join so you keep all Contacts and bring in any matching Customer fields (e.g., Website) from the Customer table. Set the merge on Contacts.Customer Name = Customer.Customer_Name and enable fuzzy matching.

If you want, I can outline the exact steps in Power Query to perform this merge.
Johannesburg, South Africa

AI Explanation - verified by User7690 on: June 01, 2026
Question 132:
Answer: D

Why not A: Refusing scope changes is not practical and doesn’t establish a controlled way to assess impacts on time, cost, quality, and risk.

Why not B: Decomposing into work packages helps planning, but it doesn’t provide a mechanism to manage future scope changes or protect the budget/resources.

Why not C: Tight scope statements and historical information are useful, but they don’t replace a formal process to evaluate and authorize changes.

Why D: Including a scope change process and reviewing the project charter gives you a formal governance mechanism to assess, approve, or reject changes. This helps protect the budget and resources by ensuring any new scope is analyzed for impact on time, cost, quality, and risks before it’s authorized.

Concept link: This reflects the PMI emphasis on Integrated Change Control and ensuring changes go through formal governance, with baselines updated as needed and aligned to the project charter.
Newnan, United States

AI Explanation - verified by jajaja on: June 01, 2026
Question 16:
Correct answer: B — Increase the function's memory.

Why: In AWS Lambda, CPU power is allocated proportional to the memory you assign. For CPU-bound workloads, giving the function more memory effectively provides more CPU cycles per invocation, reducing execution time and improving latency.

Why the other options don’t help per-invocation speed:

- CPU core count: Lambda doesn’t let you choose CPU cores directly. - Reserved concurrency: Caps concurrent executions; doesn’t speed up a single invocation. - Timeout: Extends the maximum duration, not the speed of each run.

Note: Increasing memory also increases cost, so you may want to benchmark different memory sizes to find the optimal balance. If cold starts are a concern, you could consider provisioned concurrency, but that’s not in the options given.

Colima, Mexico

AI Explanation - verified by kiingk9324 on: June 01, 2026
Question 22:
The answer key shows A, but the correct choice is D. VNF Service Chaining.
Why:

The scenario describes a feature that lets branch routers analyze traffic and steer it through a specified set of network functions (a service chain). This is exactly what VNF Service Chaining provides: routing traffic through a chain of virtual network functions (firewall, NAT, DPI, etc.) to optimize cost and user experience.

Options A and B (Cloud onRamp for Colocation / IaaS) refer to sending traffic to cloud resources, not to chaining network services at the edge.

Option C (Cloud Services Platform) is a management/orchestration platform, not the mechanism to chain VNFs.

So, D is the correct SD-WAN feature for regionalized service chaining. If you want, I can walk through how a typical VNF Service Chain is defined in policy and where it’s deployed.
Cape Town, South Africa

AI Explanation - verified by User6638 on: June 01, 2026
Question 56:
Question 56: The correct answer is B.
Why B is correct:

The root issue is unclear requirements. In Agile, the Product Owner is responsible for the backlog contents and ensuring items are well-defined and ready to build.

backlog refinement (grooming) improves clarity by detailing user stories, acceptance criteria, estimates, and dependencies. This helps the team understand what to build in upcoming iterations and reduces rework.

With clearer backlog items, the team can plan and complete an iteration more reliably.

Why the other options are less effective:

A (adjusting iteration length) doesn’t address the fundamental lack of clarity in requirements.

C (limiting WIP) helps flow but won’t fix unclear requirements.

D (reviewing individual performances) addresses people, not process or requirements.

Practical steps for backlog refinement:

Schedule regular refinement sessions with stakeholders.

Ensure backlog items follow INVEST (Independent, Negotiable, Valuable, Estimable, Small, Testable).

Define clear acceptance criteria and definition of ready for each item.

Riga, Latvia

AI Explanation - verified by User5419 on: June 01, 2026
Question 52:
Question 52 explanation:

Correct answer: B — Containers

Why this makes sense:

- Containers are a lightweight form of virtualization that lets you run multiple workload components isolated from each other on fewer physical servers. This can reduce hardware footprint and recurring costs compared to running full OS instances on separate servers.

How it aligns with the scenario:

- Customer has mixed OSs and wants consolidation with cost/privacy considerations. Containerization can improve density and reuse resources, helping with cost reduction while keeping workloads separated at the application level.

Important caveats:

- OS compatibility: containers share a host OS kernel, so true cross-OS consolidation (Windows, Linux, Unix) on a single container host isn’t straightforward. You’d typically host different OS workloads on separate container hosts or use virtualization for those OS types. - Security/privacy: containers provide isolation but not the same strong isolation as VMs. Proper hardening and security controls are essential.

Why not the other options:

- IaaS: off-prem/cloud raises data privacy concerns and ongoing costs. - Type 2 hypervisor: adds a host OS but is less efficient for consolidation than a bare-metal hypervisor. - VDI: centers on desktops, not server workload consolidation.
São Domingos De Rana, Portugal

AI Explanation - verified by User6921 on: June 01, 2026
Question 1:
Answer: Record Type (option C)
Why: If users see different picklist options based on the “kind” of Opportunity, that behavior is controlled by the record type settings. Each Opportunity record type can have its own subset of values for a given picklist, so selecting a different record type changes which options are available.
What the other choices mean:

Fields and relationships: not used to vary picklist values by record type.

Related lookup filters: limit lookup results, not picklist options.

Picklist value sets: define a shared list of values, but per-record-type visibility is still controlled by the record type settings.

How to configure:

Go to Setup > Object Manager > Opportunity > Record Types.

Choose the relevant record type and edit the picklist field’s values for that record type (add/remove values as needed).

Repeat for other record types if needed.

This is the standard way to present different picklist options for different kinds of opportunities.
Mechanicsburg, United States

AI Explanation - verified by jessicaztto on: June 01, 2026
yes
Great. Here’s a concise walk-through to enable and verify the Find Duplicates button for Leads.
1) Enable Duplicate Management for Lead

Go to Setup > Duplicate Rules > Lead.

If not present, create a new Lead Duplicate Rule and activate it.

2) Create and activate a Matching Rule for Lead

Setup > Matching Rules > Lead > New Rule.

Define matching fields (e.g., Email, Name, Company) and set criteria.

Activate the Matching Rule.

3) Create a corresponding Duplicate Rule (optional, but common)

Setup > Duplicate Rules > Lead > New Rule.

Associate the Lead Matching Rule.

Set behavior (Allow or Block) and any alert actions.

Activate the rule.

4) Check user permissions

Ensure the user has at least Read on Lead. No extra permission is required to see Find Duplicates.

5) Verify on a Lead record

Open a Lead record and look for the Find Duplicates button (Lightning/Classic). Click it to see potential duplicates based on the active Matching Rule.

6) Troubleshooting if the button doesn’t appear

Confirm there is at least one active Lead Matching Rule.

Ensure the user is viewing Lead records and the UI shows Find Duplicates (some pages/layouts may need updating).

If still missing, review page layouts to ensure the related action is visible.

São Paulo, Brazil

AI Explanation - verified by jessicaztto on: June 01, 2026
Question 127:
Here’s a focused explanation of Question 127.

What the scenario requires:

- A manager must approve before the lead is assigned to an external partner. - The external partner must be notified when the lead is assigned to them. - You need automation that enforces approval and then routes/alerts.

Why an approval process is central:

- An Approval Process enforces manager approval. - Final actions in the approval process can re-assign ownership and trigger notifications (email alerts).

Option analysis:

- A) Assignment rule, workflow rule — misses the required approval step. - B) Assignment rule, workflow rule, approval process — covers routing, notification, and approval. - C) Assignment rule, auto-response rule — auto-response is not about routing/approval. - D) Assignment rule, approval process — lacks an explicit workflow/alert path for notification (though notification can be done via final actions in the approval). - E) Assignment rule, workflow rule — misses approval requirement.

Bottom line:

- The bank’s stated answer (A) is likely incorrect because it omits the essential Approval Process. The best choice among these is B, which includes approval, plus routing and notification mechanisms.
If you’d like, I can walk through how to set up an Approval Process with final actions to assign the lead and notify the partner.
São Paulo, Brazil

AI Explanation - verified by jessicaztto on: June 01, 2026
Question 126:
Here’s a focused breakdown of Question 126.

What happens when you merge Accounts:

- You need to modify the master account (so you need Edit on Account). - You delete the non-master (so you need Delete on Account for the records being merged. - Related Opportunities are re-parented to the master account, which requires you to be able to update Opportunity records (so you need Edit on Opportunity). You don’t typically need to delete Opportunities.

Assessing the answer choices:

- A) Edit on Account and Delete on Opportunity — incorrect: you need Delete on Account as well, and you don’t need Delete on Opportunity. - B) Edit and Delete on Account and Read on Opportunity — incorrect: you do need Edit (and Delete) on Account, but the Opportunity side should be Edit (not just Read). - C) Edit and Delete on Account and Edit and Delete on Opportunity — closest to correct: it includes required Edit/Delete on Account, and includes Edit on Opportunity (though Delete on Opportunity isn’t strictly required).

Official key vs. practical reality:

- The provided answer shows B, but based on Salesforce behavior, the critical parts are: you must be able to Edit and Delete on Account, and you must be able to Edit on Opportunity to reassign to the master account. Delete on Opportunity isn’t typically needed.
If you want, I can walk through why the Opportunity permissions are (usually) Edit only, and how the merge operation updates related records.
São Paulo, Brazil

AI Explanation - verified by jessicaztto on: June 01, 2026
Question 125:
Question 125 asks how to handle approvals when the opportunity crosses $500k and the approvers are Chatter users.
Correct: C and D

Enable approval by Email: Allows approvers to approve (or reject) via email, helpful for users who may not log in to Salesforce.

Approval Process by a chatter: Enables approvals to be handled from within Chatter, so Chatter users can participate in the approval without leaving Chatter.

Why not A or B:

Big Deal Alert would notify the manager, but it doesn’t provide an approval mechanism.

Enable Chatter Post Notification just posts a notification in Chatter and doesn’t enable the actual approval action.

In practice, you’d set up an Opportunity Approval Process with entry criteria (Amount = 500,000) and assign the manager as the approver, then enable both email approvals and Chatter-based approvals so the Chatter users can approve conveniently.
São Paulo, Brazil

Filipe Castanheira on: June 01, 2026
This is amazing. Really helps
São Domingos De Rana, Portugal

AI Explanation - verified by jessicaztto on: June 01, 2026
Question 115:
Question 115 asks: Which permissions do you need to manage Milestones and Entitlements?

Correct permissions:

- Manage Entitlements — lets you administer entitlements (including entitlements records and related settings). - Customize Entitlements (often shown as “Customize Entitlements” or “Customize Entitlement”) — lets you customize entitlement processes and milestones.

Why the others are not correct:

- Customize Application and Manage Application are general admin permissions for applications, not specific to entitlements/milestones.
Notes:

The options in the question appear as “Manage Entitlement / Customize Entitlement / Customize Application / Manage Application.” The two entitlement-related permissions are the ones you need. If a provided answer key shows A and C, that mapping is likely incorrect or mislabeled in that source. The safe rule is to pick the two related to entitlements.

São Paulo, Brazil

AI Explanation - verified by User9126 on: June 01, 2026
Question 11:
Question 11 centers on security privileges in Dynamics 365.

The underlined segment (likely “Append access level”) is not accurate for creating new templates.

To add new entitlement templates, the user needs the Create privilege on the Entitlement Template entity, not the Append privilege.

The Append/Append To privileges control linking records, not creating new ones. A user with Append alone could link an existing template to something, but could not create a new template.

The required access level (User, Business Unit, Parent: Child, Organization) should be chosen based on how broadly you want the user to create templates. For organization-wide creation, you’d typically grant at least Organization level for Create.

Key concepts:

Replace the underlined segment with Create privilege on the Entitlement Template entity.

Understand the difference: Create vs Append (linking vs creating).

Karachi, Pakistan

AI Explanation - verified by User9181 on: June 01, 2026
Question 6:
Question 6 asks which two parameters are required when creating a bulk B2B invite in Azure AD.

Correct answers: A and B

- email address: You must specify the recipient’s email so the guest can be invited. - redirection URL: You must provide a redirect URL that controls where the guest lands after accepting the invitation.
Why the others aren’t required:

username: Not set in the bulk invite payload for B2B; guests use their own identity from their home tenant.

shared key/password: There is no password or shared key distributed in the bulk invite flow; guests set or use their own credentials via their home identity.

In short, bulk invites require the recipient’s email and a redirect URL; the remaining fields aren’t part of the required bulk-invite schema.
Navsari, India

AI Explanation - verified by User9181 on: June 01, 2026
Question 4:

Correct answer: C (the Licenses blade in the Azure Active Directory admin center)

Explanation:

You want to remove the E3 licenses from a large set of users with minimal effort. The Licenses blade supports bulk unassignment of a product license from multiple users.

Steps (high level): open the Licenses blade, select the Office 365 Enterprise E3 license, go to its assignments, and remove it for the 2,500 users. The change propagates to those users.

Alternative (also valid in some exam versions):

You can use PowerShell, e.g. the Set-MsolUserLicense cmdlet, to remove the E3 license from users in a scripted/bulk fashion.

Why the others aren’t the best fit:

The Identity Governance blade is for governance/entitlement workflows, not bulk license removal.

The Set-WindowsProductKey cmdlet is unrelated to Microsoft 365 licenses.

The Groups blade is what you used to assign the E5 licenses via groups; removing E3 licenses from users is a separate operation best done via Licenses blade (or Set-MsolUserLicense).

Surat, India

AI Explanation - verified by User9181 on: June 01, 2026
Question 3:
I can’t view the exhibit images, but here’s how to think about One-Time Passcode (OTP) in this scenario.

What OTP is: For Azure AD B2B external collaboration, OTP lets a guest sign in by entering a code sent to their email, instead of needing a home tenant identity.

What determines who gets a passcode: The Collaboration restrictions/External collaboration settings. If a guest domain is allowed, the guest can receive the OTP; if a domain is blocked or not allowed, no passcode is sent.

How to decide for User1, User2, User3: Compare each invited user’s email domain with the list of allowed/blocked domains in the collaboration settings. Only those from allowed domains will be emailed a passcode.

Additional nuance: If a user has already been invited and accepted previously, their access may follow that existing path, but OTP is typically used for new guest sign-ins or when an identity isn’t present in the home tenant.

The provided answer key says User1 only (B). That would mean only User1’s domain is allowed under the given settings.
If you share the specific domains for User1/User2/User3 and the exact Collaboration restrictions, I’ll walk through exactly which users receive the passcode.
Surat, India

AI Explanation - verified by User9181 on: June 01, 2026
Question 2:

Correct answer: A

Explanation:

Directory self-service sign-up is controlled at the tenant level. To stop users from creating new accounts in the contoso.com tenant via self-service sign-up, you disable this tenant-wide setting.

The cmdlet to adjust this is Set-MsolCompanySettings (MSOL module). The other options deal with domain federation or domain properties and won’t disable self-service sign-up.

High-level steps:

- Connect-MsolService - Run something like: Set-MsolCompanySettings -UsersCanSignInToAppsWithTheirAccountsEnabled $false (to disable self-service sign-up) - Verify with Get-MsolCompanySettings

Surat, India

Majeed Khan on: June 01, 2026
Studying for NCS-Core 6.8 and found the site most useful
Riyadh, Saudi Arabia

AI Explanation - verified by dovedoganesyan on: June 01, 2026
Question 51:
Question 51 asks: Which technology extracts detailed information from packets and stores that information in different tables?

Packet Filtering: Inspects only header information; does not extract detailed payload data or use multiple tables.

Stateful Inspection: Maintains per-connection state in a state table (and NAT tables), but this is about connection state rather than extracting deep packet details into multiple tables.

Application Layer Firewall: Can inspect at the application layer, but the phrase “stores that information in different tables” is more characteristic of logging/metadata management than the basic ALF concept.

Next-Generation Firewall: Performs deep packet inspection (DPI) to extract application, user, and content details, and stores various metadata in different data structures/tables for enforcement, reporting, and policy decisions.

The provided answer key marks D (Stateful Inspection), but the description best matches C (Next-Generation Firewall) because DPI and multi-table data extraction are core NGFW capabilities. If you’re studying, note this as a potential discrepancy in the question bank.
If you want, I can walk through why each option fits or doesn’t fit, or apply this reasoning to similar questions.
Moscow, Russia

AI Explanation - verified by User3285 on: June 01, 2026
Question 2:
Answer: C — Dataverse
Explanation:

Power Apps apps hosted in Teams often use Dataverse as their data store. The Dataverse connector in Power BI lets you connect directly to the app’s tables/entities for reporting.

The other options aren’t the right fit here: Teams Personal Analytics is about Teams usage data, not app data; SQL Server would require the app data to live in SQL Server; and Dataflows is for ETL within Power BI, not for connecting to the live Power Apps data source.

Johannesburg, South Africa

Oluwaseyi on: June 01, 2026
material is very helpful
London, United Kingdom

AI Explanation - verified by User8960 on: June 01, 2026
Question 12:

Answer: B. AWS Service Catalog

Why this is correct:

- AWS Service Catalog is designed to manage and govern deployed IT services as standardized products. Teams can provision these approved products (often backed by IaC templates like CloudFormation) in a controlled, compliant way. - It provides governance features such as access control, approvals, and portfolio management, preventing uncontrolled deployments.

Why the other options aren’t a fit:

- AWS Resource Explorer: for discovering resources across accounts, not governing IaC templates. - AWS Organizations: focuses on governance at the account level (SCPs, billing), not IaC template governance. - AWS Systems Manager: handles operational tasks, patching, and automation, not centralized governance of IaC templates.

Tip: In practice, a Service Catalog product often uses a CloudFormation template to deploy the standardized infrastructure, enabling consistent and compliant deployments across teams.

Chennai, India

Riddhi on: June 01, 2026
Questions helps in preparations.
Mumbai Suburban, India

AI Explanation - verified by ivars.soms on: June 01, 2026
Question 43:
I can explain the concept and how to decide, but I can’t see the device table image in Q43. If you paste the table or describe each device’s attributes, I’ll map it to the answer. Here’s how to evaluate Subscription Activation (SA) eligibility.

What SA does: SA lets Windows 11 Enterprise be activated via an Enterprise license (Windows 11 Enterprise E5) without a product key, upgrading from Windows 11 Pro.

Key prerequisites:

- The device must be enrolled in Microsoft Entra (Azure AD joined or Hybrid Azure AD joined). Typically SA requires Azure AD join. - The device or user must have an Enterprise license assigned (Windows 11 Enterprise E5) in the tenant. - The device should be currently running Windows 11 Pro (SA upgrades Pro to Enterprise; already Enterprise doesn’t need SA). - The device must have network access to the activation service and be in the same tenant.

How to apply to the table:

- For each device, check: - Is it Azure AD joined (or Hybrid) to the Entra tenant? - Is an Enterprise E5 license assigned to the user or device? - Is the current edition Windows 11 Pro (not already Enterprise)? - The devices meeting all three are eligible for SA.
If you share the specifics for Device1–Device4 (join type, current edition, and license status), I’ll identify exactly which ones qualify and confirm if A (Device1 only) is correct.
Tallinn, Estonia

AI Explanation - verified by User1067 on: May 31, 2026
Question 32:
Question 32 asks how to notify an external web service whenever an Opportunity is Won. The two valid approaches are:

A. Use a workflow rule and an outbound message.

When the Opportunity’s stage becomes Won, the workflow rule fires and sends an outbound SOAP message to the external service. This is a classic, straightforward pattern for external notifications.

D. Use Process Builder and Apex code.

Process Builder can detect Won opportunities and invoke an Apex class that performs a callout to the external service (e.g., via REST or SOAP). This is flexible and can handle more complex payloads, retries, and error handling.
Why not B or C:

B (Process Builder with an outbound message) isn’t a standard pattern because outbound messages are a Workflow action, not a native Process Builder action in many setups.

C (Flow with an outbound message) isn’t supported in the typical Flow actions.

In short, A is the classic approach, and D leverages modern automation with a code-based callout.
Hong Kong, Hong Kong

AI Explanation - verified by User1591 on: May 31, 2026
Question 12:
The correct choice is A: Review the scope and project objectives.
Why:

When schedule and cost overruns occur along with client dissatisfaction about scope progress, the first step is to verify what the project is actually supposed to deliver. This helps determine whether the issue comes from scope changes/ambiguity (scope creep) or from execution.

By reassessing the scope, objectives, and baselines (scope statement, WBS, etc.), the PM can identify root causes, confirm what remains in scope, and decide whether a change is needed.

This set-up is essential before taking any corrective actions (penalties, cost cuts, or scope completion negotiations). Acting without this understanding can misaddress the real problem and create further issues.

This approach aligns with PMI principles in Monitoring and Controlling: verify scope, assess variances, and prepare a proper change/control plan before implementing remedies or negotiating with stakeholders.

After reviewing scope and objectives, the PM can then determine appropriate subsequent actions with the client (re-baseline, change control, or corrective actions).
Jeddah, Saudi Arabia

AI Explanation - verified by User7475 on: May 31, 2026
Question 1:

Correct answer: B (Partial Dependence Plots, PDPs)

Why PDPs fit transparency and explainability:

- They show how a feature (or pair of features) influences the model’s predictions. - They provide an intuitive visual way for stakeholders to see the relationship between inputs and outputs. - They summarize the model’s behavior across the data distribution, aiding understanding of which features matter and how.

Why not the other options:

- Code for model training: technical and does not explain predictions. - Sample data for training: relates to data, not model explainability. - Model convergence tables: show training progress, not how features influence outcomes.

Quick usage note:

- Use PDPs for key forecasting features (e.g., seasonality, lagged demand) to illustrate their effect. - Be aware of limitations if features are correlated; consider alternatives like ALE plots for correlated features.
Indore, India

AI Explanation - verified by User4655 on: May 31, 2026
Question 4:
Question 4 asks which metric best measures how many images the plant-disease classifier got correct.

Correct answer: B) Accuracy

Why:

Accuracy = (number of correctly classified images) / (total number of images). This directly assesses classification performance.

Why the others are not appropriate here:

R-squared score: a regression metric, not for class labels.

Root mean squared error (RMSE): also a regression error metric.

Learning rate: a training hyperparameter, not a performance metric.

Note: If classes are highly imbalanced, you might supplement with per-class metrics (e.g., macro-averaged F1) or a confusion matrix for a more nuanced view.
Johannesburg, South Africa

AI Explanation - verified by User9231 on: May 31, 2026
Question 4:
Question 4 asks how to restrict a related list for users who share a profile but have different permission sets. The correct choice is:

Component Visibility

Why: If both teams use the same profile, you can’t differentiate access with profile-based rules or page layouts. Use Lightning App Builder to configure the Lightning record page, select the Custom Object Retention related list, and set its visibility so it only shows for users who have the specific permission set assigned to the client services team. This makes the related list appear only for those users.
Why the other options aren’t suitable:

Sharing settings: Controls data access at the record level, not UI per-user visibility.

Page Layout Assignment: Page layouts are assigned by profile/record type, not by permission sets, so this wouldn’t distinguish users with the same profile.

Record Type Assignment: Not related to visibility of a related list on the record page.

Bengaluru, India

AI Explanation - verified by User9231 on: May 31, 2026
Question 1:

Correct answer: C) Record Type

Why: If users see different picklist options “based on the kind of opportunity,” that means the options are scoped per opportunity type. In Salesforce, you control which picklist values appear for a given object by using Record Types. You edit the available picklist values for each record type so differentOpportunity kinds show different options.

Why not the others:

- Fields and Relationships: defines the field itself, but doesn’t segment values by record type. - Related Lookup Filters: filter lookups, not picklist options. - Picklist Value Sets: share a common set across fields/objects; doesn’t provide per-record-type differentiation.

Quick steps (high level):

- Setup ? Object Manager ? Opportunity ? Record Types ? choose a record type ? edit the picklist values available for that type. This assigns specific values per record type.
Bengaluru, India

AI Explanation - verified by User1861 on: May 30, 2026
Question 13:
Answer: C — Maintain a central repository of artifacts with a version control system.
Why:

A distributed team needs a single source of truth. A central repository ensures everyone accesses the same latest versions of documents and schedules.

Version control tracks changes: who updated what, when, and why. This creates an audit trail and helps manage scope/requirements changes.

This approach improves traceability and coordination, reducing confusion from multiple emailed reports and separate copies.

Other options are weaker:

Training on version control is useful but doesn’t by itself solve the tracking and synchronization problem.

Region-based separate document control fragments information and creates further discrepancies.

Developing new document management software is unnecessary overhead for this issue.

Practical tip: implement a CM system or shared repository with clear conventions (naming, versioning, baselines) and require change/approval processes to be reflected in the repository.
Kuala Lumpur, Malaysia

Cisco 100-490 Exam Actual Questions
Supporting Cisco Routing & Switching Network Devices (Page 2 )

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

100-490 Exam Discussions & Posts (Share your experience with others)

Cisco 100-490 Exam Actual Questions Supporting Cisco Routing & Switching Network Devices (Page 2 )