QUESTION: 152 Exam Topic: 3 - Question Set 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain.
You deploy a Microsoft Azure Active Directory (Azure AD) tenant.
Another administrator con gures the domain to synchronize to Azure AD.
You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.
You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully. You need to ensure that the 10 user accounts are synchronized to Azure AD.
Solution: From Azure AD Connect, you modify the Azure AD credentials.
Does this meet the goal?

Answer(s): B

Explanation:

The question states that all the user account synchronizations completed successfully . Therefore, the Azure AD credentials are con gured correctly in Azure AD
Connect. It is likely that the 10 user accounts are being excluded from the synchronization cycle by a ltering rule.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-con gure- ltering

Reveal Solution Next Question

QUESTION: 153 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.
What information must be con gured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Microsoft enforces a strong default two-gate password reset policy for any Azure administrator role. This policy may be different from the one you have de ned for your users and cannot be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned.
With a two-gate policy, administrators don't have the ability to use security questions. The two-gate policy requires two pieces of authentication data, such as an email address, authenticator app, or a phone number. User3 is not assigned to an Administrative role so the con gured method of Security questions only applies to User3.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-password-policy-differences

Reveal Solution Next Question

QUESTION: 154 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 subscription.
You need to provide an administrator named Admin1 with the ability to place holds on mailboxes, SharePoint Online sites, and OneDrive for Business locations.
The solution must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Core eDiscovery in Microsoft 365 provides a basic eDiscovery tool that organizations can use to search and export content in Microsoft 365 and O ce 365. You can also use Core eDiscovery to place an eDiscovery hold on content locations, such as Exchange mailboxes, SharePoint sites, OneDrive accounts, and
Microsoft Teams.
To access Core eDiscovery or be added as a member of a Core eDiscovery case, a user must be assigned the appropriate permissions. Speci cally, a user must be added as a member of the eDiscovery Manager role group in the Microsoft 365 compliance center. Members of this role group can create and manage Core eDiscovery cases. They can add and remove members, place an eDiscovery hold on users, create and edit searches, and export content from a Core eDiscovery case.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-core-ediscovery?view=o365-worldwide

Reveal Solution Next Question

QUESTION: 155 Exam Topic: 3 - Question Set 3

You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

You add another user named User5 to the User administrator role.
You need to identify which two management tasks User5 can perform.
Which two tasks should you identify? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Delete User2 and User4 only.
Reset the password of User2 and User4 only.
Delete User1, User2, and User4 only.
Delete any user in Azure A
Reset the password of any user in Azure AD.
Reset the password of User4 only.

Answer(s): A,B

Explanation:

Users with the User Administrator role can create users and manage all aspects of users with some restrictions (see below).
Only on users who are non-admins or in any of the following limited admin roles:
Directory Readers
Guest Inviter
Helpdesk Administrator
Message Center Reader
Reports Reader
User Administrator

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles#available-roles

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 27)

QUESTION: 152 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 153 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 154 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 155 Exam Topic: 3 - Question Set 3

Explanation:

Reference: