QUESTION: 172 Exam Topic: 3 - Question Set 3

Your network contains an Active Directory forest named contoso.local.
You have a Microsoft 365 subscription.
You plan to implement a directory synchronization solution that will use password hash synchronization. From the Microsoft 365 admin center, you successfully verify the contoso.com domain name. You need to prepare the environment for the planned directory synchronization solution.
What should you do rst?

From the public DNS zone of contoso.com, add a new mail exchanger (MX) record.
From Active Directory Domains and Trusts, add contoso.com as a UPN su x.
From the Microsoft 365 admin center, verify the contoso.local domain name.
From Active Directory Users and Computers, modify the UPN su x for all users.

Answer(s): B

Explanation:

The on-premise Active Directory domain is named contoso.local. Therefore, all the domain users accounts will have a UPN su x of contoso.local by default.
To enable directory synchronization that will use password hash synchronization, you need to con gure the domain user accounts to have the same UPN su x as the veri ed domain (contoso.com in this case). Before you can change the UPN su x of the domain user accounts to contoso.com, you need to add contoso.com as a UPN su x in the domain.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-userprincipalname

Reveal Solution Next Question

QUESTION: 173 Exam Topic: 3 - Question Set 3

Your company has a Microsoft 365 subscription.
Your plan to add 100 newly hired temporary users to the subscription next week.
You create the user accounts for the new users.
You need to assign licenses to the new users.
Which command should you run?

Answer(s): B

Explanation:

The rst line gets all users from the Temp department that have a UsageLocation assigned and stores them in the $NewStaff variable. You cannot use PowerShell to assign a license to a user that does not have a UsageLocation con gured.
The second line adds the licenses to each user in the $NewStaff variable.

Reference:

https://docs.microsoft.com/en-us/o ce365/enterprise/powershell/assign-licenses-to-user-accounts-with-o ce-365-powershell

Reveal Solution Next Question

QUESTION: 174 Exam Topic: 3 - Question Set 3

Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant. The network uses a rewall that contains a list of allowed outbound domains.
You begin to implement directory synchronization.
You discover that the rewall con guration contains only the following domain names in the list of allowed domains:
*.microsoft.com
*.o ce.com

Directory synchronization fails.
You need to ensure that directory synchronization completes successfully.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

From the rewall, allow the IP address range of the Azure data center for outbound communication.
From Azure AD Connect, modify the Customize synchronization options task.
Deploy an Azure AD Connect sync server in staging mode.
From the rewall, create a list of allowed inbound domains.
From the rewall, modify the list of allowed outbound domains.

Answer(s): E

Explanation:

Azure AD Connect needs to be able to connect to various Microsoft domains such as login.microsoftonline.com. Therefore, you need to modify the list of allowed outbound domains on the rewall.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-ports

Reveal Solution Next Question

QUESTION: 175 Exam Topic: 3 - Question Set 3

Your network contains an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of an authentication strategy. You need to recommend an authentication strategy that meets the following requirements:
Allows users to sign in by using smart card-based certi cates
Allows users to connect to on-premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?

password hash synchronization and seamless SSO
federation with Active Directory Federation Services (AD FS)
pass-through authentication and seamless SSO

Answer(s): B

Explanation:

Federation with Active Directory Federation Services (AD FS) is required to allow users to sign in by using smart card-based certi cates.
Federated authentication
When you choose this authentication method, Azure AD hands off the authentication process to a separate trusted authentication system, such as on-premises
Active Directory Federation Services (AD FS), to validate the user's password.
The authentication system can provide additional advanced authentication requirements. Examples are smartcard-based authentication or third-party multifactor authentication.

Reference:

https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 32)

QUESTION: 172 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 173 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 174 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 175 Exam Topic: 3 - Question Set 3

Explanation:

Reference: