QUESTION: 176 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan's account from Microsoft 365 and notice that his username is set to Allan@adatum.onmicrosoft.com.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Allan Yoo's user account is synchronized from the on-premise Active Directory. This means that most user account settings have to be con gured in the on- premise Active Directory.
In the exhibit, Password Writeback is disabled. Therefore, you cannot reset the password of Allan Yoo from the Azure portal. You also cannot change Allan Yoo's job title in the Azure portal because his account is synchronized from the on-premise Active Directory. One setting that you can con gure for synchronized user accounts I the usage location. The usage location must be con gured on a user account before you can assign licenses to the user.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

Reveal Solution Next Question

QUESTION: 177 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
Your network contains an on-premises Active Directory domain named contoso.com that syncs to Azure Active Directory (Azure AD).
You have users in contoso.com as shown in the following table.

The users have the passwords shown in the following table.

You implement password protection as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: No
User1's password contains the banned password 'Contoso'. However, User1 will not be required to change his password at next sign in. When the password expires or when User1 (or an administrator) changes the password, the password will be evaluated and will have to meet the password requirements.

Box 2: Yes
Password evaluation goes through several steps including normalization and Substring matching which is used on the normalized password to check for the user's rst and last name as well as the tenant name. Normalization is the process of converting common letter substitutes into letters. For example, 0 converts to o. $ converts to s. etc.
The next step is to identify all instances of banned passwords in the user's normalized new password. Then:
1. Each banned password that is found in a user's password is given one point.
2. Each remaining unique character is given one point.
3. A password must be at least ve (5) points for it to be accepted.
'C0nt0s0' becomes 'contoso' after normalization. Therefore, C0nt0s0_C0mplex123 contains one instance of the banned password (contoso) so that equals 1 point. After 'contoso', there are 11 unique characters. Therefore, the score for 'C0nt0s0_C0mplex123' is 12. This is more than the required 5 points so the password is acceptable.
Box 3:
The 'Password protection for Windows Server Active Directory' is in 'Audit' mode. This means that the password protection rules are not applied. Audit mode is for logging policy violations before putting the password protection 'live' by changing the mode to 'enforced'.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad

Reveal Solution Next Question

QUESTION: 178 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

User1 is the owner of Group1. User2 is the owner of Group2.
You create an access review that contains the following con gurations:
Users to review: Members of a group
Scope: Everyone
Group: Group1, Group2

Reviewers: Group owners

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Yes
User1 is the owner of Group1. User2 is in Group1 and Group2. Group owners can review access. Therefore, User1 can review User2's membership of Group1.

Box 2: Yes
User1 is the owner of Group1. User3 is in Group1 and Group2. Group owners can review access. Therefore, User1 can review User3's membership of Group1.

Box 3: No
Only group owners can review access. User3 is not a group owner. Therefore, User3 cannot review membership of the groups.
References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

Reference:

References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

Reveal Solution Next Question

QUESTION: 179 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You need to ensure that a user named User1 can create documents by using O ce Online. Which two Microsoft O ce 365 license options should you turn on for User1? To answer, select the appropriate options in the answer area.
NOTE: Each correct section is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

You need O ce Online to be able to create documents by using O ce Online. You also need an online location to save and store the documents. For this, you would use SharePoint online.

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 33)

QUESTION: 176 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 177 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 178 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 179 Exam Topic: 3 - Question Set 3

Explanation: