QUESTION: 216 Exam Topic: 3 - Question Set 3

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

Password writeback is disabled in Azure AD Connect.
You enable self-service password reset (SSPR) for Group1.
You con gure password protection for contoso.com as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

With the password policy, VeRYC0MplexPa55w.rd. is an acceptable password.

Box 1: Yes
User1 is an Azure AD account so User1 can reset his password.

Box 2: No
User2 is a Windows Server Active Directory Account. User2 could change the password for the Azure AD account. However, as Password Writeback is disabled, the password change will not be written back to the Windows Server Active Directory account.
Box 3: No
The Azure AD Tenant is named contoso.com. User3 is a guest account from a different directory named outlook.com. You cannot use SSPR in one directory to change the password for an account in a different directory.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

Reveal Solution Next Question

QUESTION: 217 Exam Topic: 3 - Question Set 3

You have a Microsoft 365 E5 subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com.
You purchase 100 Microsoft 365 Business Voice add-on licenses.
You need to ensure that the members of a group named Voice are assigned a Microsoft 365 Business Voice add-on license automatically.
What should you do?

From the Azure Active Directory admin center, modify the settings of the Voice group.
From the Microsoft 365 admin center, modify the settings of the Voice group.
From the Licenses page of the Microsoft 365 admin center, assign the licenses.

Answer(s): A

Reveal Solution Next Question

QUESTION: 218 Exam Topic: 3 - Question Set 3

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1. You suspect that an imposter is signing in to Azure AD by using the credentials of User1. You need to ensure that an administrator named Admin1 can view all the sign in details of User1 from the past 24 hours. To which three roles should you add Admin1? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Security administrator
Password administrator
User administrator
Compliance administrator
Reports reader
Security reader

Answer(s): A,E,F

Explanation:

Users in the Security Administrator, Security Reader, Global Reader, and Report Reader roles can view the sign in details.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

Reveal Solution Next Question

QUESTION: 219 Exam Topic: 3 - Question Set 3

You have Microsoft 365 tenant that contains a Microsoft Power Platform environment named Environment1 (default). Environment1 contains a Microsoft
Dataverse database.
In the tenant, you create a user named User1. You assign a Microsoft Power Apps license to User1.
Which security role for Environment1 is assigned automatically to User1?

Environment maker
System customizer
Delegate
Environment admin

Answer(s): A

Reveal Solution Next Question

Free MS-100 Exam Braindumps (page: 43)

QUESTION: 216 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 217 Exam Topic: 3 - Question Set 3

QUESTION: 218 Exam Topic: 3 - Question Set 3

Explanation:

Reference:

QUESTION: 219 Exam Topic: 3 - Question Set 3