2019/February Braindump2go MS-100 Exam Dumps with PDF and VCE New Released Today! Following are some Free MS-100 Real Exam Questions:
1.|2019 Latest MS-100 Exam Dumps (PDF & VCE) 108Q&As Instant Download:
https://www.braindump2go.com/ms-100.html
2.|2019 Latest MS-100 Exam Questions & Answers Instant Download:
https://drive.google.com/drive/folders/15vjCBbT_dSXLdZo7Ua_XgRuKT6WqjGC0?usp=sharing
Question: 34
Your network contains two Active Directory forests. Each forest contains two domains. All client computers run Windows 10 and are domain-joined.
You plan to configure Hybrid Azure AD join for the computers. You create Microsoft Azure Active Directory (Azure AD) tenant.
You need to ensure that the computers can discover the Azure AD tenant. What should you create?
A. a new computer account for each computer
B. a new* service connection point (SCP) for each domain.
C. a new trust relationship for each forest
D. a new service connection point (SCP) for each forest.
Answer: A
Question: 35
Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.
The network uses a firewall that contains a list of allowed outbound domains. You began to implement directory synchronization.
You discover that the firewall configuration contains only the following domain names in the list of allowed domains:
• *.microsof.com
• *.office.com
Directory synchronization fails.
You need to ensure that directory synchronization completes successfully.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.
A. From the firewall, allow the IP address range of the Azure data center for outbound communication. B. From Azure AD Connect, modify the Customize synchronization options task- Deploy an Azure AD Connect sync server in staging mode.
C. From the firewall, create a list of allowed inbound domains.
D. From the firewall, modify the list of allowed outbound domains.
Answer: A
Question: 36
Your network contain*, an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.
You need to recommend an authentication strategy that meets the following requirements:
• Allows users to sign in by using smart card-based certificates
• Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?
A. password hash synchronization and seamless SSO
B. federation with Active Directory Federation Services (AD FS)
C. pass-through authentication and seamless SSO
Answer: C
Question: 37
HOTSPOT
Your network contains an on premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as Shown in the following exhibit.
An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan’s account from Microsoft 365 and notice that his username is set to [email protected].
For each of the following statements, select Yes if the statement is hue. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Question: 38
HOTSPOT
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contosooomicrosoft.com that contains the users Shown in the following table.
You need to identify which users can perform the following administrative tasks:
• Reset the password of User4.
• Modify the value for the manager attribute of User4
Which users should you identify for each task? To answer, select the appropriate options m the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Question: 39
HOTSPOT
Your company has offices in several cities and 100.000 users. The network contains an Active Directory domain contoso.com.
You purchase Microsoft 365 and plan to deploy several Microsoft 365 services.
You are evaluating the implementation of pass-through authentication and seamless SSO. Azure AD Connect will NOT be in staging mode.
You need to identify the redundancy limits for the planned implementation.
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Answer:
Question: 40
Your network contains an Active Directory domain named .Ki.ituin.com that is synced to Microsoft Azure Active Directory (Azure AD).
The domain contains 10O user accounts.
The city attribute for all the users is set to the city where the user resides.
You need to modify the value of the city attribute to the three letter airport code of each city.
What should you do?
A. from Active Directory Administrative Center, select the Active Directory users, and then modify the Property settings.
B. From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
C. From Azure Cloud Shell, run the Get-AzureADUsers, and then use the Bulk actions option.
D. From Azure Cloud Shell, run the Get-AzureADUser and set-AzureADUser cmdlets.
E. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set- AzureADUser cmdlets.
Answer: C
Question: 41
HOTSPOT
You company has a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts.
You need to identify which users can perform the following administrative tasks: Create guest user accounts.
Add User3 to Admin1.
Which users should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Question: 42
You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1
You enable Azure AD Identity Protection.
You need to ensure that User1 can review the list in Azure AD Identity Protection of users nagged for risk. The solution must use the principle of least privilege.
To which role should you add User1?
A. Security reader
B. Compliance administrator
C. Reports reader
D. Global administrator
Answer: B
Question: 43
HOTSPOT
Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.
You implement directory synchronization for all 10.000 users in the organization. You automate the creation of 100 new user accounts.
You need to ensure that the new user accounts synchronize to Azure AD as quickly as possible Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct select ion is worth one point.
Answer:
Question: 44
Your network contains three Active Directory forests.
You create a Microsoft Azure Active Directory (Azure AD) tenant. You plan to sync the on premises Active Directory (Azure AD).
You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.
What should you include in the recommendation?
A. Three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
B. One Azure AD Connect sync servers one Azure AD Connect sync servers in staging mode
C. Three Azure AD Connect sync servers and one Azure AD Connect sync servers in staging mode
D. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
Answer: A
!!!RECOMMEND!!!
1.|2019 Latest MS-100 Exam Dumps (PDF & VCE) 108Q&As Instant Download:
https://www.braindump2go.com/ms-100.html
2.|2019 Latest MS-100 Study Guide Video Instant Download:
