MS-100 Exam Question 166

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.
User1 is the owner of Group1, User2 is the owner of Group2.
You create an access review that contains the following configurations:
* Users to review, Member of a group
* Scope Everyone
* Group: Group1 and Group2
* Review Group owners
For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each correct selection is worth one point.

MS-100 Exam Question 167

Your company has a Microsoft 365 subscription that contains the users shown in the following table.

You need to identify which users can perform the following administrative tasks:
* Modify the password protection policy.
* Create guest user accounts.
Which users should you identify for each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

MS-100 Exam Question 168

You have several devices enrolled in Microsoft Intune.
You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.

The device type restrictions in Intune are configured as shown in the following table.

You add User3 as a device enrollment manager in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

MS-100 Exam Question 169

You have a Microsoft 365 E5 subscription.
You need to ensure that users are prompted for multi-factor authentication (MFA) when they attempt to access Microsoft SharePoint Online resources. Users must NOT be prompted for MFA when they attempt to access other Microsoft 365 services.
What should you do?
  • MS-100 Exam Question 170

    Your network contains an on-premises Active Directory domain.
    You have a Microsoft 365 subscription.
    You implement a directory synchronization solution that uses pass-through authentication.
    You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.

    You discover that Active Directory users can use the passwords in the custom banned passwords list.
    You need to ensure that banned passwords are effective for all users.
    Which three actions should you perform? Each correct answer presents part of the solution.
    NOTE: Each correct selection is worth one point.