MS-100 Exam Question 86
Your network contain*, an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.
You need to recommend an authentication strategy that meets the following requirements:
* Allows users to sign in by using smart card-based certificates
* Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?
You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.
You need to recommend an authentication strategy that meets the following requirements:
* Allows users to sign in by using smart card-based certificates
* Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?
MS-100 Exam Question 87
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.
Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
Solution: For each branch office, you add a direct connection to the Internet.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.
Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
Solution: For each branch office, you add a direct connection to the Internet.
Does this meet the goal?
MS-100 Exam Question 88
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You have three applications App1, App2, App3. The Apps use files that have the same file extensions.
Your company uses Windows Information Protection (WIP). WIP has the following configurations:
Windows Information Protection mode: Silent
Protected apps: App1
Exempt apps: App2
From App1, you create a file named File1.
What is the effect of the configurations? To answer, select the appropriate options in the answer area.

You have three applications App1, App2, App3. The Apps use files that have the same file extensions.
Your company uses Windows Information Protection (WIP). WIP has the following configurations:
Windows Information Protection mode: Silent
Protected apps: App1
Exempt apps: App2
From App1, you create a file named File1.
What is the effect of the configurations? To answer, select the appropriate options in the answer area.

MS-100 Exam Question 89
Your company is based in the United Kingdom (UK).
Users frequently handle data that contains Personally Identifiable Information (PII).
You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based in the information presented in the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Users frequently handle data that contains Personally Identifiable Information (PII).
You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based in the information presented in the information presented in the graphic.
NOTE: Each correct selection is worth one point.

MS-100 Exam Question 90
You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoUstServKe.
The permissions for the TodoListSPA API are configured as shown in the TodoUstSPA exhibit (Click the TodoUstSPA tab) The permissions for the TodoUstService API are configured as shown m the TodoListService exhibit (Click the TodoUstService tab.) You need to ensure that TodoUstService can access a Microsoft OneDnve file of the signed-in user. The solution must use the principle of least privilege.
Which permission request should you configure?
The permissions for the TodoListSPA API are configured as shown in the TodoUstSPA exhibit (Click the TodoUstSPA tab) The permissions for the TodoUstService API are configured as shown m the TodoListService exhibit (Click the TodoUstService tab.) You need to ensure that TodoUstService can access a Microsoft OneDnve file of the signed-in user. The solution must use the principle of least privilege.
Which permission request should you configure?


