ms-100-23

yes, yes, no, yes - official yes, no, no, yes - voted

The value of extensionattribute1 is synced to Azure AD? The value of extensionattribute10 is synced to Azure AD? The value of extensionattribute11 is synced to Azure AD? The value of extensionattribute12 is synced to Azure AD?

B. System customizer

You have Microsoft 365 tenant that contains a Microsoft Power Platform environment named Environment1 (default). Environment1 contains a MicrosoftDataverse database. In the tenant, you create a user named User1. You assign a Microsoft Power Apps license to User1.Which security role for Environment1 is assigned automatically to User1? A. Environment maker B. System customizer C. Delegate D. System customizer

Y N N

You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table. name: type: source: member of user1@contoso: Member: Azure AD: G1 User2@contoso: member: Windows server AD: G1 user3@outlook: guest: microsoft account: G1 Password writeback is disabled in Azure AD Connect.You enable self-service password reset (SSPR) for Group1.You configure password protection for contoso.com as shown in the following exhibit. user1 can use SSPR to set his PW to VeRYC)MplexPa%%W.rd? user2 can use SSPR to set his PW to VeRYC)MplexPa%%W.rd? user3 can use SSPR to set his PW to VeRYC)MplexPa%%W.rd?

C. From the Licenses page of the Microsoft 365 admin center, assign the licenses. A. From the Azure Active Directory admin center, modify the settings of the Voice group. Most Vote

You have a Microsoft 365 E5 subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com. You purchase 100 Microsoft 365 Business Voice add-on licenses You need to ensure that the members of a group named Voice are assigned a Microsoft 365 Business Voice add-on license automatically. What should you do? A. From the Azure Active Directory admin center, modify the settings of the Voice group. B. From the Microsoft 365 admin center, modify the settings of the Voice group. C. From the Licenses page of the Microsoft 365 admin center, assign the licenses.

B. User2 Most Voted D. User4 Most Voted

You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table. You plan to provide access to an on-premises app named App1 by using Azure AD Application Proxy. App1 will be managed by User4.You need to identify which user can install the Application Proxy connector. Which user should you identify? A. User1 B. User2 C. User3 D. User4

Modify PW protection policy? user 1 Create new guest users in Azure AD? user1 and user2

Your company has a Microsoft 365 subscription that contains the users shown in the following table. name: role user1: global admin user2: Security admin, guest inviter user3: none user4: password admin External collaboration settings have default configuration. You need to identify which users can perform the following administrative tasks: ✑ Modify the password protection policy. ✑ Create guest user accounts. Which users should you identify for each task? To answer, select the appropriate options in the answer area. Modify PW protection policy? user1 only, user1 and user2, user1 and user2 and use4, all user Create new guest users in Azure AD?

A. Security administrator E. Reports reader F. Security reader

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.You suspect that an imposter is signing in to Azure AD by using the credentials of User1.You need to ensure that an administrator named Admin1 can view all the sign in details of User1 from the past 24 hours. To which three roles should you add Admin1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Security administrator B. Password administrator C. User administrator D. Compliance administrator E. Reports reader F. Security reader

user1: Cannot change her PW from any portals If the PW for user1 is changed in AD: the PW hash will sync to azure AD

Your company has a hybrid deployment of Microsoft 365.An on-premises user named User1 is synced to Microsoft Azure Active Directory (Azure AD).Azure AD Connect is configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. user1: Cannot change her PW from any portals can change her PW by using self-service PW reset Can change her PW from the M365 admin center If the PW for user1 is changed in AD: the PW hash will sync to azure AD the new randomly generated PW will be assigned to user1 the PW hash in Azure AD will be unchanged

A. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering.

Your network contains a single Active Directory domain and two Microsoft Azure Active Directory (Azure AD) tenants. You plan to implement directory synchronization for both Azure AD tenants. Each tenant will contain some of the Active Directory users. You need to recommend a solution for the planned directory synchronization. What should you include in the recommendation? A. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering. B. Deploy one server that runs Azure AD Connect, and then specify two sync groups. C. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering. D. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using domain-based filtering.

Action to perform before establishing the federation: From Azure portal, add a custom domain name Tool to use to establish federation: AZURE AD Connect

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains five domain controllers. Your company purchases Microsoft 365 and creates a Microsoft Azure Directory (Azure AD) tenant named contoso.onmicrosoft,com. You plan to establish federation authentication between on-premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (ADFS).You need to establish the federation. What should you do? To answer, select the appropriate options in the answer area. Action to perform before establishing the federation: From Azure portal, add a custom domain name " ", configure an authentication method From the domain controller, install a pass-through authentication agent '' '', install windows indetity foundation 3.5 Tool to use to establish federation: AD domains and trusts AZURE AD Connect The AD FS console The azure portal