Microsoft MS-100 Microsoft 365 Identity and Services Free Practice Test — 30 Questions

Question 1

A company is planning to implement Azure Active Directory (Azure AD) to manage user identities and access to resources. They want to ensure that their Azure AD environment is configured to support conditional access policies effectively. The IT administrator is tasked with defining the conditions under which users can access specific applications. Which of the following conditions should the administrator prioritize to enhance security while maintaining user productivity?

Accepted Answer

User location and device compliance status

Question 2

A company is planning to implement Azure AD Connect to synchronize their on-premises Active Directory with Azure Active Directory. They have a hybrid environment where some users are managed on-premises while others are cloud-only. The IT administrator needs to ensure that the synchronization process is efficient and meets the company\'s security requirements. Which of the following configurations would best support this scenario while ensuring that only the necessary attributes are synchronized and that the synchronization process is secure?

Accepted Answer

Configure Azure AD Connect to use password hash synchronization and filter out unnecessary attributes from the synchronization process.

Question 3

A company is planning to implement a new SharePoint site collection to enhance collaboration among its departments. The IT administrator needs to ensure that the site collection is configured to meet specific compliance requirements, including data retention policies and user access controls. Which of the following configurations should the administrator prioritize to effectively manage the site collection while adhering to these compliance requirements?

Accepted Answer

Implementing Information Management Policies to enforce retention and deletion of documents based on their metadata.

Question 4

A multinational corporation is implementing Conditional Access Policies to enhance its security posture while allowing employees to access corporate resources remotely. The IT security team has identified several factors that should be considered when creating these policies. Which of the following factors should be prioritized to ensure that access is granted based on the user\'s context, such as location, device compliance, and user risk level?

Accepted Answer

User risk assessment based on sign-in behavior and device health

Question 5

A company is implementing Microsoft Enterprise Mobility + Security (EMS) to enhance its security posture and manage its mobile devices. The IT administrator needs to ensure that all devices accessing corporate resources are compliant with the organization\'s security policies. Which of the following strategies should the administrator prioritize to achieve this goal effectively?

Accepted Answer

Implement Conditional Access policies that require devices to meet specific compliance criteria before accessing resources.

Question 6

A multinational corporation has implemented Conditional Access Policies to enhance security for its Microsoft 365 environment. The IT administrator wants to ensure that only users from specific geographic locations can access sensitive applications. They decide to create a policy that blocks access from any location that is not explicitly allowed. Which of the following configurations would best achieve this goal while also considering the need for users traveling for business?

Accepted Answer

Create a Conditional Access Policy that allows access only from trusted IP ranges and requires multi-factor authentication (MFA) for all other locations.

Question 7

A multinational corporation is transitioning from an on-premises Active Directory (AD) environment to Microsoft 365 while maintaining some legacy systems. The IT team is tasked with ensuring that users can access both the new cloud services and the existing on-premises applications seamlessly. Which coexistence strategy should the IT team implement to facilitate this transition while minimizing disruption to users?

Accepted Answer

Implement a hybrid identity solution using Azure Active Directory Connect to synchronize identities between on-premises AD and Azure AD.

Question 8

A company is implementing Microsoft 365 to enhance its security and compliance posture. They are particularly concerned about data loss prevention (DLP) and want to ensure that sensitive information is adequately protected across their Microsoft 365 environment. The IT team is tasked with configuring DLP policies to prevent the sharing of sensitive data such as credit card numbers and social security numbers. Which of the following approaches should the IT team prioritize to effectively implement DLP policies in this scenario?

Accepted Answer

Create DLP policies that classify sensitive information types and apply them to all locations within Microsoft 365, including SharePoint, OneDrive, and Exchange Online.

Question 9

A company is implementing Microsoft 365 and needs to ensure that its users can access support tools effectively. The IT department is tasked with selecting the most appropriate support resources to assist users with common issues related to identity and access management. Given the following options, which resource would provide the most comprehensive support for troubleshooting user authentication issues in Microsoft 365?

Accepted Answer

Microsoft 365 Admin Center

Question 10

A company is migrating its on-premises Active Directory to Azure Active Directory (Azure AD) and needs to implement a hybrid identity solution. They want to ensure that users can access both on-premises and cloud resources seamlessly while maintaining a single sign-on (SSO) experience. Which of the following approaches would best achieve this goal while also ensuring that user identities are synchronized and managed effectively?

Accepted Answer

Implement Azure AD Connect with password hash synchronization and enable Seamless SSO.

Question 11

A company is migrating its document management system to SharePoint Online. The IT administrator needs to ensure that sensitive documents are stored securely and that access is controlled based on user roles. The administrator decides to implement SharePoint Online\'s built-in security features. Which approach should the administrator take to effectively manage permissions and ensure compliance with data protection regulations?

Accepted Answer

Utilize SharePoint groups to assign permissions based on user roles and implement sensitivity labels for document classification.

Question 12

A company has implemented a password-based authentication system for its employees. Each employee is required to create a password that meets specific complexity requirements: it must be at least 12 characters long, include at least one uppercase letter, one lowercase letter, one digit, and one special character. If an employee\'s password is \"Secure#1234\", which of the following statements accurately reflects the compliance of this password with the company\'s policy?

Accepted Answer

The password meets all complexity requirements but is not long enough.

Question 13

A company is monitoring its Microsoft 365 environment to ensure compliance with its internal security policies. They have set up alerts for specific activities, such as unauthorized access attempts and changes to user permissions. After a month of monitoring, the security team notices an increase in alerts related to unauthorized access attempts. To address this, they decide to implement a more granular reporting strategy that includes user activity logs, access patterns, and anomaly detection. Which of the following approaches would best enhance their monitoring and reporting capabilities while ensuring compliance with regulatory requirements?

Accepted Answer

Implementing Azure Sentinel to aggregate logs and utilize machine learning for anomaly detection in user behavior.

Question 14

A company has implemented Self-Service Password Reset (SSPR) for its employees to enhance security and reduce helpdesk workload. The IT department has configured SSPR to require users to verify their identity using two out of three methods: email, SMS, and security questions. During a security audit, it was discovered that 70% of employees prefer using SMS for verification, while 20% prefer email, and the remaining 10% use security questions. If the company has 1,000 employees, how many employees are likely to use SMS for password reset verification, and what implications does this preference have for the overall security posture of the organization?

Accepted Answer

700 employees; it indicates a potential vulnerability if SMS is compromised.

Question 15

A financial services company is implementing a new data protection strategy to comply with the General Data Protection Regulation (GDPR). They need to ensure that sensitive customer data is encrypted both at rest and in transit. The IT team is considering various encryption methods and protocols. Which approach should they prioritize to ensure maximum security and compliance with GDPR requirements while also considering performance impacts?

Accepted Answer

Implementing AES-256 encryption for data at rest and using TLS 1.2 for data in transit.

Question 16

A multinational corporation is transitioning from an on-premises Active Directory (AD) environment to Microsoft 365 while maintaining some legacy systems. The IT team is tasked with ensuring that users can access both the new cloud services and the existing on-premises applications seamlessly. Which coexistence strategy should the IT team implement to facilitate this transition while minimizing disruption to users?

Accepted Answer

Hybrid Identity with Azure AD Connect

Question 17

A company is implementing Azure Active Directory (Azure AD) for identity management across its global offices. The IT team needs to ensure that users can access resources based on their roles while maintaining compliance with data protection regulations. They decide to implement Role-Based Access Control (RBAC) and Conditional Access policies. Which of the following strategies should the IT team prioritize to effectively manage user identities and access while minimizing security risks?

Accepted Answer

Implementing least privilege access by assigning users only the permissions necessary for their roles and regularly reviewing access rights.

Question 18

A financial services company is implementing a Data Loss Prevention (DLP) strategy to protect sensitive customer information, including Social Security Numbers (SSNs) and credit card details. The DLP policy is configured to monitor and restrict the sharing of this sensitive data across various channels, including email, cloud storage, and instant messaging. During a routine audit, the compliance officer discovers that the DLP system has flagged several instances of unauthorized data sharing. To enhance the DLP effectiveness, the company decides to implement a risk-based approach that prioritizes data protection based on the sensitivity of the information and the potential impact of its loss. Which of the following strategies would best align with this risk-based DLP approach?

Accepted Answer

Classifying data into categories based on sensitivity and applying stricter controls to higher-risk categories.

Question 19

A company is implementing a data governance strategy to comply with regulatory requirements and improve data retention practices. They have identified that certain types of data must be retained for a minimum of seven years due to legal obligations. The company has a mix of structured and unstructured data, including emails, documents, and databases. To ensure compliance, they decide to implement a retention policy that categorizes data into three classes: Class A (critical data), Class B (important data), and Class C (non-essential data). Class A data must be retained for 7 years, Class B for 3 years, and Class C for 1 year. If the company has 10,000 records classified as Class A, 5,000 as Class B, and 15,000 as Class C, what is the total duration in years that the company must retain all records, assuming they need to retain each class of data for its respective duration?

Accepted Answer

7 years

Question 20

A company has recently migrated to Microsoft 365 and is managing its mailboxes through Exchange Online. The IT administrator needs to ensure that the mailbox sizes are optimized for performance and compliance. The company has a policy that mandates that no mailbox should exceed 50 GB. Currently, there are three mailboxes with the following sizes: Mailbox A is 45 GB, Mailbox B is 52 GB, and Mailbox C is 48 GB. The administrator decides to implement a retention policy that automatically archives emails older than 12 months. After applying this policy, the administrator wants to calculate the new sizes of the mailboxes, assuming that each mailbox will reduce in size by 10% due to archiving. What will be the total size of the mailboxes after the retention policy is applied?

Accepted Answer

132.6 GB

Question 21

A company is planning to migrate its on-premises Active Directory to Azure Active Directory (Azure AD) to enhance its identity management capabilities. As part of this migration, the IT team is evaluating various community and documentation resources to ensure a smooth transition. Which resource would be most beneficial for understanding best practices and troubleshooting common issues during this migration process?

Accepted Answer

Microsoft Learn and the Azure AD documentation

Question 22

A company is implementing a new identity management system for its Microsoft 365 environment. The IT security team is concerned about potential security vulnerabilities associated with user authentication methods. They are considering various authentication strategies, including Multi-Factor Authentication (MFA), passwordless authentication, and traditional username/password combinations. Which authentication method is generally recognized as the most secure and effective in mitigating risks associated with unauthorized access?

Accepted Answer

Multi-Factor Authentication (MFA)

Question 23

A company has implemented a password-based authentication system for its employees. Each employee is required to create a password that is at least 12 characters long, includes at least one uppercase letter, one lowercase letter, one digit, and one special character. If an employee\'s password is randomly generated, what is the minimum number of possible unique passwords that can be created under these constraints, assuming the character set includes 26 uppercase letters, 26 lowercase letters, 10 digits, and 32 special characters?

Accepted Answer

6095000000000

Question 24

A company is implementing Microsoft 365 and wants to ensure seamless integration with OneDrive for Business. They have a team of 50 employees who frequently collaborate on documents. The IT administrator needs to configure OneDrive settings to optimize storage and sharing capabilities while adhering to compliance regulations. Which configuration should the administrator prioritize to enhance collaboration and maintain data security?

Accepted Answer

Enable sharing links with expiration dates and set a default storage quota of 1 TB per user.

Question 25

A company is migrating its on-premises email system to Microsoft 365. They have a mix of users with different licensing needs, including some who require advanced security features and others who only need basic email functionality. The IT administrator needs to ensure that the migration is seamless and that users have access to the appropriate features based on their roles. What is the best approach for managing user licenses during this migration process?

Accepted Answer

Assign licenses based on user roles and needs, ensuring that each user has the minimum required features for their job function while considering future scalability.

Question 26

A multinational corporation is implementing Azure Active Directory (Azure AD) to manage user identities across its global offices. The IT team needs to ensure that users can access resources based on their roles while maintaining compliance with data protection regulations. They decide to implement role-based access control (RBAC) and conditional access policies. Which of the following strategies should the IT team prioritize to effectively manage user identities and access while adhering to compliance requirements?

Accepted Answer

Implementing least privilege access by assigning users only the permissions necessary for their roles and regularly reviewing access rights.

Question 27

A company has recently implemented Microsoft 365 Defender to enhance its threat protection capabilities. The security team is tasked with configuring the automated investigation feature to respond to potential threats. They need to ensure that the automated investigation process can effectively analyze incidents and take appropriate actions based on the severity of the threat. If a high-severity threat is detected, the system should automatically isolate the affected device and notify the security team. What is the most effective way to configure the automated investigation settings to achieve this outcome?

Accepted Answer

Set the automated investigation to trigger on high-severity alerts and configure it to isolate devices automatically while sending notifications to the security team.

Question 28

A company has implemented a password-based authentication system for its employees to access sensitive data. Each employee is required to create a password that meets specific complexity requirements: it must be at least 12 characters long, include at least one uppercase letter, one lowercase letter, one digit, and one special character. If an employee\'s password is \"Secure123!\", what would be the potential vulnerabilities associated with this password, and how can the company enhance its password policy to mitigate these risks?

Accepted Answer

The password is strong but could be vulnerable to dictionary attacks; the company should implement multi-factor authentication (MFA) to enhance security.

Question 29

A company has recently implemented Exchange Online Protection (EOP) to enhance its email security. They are particularly concerned about the potential for phishing attacks and spam emails that could compromise sensitive information. The IT administrator wants to configure EOP to ensure that all incoming emails are scanned for malware and that phishing attempts are effectively blocked. Which of the following configurations should the administrator prioritize to achieve optimal protection against these threats?

Accepted Answer

Enable anti-phishing policies and configure safe links to protect users from malicious URLs.

Question 30

A company has recently implemented Azure Active Directory (Azure AD) for managing user identities and access. The IT administrator is reviewing the sign-in logs to identify any unusual sign-in activities. During the review, they notice that a user has multiple sign-ins from different geographic locations within a short time frame. Given that the user is based in New York, which of the following scenarios best describes the implications of this sign-in behavior, and what actions should the administrator consider taking to ensure security?

Accepted Answer

The sign-in attempts may indicate a compromised account, and the administrator should initiate a password reset and enable multi-factor authentication (MFA) for the user.

Microsoft MS-100 Microsoft 365 Identity and Services Free Practice Test — 30 Questions

A lot more is already mapped out

About the Microsoft MS-100 Microsoft 365 Identity and Services Certification