MS-100 Azure AD Identity Management 2

Question 1

Which Azure AD license is required to use Azure AD Privileged Identity Management (PIM)?

Accepted Answer

Azure AD Premium P2

Answer

Azure AD PIM requires Azure AD Premium P2 licensing for each user who is managed or uses PIM features.

Question 2

An administrator configures a Conditional Access policy with 'Grant access - Require compliant device'. What happens when a user signs in from a non-enrolled device?

Accepted Answer

Access is blocked

Answer

When device compliance is required and the device is not Intune-enrolled or compliant, the Conditional Access policy blocks access entirely.

Question 3

What Azure AD feature enables you to create automatic group membership based on user attribute values such as department or job title?

Accepted Answer

Dynamic groups

Answer

Dynamic groups use membership rules based on user attributes like department or job title to automatically add or remove members.

Question 4

Which type of Azure AD group can be assigned Microsoft 365 licenses directly?

Accepted Answer

Both Security and Microsoft 365 groups

Answer

Both Security groups and Microsoft 365 groups support group-based license assignment in Azure AD.

Question 5

An organization needs to enforce a minimum password length of 14 characters for all cloud-only Azure AD accounts. Where should this policy be configured?

Accepted Answer

Microsoft 365 admin center password policy

Answer

Cloud-only Azure AD account password policies (minimum length, complexity) are configured in the Microsoft 365 admin center under Security settings.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Azure AD Identity Management 2