MS-100 Cheat Sheet 2026

The 30 highest-yield MS-100 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. When a new Microsoft 365 tenant is created, what is the format of the initial domain that Microsoft automatically assigns? → .onmicrosoft.com
2. An organization needs to enforce a minimum password length of 14 characters for all cloud-only Azure AD accounts. Where should this policy be configured? → Microsoft 365 admin center password policy
3. Which professional competency is most critical when an MS-100 administrator communicates a planned maintenance window to business stakeholders? → Clear communication of impact, duration, and rollback plan
4. What is the importance of data security in MS-100 digital applications? → Protecting sensitive information from unauthorized access, breaches, and loss is essential
5. Which Microsoft 365 competency involves ensuring that data loss prevention policies align with organizational regulatory requirements? → Compliance management
6. What is reflective practice in MS-100 - Microsoft 365 Identity and Services professional development? → Systematically examining experiences to gain insight and improve future practice
7. Which on-premises Active Directory attribute is used as the primary matching anchor between on-premises users and their corresponding Azure AD objects? → ms-DS-ConsistencyGuid (sourceAnchor)
8. How do MS-100 professionals build trust with clients or stakeholders? → Through consistent competence, transparency, reliability, and ethical behavior
9. What role does peer review play in MS-100 - Microsoft 365 Identity and Services practice? → It provides quality assurance and professional development through collegial evaluation
10. Which tool should be used to diagnose Azure AD Connect synchronization errors, such as objects not appearing in Azure AD? → All of the above
11. Which SharePoint Online permission level allows a user to view pages and list items but not edit them? → Read
12. Which Azure AD Identity Protection risk detection identifies sign-ins from anonymous IP addresses such as Tor browsers? → Anonymous IP address
13. Which Microsoft 365 feature allows administrators to classify and protect documents with visual markings and encryption based on content sensitivity? → Sensitivity labels
14. How should an MS-100 professional handle a situation outside their scope of competency? → Recognize limitations and refer to or consult with appropriate specialists
15. What happens to a synchronized user account in Azure AD when the corresponding on-premises Active Directory account is deleted? → The Azure AD account is soft-deleted and placed in the recycle bin for 30 days
16. What is the purpose of the IdFix tool in a hybrid Microsoft 365 deployment? → Identifying and remediating Active Directory attribute errors before synchronization
17. How should MS-100 professionals prioritize identified risks? → Based on likelihood of occurrence combined with severity of potential impact
18. What role does active listening play in MS-100 - Microsoft 365 Identity and Services practice? → It ensures accurate understanding, demonstrates respect, and improves outcomes
19. Which scenario best demonstrates the principle of least privilege in Microsoft 365 administration? → Assigning the Exchange Administrator role only to staff managing email
20. Which Microsoft 365 tool provides administrators with a unified view of service health, incidents, and advisories across all Microsoft 365 services? → Service Health Dashboard in the admin center
21. What is the benefit of standardized digital reporting in MS-100 - Microsoft 365 Identity and Services practice? → It ensures consistency, enables comparison, and facilitates regulatory compliance
22. An organization uses AD FS for federation with Azure AD. What is the primary role of the Web Application Proxy (WAP) server in this architecture? → Publishing AD FS endpoints to the internet for external authentication
23. What is Microsoft FastTrack in the context of Microsoft 365? → A Microsoft-provided benefit offering onboarding guidance for eligible customers
24. What is the primary value of case study analysis in MS-100 - Microsoft 365 Identity and Services training? → Developing critical thinking by applying theory to realistic professional scenarios
25. What is the most effective communication approach for MS-100 professionals? → Adapting communication style to the audience while maintaining accuracy and clarity
26. What is the maximum size of an Exchange Online mailbox for a Microsoft 365 E3 licensed user? → 100 GB
27. An administrator must ensure that service accounts in Microsoft 365 are not used for interactive sign-ins. Which control enforces this? → Block sign-in on the account in Azure AD
28. Which Microsoft 365 admin role provides full, unrestricted access to all administrative features and services in a tenant? → Global Administrator
29. How has digital technology transformed MS-100 - Microsoft 365 Identity and Services practice? → It has enhanced data collection, analysis, communication, and operational efficiency
30. An administrator notices that a user's account has been assigned multiple admin roles redundantly. Which professional practice should be applied? → Remove redundant roles to reduce the blast radius of a compromised account