Mixed Deck — All MS-100 Topics Flashcards

Which hybrid join type registers a device with both on-premises AD and Azure AD, enabling Conditional Access policies requiring a domain-joined device?

Answer: Hybrid Azure AD joined

Hybrid Azure AD joined devices are joined to both on-premises Active Directory and registered in Azure AD, satisfying Conditional Access policies for compliant or domain-joined devices.

How do continuing education requirements benefit MS-100 certified professionals?

Answer: They ensure professionals stay current with evolving industry practices and knowledge

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. They ensure professionals stay current with evolving industry practices and knowledge represents the professional standard for professional standards in the MS-100 certification framework.

A Global Administrator wants to delegate the ability to reset user passwords without granting full admin rights. Which role should be assigned?

Answer: Password Administrator

The Password Administrator role allows resetting passwords for non-administrator users without the broader permissions of User Administrator.

Contoso.com is an on-premises Active Directory domain on your network. There are 1,000 Windows 10 devices on the domain. You deploy Windows Defender Advanced Threat Protection (ATP) for 10 test devices as a proof of concept (PoC). You configure Windows Defender ATP-related data to be stored in the United States during the onboarding process. In Europe, you want to connect all devices to Windows Defender ATP data. What should you start with?

Answer: Offboard the test devices

The data storage location for Microsoft Defender for Endpoint (formerly Windows Defender ATP) is chosen during the initial onboarding of the tenant. To change this location from the United States to Europe, all currently onboarded devices must first be offboarded from the service. After offboarding, you can then re-onboard the devices, and during this process, you will be prompted to select the desired new data storage location for your organization.

Which DNS record type is primarily used to verify custom domain ownership when adding a domain to Microsoft 365?

Answer: TXT record

Microsoft requires a TXT record to be added to the domain's DNS zone as proof of ownership before the domain can be used in Microsoft 365.

What is Microsoft FastTrack in the context of Microsoft 365?

Answer: A Microsoft-provided benefit offering onboarding guidance for eligible customers

FastTrack is a Microsoft benefit that provides eligible customers with guidance, best practices, and resources to help successfully deploy and adopt Microsoft 365 services.

How do MS-100 professionals evaluate research quality?

Answer: By assessing methodology, sample size, peer review status, and relevance to practice

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. By assessing methodology, sample size, peer review status, and relevance to practice represents the professional standard for research in the MS-100 certification framework.

How has digital technology transformed MS-100 - Microsoft 365 Identity and Services practice?

Answer: It has enhanced data collection, analysis, communication, and operational efficiency

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. It has enhanced data collection, analysis, communication, and operational efficiency represents the professional standard for technology in the MS-100 certification framework.

What is the value of written documentation in MS-100 professional communication?

Answer: It creates permanent records, ensures clarity, and provides legal protection

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. It creates permanent records, ensures clarity, and provides legal protection represents the professional standard for communication in the MS-100 certification framework.

How do MS-100 professionals maintain digital competency?

Answer: Through ongoing training, practice with new tools, and staying current with technological advances

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. Through ongoing training, practice with new tools, and staying current with technological advances represents the professional standard for technology in the MS-100 certification framework.

Which Microsoft 365 admin role provides full, unrestricted access to all administrative features and services in a tenant?

Answer: Global Administrator

The Global Administrator role has unrestricted access to all administrative features across Microsoft 365 and Azure AD services.

What is a risk mitigation strategy in MS-100 - Microsoft 365 Identity and Services practice?

Answer: Implementing controls that reduce the likelihood or impact of identified risks

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. Implementing controls that reduce the likelihood or impact of identified risks represents the professional standard for risk management in the MS-100 certification framework.

Which Microsoft 365 competency involves ensuring that data loss prevention policies align with organizational regulatory requirements?

Answer: Compliance management

Compliance management in Microsoft 365 encompasses aligning DLP policies, sensitivity labels, and retention policies with regulatory standards.

What is the default retention period for deleted items in a Microsoft 365 Exchange Online mailbox?

Answer: 30 days

Deleted items in Exchange Online are retained in the Deleted Items folder and Recoverable Items folder for 30 days by default before permanent deletion.

A Microsoft 365 tenant administrator wants to see which apps in the organization are accessing Microsoft 365 data. Which tool provides this visibility?

Answer: Cloud App Security (Defender for Cloud Apps)

Microsoft Defender for Cloud Apps (formerly Cloud App Security) provides app discovery and visibility into which applications are accessing Microsoft 365 data.

Which Microsoft 365 feature allows an IT admin to create and enforce acceptable use policies for end users?

Answer: Azure AD Terms of Use

Azure AD Terms of Use requires users to accept a policy before accessing applications, enforcing acceptable use standards.

How do MS-100 professionals contribute to advancing their field?

Answer: By conducting research, sharing outcomes, mentoring others, and participating in professional forums

This is fundamental to MS-100 - Microsoft 365 Identity and Services practice. By conducting research, sharing outcomes, mentoring others, and participating in professional forums represents the professional standard for research in the MS-100 certification framework.

An admin is setting up Microsoft 365 for a new organization and must verify the custom domain before it can be used for email. What record type is typically used for domain verification?

Answer: TXT record

Microsoft 365 typically uses a TXT record added to the domain's DNS zone to verify domain ownership.

What happens to a synchronized user account in Azure AD when the corresponding on-premises Active Directory account is deleted?

Answer: The Azure AD account is soft-deleted and placed in the recycle bin for 30 days

When an on-premises AD account is deleted, Azure AD Connect exports the deletion to Azure AD, which soft-deletes the account and retains it in the recycle bin for 30 days.

What is the maximum number of objects that can be synchronized to a single Azure AD tenant using Azure AD Connect?

Answer: 500,000

A single Azure AD tenant supports up to 500,000 objects when synchronized using Azure AD Connect from an on-premises directory.