Professional Standards & Competencies Flashcards

Which scenario best demonstrates the principle of least privilege in Microsoft 365 administration?

Answer: Assigning the Exchange Administrator role only to staff managing email

Least privilege means assigning only the specific role required for a task, such as Exchange Administrator for email management.

A Microsoft 365 admin must document all changes made to tenant configuration for a compliance audit. Which built-in capability supports this requirement?

Answer: Microsoft 365 Unified Audit Log

The Unified Audit Log captures all configuration changes and admin activities across Microsoft 365 services for compliance documentation.

When planning a Microsoft 365 tenant configuration, which professional standard requires that production changes be tested in a non-production environment first?

Answer: Change management process

Change management best practices require testing configuration changes in a test or staging tenant before applying them to production.

An administrator notices that a user's account has been assigned multiple admin roles redundantly. Which professional practice should be applied?

Answer: Remove redundant roles to reduce the blast radius of a compromised account

Removing unnecessary role assignments reduces the potential damage if the account is compromised, following least-privilege principles.

Which Microsoft 365 admin center report helps an administrator identify inactive users who still hold active licenses?

Answer: Microsoft 365 Usage reports > User activity

Microsoft 365 Usage reports show per-user activity across services, helping identify inactive users consuming licenses.

An organization wants to ensure that when an employee leaves, their Microsoft 365 access is revoked promptly. Which process reflects this professional standard?

Answer: Integrate HR offboarding with Azure AD user lifecycle management

Integrating HR offboarding with Azure AD lifecycle management ensures immediate access revocation when an employee departs.

Which action should an MS-100 administrator take after completing a significant tenant configuration change during a maintenance window?

Answer: Validate the change, document the result, and update the change log

Post-change validation, documentation, and change log updates are essential professional steps to confirm success and maintain records.