MS-100 Case Studies & Practical Application 2

Question 1

Contoso has 5,000 on-premises AD users and wants to sync them to Azure AD while keeping password hash synchronization. Some users report they cannot sign in to Microsoft 365 after the initial sync. What is the most likely cause?

Accepted Answer

UPN suffixes in on-premises AD do not match a verified domain in Azure AD

Answer

When on-premises UPN suffixes are not verified domains in Azure AD, affected accounts cannot sign in because their UPN cannot be resolved.

Question 2

Fabrikam is migrating from Exchange on-premises to Exchange Online. After migration, users in the Chicago office can send internal emails but cannot reach external recipients. What should you check first?

Accepted Answer

MX records for the fabrikam.com domain

Answer

External email delivery depends on correct MX records pointing to Exchange Online; if MX records still point on-premises, outbound mail to external recipients will fail.

Question 3

A company wants to enforce MFA only when users sign in from outside the corporate network. Which Azure AD feature enables this with the least administrative overhead?

Accepted Answer

Conditional Access policy with a named location condition

Answer

A Conditional Access policy with a named location condition can require MFA only when users authenticate from outside defined trusted IP ranges.

Question 4

Northwind Traders acquires a subsidiary running its own Azure AD tenant. Employees from the subsidiary need read-only access to SharePoint Online sites in the parent tenant without creating new accounts. What should you configure?

Accepted Answer

Azure AD B2B collaboration with guest accounts

Answer

Azure AD B2B collaboration allows external users from another tenant to access resources as guests without creating duplicate internal accounts.

Question 5

An organization uses Microsoft 365 and needs to ensure that a former employee's mailbox data is retained for 7 years after departure for compliance reasons. What is the correct approach?

Accepted Answer

Apply a Microsoft 365 retention policy with a 7-year retain-then-delete action

Answer

A Microsoft 365 retention policy with a 7-year retain-then-delete action ensures compliant automated retention without manual intervention.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Case Studies & Practical Application 2