MS-100 Case Studies & Practical Application 5

Question 1

Bellows College is planning to move from AD FS to Azure AD for authentication. They want to maintain seamless SSO for domain-joined devices without requiring ADFS. What should they configure?

Accepted Answer

Azure AD Password Hash Sync with Seamless SSO

Answer

Password Hash Sync combined with Azure AD Seamless SSO provides transparent authentication for domain-joined devices without requiring ADFS infrastructure.

Question 2

A company's help desk reports that users frequently lock out their accounts by entering the wrong password on their mobile devices after a password change. Which feature would most directly reduce these incidents?

Accepted Answer

Microsoft Authenticator passwordless sign-in

Answer

Passwordless sign-in with Microsoft Authenticator eliminates password entry entirely on mobile devices, removing the root cause of lockouts from mistyped passwords.

Question 3

Fourth Coffee needs to ensure that when a Microsoft 365 group is deleted, its associated SharePoint site, mailbox, and Teams workspace are retained for 30 days before permanent deletion. What governs this behavior?

Accepted Answer

The Microsoft 365 Groups soft-delete and restore window (30-day default)

Answer

Microsoft 365 Groups have a built-in 30-day soft-delete period during which the group and all associated workloads can be restored before permanent deletion.

Question 4

An enterprise runs both Exchange Online and Exchange on-premises in a hybrid config. Users report that when they open a shared mailbox located on-premises from Outlook connected to Exchange Online, they receive an error. What is the most likely missing configuration?

Accepted Answer

The hybrid configuration does not include OAuth (Modern Authentication) between Exchange Online and on-premises

Answer

Cross-premises mailbox access in hybrid Exchange requires OAuth Modern Authentication to be configured; without it, Outlook cannot authenticate to the on-premises endpoint from Exchange Online.

Question 5

A company wants to track all changes made to Azure AD role assignments over the past 90 days for a compliance audit. Where should the auditor look?

Accepted Answer

Azure AD Audit logs filtered by the 'RoleManagement' category

Answer

Azure AD Audit logs with the RoleManagement category record all role assignment additions and removals, and can be exported for 90-day compliance review.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Case Studies & Practical Application 5