MS-100 Professional Standards & Competencies 3

Question 1

Which Microsoft 365 admin center section should an admin use to purchase and assign additional licenses to users?

Accepted Answer

Billing > Purchase services

Answer

The Billing > Purchase services section in the Microsoft 365 admin center is used to buy and manage subscriptions and licenses.

Question 2

An administrator must ensure that service accounts in Microsoft 365 are not used for interactive sign-ins. Which control enforces this?

Accepted Answer

Block sign-in on the account in Azure AD

Answer

Blocking sign-in on a service account in Azure AD prevents interactive logins while allowing the account to function for automated tasks.

Question 3

What is the recommended Microsoft practice for managing emergency 'break-glass' accounts in Microsoft 365?

Accepted Answer

Exclude them from Conditional Access and MFA, monitor via alerts

Answer

Break-glass accounts should be excluded from CA/MFA policies to ensure emergency access, and sign-in activity should be monitored with alerts.

Question 4

Which Microsoft 365 tool provides a centralized view of an organization's security posture and recommends improvement actions?

Accepted Answer

Microsoft Secure Score

Answer

Microsoft Secure Score measures an organization's security posture and provides prioritized recommendations to improve it.

Question 5

An admin needs to ensure that all Microsoft 365 admin role assignments are reviewed periodically. Which Azure AD feature supports this?

Accepted Answer

Azure AD Access Reviews

Answer

Azure AD Access Reviews allow organizations to periodically certify that role assignments are still appropriate.

MS-100 - Microsoft 365 Identity and Services Practice Test