MS-100 Professional Standards & Competencies 5

Question 1

Which scenario best demonstrates the principle of least privilege in Microsoft 365 administration?

Accepted Answer

Assigning the Exchange Administrator role only to staff managing email

Answer

Least privilege means assigning only the specific role required for a task, such as Exchange Administrator for email management.

Question 2

A Microsoft 365 admin must document all changes made to tenant configuration for a compliance audit. Which built-in capability supports this requirement?

Accepted Answer

Microsoft 365 Unified Audit Log

Answer

The Unified Audit Log captures all configuration changes and admin activities across Microsoft 365 services for compliance documentation.

Question 3

When planning a Microsoft 365 tenant configuration, which professional standard requires that production changes be tested in a non-production environment first?

Accepted Answer

Change management process

Answer

Change management best practices require testing configuration changes in a test or staging tenant before applying them to production.

Question 4

An administrator notices that a user's account has been assigned multiple admin roles redundantly. Which professional practice should be applied?

Accepted Answer

Remove redundant roles to reduce the blast radius of a compromised account

Answer

Removing unnecessary role assignments reduces the potential damage if the account is compromised, following least-privilege principles.

Question 5

Which Microsoft 365 admin center report helps an administrator identify inactive users who still hold active licenses?

Accepted Answer

Microsoft 365 Usage reports > User activity

Answer

Microsoft 365 Usage reports show per-user activity across services, helping identify inactive users consuming licenses.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Professional Standards & Competencies 5