MS-100 Quality Control & Assurance 3 — Questions and Answers
Question 1: A tenant administrator wants to ensure service reliability by monitoring Microsoft 365 incidents. Where is the Service Health dashboard located?
- Azure portal
- Microsoft 365 admin center (Correct answer)
- Microsoft Entra admin center
- Microsoft Purview portal
Correct answer: Microsoft 365 admin center
The Service Health dashboard under Health in the Microsoft 365 admin center shows current incidents, advisories, and planned maintenance for all Microsoft 365 services.
Question 2: Which feature allows a Microsoft 365 administrator to subscribe to email notifications when a specific service experiences an outage?
- Azure Service Bus
- Message Center preferences
- Service Health email notifications (Correct answer)
- Microsoft 365 alert policies
Correct answer: Service Health email notifications
Service Health email notifications can be configured to send alerts to specified email addresses whenever Microsoft posts an incident or advisory for subscribed services.
Question 3: A compliance officer needs to review which administrators performed bulk deletions in Exchange Online last week. Which audit record type should they filter by?
- AzureActiveDirectory
- ExchangeAdmin (Correct answer)
- SecurityComplianceCenter
- MicrosoftTeams
Correct answer: ExchangeAdmin
The ExchangeAdmin record type in the Unified Audit Log captures administrative actions in Exchange Online, including bulk mailbox or folder deletions.
Question 4: What is the purpose of Compliance Manager's improvement actions in Microsoft Purview?
- Automatically remediate misconfigurations in the tenant
- Provide step-by-step tasks that raise an organization's compliance score (Correct answer)
- Block non-compliant users from signing in
- Generate legal hold notices for custodians
Correct answer: Provide step-by-step tasks that raise an organization's compliance score
Improvement actions are specific configuration or process tasks that, when completed, increase the organization's compliance score in Compliance Manager.
Question 5: An organization must demonstrate that its Microsoft 365 tenant meets ISO 27001 requirements. Which resource provides Microsoft's audit reports and certifications for this purpose?
- Microsoft Secure Score
- Service Trust Portal (Correct answer)
- Microsoft Defender for Cloud
- Microsoft 365 Message Center
Correct answer: Service Trust Portal
The Service Trust Portal (servicetrust.microsoft.com) hosts Microsoft's third-party audit reports, certifications, and compliance documentation including ISO 27001.
Question 6: An administrator runs a report and finds that Microsoft Secure Score dropped by 15 points. Which action is most appropriate?
- Immediately reset all user passwords
- Review the score breakdown to identify which controls regressed (Correct answer)
- Disable all third-party app integrations
- Enable Conditional Access for all users
Correct answer: Review the score breakdown to identify which controls regressed
A drop in Secure Score should trigger a review of the score breakdown to find which specific recommended controls are no longer in place before taking corrective action.
Question 7: When performing a quality review of Microsoft 365 tenant security, which Secure Score category covers identity-related controls?
- Data
- Device
- Identity (Correct answer)
- Apps
Correct answer: Identity
Microsoft Secure Score organizes recommendations into Identity, Device, and Apps/Data categories; MFA, Conditional Access, and privileged account controls fall under Identity.
MS-100 Quality Control & Assurance 3
A tenant administrator wants to ensure service reliability by monitoring Microsoft 365 incidents.
Where is the Service Health dashboard located?