MS-100 Quality Control & Assurance 4 — Questions and Answers
Question 1: A Microsoft 365 admin must ensure that a specific user's mailbox audit logging is enabled. Which PowerShell cmdlet verifies the current mailbox audit setting?
- Get-Mailbox -Identity user | Select AuditEnabled (Correct answer)
- Search-UnifiedAuditLog -UserIds user
- Get-AdminAuditLogConfig
- Get-MailboxAuditBypassAssociation
Correct answer: Get-Mailbox -Identity user | Select AuditEnabled
Get-Mailbox returns the AuditEnabled property for an individual mailbox, confirming whether mailbox-level audit logging is active.
Question 2: Which Microsoft 365 feature allows administrators to define minimum password requirements and enforce them across all cloud-only user accounts?
- Microsoft Entra Password Protection
- Microsoft 365 admin center password policy settings (Correct answer)
- Microsoft Entra ID Conditional Access
- Microsoft Intune compliance policies
Correct answer: Microsoft 365 admin center password policy settings
Password policy settings in the Microsoft 365 admin center (under Security & privacy) control expiration and complexity for cloud-only accounts in the tenant.
Question 3: An admin wants to check whether all users have registered for multi-factor authentication. Which report provides this information?
- Sign-in logs in Microsoft Entra
- Authentication methods activity report in Microsoft Entra (Correct answer)
- Microsoft 365 usage reports
- Compliance Manager assessment
Correct answer: Authentication methods activity report in Microsoft Entra
The Authentication methods activity report in Microsoft Entra ID shows per-user MFA registration status and which methods are registered.
Question 4: During a quality audit, a reviewer finds that some Microsoft 365 groups have no owners. Why is this a risk?
- Ownerless groups cannot send email
- No one can approve membership requests or manage group lifecycle (Correct answer)
- The groups will be automatically deleted within 24 hours
- External sharing is automatically enabled for ownerless groups
Correct answer: No one can approve membership requests or manage group lifecycle
Without an owner, membership requests cannot be approved, lifecycle policies lack an approver, and the group may persist indefinitely with no governance accountability.
Question 5: A company wants to enforce a review of guest user access every 90 days. Which Microsoft Entra feature supports this requirement?
- Conditional Access policies
- Microsoft Entra Access Reviews (Correct answer)
- Microsoft Entra Privileged Identity Management
- Microsoft Entra Identity Governance entitlement management
Correct answer: Microsoft Entra Access Reviews
Microsoft Entra Access Reviews allows administrators to schedule periodic reviews of guest (or member) access to groups, applications, or roles.
Question 6: Which tool in the Microsoft 365 admin center lets an administrator check whether a specific message was delivered to a recipient's mailbox?
- Audit log search
- Message trace (Correct answer)
- Delivery reports
- Mail flow dashboard
Correct answer: Message trace
Message trace in the Exchange admin center allows administrators to trace the path of an email message and confirm its delivery status or identify delivery failures.
Question 7: A quality assurance review finds that some shared mailboxes have active user licenses assigned unnecessarily. What is the best corrective action?
- Convert them to distribution groups
- Remove the direct user licenses from the shared mailboxes (Correct answer)
- Delete and recreate the mailboxes without licenses
- Apply sensitivity labels to the mailboxes
Correct answer: Remove the direct user licenses from the shared mailboxes
Shared mailboxes do not require a direct user license for up to 50 GB; removing unnecessary licenses reduces cost without affecting mailbox functionality.
MS-100 Quality Control & Assurance 4
A Microsoft 365 admin must ensure that a specific user's mailbox audit logging is enabled.
Which PowerShell cmdlet verifies the current mailbox audit setting?