Valid MS-100 Exam Dumps are Your best Choice to Pass

1. You need to Add the custom domain name* to Office 36S K> support the planned changes as quickly as possible.

What should you create to verify the domain names successfully?

2. You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently, App1 can read user profile information.

You need to allow App1 to read the user's calendar.

Solution: Perform a POST request against https://graph.microsoft.com/v1.0/me/events.

Does this meet the goal?

3. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]

Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to

reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525

Your organization recently partnered with another organization named Fabrikam, Inc.

You plan to provide a Microsoft 365 license to an external user named [email protected], and then to share documents with the user.

You need to invite [email protected] to access your organization.

4. Your network contains two on-premises Active Directory forests named contoso.com and fabrikam.com. Fabrikam.com contains one domain and five domain controllers.

Contoso.com contains the domains shown in the following table.





You need to sync all the users from both the forests to a single Azure Active Directory (Azure AD) tenant by using Azure AD Connect.

What is the minimum number of Azure AD Connect sync servers required?

5. You need to ensure that users can initiate private conversations with HRBot. The solution must meet the technical requirements for HRApp.

How should you configure the HRApp manifest?

6. HOTSPOT

You need to meet the application requirement for the Office 365 ProPlus applications.

You create a XML file that contains the following settings.





Use the drop-down menus to select the choice that complete each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

7. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You need to modify Christie Cline to meet the following requirements:

✑ Christie Cline must be able to view the service dashboard and the Microsoft Office 365 Message center.

✑ Christie Cline must be able to create Microsoft support requests.

✑ The solution must use the principle of least privilege.

8. You have a Microsoft 365 E5 subscription that uses Microsoft Teams and SharePoint Online.

You create a team and a SharePoint Online site for a new project named Project1.

You need to manage access to the team and the site.

The solution must meet the following requirements:

• Members of Project1 must be able to control who has access to the team and the site.

• Only users in the subscription must be ab*e to request access to the team and the site.

• Access to the team and the site must be removed after 12 months.

• Access to the team and the site must be reviewed every month.

What should you create first?

9. HOTSPOT

Your network contains an on-premises Active Directory domain.

You have a Microsoft 365 E5 subscription.

You plan to implement directory synchronization.

You need to identify potential synchronization issues for the domain. The solution must use the principle of least privilege

What should you use? To answer, select the appropriate options in the answer area.

10. HOTSPOT

You are securing a wet API by using the Microsoft identity Platform.

The web API must meet the following requirements:

• Authenticated Azure Active Directory (Azure AD) users must be able to retrieve user information from Azure AD.

• Authenticated Azure AD users must be able to manage Microsoft 365 groups.

You need to grant permissions for the web API. The solution must use the principle of least privilege.

What should you grant? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

11. Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use the View service requests option in the Microsoft 365 admin center.

Does this meet the goal?

12. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.





Azure AD Connect has the following settings:

✑ Password Hash Sync: Enabled

✑ Password writeback: Enabled

✑ Group writeback: Enabled

You need to add User2 to Group 2.

Solution: From Azure PowerShell, you run the Set-AzureADGroup cmdlet.

Does this meet the goal?

13. HOTSPOT

Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following two exhibits.









You create a user named User1 in Active Directory as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

14. Your company has an Azure AD tenant named contoso.com and a Microsoft 365 subscription.

All users use Windows 10 devices to access Microsoft Office 365 apps.

All the devices are in a workgroup.

You plan to implement password less sign-in to contoso.com.

You need to recommend changes to the infrastructure for the planned implementation.

What should you include in the recommendation?

15. HOTSPOT

Your network contains an on-premises Active Directory forest named contoso.com.

The forest contains the following domains:

✑ Contoso.com

✑ East.contoso.com

The forest contains the users shown in the following table.





The forest syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

16. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to

navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You plan to create 1,000 users in your Microsoft 365 subscription.

You need to ensure that all the users can use the @contoso.com suffix in their username.

Another administrator will perform the required information to your DNS zone to complete the operation.

17. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. The solution contains two servers that have an Authentication Agent installed and password hash synchronization configured.

Does this meet the goal?

18. HOTSPOT

You have a bot named SupporrBot that is registered to the Microsoft Bot Framework and deployed to the Azure Bot Service.

The bot is configured as shown in the following table.





SupportBot provides responses to user queries in Microsoft Teams conversations.

You need to create an app manifest to deploy SupportBot to Microsoft Teams.

How should you complete the manifest? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.

19. Your Network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Anne Active Directory (Azure AD) tenant named.contoso.onmicrosoft.com.

You plan to implement pass- through authentication.

You need to prepare the environment for the planned implementation of pass-through authentication.

Which three actions should you perform? Each correct answer presents pan of the solution. NOTE: Each correct selection is worth one point.

20. You have a Microsoft 565 subscription.

You plan to use Productivity Score and need to ensure that it can obtain device and software metrics.

What should you do?

21. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]

Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to ensure that all the users in your organization are prompted to change their password every 60 days. The solution must ensure that the users are reminded that their password must be changed 10 days before the required change.

To answer, sign in to the Microsoft 365 portal.

22. You have a Microsoft 365 subscription that contains the users shown in the following table.





You plan to use Exchange Online to manage email for a DNS domain.

An administrator adds the DNS domain to the subscription.

The DNS domain has a status of incomplete setup.

You need to identify which user can complete the setup of the DNS domain. The solution must use the principle of least privilege.

Which user should you identify?

23. You have a DNS zone named contoso.com that contains the following records.





You purchase a Microsoft 365 subscription.

You plan to migrate mailboxes to Microsoft Exchange Online.

You need to configure Sender Policy Framework (SPF) to support Exchange Online.

What should you do?

24. 1. Topic 1, Contoso, Ltd



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.



The offices have the users and devices shown in the following table.





Contoso recently purchased a Microsoft 365 E5 subscription.



Existing Environment

The network contains an Active directory forest named contoso.com and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You recently configured the forest to sync to the Azure AD tenant.

You add and then verify adatum.com as an additional domain name.

All servers run Windows Server 2016.

All desktop computers and laptops run Windows 10 Enterprise and are joined to contoso.com.

All the mobile devices in the Montreal and Seattle offices run Android. All the mobile devices in the New York office run iOS.



Contoso has the users shown in the following table.







Contoso has the groups shown in the following table.







Microsoft Office 365 licenses are assigned only to Group2.

The network also contains external users from a vendor company who have Microsoft accounts that use a suffix of @outlook.com.



Requirements

Planned Changes

Contoso plans to provide email addresses for all the users in the following domains:

✑ East.adatum.com

✑ Contoso.adatum.com

✑ Humongousinsurance.com



Technical Requirements

Contoso identifies the following technical requirements:

✑ All new users must be assigned Office 365 licenses automatically.

✑ The principle of least privilege must be used whenever possible.



Security Requirements

Contoso identifies the following security requirements:

✑ Vendors must be able to authenticate by using their Microsoft account when accessing Contoso resources.

✑ User2 must be able to view reports and schedule the email delivery of security and compliance reports.

✑ The members of Group1 must be required to answer a security question before changing their password.

✑ User3 must be able to manage Office 365 connectors.

✑ User4 must be able to reset User3 password.



HOTSPOT

You need to meet the security requirements for User3. The solution must meet the technical requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

25. HOTSPOT

Your company has a Microsoft 365 subscription that contains the following domains:

Contoso.onmicrosoft.com

Contoso.com

You plan to add the following domains to Microsoft 365 and to use them with Exchange Online:

✑ Sub1.contoso.onmicrosoft.com

✑ Sub2.contoso.com

✑ Fabrikam.com

You need to identify the minimum number of DNS records that must be added for Exchange Online to receive inbound email messages for the three domains.

How many DNS records should you add? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

26. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant

Solution: You review the Product Feedback in the Microsoft 365 admin center

Does this meet the goal?

27. HOTSPOT

You have a new Microsoft 365 subscription.

A user named User1 has a mailbox in Microsoft Exchange Online.

You need to log any changes to the mailbox folder permissions of User1.

Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

28. You are developing a Microsoft Office Add-in for Microsoft Word.

Which Office Ul element can contain commands from the add-in?

29. You need to recommend which type of Office Add-in must be used for SalesApp.

What should you recommend?

30. You need to meet the security requirement for Group1.

What should you do?

31. HOTSPOT

You have a Microsoft 365 subscription that contains the users shown in the following table.





You have the named locations shown in the following table.





You create a conditional access policy that has the following configurations:

Users and groups:

✑ Include: Group1

✑ Exclude: Group2

Cloud apps: Include all cloud apps

Conditions:

✑ Include: Any location

✑ Exclude: Montreal

Access control: Grant access, Require multi-factor authentication

User1 is on the multi-factor authentication (MFA) blocked users list.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

32. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You have three applications App1, App2, App3. The Apps use files that have the same file extensions.

Your company uses Windows Information Protection (WIP).

WIP has the following configurations:

✑ Windows Information Protection mode: Silent

✑ Protected apps: App1

✑ Exempt apps: App2

From App1, you create a file named File1.

What is the effect of the configurations? To answer, select the appropriate options in the answer area.

33. HOTSPOT

You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

In the subscription, an administrator adds two custom domains named sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com and the objects shown in the following table.





You plan to delete sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com.

Which objects must you delete or modify manually before you can delete the domains? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named

contoso.com.

A temporary employee at your company uses an email address of [email protected].

You need to ensure that the temporary employee can sign in to contoso.com by using the [email protected] account.

What should you do?

35. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Azure Active Directory admin center, you create a trusted location and a conditional access policy.

Does this meet the goal?

36. Your company has a main office and three new branch offices.

The company has a Microsoft 365 subscription.

From the Microsoft 365 admin center, you open Microsoft 365 network connectivity

You need to configure the prerequisites for enabling Microsoft 365 network connectivity.

What should you do first?

37. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.

You suspect that an imposter is signing in to Azure AD by using the credentials of User1.

You need to ensure that an administrator named Admin1 can view all the sign in details of User 1 from the past 24 hours.

To which three roles should you add Admin1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

38. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You hire a new global administrator named Irvin Sayers to manage your Microsoft 365 tenant.

You need to modify Irvin Sayers to meet the following requirements:

✑ Uses at least two methods of user authentication

✑ Has the highest Microsoft Office 365 administrative privileges

39. You have a Microsoft 365 E5 subscription. You plan to use supervised chat in Microsoft Teams. You need to configure chat permission roles.

Which policy type should you use?

40. HOTSPOT

Your company has 500 client computers that run Windows 10.

You plan to deploy Microsoft Office 365 ProPlus to all the computers.

You create the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

41. You need to meet the security requirement for the vendors.

What should you do?

42. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to

reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



Your organization has an office in Seattle.

You plan to create 100 users who will work in the Seattle office. The city attribute for all the users will be Seattle.

You need to create a group named Group1 that will automatically contain all the Seattle office users.

43. You have a Microsoft 365 subscription that contains a Microsoft Azure Directory (Azure AD) tenant Contoso.com. The tenant includes a user named user1.

You enable Azure AD Identity protection.

You need to ensure that User1 can review the list in Azure AD identity protection of users flagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

44. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.

What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

45. Your company has a Microsoft Azure Active Directory (Azure AD) directory tenant named contoso.onmicrosoft.com.

All users have client computers that run Windows 10 Pro and are joined to Azure AD.

The company purchases a Microsoft 365 E3 subscription.

You need to upgrade all the computers to Windows 10 Enterprise. The solution must minimize administrative effort.

You assign licenses from the Microsoft 365 admin center.

What should you do next?

46. Which role should you assign to User1?

47. HOTSPOT

You need to recommend the development environment and tools for the redesign of the research department’s SharePoint Online sites.

What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

48. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to

navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



Your company has a web application named App1.

The company plans to publish App1 by using a URL of https://app1.contoso.com.

You need to register App1 to your Microsoft Office 365 tenant.

49. You have a Microsoft 365 tenant that contains Microsoft Exchange Online.

You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant.

You need to ensure that the calendar of every user is available to the users in adatum.com immediately.

What should you do?

50. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You need to create a group named Group2. Users who are added to Group2 must be licensed automatically for Microsoft Offline 365.

51. You are developing a new Microsoft Teams app that will contain the following functionality:

• Start a new chat

• Prompt users to install an app.

• Make a Microsoft Graph API call.

• Trigger a search-based command.

Which two functionalities can be implemented by using a deep link? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

52. You have a Microsoft 365 E5 subscription that uses Microsoft Intune.

You need to access service health alerts from a mobile phone.

What should you use?

53. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.





Azure AD Connect has the following settings:

✑ Password Hash Sync: Enabled

✑ Password writeback: Enabled

✑ Group writeback: Enabled

You need to add User2 to Group 2.

Solution: You use the Security & Compliance admin center.

Does this meet the goal?

54. You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.





You plan to provide access to an on-premises app named App1 by using Azure AD Application Proxy. App1 will be managed by User4.

You need to identify which user can install the Application Proxy connector.

Which user should you identify?

55. HOTSPOT

You have a document in Microsoft OneDrive that is encrypted by using Microsoft Azure Information Protection as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

56. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s)

and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]

Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to add Adele Vance to a group named Managers. The solution must ensure that you can grant permissions to Managers.

To answer, sign in to the Microsoft 365 portal.

57. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must

complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]

Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525

You plan to invite several guest users to access the resources in your organization.

You need to ensure that only guests who have an email address that uses the @contoso.com suffix can connect to the resources in your Microsoft 365 tenant.

58. HOTSPOT

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.





You need to identify which users can perform the following administrative tasks:

✑ Reset the password of User4.

✑ Modify the value for the manager attribute of User4.

Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

59. HOTSPOT

You have a data loss prevention (DLP) policy.

You need to increase the likelihood that the DLP policy will apply to data that contains medical terms from the International Classification of Diseases (ICD-9-CM). The solution must minimize the number of false positives.

Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

60. HOTSPOT

You have retention policies in Microsoft 365 as shown in the following table.





Policy1 is configured as shown in the Policy1 exhibit. (Click the Policy1 tab.)

Policy1





Policy1 is configured as shown in the Policy2 exhibit. (Click the Policy2 tab.)

Policy2





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

61. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]

Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





Your organization recently purchased a projector that can be moved easily between conference rooms.

You need to ensure that any user in the organization can add the projector to a Microsoft Outlook meeting request. The solution must ensure that a user named Lee Gu must approve all meeting requests.

To answer, sign in to the Microsoft 365 portal.

62. HOTSPOT

You have a Microsoft 365 subscription.

From the Microsoft 365 admin center, you open the Microsoft 365 Apps usage report as shown in the following exhibit.





You need ensure that the report meets the following requirements:

• The Username column must display the actual name of each user.

• Usage of the Microsoft Teams mobile app must be displayed.

What should you modify for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

63. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]

Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525

Alex Wilber must be able to reset the password of each user in your organization. The solution must prevent Alex Wilber from modifying the password of global administrators.

64. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.





Group2 is a member of Group1.

You assign a Microsoft Office 365 Enterprise E3 license to Group1.

You need to identity how many Office 365 E3 licenses are assigned.

What should you identify?

65. HOTSPOT

You have a Microsoft SharePoint Online site and an on-premises file server.

The site contains the files shown in the following table.





The file server contains the files shown in the following table.





You migrate D:Folder1 and D:Folder2 to the Documents library by using the SharePoint Migration Tool as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

66. Your company has three main offices and one branch office. The branch office is used for research.

The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

What should you include in the recommendation?

67. You have a Microsoft 365 subscription.

You view the service advisories shown in the following exhibit.





You need to ensure that users who administer Microsoft SharePoint Online can view the advisories to investigate health issues.

Which role should you assign to the users?

68. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory forest named contoso.com.

The forest contains the following domains:

✑ Contoso.com

✑ East.contoso.com

An Azure AD Connect server is deployed to contoso.com. Azure AD Connect syncs to an Azure Active Directory (Azure AD) tenant.

You deploy a new domain named west.contoso.com to the forest.

You need to ensure that west.contoso.com syncs to the Azure AD tenant.

Solution: You install a new Azure AD Connect server in west.contoso.com and set AD Connect to active mode.

Does this meet the goal?

69. What should you add to a SharePoint Framework 5PFx) solution to ensure that the solution can be used as a Microsoft Teams tab?

70. Your network contain*, an on-premises Active Directory forest.

You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.

You need to recommend an authentication strategy that meets the following requirements:

• Allows users to sign in by using smart card-based certificates

• Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?

71. HOTSPOT

You work at a company named Contoso, Ltd.

Contoso has a Microsoft 365 subscription that is configured to use the DNS domains shown in the following table.





Contoso purchases a company named Fabrikam, Inc.

Contoso plans to add the following domains to the Microsoft 365 subscription:

✑ fabrikam.com

✑ east.fabrikam.com

✑ west.contoso.com

You need to ensure that the devices in the new domains can register by using Autodiscover.

How many domains should you verify, and what is the minimum number of enterprise registration DNS records you should add? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

72. Your company has a Microsoft 365 E5 subscription.

Users in the research department work with sensitive data.

You need to prevent the research department users from accessing potentially unsafe websites by using

hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.

What should you do from the Security & Compliance admin center?

73. Your company recently purchased a Microsoft 365 subscription.

You enable Microsoft Azure Multi-Factor Authentication (Ml A) for all 500 users in the Azure Active Directory (Azure AD) tenant.

You need to generate a report that lists all the users who completed the Azure MFA registration process.

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

74. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the Azure Active Directory admin center, you add fabrikam.com as a custom domain. You instruct User2 to sign in as [email protected].

Does this meet the goal?

75. You are evaluating the required processes for Project1.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

76. Your on-premises network contains five file servers. The file servers host shares that contain user data.

You plan to migrate the user data to a Microsoft 36S subscription.

You need to recommend a solution to import the user data into Microsoft OneDrive.

What should you include in the recommendation?

77. Your network contains an Active Directory forest named adatum.local. The forest contains 500 users and uses adatum.com as a UPN suffix.

You deploy a Microsoft 365 tenant.

You implement directory synchronization and sync only 50 support users.

You discover that five of the synchronized users have usernames that use a UPN suffix of onmicrosoft.com.

You need to ensure that all synchronized identities retain the UPN set in their on-premises user account.

What should you do?

78. You have a Microsoft 365 subscription

You have an Azure AD tenant that contains the users shown in the following table.





You configure Tenant properties as shown in the following exhibit





Which users will be contacted by Microsoft if the tenant experiences a data breach?

79. You have a Microsoft 365 E5 subscription.

All users are assigned a license to Microsoft 365 Apps for enterprise.

The users report that they do not have the option to install Microsoft 365 apps on their device as shown in the following exhibit.





You need to ensure that the users can install Microsoft 365 apps from the Office 365 portal.

What should you do?

80. Your network contains an Active Directory forest. The forest contains two domains named contoso.com and adatum.com.

Your company recently purchased a Microsoft 365 subscription.

You deploy a federated identity solution to the environment.

You use the following command to configure contoso.com for federation.

Convert-MsolDomaintoFederated CDomainName contoso.com

In the Microsoft 365 tenant, an administrator adds and verifies the adatum.com domain name.

You need to configure the adatum.com Active Directory domain for federated authentication.

Which two actions should you perform before you run the Azure AD Connect wizard? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

81. You have a single-page application (SPA) named TodoListSPA and a server-based web app named TodoUstServKe.

The permissions for the TodoListSPA API are configured as shown in the TodoUstSPA exhibit (Click the TodoUstSPA tab)

The permissions for the TodoUstService API are configured as shown m the TodoListService exhibit (Click the TodoUstService tab.)

You need to ensure that TodoUstService can access a Microsoft OneDnve file of the signed-in user. The solution must use the principle of least privilege.

Which permission request should you configure?

82. HOTSPOT

Your network contains an on-premises Active Directory domain named Contoso.com.

Your company purchase a Microsoft 365 subscription and establishes a hybrid deployment of Azure Active Directory (Azure AD) by using password hash synchronization.

You need to identify where an administrator can reset the password of each new user.

What should you identify? To answer, select the appropriate option in the area. NOTE: Each correct selection is worth point.

83. HOTSPOT

You are developing a Microsoft Teams tab that will capture coordinates from mobile devices and send notifications to users.

The relevant portion of the app manifest is shown in the App Manifest exhibit (Click the App Manifest tab.)

The relevant portion of the JavaScript code for the tab is shown in the JavaScript exhibit (Click the JavaScript tab)

While testing the tab. a user receives the message shown in the Message exhibit (Click the Message tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE; Each correct selection is worth one point.

84. Your company uses on-premises Windows Server File Classification Infrastructure 9FCI).

Some documents on the on-premises file servers are classifies as Confidential.

You migrate the files from the on-premises file servers to Microsoft SharePoint Online.

You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded files based on the Confidential classification.

What should you do first?

85. You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.

Corporate policy states that user passwords must not include the word Contoso.

What should you do to implement the corporate policy?

86. You plan to develop a SharePoint Framework (SPfx) web part by using the ReactJS framework.

You need to ensure that all the web part fields and controls adopt the theme of the site when you deploy the web part. The solution must minimize development effort

What should you include in the solution?

87. You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

Contoso.com contains the users shown in the following table.





Contoso.com is configured as shown in the following exhibit.





You need to ensure that guest users can be created in the tenant.

Which setting should you modify?

88. HOTSPOT

You have a Microsoft 365 subscription you use Active Directory (Azure AD) tenant named contoso.com.

The tenant contains the Windows 10 devices shown in the following table.





All the devices are managed by using Microsoft Endpoint Manager and are members of a group named Group1.

From the Microsoft Endpoint Manager admin center, you create an app suite named App1 for Microsoft Office 365 apps.

You configure the App1 settings as shown in the exhibit. (Click the Exhibit tab.)





You assign App1 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

89. DRAG DROP

You have a pilot app named App1 deployed to a Microsoft Power Platform production environment named Prod1.

You need to reset the Prod1 environment in preparation for the production deployment of App1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

90. You have a web app that uses the Microsoft identity Platform.

You extend the application manifest to implement the following role-based access control (RBAC).





When you attempt to save the manifest you receive a validation error.

Which key value pair should you modify to resolve the error?

91. HOTSPOT

You have a Microsoft 365 subscription that contains a guest user named User1. User1 is assigned the User administrator role.

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

Contoso.com is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

92. HOTSPOT

You are creating a report that will query Azure Active Directory (Azure AD) for group information by using the Microsoft Graph API. You need to retrieve an ordered list of groups by title. The solution must minimize the amount of data returned m the response.

How should you complete the Graph API call? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

93. You need to recommend which DNS record must be created before adding a domain name for the project.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

94. HOTSPOT

You are developing a single-page application (SPA) that authenticates users by using MSALjs.

The SPA must meet the following requirements:

• Only allow access to the users in an organization named contoso.onmicrosoft.com.

• Support single sign-on (SSO) across tabs and user sessions.

How should you complete the code for the SPA? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

95. Your company recently purchased a Microsoft 365 subscription.

You enable Microsoft Azure Multi-Factor Authentication (MFA) for all 500 users in the Azure Active Directory (Azure tenant)

You need to generate a report that lists all the users who Azure registeration process.

What is the best approach to achieve the goal? More than one answer choice achieve the goal. Select the Best answer.

96. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You have a user named Grady Archie. The solution must meet the following requirements:

✑ Grady Archie must be able to add payment methods to your Microsoft Office 365 tenant.

✑ The solution must minimize the number of licenses assigned to users.

✑ The solution must use the principle of least privilege.

97. HOTSPOT

You are developing a Microsoft Teams tab.

You need to create a modal dialog to collect input from a user.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

98. From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the Exhibit tab.)





You need to reduce the likelihood that the sign-ins are identified as risky.

What should you do?

99. Your company has an on-premises Microsoft SharePoint Server environment and a Microsoft 365 subscription.

When users search for content from Microsoft 365, you plan to include content from the on-premises SharePoint Server environment in the results.

You need to add crawled metadata from the on-premises SharePoint Server content to the Microsoft Office 365 search index.

What should you do first?

100. Your network contains an on-premises Active Directory domain named contoso.com.

You have a hybrid Microsoft 365 tenant that uses Microsoft Teams.

You need to ensure that audio, video, and screen sharing is prioritized over other data types across the network.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

101. HOTSPOT

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription.

Contoso.com contains the users shown in the following table.





You add an enterprise application named App1 to contoso.com.

You configure the following self-service settings for App1:

✑ Allow users to request access to this application is set to Yes.

✑ To which group should assigned users be added is set to Group1.

✑ Who is allowed to approve access to this application is set to User2.

✑ Require approval before granting access to this application is set to Yes.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

102. HOTSPOT

You have a Microsoft 365 tenant that contains 300 users.

The users have Domestic and International Calling Plan licenses.

What is the maximum user phone numbers and toll-free service phone numbers can you acquire? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

103. Your company has a Microsoft 365 subscription.

You need to identify which users performed the following privileged administration tasks:

✑ Deleted a folder from the second-stage Recycle Bin if Microsoft SharePoint

✑ Opened a mailbox of which the user was not the owner

✑ Reset a user password

What should you use?

104. You are developing a new application named App1 that uses the Microsoft identity platform to authenticate to Azure Active Directory (Azure AD).

Currently, App1 can read user profile information.

You need to allow App1 to read the user's calendar.

Solution: Add https: //graph.windows.net/user, read to the list of scopes during the initial login request

Does this meet the goal?

105. HOTSPOT

You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.





You have an on-premises web app named AppA. Group1 has permissions to access AppA.

You configure an Azure Active Directory (Azure AD) Application Proxy.

You add an Application Proxy entry for AppA as shown the exhibit. (Click the Exhibit tab.)





You assign the AppA enterprise application in Azure to Group2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

106. You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You add an app named App1 to the enterprise applications in contoso.com.

You need to configure self-service for App1.

What should you do first?

107. HOTSPOT

Your network contains an on-premises Active Directory domain named Contoso.com.

Your company purchases a Microsoft 365 subscription and establishes a hybrid deployment of Azure Directory (Azure AD) by using password hash synchronization.

You create a new user User10 on-premises and a new user named User20 in Azure AD.

You need to identify where an administrator can reset the password of each new user.

What should you identify? To answer select the appropriate option in the answer area. NOTE: Each correct selection is worth one point.

108. You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.





Azure AD Connect has the following settings:

• Password Hash Sync Enabled

• Pass-through authentication: Enabled

You need to identify which users will be able to authenticate by using Azure AD if connectivity between on-premises Active Directory and the internet is lost.

Which users should you identify?

109. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement password hash synchronization and configure password protection in the Azure AD tenant.

Does this meet the goal?

110. You have a Microsoft 365 tenant that contains a Microsoft Power Platform environment.

You need to ensure that only specific users can create new environments.

What should you do in the Power Platform admin center?

111. You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites.

What should you do?

112. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username:

[email protected]

Microsoft 365 Password: *yfLo7Ir2&y-

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525

You need to prevent non-administrators in your organization from registering applications.

113. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





Your company uses Windows Defender Advanced Threat Protection (ATP).

Windows Defender ATP contains the roles shown in the following table.





Windows Defender ATP contains the device groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

114. You have a Microsoft 365 tenant.

You have a line-of-business application named App1 that users access by using the My Apps portal.

After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control.

You need to be alerted by email if impossible travel is detected for a user of App1. The solution must ensure that alerts are generated for App1 only.

What should you do?

115. This question requires that you evaluate the underlined text to determine if it is correct-In Microsoft Word on Windows, before you can sideload a Microsoft Office Add-in, you must firs: upload the manifest to Microsoft OneDrive instructions: Review the underlined text. If it makes the statement correct select "No change is needed," If the statement is incorrect select the answer choice that makes the statement correct

116. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You sign up for Microsoft Store for Business.

The tenant contains the users shown in the following table.





Microsoft Store for Business has the following Shopping behavior settings:

✑ Allow users to shop is set to On.

✑ Make everyone a Basic Purchaser is set to Off.

You need to identify which users can install apps from the Microsoft for Business private store.

Which users should you identify?

117. HOTSPOT

Your network contains an Active Directory domain named contoso.com.

The domain contains the file servers shown in the following table.





A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2.

Three apps named App1, App2, and App3 all open files that have the .abc file extension.

You implement Windows Information Protection (WIP) by using the following configurations:

✑ Exempt apps: App2

✑ Protected apps: App1

✑ Windows Information Protection mode: Block

✑ Network boundary: IPv4 range of 192.168.1.1-192.168.1.255

You need to identify the apps from which you can open File1.abc

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

118. DRAG DROP

You need to configure HRApp to enable users to search for specific jobs by using chat in Microsoft Teams.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

119. HOTSPOT

You need to modify the HRApp manifest to provide a tab that supports querying the third-party HR system.

Which section of the manifest should you modify, and which value should you set as the scope? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

120. Which migration solution should you recommend for Project1?

121. Your company has two offices. The offices are located in Seattle and New York.

The company uses a third-party email system.

You implement Microsoft 365.

You move all the users in the Seattle office to Exchange Online. You configure Microsoft 365 to successfully receive all the email messages sent to the Seattle office users.

All the users in the New York office continue to use the third-party email system.

The users use the email domains shown in the following table.





You need to ensure that all the email messages sent to the New York office users are delivered successfully. The solution must ensure that all the email messages for the users

in both offices are routed through Microsoft 365.

You create the required DNS records and Send connectors.

What should you do next from Microsoft 365?

122. Your company has 10,000 users who access all applications from an on-premises data center.

You plan to create a Microsoft 365 subscription and to migrate data to the cloud.

You plan to implement directory synchronization.

User account and group accounts must sync to Microsoft Azure Directory (Azure AD) successfully.

You discover that several user accounts fail to sync to Azure AD.

You need to identify which user accounts failed to sync. You must resolve the issue as

quickly as possible.

What should you do?

123. You need to configure Azure AD Connect to support the planned changes for the Montreal Users and Seattle Use's OUs.

What should you do?

124. Your network contains an on-premises Active Directory domain.

You have a Microsoft 365 subscription.

You implement a directory synchronization solution that uses pass-through authentication.

You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.





You discover that Active Directory users can use the passwords in the custom banned passwords list.

You need to ensure that banned passwords are effective for all users.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

125. Your network contains an Active Directory domain named contoso.com.

All users authenticate by using a third-party authentication solution.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to recommend an identity strategy that meets the following requirements:

✑ Provides seamless SSO

✑ Minimizes the number of additional servers required to support the solution

✑ Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)

✑ Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

You are evaluating the implementation of federation.

Which two requirements are met by using federation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

126. CORRECT TEXT

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username: [email protected]

Microsoft 365 Password: m3t^We$Z7&xy

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to create a policy that allows a user named Lee Gu to use Outlook Web App to review 50 percent of the outbound email messages sent by a user named Joni Sherman.

To answer, sign in to the Microsoft 365 portal.

127. Your company has three main offices and one branch office. The branch office is used for research.

The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office

What should you include in the recommendation?

128. HOTSPOT

You are confirming an enterprise application named Test App in Microsoft Azur as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

129. You have a Microsoft 365 E5 subscription that contains a group named Group 1.

Vou need to ensure that all the members of Group1 are notified when Microsoft 365 outages occur. The solution must minimize administrative effort

What should you do?

130. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Reader role.

From the Exchange admin center, you assign User2 the Help Desk role.

Does this meet the goal?