MS-100 Named Practice Questions
The free MS-100: Microsoft 365 Identity and Services questions that deal with named, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #2
You have a Microsoft 365 subscription that contains the users shown in the following table. You have the named locations shown in the following table. You create a conditional access policy that has the following configurations: Users and groups: Include: Group1 Exclude: Group2 Cloud apps: Include all cloud apps Conditions: Include: Any location Exclude: Montreal Access control: Grant access, Require multi-factor authentication User1 is on the multi-factor authentication (MFA) blocked users list. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer Yes or No for each statement in the exhibit.
Correct answer: Yes, No, Yes
Explanation
The Blocked User list is used to block specific users from being able to receive Multi-Factor Authentication requests. Any authentication attempts for blocked users are automatically denied. Users remain blocked for 90 days from the time that they are blocked. Box 1: Yes * 133.107.10.20 is in the Montreal named location. The conditional access policy excludes Montreal so the policy does not apply. Therefore, User1 can access Microsoft Office 365. Box 2: No * 193.77.10.15 is in the Toronto named location. The conditional access policy applies to Group1 which User1 is a member of and all locations except for Montreal. Therefore, the conditional access policy applies in this case. The policy requires MFA but User1 is on the MFA blocked list so he is unable to use MFA. Therefore, User1 cannot access Microsoft 365. Box 3: Yes User2 is in Group1 and Group2. The conditional access policy applies to Group1 but excludes Group2. Therefore, the conditional access policy does not apply in this case so User2 can access Microsoft Office 365. Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
Question #10
You have a DNS zone named contoso.com that contains the following records. You purchase a Microsoft 365 subscription. You plan to migrate mailboxes to Microsoft Exchange Online. You need to configure Sender Policy Framework (SPF) to support Exchange Online. What should you do?
Correct answer: B
Explanation
A domain may have only one SPF TXT record. The zone already contains v=spf1 a include:server1.contoso.com -all, so modify that record to add include:spf.protection.outlook.com rather than adding a second TXT record.
Continue with MS-100: Microsoft 365 Identity and Services
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in MS-100: Microsoft 365 Identity and Services, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All MS-100: Microsoft 365 Identity and Services practice questions →