MS-100 Azure Practice Questions
The free MS-100: Microsoft 365 Identity and Services questions that deal with azure, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #3
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. An external user has a Microsoft account that uses an email address of user1@outlook.com. An administrator named Admin1 attempts to create a user account for the external user and receives the error message shown in the following exhibit. You need to ensure that Admin1 can add the user. What should you do from the Azure Active Directory admin center?
Correct answer: C
Explanation
Inviting a Microsoft account guest fails when external collaboration settings restrict who can invite or which domains are allowed; changing those settings in Azure AD lets Admin1 add the user.
Question #8
You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only. What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Type your answer, then reveal.
Correct answer: User1: Phone number and email address; User2: Phone number and email address; User3: Security questions only
Explanation
Microsoft enforces a strong default two-gate password reset policy for any Azure administrator role. This policy may be different from the one you have defined for your users and cannot be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned. With a two-gate policy, administrators don't have the ability to use security questions. The two-gate policy requires two pieces of authentication data, such as an email address, authenticator app, or a phone number. User3 is not assigned to an Administrative role so the configured method of Security questions only applies to User3. Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-passw
Continue with MS-100: Microsoft 365 Identity and Services
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in MS-100: Microsoft 365 Identity and Services, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All MS-100: Microsoft 365 Identity and Services practice questions →