Microsoft MS-100 dumps - 100% Pass Guarantee!

Correct Answer:

Box 1: External Identity Provider Administrator

User1: Create entitlement management access packages to provide external users with access to App1.

External Identity Provider Administrator

This administrator manages federation between Azure AD organizations and external identity providers. With this role, users can add new identity providers and configure all available settings (e.g. authentication path, service ID, assigned key

containers). This user can enable the Azure AD organization to trust authentications from external identity providers.

Incorrect:

* User Administrator can manage access reviews for access package assignments in entitlement management

Box 2: Identity Governance Administrator User2: Create an access review for Appl.

Identity Governance Administrator can manage access reviews for access package assignments in entitlement management,

Note: Identity Governance Administrator Users with this role can manage Azure AD identity governance configuration, including access packages, access reviews, catalogs and policies, ensuring access is approved and reviewed and guest users who no longer need access are removed.

Incorrect:

*

Cloud App Security Administrator

Users with this role have full permissions in Defender for Cloud Apps. They can add administrators, add Microsoft Defender for Cloud Apps policies and settings, upload logs, and perform governance actions.

*

Cloud Application Administrator

Users in this role have the same permissions as the Application Administrator role, excluding the ability to manage application proxy. This role grants the ability to create and manage all aspects of enterprise applications and application

registrations. Users assigned to this role are not added as owners when creating new application registrations or enterprise applications.

This role also grants the ability to consent for delegated permissions and application permissions, with the exception of application permissions for Microsoft Graph.

*

User Administrator Users with this role can create users, and manage all aspects of users with some restrictions (see the table), and can update password expiration policies. Additionally, users with this role can create and manage all groups. This role also includes the ability to create and manage user views, manage support tickets, and monitor service health. User Administrators don't have permission to manage some user properties for users in most administrator roles. Admins with this role do not have permissions to manage MFA or manage shared mailboxes.

User Administrator can create access reviews for membership in Security and Microsoft 365 groups.

*

Privileged Role Administrator is not an option here.

Users with this role can manage role assignments in Azure Active Directory, as well as within Azure AD Privileged Identity Management. They can create and manage groups that can be assigned to Azure AD roles. In addition, this role allows

management of all aspects of Privileged Identity Management and administrative units.

Privileged Role Administrator can create access reviews for membership in groups that are assignable to Azure AD roles

Reference: https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Correct Answer: B

An app's score in Cloud Discovery is based on categories such as General, Security, Compliance and Legal. Each category has several parameters. For example, the domain registration and consumer popularity parameters are part of the General category. These parameters are known as Score Metrics.

You can modify the default weights given to the Cloud Discovery score configuration. By default, all the various parameters evaluated are given an equal weight. If there are certain parameters that are more or less important to your organization, you can adjust the weight of each score metric.

In this case, we need to lower the weight of the domain registration and consumer popularity score metrics.

Reference: https://docs.microsoft.com/en-us/cloud-app-security/risk-score

Correct Answer: B

The SharePoint Migration Tool lets you migrate content to SharePoint Online and OneDrive from the following locations:

1.

SharePoint Server 2013

2.

SharePoint Server 2010

3.

Network and local file shares Reference: https://docs.microsoft.com/en-us/sharepointmigration/migrating-content-to-onedrive-for-business

https://docs.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool

Correct Answer: B

Correct Answer: C