If you're pursuing the M365 Enterprise Administrator Expert certification, you'll need to pass MS-100 Microsoft 365 Identity and Services and MS-101 Microsoft 365 Mobility and Security.Passquestion provides you the latest MS-100 and MS-101 Practice Test Questions to help you get certified easily.

Exam MS-100: Microsoft 365 Identity and Services

This exam is for the Microsoft 365 Enterprise Administrator role and the Microsoft 365 Certified: Enterprise Administrator Expert certification. Candidates for this exam are Microsoft 365 Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. They perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies. 

MS-100 exam topics you should know before your test
Design and Implement Microsoft 365 Services (25-30%)
Manage User Identity and Roles (35-40%)
Manage Access and Authentication (20-25%)
Plan Office 365 Workloads and Applications (10-15%)

Exam MS-101: Microsoft 365 Mobility and Security

This exam is for the Microsoft 365 Enterprise Administrator role and the Microsoft 365 Certified: Enterprise Administrator Expert certification. Candidates for this exam are Microsoft 365 Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. They perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies.

MS-101 exam topics you should know before your test
Implement Modern Device Services (30-35%)
Implement Microsoft 365 Security and Threat Management (30-35%)
Manage Microsoft 365 Governance and Compliance (35-40%)

Free MS-100 exam questions and answers:

You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites.
What should you do?
A. From the Microsoft 365 admin center, configure a partner relationship.
B. From SharePoint Online Management Shell, run the set-SPOSite cmdlet.
C. From the Azure Active Directory adman center, configure a conditional access policy.
D. From the SharePoint admin center, configure the sharing settings.
Answer: D

Your company has a hybrid deployment of Microsoft 36S.
Users authenticate by using pass-through authentication. Several Microsoft A/wt AD Connect Authentication Agents are deployed. You need to verify whether all the Authentication Agents are used for authentication.
What should you do?
A. From the Azure portal, use the Troubleshoot option on the Pass-through authentication page.
B. From Performance Monitor, use the #PTA authentications counter.
C. From the Azure portal use the Diagnostics settings on the Monitor blade.
D. From Performance Monitor, use the Kerberos authentications counter.
Answer: A

You have an on premises web application that is published by using a URL of https://app.contoso.local. You purchase a Microsoft 36S subscription.
Several external users must be able to connect to the web application You need to recommend a solution for external access to the application. The solution must support multi-factor authentication.
Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A. From an on-premises server, install a connector, and then publish the app.
B. From the Azure Active Directory admin center, enable an Application Proxy.
C. From the Azure Active Directory admin center, treate a conditional access policy.
D. From an on premises server, install an Authentication Agent.
E. Republish the web-application by using http//app.contoso.com
Answer: A,B

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.
You suspect that an imposter is signing in to Azure AD by using the credentials of User1.
You need to ensure that an administrator named Admin1 can view all the sign in details of User 1 from the past 24 hours.
To which three roles should you add Admin1? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Security administrator
B. Password administrator
C. User administrator
D. Compliance administrator
Answer: A,B,C

You have a Microsoft 365 Enterprise subscription.
You have a conditional access policy to force multi factor .mthentication when accessing Microsoft SharePoint from a mobile device You need to view which users authenticated by using multi factor authentication.
What should you do?
A. From the Microsoft 36S admin center, view the Security Compliance reports.
B. From the Azure Active Directory admin center, view the user sign-ins.
C. From the Microsoft 365 admin center, view the Usage reports.
D. From the Azure Active Directory admin center, view the audit logs.
Answer: B

Free MS-101 exam questions and answers:

You have a Microsoft 36S subscription. Your company purchases a new financial application named App1. From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity. You need to prevent the missing information from affecting the score.
What should you configure from the Cloud Discover settings?
A. Organization details
B. Default behavior
C. Score metrics
D. App tags
Answer: D

Your network contains an on premises Active Directory domain.
Your company has a security policy that prevents additional software from txnrwj installed on domain controllers.
You need to monitor a domain controller by using Microsoft Azure Advanced Threat Protection (ATP).
What should you do? More than one answer choice may achieve the goal. Select the BEST answer.
A. Deploy an Azure ATP sensor, and then configure port mirroring.
B. Deploy an Azure ATP sensor, and then configure detections.
C. Deploy an Azure ATP standalone sensor, and then configure detections.
D. Deploy an Azure ATP standalone sensor, and then configure port mirroring.
Answer: B

Your company has a Microsoft 365 E5 subscription. Users in the research department work with sensitive data. You need to prevent the research department users from accessing potentially unsafe websites by
using hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.
What should you do from the Security & Compliance admin center?
A. Create a data toss prevention (DLP) policy that has a Content is shared condition.
B. Modify the default safe links policy.
C. Create a data loss prevention (DLP) policy that has a Content contains condition.
D. Create a new safe links policy.
Answer: A

You have a Microsoft 365 tenant
You have a line-of-business application named App1 that users access by using the My Apps portal. After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control,
You need to be alerted by email if impossible travel is detected for a user of Appl. The solution must ensure that alerts are generated for App1 only.
What should you do?
A. From Microsoft Cloud App Security, create a Cloud Discovery anomaly detection policy.
B. From Microsoft Cloud App Security, modify the impossible travel alert policy.
C. From Microsoft Cloud App Security, create an app discovery policy.
D. From the Azure Active Directory admin center, modify the conditional access policy.
Answer: C

A user receives the following message when attempting to sign in to https://myapps.microsoft.com:
"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might be signing in from a new location device, or app. Before you can continue, we need to verity your identity. Please contact your admin.”
Which configuration prevents the users from signing in?
A. Microsoft Azure Active Directory (Azure AD) Identity Protection policies
B. Microsoft Azure Active Directory (Azure AD) conditional access policies
C. Security & Compliance supervision policies
D. Security & Compliance data loss prevention (DIP) policies
Answer: A