MS-500 - Module 1 FINAL EXAM
QUESTIONS & ANSWERS WITH
COMPLETE SOLUTIONS GRADED
A+
QUESTIONS AND ANSWERS
What are the three authentication categories for Microsoft 365? ANSWER -- Cloud-
only
- Directory Synchronization with Pass-through authentication (PTA)
- Single Sign-On (SSO) with ADFS
What are four methods for provisioning user accounts? ANSWER -- Microsoft 365
admin center
- Import multiple users
- Windows PowerShell
- Directory Synchronization
By default in Microsoft 365, after how many days do users' passwords expire, and how
long before expiration will a user receive a notification? ANSWER -A password will
expire after 90 days, and a user will receive notification 14 days prior to expiration.
What are the minimum and maximum number of days until user password expiration
that can be set in Microsoft 365? ANSWER -minimum = 14 days
maximum = 730 days
,What are the minimum and maximum number of days before password expiration
that Microsoft 365 can be set to send a warning? ANSWER -minimum = 1 day
maximum = 30 days
If an administrator forgets his password, how can he have it reset? (2 methods)
ANSWER -1. Ask another administrator to reset it (a global admin PW must be reset
by another global admin).
2. Reset the PW himself with "Can't access your account?" on the sign-in page for
Microsoft 365.
What is multi-factor authentication (MFA)? ANSWER -An authentication method
that requests a username and password and then employs one of the following
secondary authentication methods:
- Call to phone
- Text message to phone
- Notification through mobile app
- Verification code from mobile app
What Azure AD level is required to use password write-back with federated and
synchronized identities? ANSWER -Azure AD Premium
True or False: Self-service password reset (SSPR) is enabled by default? ANSWER -
FALSE
, What PowerShell cmdlet is used to provision user accounts? ANSWER -New-
MsolUser
eg: New-MsolUser -UserPrincipalName -
DisplayName "Stella Carrillo" - FirstName "Stella" -LastName "Carrillo" -
UsageLocation "US" -LicenseAssignment "Adatum: ENTERPRISEPREMIUM"
What PowerShell cmdlet is used to delete user accounts? ANSWER -Remove-
MsolUser
(Use -ObjectId Guid or -UserPrincipalName parameters)
What PowerShell cmdlet is used to restore deleted user accounts? ANSWER -
Restore-MsolUser
What PowerShell cmdlet is used to assign a role to a user? ANSWER -Add-
MsolRoleMember
eg: Add-MsolRoleMember -RoleName "Exchange Service Administrator" -
RoleMemberEmailAddress ""
What PowerShell cmdlet is used to view available administrator roles? ANSWER -
Get-MsolRole
What PowerShell cmdlet is used to create a MS 365 group? ANSWER -New-
MsolGroup
What PowerShell cmdlet is used to view MS 365 groups? ANSWER -Get-
MsolGroup
QUESTIONS & ANSWERS WITH
COMPLETE SOLUTIONS GRADED
A+
QUESTIONS AND ANSWERS
What are the three authentication categories for Microsoft 365? ANSWER -- Cloud-
only
- Directory Synchronization with Pass-through authentication (PTA)
- Single Sign-On (SSO) with ADFS
What are four methods for provisioning user accounts? ANSWER -- Microsoft 365
admin center
- Import multiple users
- Windows PowerShell
- Directory Synchronization
By default in Microsoft 365, after how many days do users' passwords expire, and how
long before expiration will a user receive a notification? ANSWER -A password will
expire after 90 days, and a user will receive notification 14 days prior to expiration.
What are the minimum and maximum number of days until user password expiration
that can be set in Microsoft 365? ANSWER -minimum = 14 days
maximum = 730 days
,What are the minimum and maximum number of days before password expiration
that Microsoft 365 can be set to send a warning? ANSWER -minimum = 1 day
maximum = 30 days
If an administrator forgets his password, how can he have it reset? (2 methods)
ANSWER -1. Ask another administrator to reset it (a global admin PW must be reset
by another global admin).
2. Reset the PW himself with "Can't access your account?" on the sign-in page for
Microsoft 365.
What is multi-factor authentication (MFA)? ANSWER -An authentication method
that requests a username and password and then employs one of the following
secondary authentication methods:
- Call to phone
- Text message to phone
- Notification through mobile app
- Verification code from mobile app
What Azure AD level is required to use password write-back with federated and
synchronized identities? ANSWER -Azure AD Premium
True or False: Self-service password reset (SSPR) is enabled by default? ANSWER -
FALSE
, What PowerShell cmdlet is used to provision user accounts? ANSWER -New-
MsolUser
eg: New-MsolUser -UserPrincipalName -
DisplayName "Stella Carrillo" - FirstName "Stella" -LastName "Carrillo" -
UsageLocation "US" -LicenseAssignment "Adatum: ENTERPRISEPREMIUM"
What PowerShell cmdlet is used to delete user accounts? ANSWER -Remove-
MsolUser
(Use -ObjectId Guid or -UserPrincipalName parameters)
What PowerShell cmdlet is used to restore deleted user accounts? ANSWER -
Restore-MsolUser
What PowerShell cmdlet is used to assign a role to a user? ANSWER -Add-
MsolRoleMember
eg: Add-MsolRoleMember -RoleName "Exchange Service Administrator" -
RoleMemberEmailAddress ""
What PowerShell cmdlet is used to view available administrator roles? ANSWER -
Get-MsolRole
What PowerShell cmdlet is used to create a MS 365 group? ANSWER -New-
MsolGroup
What PowerShell cmdlet is used to view MS 365 groups? ANSWER -Get-
MsolGroup
