- (Exam Topic 1)
Your network contain*, an on-premises Active Directory forest.
You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy. You need to recommend an authentication strategy that meets the following requirements:
• Allows users to sign in by using smart card-based certificates
• Allows users to connect to on premises and Microsoft 365 services by using SSO Which authentication strategy should you recommend?
Correct Answer:B
References:
https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn
- (Exam Topic 1)
Your company has a Microsoft 365 subscription.
You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.
What should you use?
Correct Answer:A
- (Exam Topic 1)
Your company has a Microsoft Office 365 subscription that contains the groups shown in the following table.
You have the licenses shown in the following table.
Another administrator removes User1 from Group1 and adds Group2 to Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Solution:
The users are assigned SharePoint licenses directly. Their group memberships have no effect on licenses directly assigned to the user accounts.
Does this meet the goal?
Correct Answer:A
- (Exam Topic 3)
You need to create the UserLicenses group. The solution must meet the security requirements.
Which group type and control method should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Solution:
Does this meet the goal?
Correct Answer:A
- (Exam Topic 1)
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes a user named User1.
You enable multi-factor authentication for contoso.com and configure the following two fraud alert settings: 
Set Allow users to submit fraud alerts: On Automatically block users who report fraud: On
You need to instruct the users in your organization to use the fraud reporting features correctly. What should you tell the users to do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Solution:
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#fraud-alert
Does this meet the goal?
Correct Answer:A