You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
Contoso.com is configured as shown in the following exhibit.

You need to ensure that guest users can be created in the tenant.
Which setting should you modify?

• A.Guests can invite.
• B.Guest users permissions are limited.
• C.Members can invite.
• D.Admins and users in the guest inviter role can invite.
• E.Deny invitations to the specified domains.

Comment: *

Name: *

Email: *

Verification: *

You need to configure just in time access to meet the technical requirements.
What should you use?

• A.access reviews
• B.entitlement management
• C.Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
• D.Azure Active Directory (Azure AD) Identity Protection

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 tenant that contains Microsoft Exchange Online.
You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant.
You need to ensure that the calendar of every user is available to the users in adatum.com immediately.
What should you do?

• A.From the Exchange admin center, create a sharing policy.
• B.From the Exchange admin center, create a new organization relationship
• C.From the Microsoft 365 admin center, modify the Organization profile settings.
• D.From the Microsoft 365 admin center, configure external site sharing.

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.
What information must be configured for each user before the user can perform a self-service password reset?
To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Microsoft enforces a strong default two-gate password reset policy for any Azure administrator role. This policy may be different from the one you have defined for your users and cannot be changed. You should always test password reset functionality as a user without any Azure administrator roles assigned.
With a two-gate policy, administrators don't have the ability to use security questions.
The two-gate policy requires two pieces of authentication data, such as an email address, authenticator app, or a phone number.
User3 is not assigned to an Administrative role so the configured method of Security questions only applies to User3.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-passwo

Comment: *

Name: *

Email: *

Verification: *

Your on-permission network contains the web application shown in the following table.

You purchase Microsoft 365, and the implement directory synchronization.
You plan to publish the web applications.
You need to ensure that all the applications are accessible by using the My Apps portal. The solution must minimize administrative effort.
What should you do first?

• A.Deploy one conditional access policy.
• B.Deploy one Application Proxy connector.
• C.Create four application registrations.
• D.Create a site-to-site VPN from Microsoft Azure to the on-premises network.

Comment: *

Name: *

Email: *

Verification: *