Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
MS-100 Implement applications and external access in Azure AD Microsoft Quiz Answers
Get MS-100 Implement applications and external access in Azure AD Microsoft Quiz Answers
This learning path examines how to implement applications and external access in Azure AD, including implementation of Azure AD Application Proxy, Microsoft 365 external sharing, Azure AD B2B collaboration, external access, and guess access.
This learning path helps prepare you for Exam MS-100: Microsoft 365 Identity and Services.
Prerequisites:
- Students should have completed a role-based administrator training collection such as Messaging, Teamwork, Security and Compliance, or Collaboration.
- Students should have a proficient understanding of DNS and basic functional experience with Microsoft 365 services.
- Students must have a proficient understanding of general IT practices.
Module 1: Implement applications in Azure AD
This module provides instruction on how to register applications in Azure AD, update applications within the Azure AD consent framework, configure multi-tenant applications, manage OAuth application requests, and monitor app governance.
Learning objectives:
By the end of this module, you’ll be able to:
- Register an application or service within your Azure AD tenant
- Update an application within the Azure AD consent framework
- Modify the configuration of a single-tenant application to make it a multi-tenant application
- Manage OAuth application requests
- Monitor app governance for OAuth-enabled apps
Prerequisites:
None
This module is part of these learning paths:
Quiz 1: Register an application within your Azure AD tenant
Q1. As the Enterprise Administrator for Contoso, Holly Dickson is registering a new application using the Azure portal. Which of the “Supported account type” options should Holly select that targets the widest set of customers?
- Accounts in any organizational directory
- Accounts in any organizational directory and personal Microsoft account
- Accounts in this organizational directory only
Quiz 2: Configure multi-tenant applications
Q1. As the Enterprise Administrator for Tailspin Toys, Patti Fernandez has just finished creating a multi-tenant application. Patti wants to make this app available to Tailspin’s customers and partners. How should Patti configure the App ID URL of the multi-tenant application so that Azure AD can find the app across all tenants?
- It must be tenant-specific
- It must be globally unique
- It must be tenant unique
Quiz 3: Monitor app governance for OAuth-enabled apps
Q1. App governance oversees and governs OAuth-enabled apps that are registered with Azure AD. What other characteristic must OAuth-enabled apps have to be overseen and governed by App governance?
- They must be line-of-business apps developed by Microsoft partners
- They must access data through the Microsoft Graph API
- They must be a multi-tenant application
Quiz 4: Knowledge check
Q1. The Consent Framework is built on what type of authentication?
- NTLM
- Oauth 2.0
- Kerberos
Q2. A user has added a new application. The application’s permissions have been updated, the application is running, and the user is about to use it for the first time. What does the application need to obtain from Azure AD’s /authorize endpoint before the user can access the application?
- Security token
- Endpoint authorization
- Authorization Code
Q3. As the Enterprise Administrator for Tailspin Toys, Holly Spencer contracted with an ISV to create a multi-tenant application. Holly’s goal is to make the app available to Tailspin’s customers and partners. Holly updated the application registration in the Azure portal so that it supports multi-tenancy. What’s the next step that must be completed so that users from Tailspin’s customers and partners can access the application?
- A user or administrator in other organizations must grant their users the ability to sign in to this application
- Holly must remove the application’s service principal through the Azure portal
- Holly must assign the App ID URL a host name that matches a verified domain of Tailspin’s Azure AD tenant
Module 2: Configure Azure AD Application Proxy
This module examines Azure AD Application Proxy and connectors, how to install and register a connector, and how to publish an on-premises app for remote access.
Learning objectives:
By the end of this module, you’ll be able to:
- Describe the benefits of Azure AD Application Proxy, the type of applications that work with it, and how it works
- Identify Azure AD Application Proxy prerequisites
- Install and register a connector and verify that it installed correctly
- Publish an on-premises app for remote access and test the published app to verify that it functions correctly
Prerequisites:
None
This module is part of these learning paths:
Quiz 1: Explore Azure AD Application Proxy
Q1. Which of the following items is a key benefit of using Azure Active Directory Application Proxy?
- It helps on-premises workers by publishing on-premises applications to be accessed over the internet
- It makes user access to company applications more secure by requiring VPN tunneling
- It supports remote workers by publishing on-premises applications to be accessed over the internet
Quiz 2: Examine Azure AD Application Proxy prerequisites
Q1. As the Enterprise Administrator for Fabrikam, Allan Deyoung is preparing Fabrikam’s environment for Azure AD Application Proxy. Allan must prepare for Azure AD Application Proxy by enabling communication to which of the following items?
- Azure data centers
- A server running Windows Server 2012 R2 or Windows Server 2016
- Inbound traffic on port 443
Quiz 3: Knowledge check
Q1. Which of the following items is a lightweight agent that sits on-premises and supports the outbound connection to the Application Proxy service?
- Kerberos Constrained Delegation
- Connector
- External endpoint
Q2. As the Enterprise Administrator for Adventure Works Cycles, Holly Spencer wants to publish on-premises applications for remote access by Adventure Works’ customers and partners. Because Adventure Works has a large deployment, Holly wants to improve latency for tenants that have applications hosted in different regions. Which of the following items is required when publishing on-premises applications for remote access that will achieve this goal?
- DNS TXT file
- Short Backend Application Timeout
- Location-based connector groups
Q3. As the Enterprise Administrator for Northwind Traders, Alan Deyoung has implemented Azure AD Application Proxy. Doing so enables Northwind to support remote workers by publishing on-premises applications to be accessed over the internet. Alan has organized Northwind’s connectors into connector groups, with each group handling traffic to specific applications. To optimize Northwind’s network structure, Alan also wants to implement load-balancing. What should Alan do next to load-balance this traffic to specific applications?
- Alan should deploy at least two connectors
- Alan should verify the Microsoft Azure AD Application Proxy Connector service is running
- There’s nothing else that Alan must do
Module 3: Explore solutions for external access
This module examines how to enable external access across various solutions, including Azure Active Directory Business to Business (B2B) collaboration, Microsoft 365, Microsoft Teams, and Customer Lockbox.
Learning objectives:
By the end of this module, you’ll be able to:
- Identify the features of external access with Azure Active Directory B2B collaboration.
- Explain the difference between Microsoft 365 external access and Azure Active Directory B2B collaboration.
- Explain the attributes of a collaborative user.
- Demonstrate Azure Active Directory B2B collaboration.
- Identify the differences between external access and guest access using Microsoft Teams.
- Describe usage scenarios for Customer Lockbox requests.
Prerequisites:
None
This module is part of these learning paths:
Quiz 1: Analyze the properties of an Azure AD B2B user
Q1. Which property of an Azure AD B2B user indicates the relationship of the user to the host tenancy?
- UserType
- Source
- HostTenant
Quiz 2: Explore external sharing with Azure AD B2B collaboration
Q1. Contoso wants to collaborate with Fabrikam, which is another Azure AD organization. Which settings should Contoso use to manage inbound and outbound B2B collaboration with Fabrikam?
- cross-tenant access settings
- external collaboration settings
- invitation redemption settings
Quiz 3: Knowledge check
Q1. As the Enterprise Administrator for Contoso, Holly Dickson wants to implement Azure Active Directory (Azure AD) Business-to-Business (B2B) collaboration. Azure AD B2B will enable Contoso to maintain control over its corporate data while securely sharing its applications and services with guest users from another organization. Holly wants to enable guest users to sign in to Contoso’s apps and services with their own work, school, or social identities. What happens if a guest user doesn’t have a Microsoft account or an Azure AD account?
- A Contoso admin with User Management permissions must create a Microsoft 365 account for the guest user
- An account is created for the guest user when they redeem their invitation
- Contoso must manage the external account and password of the guest user
Q2. Microsoft Teams enables communication and collaboration with people outside of an organization. Which of the following methods is a way in which Teams can make that happen?
- External access (federation)
- Kerberos authentication
- OAuth 2.0 authentication
Q3. As the Enterprise Administrator for Northwind Traders, Patti Fernandez is concerned about data security when requesting support from Microsoft. If Patti needs a Microsoft support engineer to help troubleshoot and fix an issue, the engineer will have unlimited access to Northwind’s data. What can Patti do to control the support engineer’s access to Northwind’s data?
- Create a DLP policy that provides limited access to the support engineer once a support case is opened
- Require the support engineer submit a Customer Lockbox request
- Give the support engineer remote access to Patti’s computer so that Patti can monitor every action the engineer takes
Conclusion:
I hope this MS-100 Implement applications and external access in Azure AD Microsoft Quiz Answers would be useful for you to learn something new from this problem. If it helped you then don’t forget to bookmark our site for more Coding Solutions.
This Problem is intended for audiences of all experiences who are interested in learning about Data Science in a business context; there are no prerequisites.
Keep Learning!
More Coding Solutions >>
