Exam MS-100 topic 2 question 5 discussion

Actual exam question from Microsoft's MS-100

Question #: 5
Topic #: 2

You recently migrated your on-premises email solution to Microsoft Exchange Online and are evaluating which licenses to purchase.
You want the members of two groups named IT and Managers to be able to use the features shown in the following table.

The IT group contains 50 users. The Managers group contains 200 users.
You need to recommend which licenses must be purchased for the planned solution. The solution must minimize licensing costs.
Which licenses should you recommend?

A. 250 Microsoft 365 E3 only
B. 50 Microsoft 365 E3 and 200 Microsoft 365 E5
C. 250 Microsoft 365 E5 only
D. 200 Microsoft 365 E3 and 50 Microsoft 365 E5

Show Suggested Answer

Suggested Answer: D 🗳️
Microsoft Azure Active Directory Privileged Identity Management requires an Azure AD Premium P2 license. This license comes as part of the Microsoft 365 E5 license. Therefore, we need 50 Microsoft 365 E5 licenses for the IT group.
Conditional Access requires the Azure AD Premium P1 license. This comes as part of the Microsoft E3 license. Therefore, we need 200 Microsoft 365 E3 licenses for the Managers group.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements

by kutty09 at April 8, 2021, 8:48 a.m.

Comments

Submit Cancel

PeterC

Highly Voted 4 years, 1 month ago

D - E3 has Conditional Access, PIM is E5

upvoted 17 times

...

melatocaroca

Highly Voted 4 years ago

PIM is a premium feature of Azure Active Directory, and as such does need licensing. The license required is Azure AD Premium P2, which is available as a standalone add-on license. You can also buy it as part of Azure AD Premium P2 • Enterprise Mobility + Security (EMS) E5 • Microsoft 365 Education A5 • Microsoft 365 Enterprise E5 Azure AD Premium P2 license comes as part of the Microsoft 365 E5 license. Therefore, we need 50 Microsoft 365 E5 licenses for the IT group. Conditional Access requires the Azure AD Premium P1 license. This comes as part of the Microsoft E3 license. Therefore, we need 200 Microsoft 365 E3 licenses for the Managers group. EMS E3, Microsoft 365 E3, and Microsoft 365 Business Premium includes Azure AD Premium P1. EMS E5 or Microsoft 365 E5 includes Azure AD Premium P2. Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing Answer B

upvoted 5 times

Velda

4 years ago

You mean D, right? Your analysis contradicts given answer. Answer D should be correct.

upvoted 4 times

Parzival

3 years ago

My thoughts too. Contradiction

upvoted 1 times

...

Y2

Most Recent 2 years, 8 months ago

The IT group contains 50 users & the Managers group contains 200 users so wouldn't you need 250 E3 and 50 E5?

upvoted 1 times

Paolo2022

2 years, 7 months ago

E5 includes all E3 features + more. D is correct. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#feature-comparison-based-on-licenses

upvoted 1 times

...