ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam
Go to Exam

Exam MS-100 topic 2 question 58 discussion

Actual exam question from Microsoft's MS-100
Question #: 58
Topic #: 2
[All MS-100 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit.

User2 fails to authenticate to Azure AD when signing in as [email protected].
You need to ensure that User2 can access the resources in Azure AD.
Solution: From the on-premises Active Directory domain, you set the UPN suffix for User2 to @contoso.com. You instruct User2 to sign in as [email protected].
Does this meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Josephsmith at April 30, 2021, 5:49 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
MartiFC
Highly Voted 3 years, 9 months ago
Yes is correct. change UPN
upvoted 7 times
...
gkp_br
Highly Voted 3 years, 11 months ago
Yes for me. User already sync, probably with @contoso.com UPN. So, user can sign in with [email protected].
upvoted 6 times
...
TechMinerUK
Most Recent 2 years, 11 months ago
Selected Answer: A
Changing the UPN to one which is verified and enabled for SSO will allow the user to sign into Microsoft 365 services. Granted the better option would be to verify fabrikam.com and ensure it is enabled for SSO, that isn't an option here so A is the best available choice
upvoted 3 times
...
charat
2 years, 11 months ago
Selected Answer: A
The goal is to ensure the user can access Azure AD resources. If that's the case, it would not matter if the user is logging in with a different UPN suffix. Therefore, A is correct.
upvoted 3 times
...
gaem
2 years, 11 months ago
Selected Answer: B
Correct answer
upvoted 1 times
...
jjong
3 years, 7 months ago
this qns came out in exam today
upvoted 4 times
...
jc1993
4 years ago
This is correct. Granted you wait for the next AD sync.
upvoted 2 times
forummj
2 years, 11 months ago
You could just push it through with Start-ADSyncSyncCycle -PolicyType Delta Powershell and you don't have to wait.
upvoted 1 times
...
...
Josephsmith
4 years ago
Not sure this is right. The answer is No
upvoted 3 times
chaoscreater
3 years, 10 months ago
If you're "not sure" then why give an "answer"? Doesn't help anyone. Just don't comment next time.
upvoted 22 times
Nico95
3 years, 8 months ago
Maybe answer C "not sure" is hidden
upvoted 3 times
...
TimurKazan
3 years, 8 months ago
Agree. He aint want no smoke
upvoted 1 times
...
venwaik
3 years, 9 months ago
You two should swap names :)
upvoted 4 times
...
...
BoxGhost
3 years ago
The question hints that contoso.com is already verified since it's been configured as part of AD connect. Therefore changing the UPN to contoso.com will allow the user to sign in and solves the issue.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago