Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 1 question 31 discussion

Actual exam question from Microsoft's MS-100

Question #: 31
Topic #: 1

After acquiring a Microsoft 365 subscription, you configure the use of Microsoft Azure Multi-Factor Authentication (MFA) for all users in the Azure Active Directory
(Azure AD) tenant.
You want to produce a report that includes all the users who finished the Azure MFA registration process. You want to make use of an Azure Cloud Shell cmdlet.
Which of the following is the cmdlet you should use?

A. Get-AzureADUser
B. Get-MsolUser
C. New-AzureADMSInvitation
D. Set-MsolUserPrincipalName

Show Suggested Answer

Suggested Answer: B 🗳️

by ItsMax at July 1, 2021, 12:21 p.m.

Comments

Submit Cancel

ItsMax

Highly Voted 3 years, 12 months ago

sure complete command is: Get-MsolUser -All | Where-Object {$_.StrongAuthenticationMethods -ne $null -and $_.BlockCredential -eq $False} | Select-Object -Property UserPrincipalName

upvoted 28 times

extrankie

3 years, 5 months ago

great explanation

upvoted 2 times

...

emilianogalati

3 years, 10 months ago

Thank you. I will test it later on my tenant!

upvoted 1 times

...

Ademar

3 years, 9 months ago

Thanks

upvoted 2 times

...

st2023

Most Recent 2 years, 4 months ago

Selected Answer: B

https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting

upvoted 1 times

...

Don123

2 years, 5 months ago

B. Get-MsolUser

upvoted 1 times

...

Rick_James

2 years, 6 months ago

Microsoft has pushed out the retirement of the Azure AD and MSOL license management cmdlets to 31 March 2023.

upvoted 1 times

...

Mthaher

3 years, 1 month ago

B. Get-MsolUser

upvoted 2 times

...

Tibo49100

3 years, 2 months ago

MSOL commands are not available in Cloud Shell so I think this question is not valid any more

upvoted 3 times

...

trexar

3 years, 2 months ago

Selected Answer: B

Get-MsolUser -All | Where-Object {$_.StrongAuthenticationMethods -ne $null -and $_.BlockCredential -eq $False} | Select-Object -Property UserPrincipalName

upvoted 2 times

...

bakkus

3 years, 7 months ago

According to https://docs.microsoft.com/en-us/powershell/module/msonline/?view=azureadps-1.0 all MSOL cmdlets are being deprecated: "Please note that we will begin to deprecate this module when the functionality of this module is migrated to the Azure Active Directory PowerShell for Graph. We advise customers who are creating new PowerShell scripts to use the newer module instead of this module."

upvoted 3 times

...

Razgrad

3 years, 9 months ago

Is this still the correct answer? If we consider that this module is going to be deprecated shouldn't be the AzureAD cmdlet the valid one?

upvoted 3 times

FumerLaMoquette

3 years, 9 months ago

I'm not sure msol is going to be deprecated soon. It's AzureRM that's deprecated and replaced by Az.

upvoted 2 times

...

PDR

3 years, 6 months ago

certainly outdated question / answer now , but the msol commands sometimes do still contain options/properties that the AzureAd commands do not and can be the better option in some scenarios even now. For example , you cannot look for a user with a particular domain in the UPN with Get-AzureADUser but the MSOL command allows you to specify with -Domain switch. Yes you can use 'Where-Object' to pipe through but when you are working with large sets of users it is better to have your filters in the first command to be most efficient. Back to the OP though - main reason it needs updating is that the MFA and registration info is now available directly via a downloadable report in the portal and there is a new Authentication Methods experience that is is actually using different properties now only exposable via Graph API. You can use MGGraph powershell module and the Get-MgUserAuthenticationPhoneMethod to get the info via powershell also, or just graph API rest calls

upvoted 3 times

...