单选题 Note: This question is part of a series of questions that present the same scenario. 

Each question in the series contains a unique solution that might meet the stated goals. 

Some question sets might have more than one correct solution, while others might not 

have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Active Directory forest that syncs to an Azure Active Directory (Azure AD) tenant.

You discover that when a user account is disabled in Active Directory, the disabled user can still authenticate to Azure AD for up to 30 minutes.

You need to ensure that when a user account is disabled in Active Directory, the user account is immediately prevented from authenticating to Azure AD.

Solution: You configure password writeback.

Does this meet the goal?

单选题 You have an Azure Active Directory (Azure AD) tenant that contains the following objects: 

✑ A device named Device1 

✑ Users named User1, User2, User3, User4, and User5 

✑ Groups named Group1, Group2, Group3, Group4, and Group5 

The groups are configured as shown in the following table.  

To which groups can you assign a Microsoft Office 365 Enterprise E5 license directly?

单选题 You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.

From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5 licenses to the users.

You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.

What should you use?

单选题

You have a Microsoft Exchange organization that uses an SMTP address space of contoso.com.

Several users use their contoso.com email address for self-service sign-up to Azure Active Directory (Azure AD).

You gain global administrator privileges to the Azure AD tenant that contains the selfsigned users.

You need to prevent the users from creating user accounts in the contoso.com Azure AD tenant for self-service sign-up to Microsoft 365 services.

Which PowerShell cmdlet should you run?

单选题 You have an Azure Active Directory (Azure AD) tenant that contains the objects shown in the following table.

Which objects can you add as members to Group3?

单选题 DRAG DROP - 

You have an on-premises Microsoft Exchange organization that uses an SMTP address space of contoso.com. 

You discover that users use their email address for self-service sign-up to Microsoft 365 services. 

You need to gain global administrator privileges to the Azure Active Directory (Azure AD) tenant that contains the self-signed users. 

Which four actions should you perform in sequence? 

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 

Select and Place:

单选题 Your network contains an on-premises Active Directory domain that syncs to an Azure 

Active Directory (Azure AD) tenant.

Users sign in to computers that run Windows 10 and are joined to the domain.

You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).

You need to configure the computers for Azure AD Seamless SSO.

What should you do?

单选题 You have a Microsoft 365 tenant that uses the domain named fabrikam.com. 

The Guest invite settings for Azure Active Directory (Azure AD) are configured as shown in the exhibit. (Click the Exhibit tab.) 

A user named bsmith@fabrikam.com shares a Microsoft SharePoint Online document 

library to the users shown in the following table.

Which users will be emailed a passcode?