MS-100 Exam QuestionsBrowse all questions from this exam

MS-100 Exam - Question 1


After your company migrates their on-premises email solution to Microsoft Exchange Online, you are tasked with assessing which licenses to acquire.

You are informed that licenses acquired for the company's IT and Managers groups should allow for the following:

✑ The IT group needs to have access to the Microsoft Azure Active Directory (Azure AD) Privileged Identity Management.

✑ Both the IT and Managers groups should have access to Microsoft Azure Active Directory (Azure AD) conditional access.

You need to make sure that the licensing costs are kept to a minimum.

Which two of the following options should you recommend? (Choose two.)

Show Answer
Correct Answer: AD

To ensure that the licensing costs are kept to a minimum while meeting the requirements for both the IT and Managers groups, acquire Microsoft 365 E3 licenses for the Managers group and Microsoft 365 E5 licenses for the IT group. Microsoft 365 E3 includes access to conditional access, which both groups need. The IT group additionally requires access to Privileged Identity Management, which is available with Microsoft 365 E5.

Discussion

22 comments
Sign in to comment
fofo1960
Oct 8, 2021

IT = E5 Mangers = E3

EG_Jack
Oct 19, 2021

Correct

ElimGarak
Sep 28, 2021

Answer B and answer D are exactly the same: You should acquire Microsoft 365 E5 licenses for the Managers group members. I guess answer D should be : You should acquire Microsoft 365 E5 licenses for the IT group members.

mikl
Dec 31, 2021

IT needs : Microsoft 365 E5 = Azure P2 = Privileged Identity Management Managers needs : Microsoft 365 E3 = Azure P1 = Conditional Access

sabin001
Nov 12, 2021

Microsoft Azure Active Directory Privileged Identity Management requires an Azure AD Premium P2 license. This license comes as part of the Microsoft 365 E5 license. Conditional Access requires the Azure AD Premium P1 license. This comes as part of the Microsoft E3 license.

mikl
Dec 31, 2021

I agree.

Ronger
Jul 1, 2021

IT needs E5 for PIM? im confused

tarakuds
Jul 2, 2021

there was an error in the options, should be - E3 for managers and E5 for IT.

FumerLaMoquette
Aug 4, 2021

Yeah i agree, E3 for managers, E5 for IT. E5 has PIM, E3 doesn't. PIM requires AAD P2. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements#valid-licenses

zul_n
Oct 1, 2021

agree with this one.

lafcow
Sep 27, 2021

correct

zul_n
Oct 1, 2021

agree with this one.

FumerLaMoquette
Aug 4, 2021

Yeah i agree, E3 for managers, E5 for IT. E5 has PIM, E3 doesn't. PIM requires AAD P2. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/subscription-requirements#valid-licenses

zul_n
Oct 1, 2021

agree with this one.

lafcow
Sep 27, 2021

correct

zul_n
Oct 1, 2021

agree with this one.

tcmaggio
Dec 18, 2021

I love these ExamTopics and all the good stuff but sincerelly, this one BEGINS with a silly mistake... IT = E5 for the PIM features, E3 for managers since MFA is a common feature, life goes on. Readers, always check comments, follow the links and do not thrust what you see, specially if you think you have a better answer.. go for it!

Glorence
Jan 6, 2022

I think there's a mistake in the answer options, isn't D: E5 licenses for IT group members? so the answer is correct A and D.

joergsi
Feb 3, 2022

Where is the difference between answers B and D?

joergsi
Feb 9, 2022

Passed the Exam with 830 Points!

Don123
Jan 26, 2023

A&D is correct Microsoft 365 E3 license includes Azure Active Directory (Azure AD) Conditional Access, which is required for both the IT and Managers group members. Additionally, Azure AD Privileged Identity Management, which is required for the IT group members, is included in the Microsoft 365 E5 license but the cost is higher than the E3 license. Therefore, to keep the licensing costs to a minimum, you should recommend acquiring the Microsoft 365 E3 license for both the IT and Managers group members.

Oceanide
Nov 25, 2021

Answer D must be E5 to IT group members. So A and D are correct.

Zethembiso
Jan 25, 2022

This Question and provided answers does not make sense, but Privileged Identity Management only comes a part of E5 Plan, while you can have access to Conditional Access on E3 plan and and above

fmagnani
Feb 11, 2022

B and D are the same answer. So why B is wrong?

JamesM9
Mar 8, 2022

The answers are worded incorrectly, but in short - IT group need E5 licenses for PIM and the Managers group need E3 licenses.

Contactfornitish
Apr 12, 2022

Sample of blunder copy paste. PIM not available without E5. Trust me I managed enterprise for half decade and more CAS available with Azure AD P1, which comes with E3. So IT needs PIM which is logical as high risk accounts should be protected and access given with justification. Managers need E3 only for CAS

NASH77Options: AD
Sep 9, 2022

PIM only available in E5, IT users will get E5. Manager Groups require CAP which is available in E3 and E5 but E3 is least cost option.

NikolasFj98Options: AD
Nov 1, 2022

A D are correct

conorward96
Nov 15, 2022

Correct

StartkabelsOptions: AD
Dec 6, 2022

AD it is

egsalvadoriOptions: AD
Dec 29, 2022

PIM is only available for E5

BobDobolina
Feb 27, 2023

https://m365maps.com/matrix.htm

Adebimpeidiat
Apr 17, 2023

A&D is the answer

walther23Options: BD
Apr 19, 2025

los administradores y TI sera igual