Explore Password Management

Question 1

What is the default password expiration cycle in Microsoft 365?

Answer 1

90 days

Question 2

What is the default password expiration notification window in Microsoft 365?

Answer 2

14 days

Question 3

What powershell parameter can be used to disable password expiration in Microsoft 365?

Answer 3

PasswordNeverExpires

Question 4

What are the two options available for resetting a Global Administrator password?

Answer 4

1. As another Global Administrator

2. Reset your own password from sign-in page

Question 5

Which Microsoft 365 administrator role can change the password of a user who’s assigned to the Microsoft 365 Global administrator role?

Answer 5

Global Administrator

Question 6

On what server should the first connector for pass-through authentication be installed?

Answer 6

Same server with Azure AD Connect

Question 7

What subscription level is needed for writeback?

Answer 7

Azure AD Premium

Question 8

When passwords are changed in Microsoft 365, they can be written back to the on-premises Active Directory. Which of the following requirements must be met to enable this feature?

• You need an Azure Active Directory Premium license
  Your domain controllers must - be at least Windows Server 2003
• You need a Microsoft 365 E5 license

Answer 8

You need an Azure Active Directory Premium license

Question 9

What does Azure AD Smart Lockout do?

Answer 9

Locks out bad actors who are trying to guess user’s passwords

Question 10

What are two considerations for using Smart Lockout with Pass-through authentication?

Answer 10

1. Azure AD lockout threshold is less than the Active Directory threshold.
2. Azure AD lockout duration must be longer than Active Directory lockout counter.

Question 11

If an account is locked by Smart Lockout, what are the two ways to unlock the account?

Answer 11

1. Wait for the lockout duration to expire.

2. Use SSPR

Question 12

As the Enterprise Administrator for Tailspin Toys, you’re investigating the default password policy settings for Microsoft 365 users. Which of the following statements accurately reflects the Microsoft 365 password policy settings?

A. Passwords expire after 60 days, and users receive an expiration notification 10 days before it occurs
B. Passwords expire after 45 days, and users receive an expiration notification 7 days before it occurs
C. Passwords expire after 90 days, and users receive an expiration notification 14 days before it occurs

Answer 12

C

Question 13

As the Enterprise Administrator for Tailspin Toys, you’re interested in making self-service password reset functionality available to Tailspin’s users. To implement self-service password reset, which of the following conditions must be in place?

A. Password reset is only available for Microsoft 365 users with cloud identities that have passwords that aren’t linked to the on-premises AD DS
B. Password reset enables users to reset their own password after the Password administrator starts the transaction
C. To reset a password, either a Global administrator or a Password administrator must first authenticate the user’s identity

Answer 13

A