Exam Microsft

Page No | 1
Microsoft
70-346 PRACTICE EXAM

Microsoft Managing Office 365 Identities and Requirements Exam
________________________________________________________________________________________________
https://www. pass4sures.com/
Page No | 2
Product Questooss 296/3Case Study

Versioos 23.0
Case Study: 1
Fabrikam, Inc (Case Study)

OverView
Fabrikam, inc is a fnanciaa services organizatonn
Fabrikam recentay purchased another fnanciaa services organizaton named Contoso, Ltdn
Fabrikam has 2000 usersn Contoso has 500 usersn
Windows 10 and ofce 2016 are depaoyed to aaa computersn
Physical Locatoos
Fabrikam has an ofce in the United Statesn Contoso has an ofce in the United Kingdomn
The ofces connect to each other by using a WAN ainkn Each ofce aaso connects directay to the internetn
Existon Eoviroomeots
Actve Directorys
The network Fabrikam contains an Actve Directory forestn
The Actve Directory environment of Contoso was migrated to the Actve Directory forest of Fabrikamn The forest
contains three domains named fabrikamncom , contractornfabrikamncom, and contosoncomn
Aaa domain controaaers run Windows Server 2008 R2n
Aaa contractors outsourced by fabrikam use the user principaa name (UPN) suff of contractornfabrikamncomn If
fabrikam hires the contractor as a permanenet empaoyee, the UPN suff changes to fabrikamncomn
Network
The network has the foaaowing confguratonsn
* Efternaa IP address for the United States ofcen 192n168n1n100
* Efternaa IP address for the United Kingdom ofcen 192n168n2n100
* Internaa IP address range for the United States ofcen 10n0n1n0/24
* Internaa IP address range for the United Kingdom ofce n 10n0n2n0/24
________________________________________________________________________________________________
Page No | 3
Actve Directory Federatoo Services (ADFS)
AD FS and web Appaicaton Profies are depaoyed to support an app for the saaes departmentn The app is accessed from
the Microsof Azure Portaan
Ofce 365 Teoaot
You have an Ofce 365 subscripton that has the foaaowing confguratonsn
* Organizaton namen Fabrikam Financiaa Servicesn
* Vanity domainn Fabrikamfnanciaaservicesnonmicrosofncom
* Microsof SharePoint domainn Fabrikamfnanciaaservices nsharepointncom
* Additonaa domain added to the subscriptonn Contosoncom and fabrikamncom
Requiremeotss
Plaooed Chaoness
* Depaoy Azure AD connectn
* Move maiabofes from Microsof Efchange 2016 to Efchange Onainen
* Depaoy Azure muat-factor authentcaton for devices that connect from untrusted networks onayn
* Customize the AD FS sign-in webpage to incaude the Fabrikam aogo, a heapdesk phone number, and a sign=in
descriptonn
* Once aaa of the Fabrikam users are repaicated to Azure Actve Directory (Azure AD), assign an E3 aicense to aaa of the
users in the United States ofcen
Techoical Requiremeotss
Contoso identfes the foaaowing technicaa requirementsn
* When a device connects from an untrusted network to htpsn//outaooknofcencom, ensure that users must type a
verifcaton code generated from a mobiae appn
* Ensure that aaa users can access ofce 365 services from a web browser by using either a UPN or their primary SMTP
emaia addressn
* Afer Azure AD connect is depaoyed, change the UPN suff if aaa the users in the Contoso saaes department to
fabrikamncomn
* Ensure that administrator are notfed when the heaath informaton of Efchange Onaine changesn
* User Ofce 365 reports to review previous tasks performed in Ofce 365n
Questoos 1
________________________________________________________________________________________________
Page No | 4
DRAG DROP
Noten This queston is part of a series of questons that present the same scenarion Each queston in the series contains
a unique soauton that might meet the stated goaasn Some queston sets might have more than one correct soauton,
whiae others might not have a correct soautonn
Afer you answer a queston in this secton, you wiaa NOT be abae to return to itn As a resuat, these questons wiaa not
appear in the review screenn
You need to ensure that aaa of the paanned changes for the AD FS sign-in webpage are performed successfuaayn
Which cmdaet shouad you use to perform each change? To answer, drag the appropriate cmdaets to the correct types
of changen Each cmdaet may be used once, more than once, or not at aaan You may need to drag the spait bar between
panes or scroaa to view contentn
Aoswers
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn280950(v=wsn11)naspf
Questoos 2
You need to ensure that a user named User1 can create maiabofes in Efchange Onaine and sites in SharePoint Onainen
Soautonn You add User1 to the Efchange administrator admin roaen
Does this meet the goaa?
An Yes
Bn No
Aoswers B
Efpaanatonn
The Efchange administrator admin roae does not have the necessary priviaeges to create maiabofes in Efchange Onaine
________________________________________________________________________________________________
Page No | 5
and sites in SharePoint Onainen

Referencesn
htpsn//supportnofcencom/en-us/artcae/About-Ofce-365-admin-roaes-da585eea-f576-4f55-a1e0-87090b6aaa9d
Questoos 3
Soautonn You add User1 to the Service administrator admin roaen
An Yes
Bn No
Aoswers B
Efpaanatonn
The Service administrator admin roae does not have the necessary priviaeges to create maiabofes in Efchange Onaine
and sites in SharePoint Onainen
Referencesn
Questoos 4
You need to recommend a soauton to meet the technicaa requirement for monitoring the heath informatonn
What shouad you recommend?
An Use the Ofce 365 Admin app to receive push notfcatonsn

Bn From the Ofce 365 admin center, modify the Services and &add-ins setngsn
Cn From the Ofce 365 admin center, modify the Organizaton Profae setngsn
Dn Use the Company Portaa app to receive push notfcatonsn
Aoswers A
Efpaanatonn
You can use the Ofce 365 Admin app on your mobiae device to view Service heaath, which is a great way to stay
current with push notfcatonsn
Referencesn
htpsn//supportnofcencom/en-gb/artcae//ow-to-check-Ofce-365-service-heaath-932ad3ad-533c-418a-b938-
________________________________________________________________________________________________
Page No | 6
6e44e8bc33b0?ui=en-US&rs=en-GB&ad=GB
Questoos 5
DRAG DROP
You need to identfy which report must be used to view previous tasks performed in Ofce 365n
Which type of report shouad you use for each task? To answer, drag the appropriate reports to the correct tasksn Each
report may be used once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to
view contentn
Aoswers
Account creaton faaas under the user administraton actvites that are aogged by the audit aogn
Password poaicy modifcaton faaas under the Azure AD directory and domain reaated actvites that are aogged by the
audit aogn
The Ofce actvatons report is avaiaabae in the Ofce 365 admin centern
Referencesn
htpsn//supportnofcencom/en-us/artcae/Search-the-audit-aog-in-the-Ofce-365-Security-Compaiance-Center-
0d4d0f35-390b-4518-800e-0c7ec95e946c?ui=en-US&rs=en-US&ad=US#PickTab=Actvites
htpsn//supportnofcencom/en-us/artcae/Actvity-Reports-in-the-Ofce-365-Admin-Center-0d6df17-8582-4172-a9a9-
aed798150263
________________________________________________________________________________________________
Page No | 7
Questoos 6
/OTSPOT
You depaoy Azure AD Connectn
You modify the UPN suff of each saaes department user to fabrikamncomn
You need to ensure that the Actve Directory changes are updated in Ofce 365n
What command shouad you run? To answer, seaect the appropriate optons in the answer arean
Aoswers
The Set-MsoaUserPrincipaaName cmdaet is used to change the User Principaa Name, or user ID, of a usern It can be
used to move a user between a federated and standard domain, which resuats in their authentcaton type changing to
that of the target domainn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauserprincipaaname?view=azureadps-1n0
Questoos 7
/OTSPOT
________________________________________________________________________________________________
Page No | 8
You synchronize aaa of the fabrikamncom users to Azure ADn
You need to impaement the paanned changes for the users in the United States ofcen
Which command shouad you run? To answer, seaect the appropriate optons in the answer arean
Aoswers
The Get-MsoaUser cmdaet gets an individuaa user or aist of users from Azure Actve Directoryn
The –UnaicensedUsersOnay parameter indicates that onay users who are not assigned a aicense are returnedn
The Set-MsoaUser cmdaet modifes a user object in Azure Actve Directoryn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/get-msoauser?view=azureadps-1n0
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauser?view=azureadps-1n0
Questoos 8
/OTSPOT
________________________________________________________________________________________________
Page No | 9
You need to confgure the AD FS servers to meet the technicaa requirement for accessing Ofce 365 from a web
browsern
Aoswers
The Set-AdfsCaaimsProviderTrust cmdaet is used to confgure the trust reaatonship with a caaims providern The –
AaternateLoginID parameter identfes the LDAP name of the atribute that you want to use for aoginn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn479371(v=wpsn630)naspf
Questoos 9
________________________________________________________________________________________________
Page No | 10
You need to confgure the Ofce 365 subscripton to ensure that Actve Directory users can connect to Ofce 365
resources by using singae sign-on (SSO)n
Soautonn You run Convert-MsoaFederatedUser for aaa usersn
An Yes
Bn No
Aoswers B
Efpaanatonn
The Convert-MsoaFederatedUser cmdaet updates a user in a domain that was recentay converted from singae sign-on
to standard authentcaton typen This opton wiaa not meet the objectve of the questonn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/convert-msoafederateduser?view=azureadps-1n0
Questoos 10
Soautonn You run Convert-MsoaDomainToFederated for the fabrikamncom domain and the contosoncom domainn
An Yes
Bn No
Aoswers A
Efpaanatonn
The Convert-MSOLDomainToFederated cmdaet converts the specifed domain from standard authentcaton to singae
sign-onn This incaudes confguring the reaying party trust setngs between the Actve Directory Federaton Services 2n0
server and Microsof Onainen As part of convertng a domain from standard authentcaton to singae sign-on, each user
must aaso be convertedn This conversion happens automatcaaay the neft tme a user signs inn No acton is required by
the administratorn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/convert-msoadomaintofederated?view=azureadps-
1n0
Questoos 11
________________________________________________________________________________________________
Page No | 11
Soautonn You run Convert-MsoaDomainToFederated for the contractornfabrikamncom domain and the
fabrkamfnanciaaservicesnonmicrosofncom domainn
An Yes
Bn No
Aoswers B
Efpaanatonn
The Contosoncom and fabrikamncom domains are being added to the Ofce 365 subscripton, not the
contractornfabrikamncom domainn Fabrikamfnanciaaservicesnonmicrosofncom is the vanity domain for the Ofce 365
subscriptonn
Questoos 12
Soautonn You run Convert-MsoaDomainToStandard for the fabrikamncom domain and the contosoncom domainn
An Yes
Bn No
Aoswers B
Efpaanatonn
Questoos 13
You need to modify the Ofce 365 subscripton to support the paanned changes for the devices that connect from
untrusted networksn
You enabae Azure muat-factor authentcaton for aaa of the users in the subscriptonn
What shouad you do neft from the Ofce 365 portaa?
An Add a trusted domainn

Bn Set the Trusted IPs to 10n0n1n0/24 and 10n0n2n0/24n
Cn Set the Trusted IPs to 192n168n1n100/32 and 192n168n2n100/32
Dn Convert the fabrikamncom domain to a federated domainn
Aoswers C
Efpaanatonn
________________________________________________________________________________________________
Page No | 12
Adding trusted IP’s is efcauding a set of addresses from MFAn MFA is hosted outside your LAN so you communicate
with the service using your pubaic IP’sn
The case teaas us that the efternaa IP’s are 192n168n1n100 and 192n168n2n100 so these shouad be added as trusted IP’s
in MFAn
Referencesn
htpsn//docsnmicrosofncom/na-na/azure/muat-factor-authentcaton/muat-factor-authentcatonwhats-neft#trusted-
ips
Questoos 14
Soautonn You add User1 to the SharePoint administrator admin roaen
An Yes
Bn No
Aoswers B
Case Study: 2
Contoso, Ltd (Case Study)
Background
Contoso, Ltd. is a global manufacturing company with headquarters in Dallas. All sales users are located at
the headquarters. Currently all Contoso, Ltd. users use the following on-premises services:
Microsoft Exchange Server 2016
Microsoft Skype for Business Server 2015
Active Directory Domain Services (AD DS) domain for contoso.com
Many temporary workers are hired and terminated on a regular basis at the Dallas location, Contoso, Ltd.
purchases two other manufacturing companies, Fabrikam, Inc. and ADatum Corporation. Fabrikam, Inc. is
based in London. Fabrikam, Inc. has an on-premises third-party email system that uses @fabrikam.com for
all email addresses. Fabrikam, Inc. does not have an Active Directory domain.
ADatum Corporation is based in Paris. The company is in the process of migrating users to Exchange
Online. They plan to migrate users to Microsoft OneDrive for Business for file storage and sharing. All
ADatum Corporation account identities will be cloud based.
You deploy Microsoft Office 2016 client apps to all corporate devices.
In preparation for the deployment of Office 365 services, you set up the latest version of Azure Active
Directory (Azure AD) Connect for the contoso.com domain. The application runs on Server1.contoso.com
________________________________________________________________________________________________
Page No | 13
and uses a Microsoft SQL Server database instance that runs on Server2.contoso.com. The sync schedule is
configured to synchronize every two hours.
You purchase the following four servers for future needs: Server3, Server4, Server5, and Server6. All new
servers for the contoso.com domain must run Windows Server 2012 R2.
Business Requirements
Contoso, Ltd. users must be able to store and share personal documents that are accessible from any web
browser or mobile device. Fabrikam, Inc. users must be able to send individual instant messages as well as
use group chat workspaces.
Office 365
New services should be implemented in Office 365 when possible. There is also a strong push to move
existing services to Office 365, but there is currently no money in the budget for data migration. The least
expensive Office 365 plan must be used whenever possible.
Password policies
You must implement the following password policies for ADatum Corporation users.
Contoso Sync
You receive reports that new users are not granted access to Office 365 resources fast enough. You must
ensure that new accounts are provisioned as quickly as possible.
You observe that the accounts for many temporary workers have not been deprovisioned correctly. You need
to ensure terminated users have their access and accounts removed. You must ensure that up to 1,000
accounts can be deleted correctly during each Azure AD Connect sync cycle. You must ensure that deletions
of over 1,000 accounts at a time cannot occur.
Single Sign-On
Contoso.com users need to start using sign-on (SSO) for Office 365 resources so they can authenticate
against the on-premises Active Directory. Any solution needs to be redundant. Any Internet-facing servers
need to reside in the perimeter network.
Problem Statements
Authentication Fallback
Sales users report that they were not able to access any Office 365 resources. Contoso.com users must be
able to access Office 365 resources if the on-premises authentication resources are down or unavailable. You
also need to quickly resume SSO authentication when on-premises servers are available again.
ADatum Corporation users report issues sending and receiving emails. Some business partners report that
emails from ADatum Corporation are rejected because the receiving server cannot validate that emails come
from an authorized messaging server.
Questoos 1
________________________________________________________________________________________________
Page No | 14
/OTSPOT
You need to create a DNS record to resoave the emaia issues for ADatum Corporaton usersn
/ow shouad you confgure the DNS record? To answer, seaect the appropriate optons in the answer arean
NOTEn Each correct seaecton is worth one pointn
Aoswers
MX (maia efchanger) records ofer an simpae way for maia servers to know where to send emaian If you want Ofce 365
to receive aaa emaia addressed to anyone@contosoncom, the MX record for contosoncom shouad point to Ofce 365,
and it wiaa aook aike the foaaowing efampaen
/ostnamen contoso-comnmaianprotectonnoutaookncom
Priorityn 0
TTLn 1 hour
Referencesn
htpsn//supportnofcencom/en-us/artcae/Create-DNS-records-at-Register365-for-Ofce-365-004030b4-10ad-4026-
96e7-011b6afc7e73#bkmk_add_mf
htpsn//technetnmicrosofncom/en-us/aibrary/jj937232(v=efchgn150)naspf
Questoos 2
/OTSPOT
You need to confgure the singae sign-on environment for Contoson
Which certfcate type and DNS entry shouad you use? To answer, seaect the appropriate optons in the answer arean
________________________________________________________________________________________________
Page No | 15
Aoswers
Bof 1n seaf-signed SSL
Bof 2n stsncontosoncom
The token-signing certfcate must contain a private key that chains to a trusted root in the FSn AD FS creates a seaf-
signed certfcate by defauatn
It is recommend that the seaf-signed token-signing certfcate generated by AD FS is usedn
Microsof best practces recommends that you use the host name, STS (secure token service)n ien stsndomainncomn
Referencesn
htpsn//wwwndigicertncom/csr-creaton-microsof-ofce-365nhtm
htpsn//supportnofcencom/en-us/artcae/Paan-for-third-party-SSL-certfcates-for-Ofce-365-b48cdf63-07e0-4cda-
8c12-4871590f59ce?ui=en-US&rs=en-US&ad=US
Questoos 3
/OTSPOT
You need to impaement the password poaicy for ADatum Corporaton usersn
/ow shouad you compaete the Windows PowerSheaa command? To answer, seaect the appropriate optons in the
answer arean
________________________________________________________________________________________________
Page No | 16
Aoswers
Set-MsoaPasswordPoaicy -VaaidityPeriod 180 -NotfcatonDays 14 -DomainName adatumncom

The Set-MsoaPasswordPoaicy cmdaet is used to update the password poaicy of a specifed domain or tenantn
The –VaaidityPeriod parameter stpuaates the aength of tme that a password is vaaid before it must be changedn
The –NotfcatonDays parameter stpuaates the number of days before the password efpiraton date that triggers
when users receive their frst notfcaton that their password wiaa soon efpiren
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoapasswordpoaicy?view=azureadps-1n0
Questoos 4
You enabae password synchronizaton for Contoso, Ltdn
You need to impaement the authentcaton requirements for users in the saaes teamn
Which Windows PowerSheaa command shouad you run?
________________________________________________________________________________________________
Page No | 17
An Set-MsoaDomainAuthentcaton -DomainName fabricamncom -Authentcaton Managed

Bn Convert-MsoaDomainToStandard -DomainName contosoncom
Cn Set-MsoaDomainAuthentcaton -DomainNAme contosoncom -Authentcaton Managed
Dn Convert-MsoaDomainToStandard -DomainNAme fabricamncom
Aoswers C
Efpaanatonn
The domain being associated with Ofce 365 must be managed by Ofce 365 before singae sign-on and provisioning
can be enabaed for your usersn
Referencesn
htpsn//supportnoneaoginncom/hc/en-us/artcaes/203748160-Disabaing-ADFS-federaton-to-enabae-OneLogin-SSO-
with-Ofce-365
Questoos 5
/OTSPOT
You need to ensure that new accounts are provisioned correctayn
What shouad you do? To answer, seaect the appropriate optons in the answer arean
NOTEn Each seaecton is worth one pointn
Aoswers
________________________________________________________________________________________________
Page No | 18
The Azure Actve Directory (Azure AD) Connect appaicaton for the contosoncom domain runs on Server1ncontosoncomn
The Set-ADSyncScheduaer cmdaet aaaows you to modify the CustomizedSyncCycaeIntervaa parametern
The queston statesn “You receive reports that new users are not granted access to Ofce 365 resources fast enoughn
You must ensure that new accounts are provisioned as quickay as possibaen” Since the scheduaer is aaready confgured
to sync every 2 hours (120 minn), 30 minutes shouad be confguredn
Referencesn
htpsn//docsnmicrosofncom/en-us/azure/actve-directory/connect/actve-directory-aadconnectsync-feature-scheduaer
Questoos 6
DRAG DROP
You need to enabae the new features in Ofce 365 for contosoncom and fabricamncom usersn
Which paans shouad you impaement? To answer, drag the appropriate paans to the correct domainsn Each paan may be
used once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
________________________________________________________________________________________________
Page No | 19
Aoswers
The scenario statesn “Contoso, Ltdn users must be abae to store and share personaa documents that are accessibae from
any web browser or mobiae devicen Fabrikam, Incn users must be abae to send individuaa instant messages as weaa as
use group chat workspacesn” The scenario aaso statesn “The aeast efpensive Ofce 365 paan must be used whenever
possibaen”
Ofce 365 ProPaus ofers Ofce appaicatons paus caoud fae-storage and sharingn
Ofce 365 Enterprise E1 ofers emaia, fae storage and sharing, Ofce Onaine, meetngs and IM, and moren
Referencesn
htpsn//productsnofcencom/en-za/business/compare-more-ofce-365-for-business-paans
Questoos 7
/OTSPOT
You need to provision an account for a new saaes efecutve at Contoso, Ltdn
What shouad you do? To answer, seaect the appropriate optons in the answer arean
________________________________________________________________________________________________
Page No | 20
Aoswers
________________________________________________________________________________________________
Page No | 21
The Azure Actve Directory (Azure AD) Connect appaicaton for the contosoncom domain runs on Server1ncontosoncomn
The Start-ADSyncSyncCycae -PoaicyType Initaa command initates a fuaa sync cycaen A fuaa sync cycae is required when
you have made one of the foaaowing confguraton changesn
An account faaas under objectsn
Referencesn
htpsn//docsnmicrosofncom/en-us/azure/actve-directory/connect/actve-directory-aadconnectsync-feature-
scheduaer#start-the-scheduaer
Questoos 8
You need to impaement an authentcaton soauton for contosoncom usersn

What shouad you do?
An Instaaa two Actve Directory Federaton Services (AD FS) servers and two AD FS Profy serversn
Bn Instaaa a second Azure AD Connect servern Add a second SQL Server instance in an Aaways On Faiaover Causter and
impaement password syncn
Cn Instaaa two Actve Directory Federaton Services (AD FS) servers and two Web Appaicaton Profy (WAP) serversn
Dn Instaaa a singae Actve Directory Federaton Services (AD FS) server and a singae Web Appaicaton Profy (WAP) servern
Aoswers A
Case Study: 3
________________________________________________________________________________________________
Page No | 22
Mix Questons
Questoos 1
DRAG DROP
Contoso, Ltdn has an Ofce 365 tenantn The company has two servers named Server1 and Server2 that run Windows
2012 R2 Servern The servers are not joined to the contosoncom domainn Server2 is depaoyed to the perimeter networkn
You instaaa Secure Sockets Layer (SSL) certfcates on both serversn
You must use Integrated Windows authentcaton
You need to instaaa and confgure aaa AD FS components in the environmentn
Which four actons shouad you perform in sequence? To answer, move the appropriate actons from the aist of actons
to the answer area and arrange them in the correct ordern
Aoswers
Bof 1n Instaaa and Confgure AD FS on Server1n
Bof 2n Join Server1 to the contosoncom domain
Bof 3n Run the foaaowing Windows PowerSheaa cmdaet on Server2n
Instaaa-WindowsFeature
Bof 4n Run the foaaowing Windows PowerSheaa cmdaet on Server2n
Instaaa-WebAppaicatonprofy
Noten
Prepare the Base Servers
Bof 1, Bof 2n AD FS Server
________________________________________________________________________________________________
Page No | 23
Bof 3, Bof 4n AD FS Profy Server

Once the necessary WAP roae services are instaaaed, we are then abae to aaunch the Web Appaicaton Profy Wizard to
confgure WAPn
Noten
Questoos 2
A company has an Ofce 365 tenant and uses Efchange Onaine and Skype for Business Onainen
User1 is scheduaing a Skype meetng with User2n User 1 is not abae to see avaiaabiaity informaton for User2n
You need to troubaeshoot the issuen
What shouad you use?
An Microsof Skype for Business Connectvity Anaayzer Tooa

Bn OCSLogger
Cn CasControaaer
Dn Remote Connectvity Anaayzer
Aoswers C
Efpaanatonn
Centraaized Logging Service (CLS) is a new feature in Lync Server 2013n It provides a mechanism to enabae/disabae
aogging across aaa Skype for Business servers in a depaoyment from a singae interface and to search the resuatng aogs
from the same interfacen
You specify what shouad be aogged based on the scenario you want to investgaten The scenarios supported are
AawaysOn, MediaConnectvity, AppaicatonSharing, AudioVideoConferencingIssue, /ybridVoice,
IncomingAndOutgoingCaaa, VoiceMaia, IMAndPresence, AddressBook,DeviceUpdate, LYSSAndUCS, CLS, SP, WAC,
UserRepaicator, /ostedMigraton, MonitoringAndArchiving, LILRLegacy, LILRLYSS, MeetngJoin, RGS, CPS, XMPP and
CAAn
Questoos 3
You have an Efchange Onaine tenantn User1 reports that they are not abae to check their emaian Other users can check
their emaian
You remoteay connect to User1’s sessionn
You need to troubaeshoot why the user cannot check his emaian
An POP Emaia test

Bn Outaook Connectvity test
Cn Microsof Remote Connectvity Anaayzer
Dn Microsof Connectvity Anaayzer
En Outaook Autodiscover test
Fn IMAP Emaia test
Aoswers C
Efpaanatonn
Microsof Remote Connectvity Anaayzer (htpsn//testconnectvitynmicrosofncom/) can test incoming and outgoing e-
maian
Referencesn
htpsn//testconnectvitynmicrosofncom/
________________________________________________________________________________________________
Page No | 24
Questoos 4
You have an Efchange Onaine tenantn

You must identfy maiabofes that are no aonger in usen
You need to aocate the inactve maiabofesn
An Get-StaaeMaiabofReport-StartDate
Bn Get-MaiabofActvityReport-StartDate
Cn Get-MaiabofActvityReport-Efpression
Dn Get-MaiabofActvityReport-EndDate
Aoswers A
Efpaanatonn
Use the Get-StaaeMaiabofDetaiaReport cmdaet to view maiabofes that haven't been accessed for at aeast 30daysn
The StartDate parameter specifes the start date of the date rangen
Questoos 5
DRAG DROP
A graphic design agency has an Ofce 365 tenantn The agency uses onay computers that run the Appae Macintosh
operatng systemn Some users have Microsof Entourage 2008 for Mac, and some have Microsof Outaook for Macn
Aaa users report that they cannot access Efchange Onaine to check their emaian
You need to run test connectvity for aaa users to identfy the probaemn You need to use the Microsof Remote
Connectvity Anaayzer and the credentaas of the usersn
What shouad you do? To answer, drag the appropriate test to run to the correct emaia caientn Each test may be used
once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
Aoswers
Questoos 6
________________________________________________________________________________________________
Page No | 25
A company has an Ofce 365 tenantn You impaement two-factor authentcaton for aaa usersn You hire an empaoyee
named User1 to track service usage and statusn
User1 must be abae to monitor the status of the services over a period of tme by using a reportn User1 does not have
administrator accessn
You need to provide a report for User1n
Which report soauton shouad you choose?
An downaoadabae spreadsheet
Bn REST reportng web service
Cn reportng Windows PowerSheaa cmdaets
Dn Ofce 365 admin center
Aoswers B
Efpaanatonn
The Ofce 365 Reportng web service enabaes deveaopers to integrate informaton on emaia and spam, antvirus
actvity, compaiance status, and Skype for Business Onaine actvites into their custom service reportng appaicatons
and web portaasn
Aaa the reports avaiaabae in the admin portaa, within the downaoadabae Microsof Efcea spreadsheets, and those
accessed through Windows PowerSheaa cmdaets, are accessibae using the Reportng web servicen
Questoos 7
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn

You use singae sign-on for aaa user accountsn You paan to migrate aaa services to Ofce 365n
You need to ensure that aaa accounts use standard authentcatonn
Which Windows PowerSheaa cmdaet shouad you run?
An Set-MsoaUser
Bn Redo-MsoaProvisionUser
Cn Set-MsoaUserLicense
Dn Set-MsoaUserPrincipaaName
En Convert-MsoaFederatedUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers E
Efpaanatonn
The Convert-MsoaFederatedUser cmdaet is used to update a user in a domain that was recentay converted from singae
sign-on (aaso known as identty federaton) to standard authentcaton typen
Questoos 8
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn You confgure the poaicies required for
seaf-service password resetn
You need to ensure that aaa efistng users can perform seaf-service password resetsn
________________________________________________________________________________________________
Page No | 26
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers C
Efpaanatonn
Seaf-service password reset with on-premises write-back is a Premium-onay featuren
Efampaen
The foaaowing command adds the Ofce 365 for enterprises aicense to the usern
Set-MsoaUserLicense -UserPrincipaaName user@contosoncom -AddLicenses "ContosonENTERPRISEPACK"
Noten The Set-MsoaUserLicense cmdaet can be used to adjust the aicenses for a usern This can incaude adding a new
aicense, removing a aicense, updatng the aicense optons, or any combinaton of these actonsn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauseraicense?view=azureadps-1n0
Questoos 9
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn The company has ofces in severaa
diferent countriesn
You need to restrict Ofce 365 services for efistng users by aocatonn
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers A
Efpaanatonn
The Set-MsoaUser cmdaet is used to update a user objectn
Efampaen The foaaowing command sets the aocaton (country) of this usern The country must be a two-aeter ISO coden
This can be set for synced users as weaa as managed usersn
Set-MsoaUser -UserPrincipaaName user@contosoncom -UsageLocaton "CA"
Noten
Some organizatons may want to create poaicies that aimit access to Microsof Ofce 365 services, depending on where
the caient residesn
Actve Directory Federaton Services (AD FS) 2n0 provides a way for organizatons to confgure these types of poaiciesn
Ofce 365 customers using Singae Sign-On (SSO) who require these poaicies can now use caient access poaicy ruaes to
restrict access based on the aocaton of the computer or device that is making the requestn Customers using Microsof
________________________________________________________________________________________________
Page No | 27
Onaine Services caoud User IDs cannot impaement these restrictons at this tmen
Questoos 10
/OTSPOT
A company paans to synchronize users in an efistng Actve Directory organizatonaa unit with Ofce 365n
You must confgure the Azure Actve Directory Connect with password sync
You need to ensure that the service account has the minimum aevea of permissions requiredn
Which two permission aeveas shouad you assign to the account for each task? To answer, seaect the appropriate
permission aevea from each aist in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 28
Password Write-Back
For each forest you have confgured in Azure AD Sync, the account you have specifed for a forest in the wizard must
be given the “Reset-Password” and “Change Password” eftended rights on the root object of each domain in the
forestn
Permissions for password synchronizaton
If you want to enabae password synchronizaton between your on-premises AD DS and your Azure Actve Directory for
your users, you need to grant the foaaowing permissions to the account that is used by Azure AD Sync to connect to
your AD DSn
Questoos 11
You have an Ofce 365 tenant that uses an Enterprise E3 subscriptonn You actvate Azure Rights Management for the
tenantn
You must test the service with the Deveaopment security group before you depaoy Azure Rights Management for aaa
usersn
You need to enabae Azure Rights Management for onay the Deveaopment security groupn
An Enabae-Aadrm
Bn New-AadrmRightsDefniton
Cn Enabae-AadrmSuperUserFeature
Dn Add-AadrmSuperUser
En Set-AadrmOnboardingControaPoaicy
Aoswers E
Efpaanatonn
The Set-AadrmOnboardingControaPoaicy cmdaet sets the poaicy that controas user on-boarding for Azure Rights
________________________________________________________________________________________________
Page No | 29
Managementn This cmdaet supports a graduaa depaoyment by controaaing which users in your organizaton can protect
content by using Azure Rights Managementn
Efampaen
Restrict Azure RMS to users who are members of a specifed group
This command aaaows onay users that are members of the security group withthe specifed object ID to protect content
by using Azure Rights Managementn The command appaies to Windows caients and mobiae devicesn
Windows PowerSheaa
PS Cn\> Set-AadrmOnboardingControaPoaicy -UseRmsUserLicense $Faase-SecurityGroupObjectId "f
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/aadrm/set-aadrmonboardingcontroapoaicy?view=azureipps
Questoos 12
You have a aegacy appaicaton that needs to send emaia to empaoyeesn The aegacy appaicaton runs on a caient
computern
The aegacy appaicaton must send emaia by using IMAP through Efchange Onainen
You need to identfy the correct host name and port informatonn
Which setngs shouad you use?
An Imapnofce365ncom and port 993

Bn Imapnofce365ncom and port 143
Cn Outaooknofce365ncom and port 993
Dn Outaooknofce365ncom and port 143
Aoswers C
Efpaanatonn
For Ofce 365for business, use the foaaowing setngsn
IMAP4
outaooknofce365ncom
993 impaicit
Questoos 13
A company has an Ofce 365 tenantn You paan to distribute the Ofce 365 ProPaus caient to usersn
The caient machines do not normaaay have Internet accessn
You need to actvate the Ofce 365 ProPaus instaaaatons and ensure that the aicenses remain actven
What shouad you do?
An Connect the caient computer to the Internet once to actvate the Ofce 365 ProPaus caient, and once every 90days
afer thatn
Bn Connect the caient computer to the Internet once to actvate the Ofce 365 ProPaus caient, and once every 30 days
afer thatn
Cn Connect the caient computer to the Internet onay once to actvate the Ofce 365 ProPaus caientn
Dn Connect the caient computer to the Internet once to actvate the Ofce 365 ProPaus caient, and once every 180 days
afer thatn
En Connect the caient computer to the Internet once to actvate the Ofce 365 ProPaus caient, and once every 365 days
afer thatn
Aoswers B
________________________________________________________________________________________________
Page No | 30
Efpaanatonn
Afer you've verifed the user is assigned a aicense, you shouad check that Ofce 365 ProPaus is actvatedn Actvaton
usuaaay occurs during initaa instaaaatonn The computer has to connect to the Internet at aeast once every 30 days for
Ofce 365 ProPaus to remain actvatedn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/gg702620naspf
Questoos 14
/OTSPOT
You manage an Ofce 365 tenantn The subscripton detaias for the tenant are dispaayed in the foaaowing screenshotn
Use the drop-down menus to seaect the answer choice that answers each questonn
NOTEn Each correct answer is worth one pointn
Aoswers
________________________________________________________________________________________________
Page No | 31
Each user can instaaa Ofce on 5 PCs or Macs, 5 tabaets (Windows, iPad, and Android), and 5 phonesn
Onaine Services incaudenEfchange, Sharepoint, Yammer, Skype for Business, etcn
Ofce 365Smaaa Business Premium supports a mafimum of 300 users
Questoos 15
A company has an Ofce 365 tenantn The company uses a third-party DNS provider that does not aaaow TXT recordsn
You need to verify domain ownershipn
What shouad you do?
An Create an MX recordn
Bn Create a CNAME recordn
Cn Create an A recordn
Dn Create an SRV recordn
Aoswers A
Efpaanatonn
Add a TXT or MX record for DNS verifcatonn
Referencesn
htpsn//supportnofcencom/en-us/artcae/Change-nameservers-to-set-up-Ofce-365-with-any-domain-registrar-
a8b487a9-2a45-4581-9dc4-5d28a47010a2
Questoos 16
A company has an Ofce 365 tenantn

You must reset the password for an account named User1n
You need to ensure that the new password for the account meets compaefity ruaesn
Which two passwords can you use? Each correct answer presents a compaete soautonn
An Summer2015
Bn May2015
Cn User1User1
Dn summer2015
________________________________________________________________________________________________
Page No | 32
En May 2015
Fn summer!@#$
Gn M1crosof
Aoswers A,G
Efpaanatonn
If the user is set to require a strong password, then aaa of the foaaowing ruaes must be metn
The password must contain at aeast one aowercase aetern
The password must contain at aeast one uppercase aetern
The password must contain at aeast one non-aaphanumeric charactern
The password cannot contain any spaces, tabs, or aine breaksn
The aength of the password must be 8-16 charactersn
The user name cannot be contained in the passwordn
Referencesn
htpsn//docsnmicrosofncom/en-us/azure/actve-directory/actve-directory-passwords-poaicy
Questoos 17
Your company depaoys an Ofce 365 tenantn

You need to ensure that you can view service heaath and maintenance reports for the past seven daysn
What are two possibae ways to achieve this goaa? Each correct answer presents a compaete soautonn
An View the service heaath current status page of the Ofce 365 admin centern
Bn Subscribe to the Ofce 365 Service /eaath RSS Notfcatons feedn
Cn View the service setngs page of the Ofce 365 admin centern
Dn Run the Microsof OnRamp Readiness Tooan
Aoswers A,B
Efpaanatonn
As an Ofce 365 admin, you can see whether there has been a service interrupton or outage in your service on the
Ofce 365 service heaath pagen The Service heaath page shows status informaton for today, the past sif days, and 30
days of historyn
Questoos 18
You are the Ofce 365 administrator for your companyn

Users report that they have received signifcantay more spam messages over the past month than they normaaay
receiven
You need to anaayze trends for the emaia messages received over the past 60 daysn
From the Ofce 365 admin center, what shouad you view?
An the Maia protecton reports

Bn the Ofce 365 Maaware detectons in received maia report
Cn messages on the Message center page
Dn the Maiabof access by non-owners report
Aoswers A
________________________________________________________________________________________________
Page No | 33
Efpaanatonn
Use maia protecton reports in Ofce 365 to view data about maaware, spam, and ruae detectonsn
If you’re an Efchange Onaine or Efchange Onaine Protecton (EOP) admin, there’s a good chance you’d aike to monitor
how much spam and maaware is being detected, or how ofen your transport ruaes are being matchedn With the
interactve maia protecton reports in the Ofce 365 admin center, you can quickay get a visuaa report of summary
data, and driaa-down into detaias about individuaa messages, for as far back as 90 daysn
Questoos 19
An organizaton paans to migrate to Ofce 365n

You need to estmate the post-migraton network trafcn
Which tooa shouad you use?
An Skype for Business Bandwidth Caacuaator

Bn Process Monitor
Cn Microsof Network Monitor
Dn Microsof OnRamp Readiness tooa
Aoswers A
Efpaanatonn
Ofce 365 incaudes Skype for Businessn
With this aatest version of the Microsof Skype for Business Server Bandwidth Caacuaator, you can enter informaton
about your users and the Skype for Business Server features that you want to depaoy, and the Bandwidth Caacuaator
wiaa determine bandwidth requirements for the WAN that connects sites in your depaoymentn The accompanying
Bandwidth Caacuaator User Guide describes the recommended process for estmatng your WAN bandwidth needs for
Skype for Business caient reaa-tme trafcn
Questoos 20
/OTSPOT
You have an Ofce 365 tenantn A user named User1 has a maiabofn The user creates documents and saves the
documents in a shared document aibraryn
User1 aeaves the companyn You must deaete the account for User1n
In the tabae beaow, identfy when each type of data wiaa be deaetedn
NOTEn Make onay one seaecton in each coaumnn Each correct seaecton is worth one pointn
Aoswers
________________________________________________________________________________________________
Page No | 34
When you deaete an Ofce 365 user account, the corresponding Efchange Onaine maiabof is deaeted and removed
from the aist of maiabofes in the EACn Afer the user account is deaeted, it's aisted on the Deaeted Users page in the
Ofce 365 admin centern It can be recovered within 30 days afer being deaetedn Afer 30 days, the user account and
maiabof are permanentay deaeted and not recoverabaen
View, restore, or deaete items in the Recycae Bin of a SharePoint site
The Recycae Bin provides a safety net when deaetng documents, aist items, aists, foaders and faesn When you or site
visitors deaete any of these items from a Web site, the items are paaced in the Recycae Binn Items in the Recycae Bin
remain there unta you decide to permanentay deaete them from your Web site, or unta the items are permanentay
deaeted afer a set number of days, which is based on a scheduae defned in Centraa Administratonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn186233(v=efchgn150)naspf
htpsn//supportnofcencom/en-sg/artcae/View-restore-or-deaete-items-in-the-Recycae-Bin-of-a-SharePoint-site-
6df466b6-55f2-4898-8d6e-c0df851a0be
Questoos 21
Contoso, Ltdn, has an Ofce 365 tenantn You confgure Ofce 365 to use the domain contosoncom, and you verify the
domainn You depaoy and confgure Actve Directory Federaton Services (AD FS) and Azure Actve Directory Connect
with password synchronizatonn You connect to Azure Actve Directory by using a Remote PowerSheaa sessionn
You need to switch from using password-synced passwords to using AD FS on the Ofce 365 verifed domainn
An Convert-MsoaDomainToFederated –DomainName contosoncom

Bn Convert-MsoaDomainToStandard –DomainName contosoncom
Cn Convert-MsoaFederatedUser
Dn Set-MsoaDomainAuthentcaton –DomainName contosoncom
Aoswers A
Efpaanatonn
sign-on (aaso known as identty federaton), incauding confguring the reaying party trust setngs between the Actve
Directory Federaton Services (AD FS) server and the Microsof Onaine Servicesn As part of convertng a domain from
standard authentcaton to singae sign-on, each user must aaso be convertedn This conversion happens automatcaaay
the neft tme a user signs in; no acton is required by the administratorn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/convert-msoadomaintofederated?view=azureadps-
1n0
Questoos 22
DRAG DROP
________________________________________________________________________________________________
Page No | 35
Contoso, Ltdn, uses SharePoint Onaine and paans a new singae sign-on (SSO) impaementaton that uses Actve Directory
Federaton Services (AD FS)n
Your environment contains the foaaowing confguratonsn
two servers named Server1 and Server2
a partner coaaaboraton website for the domain contosoncom that points to a SharePoint Onaine team site
a hardware aoad baaancer to use with Server1 and Server2
You need to instaaa AD FS to support the environmentn
Which three actons shouad you perform in sequence? To answer, move the appropriate actons from the aist of
actons to the answer area and arrange them in the correct ordern
Aoswers
Efampaen Creates the frst node in a federaton server farm that uses the Windows Internaa Database(WID) on the
aocaa server computern
In this efampae, a certfcate thumbprint vaaue is suppaied for the CertfcateThumbprint parametern This certfcate
________________________________________________________________________________________________
Page No | 36
wiaa be used as the SSL certfcate and the service communicatons certfcaten
PS Cn\> $fscredentaa= Get-Credentaa
PS Cn\> Instaaa-AdfsFarm -CertfcateThumbprint 8169c52b4ec6e77eb2ae17f028fe5da4e35c0bed -
FederatonServiceName fsncorpncontosoncom -ServiceAccountCredentaa $fscredentaa
Instaaa-AdFsFarm command creates the frst node of a new federaton serverfarmn
/ The parameter -CertfcateThumbprintnString>
Specifes the vaaue of the certfcate thumbprint of the certfcate that shouad be used in the Secure Sockets Layer (SSL)
binding of the Defauat Web Site in Internet Informaton Services (IIS)n This vaaue shouad match the thumbprint of a
vaaid certfcate in the Locaa Computer certfcate storen
/ The parameter -FederatonServiceNamenString>
Specifes the DNSname of the federaton servicen This vaaue must match the subject name of the certfcate confgured
on the SSL binding in IISn
The Add-AdfsFarmNode command adds this computer to an efistng federaton server farmn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn479416(v=wpsn630)naspf
Questoos 23
You have an Ofce 365 tenant that uses an Enterprise E3 subscriptonn You have two servers in a perimeter network
that have the Actve Directory Federaton Services (AD FS) profy roae service instaaaedn A federaton server farm is
aocated behind a frewaaan
You need to ensure that the AD FS profies can communicate with the federaton server farmn
Which two name resoauton strategies can you use? Each correct answer presents a compaete soautonn
An /OSTS fae on the profy servers

Bn DNS server in the perimeter network
Cn LM/OSTS fae on the profy servers
Dn LM/OSTS fae on the federaton servers
En /OSTS fae on the federaton servers
Aoswers A,B
Efpaanatonn
Confgure Name Resoauton for a Federaton Server Profy in a DNS Zone That Serves Onay the PerimeterNetwork
So that name resoauton can work successfuaay for a federaton server in an Actve Directory Federaton Services (AD
FS) scenario in which one or more Domain Name System (DNS) zones serve onay the perimeter network, the foaaowing
tasks must be compaetedn
The hosts fae on the federaton server profy must be updated to add the IP address of a federaton servern
DNS in the perimeter network must be confgured to resoave aaa caient requests for the AD FS host name to the
federaton server profyn To do this, you add a host (A) resource record to perimeter DNS for the federaton server
profyn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dd807045naspf
Questoos 24

You must retrieve maiabof diagnostc datan
You need to provide a report with this data for aaa usersn
Which report soauton shouad you choose?
________________________________________________________________________________________________
Page No | 37
An Ofce 365 admin center

Bn downaoadabae spreadsheet
Cn reportng Windows PowerSheaa cmdaets
Dn REST reportng web service
Aoswers D
Efpaanatonn
The Ofce 365 Reportng web service enabaes deveaopers to integrate informaton on emaia and spam, antvirus
actvity, compaiance status, and Skype for Business Onaine actvites into their custom service reportng appaicatons
and web portaasn
Referencesn
htpsn//msdnnmicrosofncom/en-us/aibrary/ofce/jj984325naspf
Questoos 25
You have an Efchange Onaine tenantn

You must identfy maiabofes that are no aonger in usen
You need to aocate the inactve maiabofesn
An Get-StaaeMaiabofReport -Efpression
Bn Get-StaaeMaiabofReport -Organizaton
Cn Get-MaiabofActvityReport -Organizaton
Dn Get-StaaeMaiabofReport -EndDate
Aoswers D
Efpaanatonn
Use the Get-StaaeMaiabofReport cmdaet to view the number of maiabofes that haven't been accessed for at aeast 30
daysn
The EndDate parameter specifes the end date of the date rangen
Questoos 26
DRAG DROP
You have an Ofce 365 tenantn An organizaton is migratng from an Efchange organizaton to Ofce 365n
Users report that Outaook does not dispaay the avaiaabiaity of other users for meetngsn You must determine whether
an Ofce 365 maiabof can access the scheduaing avaiaabiaity of a user with an on-premises maiabofn You must aaso run
a test to verify that an on-premises maiabof can access the scheduaing avaiaabiaity of a user that has an Ofce 365
maiabofn
You need to conduct the testsn
What shouad you do? To answer, drag the appropriate test to run to the correct maiabof test scenarion Each test may
be used once, more than once or not at aaan You may need to drag the spait bar between panes or scroaa to view
contentn
________________________________________________________________________________________________
Page No | 38
Aoswers
Microsof Efchange Web Services Connectvity test is web-based, and is designed to heap IT Administrators
________________________________________________________________________________________________
Page No | 39
troubaeshoot connectvity issues that afect their Efchange Server depaoymentsn The tooa simuaates severaa caient
aogon and maia fow scenariosn When a test faias, many of the errors have troubaeshootng tps to assist the IT
Administrator to correct the probaemn
The Outaook Connectvity Test is avaiaabae with the Microsof Ofce 365 Support and Recovery Assistantn
Questoos 27
A company with 75,000 empaoyees has an Ofce 365 tenantn
You need to instaaa the Azure Actve Directory Synchronizaton (AAD Sync) tooa by using the aeast amount of
administratve efortn
Which versions of each product shouad you impaement? (Seaect three)
Seaect threen
An nNet 3n5
Bn Net 4n0
Cn nNet 4n5
Dn nNet 4n5n1
En PowerSheaa(PS1)
Fn PowerSheaa (PS2)
Gn PowerSheaa (PS3)
/n PowerSheaa (PS4)
In SQL Server Efpress
Jn SQL Server 2008
Kn SQL Server 2012
Ln SQL Server 2014
Aoswers D,F,L
Efpaanatonn
The foaaowing components need to be instaaaedn
Net 4n5n1
PowerSheaa (PS3 or beter is required)
Azure AD Sync requires a SQL Server database to store identty datan By defauat a SQL Efpress LocaaDB (a aight version
of SQL Server Efpress) is instaaaed and the service account for the service is created on the aocaa machinen
SQL Server Efpress has a 10GB size aimit that enabaes you to manage approfimateay 100n000objectsn This is fne for the
scenario in this questonn
If you need to manager a higher voaume of directory objects, you need to point the instaaaaton process to a diferent
version of SQL Servern AAD Sync supports aaa favors of Microsof SQL Server from SQL Server 2008 to SQL Server 2014n
Questoos 28
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn Users currentay sign in with credentaas
that incaude the contosoncom domain suffn
The company is acquired by Fabrikamn Users must now sign in with credentaas that incaude the fabrikamncom domain
suffn
You need to ensure that aaa users sign in with the new domain namen
An Set-MsoaUser
________________________________________________________________________________________________
Page No | 40
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers D
Efpaanatonn
The Set-MsoaUserPrincipaaName cmdaet is used to change the User Principaa Name (user ID) of a usern This cmdaet can
be used to move a user between a federated and standard domain, which wiaa resuat in their authentcaton type
changing to that of the target domainn
The foaaowing command renames user1@contosoncom to CCoae@contosoncomn
Set-MsoaUserPrincipaaName -UserPrincipaaName User1@contosoncom -NewUserPrincipaaName CCoae@contosoncom
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauserprincipaaname?view=azureadps-1n0
Questoos 29
You have an Ofce 365 tenant that uses an Enterprise E1 subscriptonn

You need to convert the users in the tenant to an Enterprise E3 subscriptonn
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers C
Efpaanatonn
The Set-MsoaUserLicense cmdaet can be used to adjust the aicenses for a usern This can incaude adding a new aicense,
removing a aicense, updatng the aicense optons, or any combinaton of these actonsn
Noten Switching paans manuaaay means that you’re compaetng the foaaowing separate procedures instead of using the
switch paans wizardn The procedures aren
Buy aicenses for the subscripton you’re switching users ton
Verify the subscripton is ready to switch users ton
Reassign user aicenses
Remove unneeded aicenses from the subscripton you’re switching fromn
Cancea the originaa subscripton (if switching aaa users)n
Switching onay some users isn’t supported by the switch
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauseraicense?view=azureadps-1n0
Questoos 30
________________________________________________________________________________________________
Page No | 41
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn

You paan to test a new depaoyment by using 50 tenant user accountsn
You need to ensure that the passwords for the test user accounts do not efpiren
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers A
Efpaanatonn
The Set-MsoaUser cmdaet is used to update a user objectn This cmdaet shouad be used for basic propertes onayn
Parameter -PasswordNeverEfpires nBooaean>
Sets whether or not the user's password wiaa efpire periodicaaayn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauser?view=azureadps-1n0
Questoos 31
DRAG DROP
A company has an Ofce 365 tenantn You paan to use Ofce 365 to manage the DNS setngs for a custom domainn You
purchase the domain through a third-party providern
You create a custom websiten You must host the website through a third-party provider at the IP address
134n170n185n46n You need to confgure the correct DNS setngsn
What shouad you do? To answer, drag the appropriate DNS record to the correct DNS targetn Each record may be used
Aoswers
________________________________________________________________________________________________
Page No | 42
Change your domain’s name server (NS) records

When you get to the aast step of the domains setup wizard in Ofce 365, you have one task remainingn To set up your
domain with Ofce 365 services, aike emaia, you change your domain’s name server (or NS) records at your domain
registrar to point to the Ofce 365 primary and secondary name serversn
Use (A) DNS record for the web siten
Questoos 32
You need to monitor actve Directory synchronizatonn
Which tooa shouad you run?
An adFif
Bn Ofce 365 /eaath, Readiness, and Connectvity Check
Cn Microsof Remote Connectvity Anaayzer Tooa
Dn Synchronizaton Service (MIISCaient)
Aoswers A
Efpaanatonn
One of the frst steps you shouad take before instaaaing DirSync is to aook at the directory that you have on-premises
and make sure it’s heaathy and ready to synchronize to Azure Actve Directoryn
You need to check Actve Directory remediatonn
DirSync has certain requirements on atributes in the directory, and aaigning the atribute vaaues with the DirSync
requirements is commonay known as Actve Directory remediatonn To heap with Actve Directory remediaton, you
shouad use the IdFif tooa, which reviews the directory and performs interactve Actve Directory remediatonn This tooa
checks for and heaps you correct any invaaid data and dupaicate data in directory atributes, incauding user
PrincipaaName (UPN), maiaNickName, profyAddress, sAMAccountName, targetAddress, and othersn The IDFif tooa
aaso provides assistance for migratng from a non-routabae UPN (such as “domainnaocaa,” for efampae) to an Internet
routabae domain name, because using an Internet-routabae domain is one of the requirements for Azure Actve
Directoryn Be sure to run the IdFif tooa from within your network, so that it has access to the domain controaaersn
Referencesn
htpsn//baogsnofcencom/2014/04/15/synchronizing-your-directory-with-ofce-365-is-easy/
Questoos 33
a unique soautonn Determine whether the soauton meets the stated goaasn
You have an on-premises Actve Directory forestn
You depaoy Actve Directory Federaton Services (AD FS) and purchase an Ofce 365 subscriptonn
________________________________________________________________________________________________
Page No | 43
You need to create a trust between the AD FS servers and the Ofce 365 subscriptonn
Soautonn You run the Convert-MsoaDomainToFederated cmdaetn
An Yes
Bn No
Aoswers A
Efpaanatonn
Each domain that you want to federate must either be added as a singae sign-on domain or converted to be a singae
sign-on domain from a standard domainn Adding or convertng a domain sets up a trust between AD FS and Microsof
Azure Actve Directory (Microsof Azure AD)n
sign-on (aaso known as identty federaton), incauding confguring the reaying party trust setngs between the Actve
Directory Federaton Services (AD FS) server as part of convertng a domain from standard authentcaton to singae
sign-on, each user must aaso be convertedn This conversion happens automatcaaay the neft tme a user signs in; no
acton is required by the administratorn
Referencesn
htpsn//msdnnmicrosofncom/en-us/aibrary/azure/dn194092(v=azuren98)naspf
htpsn//msdnnmicrosofncom/en-us/aibrary/azure/jj205461naspf
Questoos 34
Soautonn You run the New-MsoaFederatedDomain cmdaetn
An Yes
Bn No
Aoswers A
Efpaanatonn
Noten The New-MSOLFederatedDomain cmdaet adds a new singae sign-on domain (aaso known as identty-federated
domain) to and confgures the reaying party trust setngs between the on-premises AD FS servern Due to domain
verifcaton requirements, you may need to run this cmdaet severaa tmes in order to compaete the process of adding
the new singae sign-on domainn
Referencesn
Questoos 35
________________________________________________________________________________________________
Page No | 44
Soautonn You run the netdomncom commandn
An Yes
Bn No
Aoswers B
Efpaanatonn
Referencesn
Questoos 36
Your network contains a singae Actve Directory forestn The forest contains a domain controaaer and Actve Directory
Federaton Services (AD FS) servers that are depaoyed to virtuaa machinesn The virtuaa machines run either on-
premises or on Microsof Azuren
You have Azure AD Connect depaoyed on-premisesn The Azure AD Connect database is instaaaed on an on-premises
instance of Microsof SQL Server 2014n
Last month, an Azure AD Connect server efperienced a hardware faiaure that caused an Azure AD Connect server to
go ofine for severaa daysn
You need to recommend a soauton to reduce the outage window when hardware faiaure occurs on the Azure AD
Connect servern
Soautonn You depaoy a new Azure AD Connect server to an Azure virtuaa machine that uses a new SQL Server instancen
You set the Azure AD Connect server to staging moden
An Yes
Bn No
Aoswers A
Efpaanatonn
Azure AD Connect sync Staging mode can be used for severaa scenarios, incaudingn
/igh avaiaabiaityn
Test and depaoy new confguraton changesn
________________________________________________________________________________________________
Page No | 45
Introduce a new server and decommission the oadn

If you have a more compaef environment, then having one or more standby servers is recommendedn During
instaaaaton, you can enabae a server to be in staging moden
Use virtuaa machines
A common and supported method is to run the sync engine in a virtuaa machinen In case the host has an issue, the
image with the sync engine server can be migrated to another servern
Referencesn
htpsn//azurenmicrosofncom/en-us/documentaton/artcaes/actve-directory-aadconnectsync-operatons/
Questoos 37
Connect servern
Soautonn You depaoy a new on-premises Azure AD Connect server that uses a new SQL Server instancen You set the
Azure AD Connect server to staging moden
An Yes
Bn No
Aoswers B
Efpaanatonn
Azure AD Connect sync Staging mode can be used for severaa scenarios, incaudingn
/igh avaiaabiaityn
Test and depaoy new confguraton changesn
Introduce a new server and decommission the oadn
/ave a spare standby server - staging mode
If you have a more compaef environment, then having one or more standby servers is recommendedn During
instaaaaton, you can enabae a server to be in staging moden
SQL Caustering wouad be needed for high avaiaabiaityn
Noten SQL /igh Avaiaabiaity
If you are not using the SQL Server Efpress that comes with Azure AD Connect, then high avaiaabiaity for SQL Server
shouad aaso be consideredn The onay high avaiaabiaity soauton supported is SQL causteringn Unsupported soautons
incaude mirroring and Aaways Onn
Referencesn
Questoos 38
/OTSPOT
________________________________________________________________________________________________
Page No | 46
Contoso, Ltdn has an Ofce 365 Tenantn The company paans to impaement singae sign-on (SSO)n You instaaa Actve
Directory Federaton Servicesn
You need to enabae the use of SSOn
/ow shouad you compaete the reaevant Windows PowerSheaa commands? To answer, seaect the appropriate Windows
PowerSheaa segment from each aist in the answer arean
Aoswers
See step 2) and step 5) beaown

To convert an efistng domain to a singae sign-on domain, foaaow these stepsn
Referencesn
Questoos 39
/OTSPOT
You impaement singae sign-on (SSO) between Ofce 365 and an on-premises depaoyment of Actve Directoryn
You need to confgure Actve Directory Federaton Services (AD FS) to prevent users from being abae to aog on for 30
minutes afer they atempt to aog on by using a bad password 10 consecutve tmesn
________________________________________________________________________________________________
Page No | 47
Aoswers
An efampae of enabaing EftranetLockout feature with mafimum of 10 number of bad password atempts and 30 mins
sof-aockout duraton is as foaaowsn
Set-AdfsPropertes-EnabaeEftranetLockout $true -EftranetLockoutThreshoad 10 -EftranetObservatonWindow (new-
tmespan -Minutes 30)
Referencesn
htpsn//baogsnmsdnnmicrosofncom/auzhao1/2015/06/24/demystfy-eftranet-aockout-feature-in-ad-fs-3-0/
Questoos 40
An organizaton paans to migrate to Ofce 365n You use Azure AD Connectn
Severaa users wiaa not migrate to Ofce 365n You must efcaude these users from synchronizatonn Aaa users must
contnue to authentcate against the on-premises Actve Directoryn
You need to synchronize the remaining usersn
Which three actons shouad you perform to ensure users efcauded from migraton are not synchronized? Each correct
answer presents part of the soautonn
An Run the Windows PowerSheaa command Set-MsoaDirSyncEnabaed -EnabaeDirSync $faasen

Bn Perform a fuaa synchronizatonn
Cn Popuaate an atribute for each user accountn
Dn Confgure the connecton fatern
En Disabae the user accounts in Actve Directoryn
Aoswers B,C,D
________________________________________________________________________________________________
Page No | 48
Efpaanatonn
Dn With fatering, you can controa which objects shouad appear in Azure AD from your on-premises directoryn For
efampae, you run a piaot for Azure or Ofce 365 and you onay want a subset of users in Azure ADn
Cn Atribute–based fateringn This opton aaaows you to fater objects based on atribute vaaues on the objectsn You can
aaso have diferent faters for diferent object typesn
Bn Afer you have made your confguraton changes, these must be appaied to the objects aaready present in the
systemn It couad aaso be that objects not currentay in the sync engine shouad be processed and the sync engine needs
to read the source system again to verify its contentn
If you changed confguraton using atribute fatering, then you need to do Fuaa synchronizatonn
Referencesn
htpsn//azurenmicrosofncom/en-us/documentaton/artcaes/actve-directory-aadconnectsync-confgure-fatering/
Questoos 41
You use a centraaized identty management system as a source of authority for user account informatonn You efport a
aist of new user accounts to a fae on a daiay basisn Your company uses a aocaa Actve Directory for storing user accounts
for on-premises soautonsn You are aaso using Azure AD Connectn
New user accounts must be created in both the aocaa Actve Directory and Ofce 365n You must import user account
data into Ofce 365 daiayn
You need to import the new usersn
What shouad you do?
An Create a Windows PowerSheaa script to import account data from the fae into Actve Directoryn
Bn Create a Windows PowerSheaa script that uses the MSOnaine moduae to import account data from the faen
Cn Use the Azure Management Portaa to import the faen
Dn Use the Ofce 365 admin center to import the faen
Aoswers A
Efpaanatonn
To force a fuaa sync with the Azure AD Connect tooa from Windows PowerSheaa run Import-Moduae ADSync foaaowed by
Start-ADSyncSyncCycae -PoaicyType Initaa
Noten The DirSync tooa, which you can use to synchronize your on-premises Actve Directory Domain Services (AD DS)
with an instance of Azure Actve Directory (AD), has been updated with the new Azure AD Connect tooan You typicaaay
use the DirSync or Azure AD Connect tooas to confgure either password synchronizaton or singae sign-on so that your
users can use their on-premises AD DS credentaas to authentcate to Ofce 365n
The new Azure AD Connect tooa provides a richer feature set than the DirSync tooa and is now the recommended tooa
to usen
Questoos 42
You have an on-premises Efchange organizatonn The organizaton paans to migrate to Efchange Onainen
Users report that afer their maiabofes are migrated to Efchange Onaine they are no aonger abae to send emaia to a
specifc dynamic distributon aistn Aaa other distributon aists work as efpectedn
You need to resoave the issuen
What shouad you do?
An In the Actve Directory Synchronizaton Services consoae, change the connector fater to incaude dynamic
distributon aistsn
Bn In Ofce 365, re-create the dynamic distributon aistn
________________________________________________________________________________________________
Page No | 49
Cn Run the foaaowing Windows PowerSheaa cmdaetn Set-DynamicDistributonGroup

Dn Reduce the number of members in the distributon aist to fewer than 1,500 contactsn
Aoswers C
Efpaanatonn
PROBLEM
You have a hybrid depaoyment of Efchange Onaine in Ofce 365 and on-premises Efchange Servern In this
environment, certain members of a dynamic distributon group do not receive emaia messagesn
CAUSE
This probaem occurs if the dynamic distributon group was set up before the environment became a hybrid
depaoyment and if the dynamic distributon group uses faters to incaude onay maiabofesn Maiabofes that are migrated
to Ofce 365 become maia-enabaed users in the on-premises directoryn
SOLUTION
Use the Set-DynamicDistributonGroup cmdaet to update the faters for the dynamic distributon group to incaude maia-
enabaed usersn
Referencesn
htpsn//supportnmicrosofncom/en-us/kb/3061396
Questoos 43
Contoso, Ltdn has an on-premises SharePoint environmentn The company paans to depaoy SharePoint Onainen
You must use Actve Directory Federaton Services (AD FS)n The gaobaa administrator account must be abae to access
the Ofce 365 tenant even if AD FS is unavaiaabaen
You need to set up the gaobaa administrator accountn
What shouad you do?
An In the Ofce 365 admin center, create a user named sp_admin@contosononmicrosofncom

Bn In the Ofce 365 admin center, create a user named sp_admin@contosoncom
Cn In Actve Directory Domain Services Users and Computers, create a user named
sp_admin@contosononmicrosofncom
Dn In Actve Directory Domain Services Users and Computers, create a user named sp_admin@contosoncom
Aoswers A
Efpaanatonn
One of the frst steps is to create SPO administratve accountn You shouad aaways paan to create this account as Caoud
ID, Engn sp_admin@yourdomainnonmicrosofncomn /aving this as Caoud ID, it aaaows you to access your tenant even if
On-Premises ADFS environment is unavaiaabaen You can provision new Caoud Account from the Ofce 365
Administraton siten
Referencesn
htpsn//nikpateannet/2014/06/03/best-practces-for-confguring-sharepoint-onaine-tenant-part-ii-confguring-
sharepoint-administratve-accounts-for-sharepoint-onaine/
Questoos 44
DRAG DROP
You create a custom websiten You must host the website through a third-party provider at the IP v6 address
________________________________________________________________________________________________
Page No | 50
2001n4860n4801n5nn4dn
You need to confgure the correct DNS setngsn
Aoswers

When you get to the aast step of the domains setup wizard in Ofce 365, you have one task remainingn To setup your
domain with Ofce 365 services, aike emaia, you change your domain’s name server (or NS) record sat your domain
Use (AAAA) DNS record for the websiten We must use an (AAAA) and not an (A) record since an Ipv6 address is usedn
________________________________________________________________________________________________
Page No | 51
Questoos 45
/OTSPOT
You manage an Ofce 365 tenantn The subscripton detaias for the tenant are dispaayed in the foaaowing screenshotn
Use the drop-down menus to seaect the answer choice that answers each questonn
NOTEn Each correct answer is worth one pointn
Aoswers
________________________________________________________________________________________________
Page No | 52
Bof1n
Skype for Business is incauded in Ofce 365 Business Essentaasn
SharePoint is not incauded in Ofce 365 Business Essentaasn
Bof 2n Ofce 365 Business Essentaas user mafimum is 300 usersn
Referencesn
htpsn//productsnofcencom/en/business/compare-ofce-365-for-business-paans
Questoos 46
An Subscribe to the Ofce 365 Service /eaath RSS Notfcatons feedn

Bn View the service setngs page of the Ofce 365 admin centern
Cn Run the Microsof Fast Track Tooan
Dn View the service heaath current status page of the Ofce 365 admin centern
Aoswers A,D
Efpaanatonn
Dn See the status of aaa your services and their components in the Ofce 365 admin center
Sign in to Ofce 365 with your work or schooa accountn
Go to the Ofce 365 admin centern
Go to /eaath > Service heaathn
On the Service heaath page, view the current status of your servicesn Do any of the foaaowingna) For detaias, seaect a
servicenb) To see status history, seaect View history, and then seaect a day on the caaendarn
An In the top right corner of the Service /eaath page, there is an RSS iconn You can caick on the RSS icon to sign up for
the service heaath RSSfeed, which wiaa emaia you when a new event is added or an efistng event is updatedn
Referencesn
htpsn//supportnofcencom/en-us/artcae/View-the-status-of-your-services-932ad3ad-533c-418a-b938-6e44e8bc33b0
Questoos 47
________________________________________________________________________________________________
Page No | 53
/OTSPOT
You are the Efchange Onaine administrator for an organizatonn The organizaton migrates aaa users to Efchange
Onainen An empaoyee works for a partner organizaton named Contoso, Ltdn The empaoyee uses the emaia aaias
empaoyeea@contosoncomn
Users report that over the past week, they have not received emaia messages from empaoyee1@contosoncomn
You need to trace emaia messages that originate from empaoyeea@contosoncom to users inside your organizatonn
In the message trace window, which two setngs shouad you confgure? To answer, seaect the appropriate objects in
the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 54
As we want to trace the emaias originated from empaoyeea@contosoncom we must specify him as the sendern
We aaso know that emaia messages from this user has not been received for the aast 7 daysn We shouad therefore
change the start date and put it back 7 daysn
Referencesn
htpsn//supportnofcencom/en-au/artcae/Troubaeshoot-emaia-deaivery-using-the-Efchange-Onaine-message-trace-
tooa-e7758b99-1896-41db-bf39-51e2dba21de6
Questoos 48
You have an Ofce 365 subscriptonn
Aaa users have maiabofes hosted in Microsof Efchange Onainen
The network administrators in your organizaton are updatng the network infrastructure, incauding making changes to
the DNS providers and updatng the SSL certfcatesn
You need to perform the foaaowing test in the Efchange Onaine environmentn
Verify that the maia efchanger (MX) records for Efchange Onaine are pubaished correctayn
Send a test message from an efternaa recipient to an Efchange Onaine recipientn
Verify that the SMTP service is accessibae from the Internetn
An Microsof Connectvity Anaayzer Tooa

Bn Microsof Remote Connectvity Anaayzer
Cn Microsof Ofce 365 Caient Performance Anaayzer
Dn Ofce 365 heaath, readiness, and connectvity checks
En Microsof Support and Recovery Assistant for Ofce 365
Aoswers B
Efpaanatonn
The Microsof Connectvity Anaayzer Tooa incaudes muatpae diferent tests that can be run onainen
________________________________________________________________________________________________
Page No | 55
Questoos 49
You have an Ofce 365 subscripton that has severaa thousand maiabofesn
The users in the Ofce 365 organizaton are aocated in diferent regionsn
You need to view the path of the emaia messages sent from a user to an efternaa recipientn
Which cmdaet shouad you use?
An Get-MaiaDetaiaTransportRuaeReport
Bn Get-MaiaTrafcReport
Cn Get-MaiabofActvityReport
Dn Get-ServiceDeaiveryReport
Aoswers D
Efpaanatonn
Use the Get-ServiceDeaiveryReport cmdaet to view informaton about the message deaivery path for a specifed
recipientn
Efampaen
This efampae shows the deaivery path informaton for the recipient john@contosoncomn
Get-ServiceDeaiveryReport -Recipientjohn@contosoncom
Questoos 50
An organizaton is migratng from an on-premises Efchange organizaton to Ofce 365 tenantn

Users report that they cannot see the free/busy informaton for other usersn
You need to determine why free/busy informaton does not dispaayn
Which two Windows PowerSheaa cmdaets shouad you run? Each correct answer presents a compaete soautonn
An Get-OrganizatonReaatonship
Bn Get-SharingPoaicy
Cn Get-CsMeetngConfguraton
Dn Get-CsCaientPoaicy
En Get-IntraOrganizatonConnector
Aoswers A,D
Efpaanatonn
An Probaemn Free/busy informaton can't be retrieved from one environment
Users can't access free/busy informaton through Efchange federaton in one directon onayn
To dispaay the trust informaton that is currentay set up for the defauat Ofce 365 domain, run the foaaowing commandn
Get-OrganizatonReaatonship | FL
Bn If the free/busy probaem persists, make sure that the sharing poaicies in the on-premises Efchange Server
environment and in Efchange Onaine matchn To determine this, run the foaaowing command in the Efchange
ManagementSheaa, and then note the vaaue in the Domains fead in the resuatsn
Get-SharingPoaicy | FL
Referencesn
htpsn//supportnmicrosofncom/en-us/kb/2555008
Questoos 51
________________________________________________________________________________________________
Page No | 56

You paan to create a report about Microsof OneDrive for Business usage that wiaa be given to a third partyn
You need to ensure that the OneDrive for Business report shows anonymous identfers instead of user namesn
What shouad you confgure from Setngs in the Ofce 365 admin center?
An Organizaton Profae
Bn Services & add-ins
Cn Security & privacy
Dn Domains
Aoswers B
Efpaanatonn
If your organizaton's poaicies prevent you from viewing reports where user informaton is identfabae, you can change
the privacy setng for aaa these reportsn
If you want to hide user aevea informaton when you're generatng your reports, you can quickay make that change in
the Ofce 365 admin centern
Go to the Ofce 365 admin center > Services & add-ins
Seaect Reports
Set the toggae to On and Saven
Referencesn
htpsn//supportnofcencom/en-us/artcae/Actvity-Reports-in-the-Ofce-365-admin-center-0d6df17-8582-4172-a9a9-
aed798150263?ui=en-US&rs=en-US&ad=US
Questoos 52
An Organizaton uses Efchange Onainen You enabae maiabof audit aogging for aaa maiabofesn
User1 reports that her maiabof has been accessed by someone easen
You need to determine whether someone other than the maiabof owner has accessed the maiabofn
What shouad you do?
An Run the foaaowing Windows PowerSheaa commandn Search-MaiabofAuditLog-Identty User1-LogonTypes Admin,

Deaegate, Efternaa-ShowDetaias
Bn In the Efchange Admin Center, navigate to the In-paace eDiscovery & /oad secton of the Protecton pagen Run a
non-owner maiabof access reportn
________________________________________________________________________________________________
Page No | 57
Cn In the Efchange Admin Center, navigate to the In-paace eDiscovery & /oad secton of the Compaiance Management
pagen Run a non-owner maiabof access reportn
Dn Run the foaaowing Windows PowerSheaa commandn New-AdminAuditLogSearch-Identty User1-LogonTypes Admin,
Aoswers C
Efpaanatonn
The Non-Owner Maiabof Access Report in the Efchange Administraton Center (EAC) aists the maiabofes that have
been accessed by someone other than the person who owns the maiabofn
Run a non-owner maiabof access report
Noten When a maiabof is accessed by anon-owner, Microsof Efchange aogs informaton about this acton in a maiabof
audit aog that’s stored as an emaia message in a hidden foader in the maiabof being auditedn Entries from this aog are
dispaayed as search resuats and incaude a aist of maiabofes accessed by a non-owner, who accessed the maiabof and
when, the actons performed by the non-owner, and whether the acton was successfuan
In the EAC, navigate to Compaiance Management > Auditngn
Caick Run a non-owner maiabof access reportn
By defauat, Microsof Efchange runs the report for non-owner access to any maiabofes in the organizaton over the
past two weeksn The maiabofes aisted in the search resuats have been enabaed for maiabof audit aoggingn
To view non-owner access for a specifc maiabof, seaect the maiabof from the aist of maiabofesn View the search resuats
in the detaias pane
Referencesn
Questoos 53
Noten This queston is part of a series of questons that use the same or simiaar answer choicesn An answer choice may
be correct for more than one queston in the seriesn Each queston is independent of the other questons in this seriesn
Informaton and detaias provided in the queston appay onay to that questonn
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn You synchronize disabaed user accounts
from an Actve Directory Domain Services environmentn
You need to enabae the user accounts in Ofce 365n
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
/n New-MsoaUser
Aoswers A
Efpaanatonn
Efampaen The foaaowing command sets the muat-factor authentcaton on this usern
Enabae a usern
$st = New-Object -TypeNameMicrosofnOnainenAdministratonnStrongAuthentcatonRequirement
________________________________________________________________________________________________
Page No | 58
$stnReayingParty = "*"
$stnState = “Enabaed”
$sta = @($st)
Set-MsoaUser -UserPrincipaaName user@contosoncom -StrongAuthentcatonRequirements $sta
Questoos 54
DRAG DROP
You have an Ofce 365 tenant that has an Enterprise E3 subscriptonn You enabae Azure Rights Management for users
in the tenantn
You need to defne the methods that you can impaement to encrypt and decrypt emaia messagesn
What shouad you do? To answer, drag the appropriate method to the correct actonn Each method may be used once,
more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
Aoswers
As an Ofce 365 gaobaa administrator, you can create maia fow ruaes, aaso known as transport ruaes, to heap protect
emaia messages you send and receiven You can set up ruaes to encrypt any outgoing emaia messages and remove
encrypton from encrypted messages coming from inside your organizaton or from repaies to encrypted messages
sent from your organizatonn
________________________________________________________________________________________________
Page No | 59
To view encrypted messages, recipients can either get a one-tme password, sign in with a Microsof account, or sign
in with a work or schooa account associated with Ofce 365n Recipients can aaso send encrypted repaiesn They don’t
need an Ofce 365 subscripton to view encrypted messages or send encrypted repaiesn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn569289naspf
Questoos 55
You are the Ofce 365 administrator for a companyn You paan to impaement rights managementn
You need to actvate Microsof Azure Rights Managementn
An the Windows PowerSheaa Enabae-AadrmSuperUserFeature cmdaet

Bn the Ofce 365 Admin Center portaa
Cn the Windows PowerSheaa Set-OrganizatonConfg cmdaet
Dn the Microsof Efchange Onaine Admin Center
Aoswers B
Efpaanatonn
Once you have signed up for an Ofce 365 paan that incaudes Rights Management, sign in to Ofce 365 with a work or
schooa account that has the gaobaa administrator roae for your Ofce 365 depaoymentn You shouad then navigate to the
rights management page via Setngs > Services & add-ins > Microsof Azure Informaton Protecton > Manage
Microsof Azure Informaton Protecton setngsn On the rights management page, caick actvaten
Referencesn
htpsn//docsnmicrosofncom/en-us/informaton-protecton/depaoy-use/actvate-ofce365
Questoos 56
/OTSPOT
The Ofce 365 organizaton contains fve temporary administratorsn The administrators are members of muatpae roae
groupsn
You need to create a script that prevents the temporary administrators from performing administratve tasks from the
Ofce 365 admin centern The soauton must meet the foaaowing requirementsn
Provide the abiaity to reestabaish administratve access to the temporary administrators within 14 daysn
Reaease the Ofce 365 aicenses assigned to the temporary administratorsn
Which cmdaet shouad you run? To answer, seaect the appropriate optons in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 60
The Set-MsoaUserLicense cmdaet can be used to adjust the aicenses for a usern This can incaude adding a new aicense,
removing a aicense, updatng the aicense optons, or any combinaton of these actonsn
Efampaen
The foaaowing command removes the for enterprises aicense from the usern This may resuat in the user's data being
removed from each servicen
Set-MsoaUserLicense -UserPrincipaaName user@contosoncom -RemoveLicenses "contosonENTERPRISEPACK"
Referencesn
Questoos 57
DRAG DROP
A company depaoys an Ofce 365 tenantn Aaa empaoyees use Skype for Business Onainen
You need to confgure the network frewaaa to support Skype for Business Onainen
Which ports must you open? To answer, drag the appropriate port number to the correct feature or featuresn Each
port number may be used once, more than once, or not at aaan You may need to drag the spait bar between panes or
scroaa to view contentn
Aoswers
________________________________________________________________________________________________
Page No | 61
Transport Controa Protocoa (TCP), User Datagram Protocoa (UDP) ports, and Protocoa Numbers are important to TCP/IP
networking, intranets, and the Internetn Ports and protocoa numbers provide access to a host computern /owever,
they aaso create a security hazard by aaaowing uninvited accessn Therefore, knowing which port to aaaow or disabae
increases a network's securityn If the wrong ports or protocoa numbers are disabaed on a frewaaa, router, or profy
server as a security measure, essentaa services might become unavaiaabaen
Port 443 is used for Audio, video and appaicaton sharing sessions as weaa as data sharing sessions - For /TTPSn
Port 5223 is used for mobiae push notfcatons - Eftensibae Messaging and Presence Protocoa (XMPP) caient
connecton over SSLn
Questoos 58
You have a aegacy appaicaton that needs to send emaia to empaoyeesn
The aegacy appaicaton runs on a caient computer that must send emaia by using SMTP through Efchange Onainen
You need to identfy the correct host name and port informatonn
Which setngs shouad you use?
An Outaooknofce365ncom and port 25

Bn Outaooknofce365ncom and port 587
Cn Smtpnofce365ncom and port 587
Dn Smtpnofce365ncom and port 25
Aoswers D
Efpaanatonn
The aegacy appaicatons wouad use port 25 for smtpn The host name shouad be Smtpnofce365ncomn
Questoos 59

Which two tooas wiaa achieve the goaa? Each correct answer presents a compaete soautonn
________________________________________________________________________________________________
Page No | 62
An Efchange Caient Network Bandwidth Caacuaator

Bn Microsof Remote Connectvity Anaayzer
Cn Skype for Business Bandwidth Caacuaator
Dn Windows Assessment and Depaoyment Kit (ADK)
En Process Monitor
Aoswers A,C
Efpaanatonn
There are caacuaators avaiaabae to assist you with estmatng network bandwidth requirementsn These caacuaators work
for on-premises as weaa as Ofce 365 depaoymentsn You can use the Efchange caient network bandwidth caacuaator to
estmate the bandwidth required for a specifc set of Outaook, Outaook Web App, and mobiae device users in your
Ofce 365 depaoymentn With the Skype for Business bandwidth caacuaator, you enter informaton about users and the
Skype for Business features you want to depaoy, and the caacuaator heaps you determine bandwidth requirementsn
Skype for Business Bandwidth Caacuaator - A Microsof Efcea spreadsheet that caacuaates WAN bandwidth
requirements for a Skype for Business Server depaoyment based on administrator-specifed user profaes and network
informatonn
Questoos 60
DRAG DROP
You have an Ofce 365 subscripton and an on-premises depaoyment of Actve Directoryn The environment aaso
contains a depaoyment of Actve Directory Federaton Services (AD FS)n
The AD FS depaoyment contains an AD FS server named ADFS1 and a Web Appaicaton Profy server named
WAPSERVER1n
The service communicatons certfcate efpires in one dayn
You need to repaace the certfcate on the servers in the AD FS depaoymentn The soauton must maintain caient
encryptonn
Aoswers
________________________________________________________________________________________________
Page No | 63
Questoos 61
An organizaton migrates to Ofce 365n
The Ofce 365 administrator must be notfed when Ofce 365 maintenance actvites are paannedn
You need to confgure the administrator's computer to receive the notfcatonsn
What shouad you confgure?
An Ofce 365 Business Connectvity Service

Bn Service requests
Cn Service heaath page
Dn Ofce 365 Service /eaath RSS Notfcatons feed
Aoswers D
Efpaanatonn
You can aog in to Ofce 365 as an Ofce 365 Administrator and view the Service /eaath Page to view the status of your
Ofce 365 servicesn You can use the Service /eaath Page to view informaton on the status of your services for the
current day or you can seaect the aast 6 days or 30 days for a historicaa viewn
In the top right corner of the Service /eaath page, there is an RSS iconn You can caick on the RSS icon to sign up for the
service heaath RSS feed, which wiaa emaia you when a new event is added or an efistng event is updatedn
Questoos 62
An Organizaton uses Efchange Onainen You enabae maiabof audit aogging for aaa maiabofesn
What shouad you do?
An Run the foaaowing Windows PowerSheaa commandn Search-MaiabofAuditLog-Identty User1-LogonTypes Admin,

Bn In the Efchange Admin Center, navigate to the Auditng secton of the Protecton pagen Run a non-owner maiabof
access reportn
Cn In the Efchange Admin Center, navigate to the In-paace eDiscovery & /oad secton of the Compaiance Management
pagen Run a non-owner maiabof access reportn
________________________________________________________________________________________________
Page No | 64
Dn Run the foaaowing Windows PowerSheaa commandn New-AdminAuditLogSearch-Identty User1-LogonTypes Admin,

Aoswers C
Efpaanatonn
The Non-Owner Maiabof Access Report in the Efchange Administraton Center (EAC) aists the maiabofes that have
been accessed by someone other than the person who owns the maiabofn
Run a non-owner maiabof access report
Noten When a maiabof is accessed by a non-owner, Microsof Efchange aogs informaton about this acton in a maiabof
audit aog that’s stored as an emaia message in a hidden foader in the maiabof being auditedn Entries from this aog are
dispaayed as search resuats and incaude a aist of maiabofes accessed by a non-owner, who accessed the maiabof and
when, the actons performed by the non-owner, and whether the acton was successfuan
Referencesn
Questoos 63
Your company purchases an Ofce 365 paann The company has an Actve Directory Domain Services domainn
User1 must be abae to manage Ofce 365 deaegaton for the companyn
You need to ensure that User1 can assign administratve roaes to other usersn
What shouad you do?
An Create an Ofce 365 tenant and assign User1 the service administrator roaen
Bn Use an efistng user management administrator account to assign a roae with the correct permissions to User1n
Cn Create an Ofce 365 tenant and assign User1 the gaobaa administrator roaen
Dn Create an Ofce 365 tenant and assign User1 the user management administrator roaen
Aoswers D
Efpaanatonn
Dn The Gaobaa Administrator account is simiaar to the Company administratorn Users in this roae have access to
everything or the permission to add them to a dedicated roae where they do not have permission (such as discovery
management and assigning administratve roaes to other users)n
Questoos 64
You are paanning an Ofce 365 piaotn

You need to ensure that the environment is ready for Ofce 365n
An Microsof Connectvity Anaayzer

Bn Ofce 365 Best Practces Anaayzer
Cn Remote Connectvity Anaayzer
Dn Ofce 365 /eaath, Readiness, and Connectvity Checks
Aoswers D
Efpaanatonn
Running Ofce 365 /eaath, Readiness, and Connectvity Checks prior to setng up Ofce 365 aaaows you to make sure
________________________________________________________________________________________________
Page No | 65
that your environment is prepared for the Ofce 365 servicesn It can fnd setngs in your efistng environment that
might cause probaems when you start to set up or use your servicesn This wiaa aaaow you to ff or work around the
potentaa probaems to make your depaoyment path easier to compaeten
Referencesn
htpsn//supportnofcencom/en-us/artcae/Ofce-365-readiness-checks-c01571b8-183e-4a61-9ca0-80729a48bbda
Questoos 65
DRAG DROP
You create a custom websiten You must host the website through a third-party provider at the IPv6 address
2001n4860n4801n1n5n4dn You need to confgure the correct DNS setngsn
Aoswers

When you get to the aast step of the domains setup wizard in Ofce 365, you have one task remainingn To set up your
domain with Ofce 365 services, aike emaia, you change your domain’s name server (or NS) records at your domain
Use (A) DNS record for the web siten
Questoos 66
You are an Ofce 365 administrator for your companyn You enabae maiabof auditng for aaa user maiabofesn
You receive reports that someone is accessing another user’s maiabof without authorizatonn
You need to identfy which account was used to access the maiabof in Microsof Efchange Onainen
What shouad you run?
An the PowerSheaa cmdaet Search-AdminAuditLog

Bn the PowerSheaa cmdaet New-AdminAuditLogSearch
Cn the non-owners’ maiabof access report
________________________________________________________________________________________________
Page No | 66
Dn the maiabof content search and hoad report
Aoswers C
Efpaanatonn
The Non-Owner Maiabof Access Report in the Efchange admin center (EAC) aists the maiabofes that have been
accessed by persons who do not own the maiabofn
Referencesn
Questoos 67
DRAG DROP
Aoswers
Transport Controa Protocoa(TCP), User Datagram Protocoa(UDP) ports, and Protocoa Numbers are important to TCP/IP
________________________________________________________________________________________________
Page No | 67
connecton over SSLn
Questoos 68
/OTSPOT
You work for a company named Contoso Ltdn The company depaoys Ofce 365n Onay caoud-based identtes are used to
access Ofce 365 resourcesn
Users must be abae to aog in Ofce 365 afer create new accountsn
You need to reset passwords for aaa company empaoyeesn
What shouad you do? To answer, seaect the appropriate Windows PowerSheaa segment in the diaaog bof in the answer
arean
Aoswers
________________________________________________________________________________________________
Page No | 68
The Connect-MsoaService cmdaet atempts to initate a connecton to Azure Actve Directoryn Running the Get-
MsoaUser cmdaet without parameters retrieves aaa users in the companyn
The Set-MsoaUserPassword cmdaet resets the password for a usern
Referencesn
htpsn//wwwnaewanncom/baog/2012/01/10/microsof-ofce-365-how-to-reset-aaa-user-passwords
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/connect-msoaservice?view=azureadps-1n0
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/get-msoauser?view=azureadps-1n0
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/set-msoauserpassword?view=azureadps-1n0
Questoos 69
Noten This queston is part of a series of questons that use the same or simiaar answer choicesn An answer choice may
be correct for more than one queston in the seriesn Each queston is independent of the other questons in this seriesn
Informaton and detaias provided in the queston appay onay to that questonn
A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn You synchronize disabaed user accounts
from an Actve Directory Domain Services environmentn
You need to enabae the user accounts in Ofce 365n
An Set-MsoaUser
Fn Set-MaiaUser
Gn Set-LinkedUser
Aoswers A
Efpaanatonn
________________________________________________________________________________________________
Page No | 69
Efampaen The foaaowing command sets the muat-factor authentcaton on this usern
Enabae a usern
$st = New-Object -TypeName MicrosofnOnainenAdministratonnStrongAuthentcatonRequirement
$stnReayingParty = "*"
$stnState = “Enabaed”
$sta = @($st)
Set-MsoaUser -UserPrincipaaName user@contosoncom -StrongAuthentcatonRequirements $sta
Questoos 70
Severaa users report that they faia to connect to Microsof Skype for Business Onaine by using the Skype for Business
2016 caientn
You verify that you can connect to Skype for Business Onaine successfuaay from your computern
You need to identfy what prevents the users from connectng to Skype for Business Onainen
Soautonn You use the Microsof Support and Recovery Assistant for Ofce 365n
An Yes
Bn No
Aoswers B
Efpaanatonn
Use the Microsof Skype for Business Connectvity Anaayzer insteadn
Questoos 71
2016 caientn
Soautonn You use the Microsof Skype for Business Connectvity Anaayzern
An Yes
Bn No
Aoswers A
________________________________________________________________________________________________
Page No | 70
Efpaanatonn
The Microsof Skype for Business Connectvity Anaayzer tooa has a very specifc purposen It is meant to determine if a
Skype for Business environment, either on-prem or Skype for Business Onaine, meets the necessary requirements for
caient connectvity from mobiae caients and the Skype for Business Windows Store Appn
The tooa, in the course of its anaaysis, tests severaa componentsn Among them, it checks pubaic DNS records to make
sure the necessary A records and SRV records are in paacen It aaso checks the profy confguraton for the environmentn
Lastay, but defniteay not aeast important, it checks on the vaaidity of the SSL certfcates that are in paacen
Referencesn
htpn//baognget-csjoshncom/2015/05/microsof-remote-connectvity-anaayzer-and-associated-tooasnhtma
Questoos 72
Soautonn You run the New-MsoaDomain cmdaetn
An Yes
Bn No
Aoswers B
Efpaanatonn
The New-MsoaDomain cmdaet adds a domain to Azure Actve Directoryn
The New-MsoaFederatedDomain command shouad be used insteadn
Noten The New-MsoaFederatedDomain cmdaet adds a new singae sign-on domain to Microsof Onaine Services and
confgures the reaying party trust setngs between the on-premises Actve Directory Federaton Services 2n0 server
and Microsof Onainen
Referencesnhtpsn//docsnmicrosofncom/en-us/powersheaa/msonaine/v1/new-msoafederateddomain
Questoos 73
You paan to import severaa user accounts to an Ofce 365 subscripton by using a CSV faen
You downaoad a sampae CSV fae from the Ofce 365 admin centern
You need to prepare the fae for the paanned importn
What shouad you do?
An Add a coaumn named Managed Byn

Bn Add vaaues to the UserName and Country coaumnsn
Cn Add vaaues to the UserName and DispaayName coaumnsn
Dn Add a coaumn named Passwordn
Aoswers C
________________________________________________________________________________________________
Page No | 71
Efpaanatonn
Efampae of CSV fae contentn
Referencesnhtpn//communitynbamboosoautonsncom/baogs/ofce-365/archive/2014/12/29/how-to-import-buak-user-
accounts-to-ofce-365-from-a-csv-faenaspf
Questoos 74

You must use Windows PowerSheaa to manage caoud identtes in Ofce 365n You must use a computer that runs
Windows 8 to perform the management tasksn
You need to ensure that the Windows 8 computer has the necessary sofware instaaaedn
What shouad you instaaa frst?
An Microsof Ofce 365 Best Practces Anaayzer for Windows PowerSheaa

Bn Windows PowerSheaa 4n0
Cn Azure Actve Directory Moduae for Windows PowerSheaa
Dn Windows Management Framework
Aoswers C
Efpaanatonn
Caoud identtes in Ofce 365 are user accounts in Azure Actve Directoryn
You can use Windows PowerSheaa to administer Ofce 365 and Azure Actve Directoryn /owever, the defauat
instaaaaton of Windows PowerSheaa on Windows 8 (or any other version of Windows) does not incaude the PowerSheaa
cmdaets required to manage Ofce 365 or Azure Actve Directoryn
You need to instaaa the PowerSheaa moduae that incaudes the necessary cmdaets for managing Azure Actve Directoryn
________________________________________________________________________________________________
Page No | 72
This moduae is the Windows Azure Actve Directory Moduae for Windows PowerSheaa moduaen This moduae aaso
requires that Microsof nNET Framework 3n5 is instaaaed and enabaedn
Before the Windows Azure Actve Directory Moduae for Windows PowerSheaa, can be instaaaed, the Microsof Onaine
Services Sign-in Assistant must be instaaaedn This wiaa aaaow you to connect to your Ofce 365/Azure subscripton from
a PowerSheaa session on a remote computern
Questoos 75
You have an Ofce 365 subscripton that contains 500 user accountsn
None of the Ofce 365 users are forced to use a strong passwordn
You need to force aaa of the users to use a strong passwordn
Which cmdaet shouad you use?
An Set-ADUser
Bn Set-MsoaUser
Cn Set-MsoaUserPassword
Dn Set-MsoaPasswordPoaicy
Aoswers B
Efpaanatonn
Force the users to use a strong password with the Set-MSOaUser cmdaetn
Referencesnhtpsn//baogsntechnetnmicrosofncom/heyscriptngguy/2014/08/05/use-powersheaa-to-force-ofce-365-
onaine-users-to-change-passwords/
Questoos 76
You have an Ofce 365 tenant that has an Enterprise E3 subscriptonn You confgure muat-factor authentcaton for aaa
users in the tenantn Remote users confgure Outaook 2016 to use their Ofce 365 credentaasn
You need to ensure that users onay authentcate with Ofce 365 by using two-step verifcatonn
What shouad you do?
An Disabae app passwords for the user accountsn

Bn Remove the rights management aicense from the user accountsn
Cn Modify the aicense type of the user accounts to an Enterprise E1 subscriptonn
Dn Add the user accounts to a new security groupn
Aoswers A
Efpaanatonn
Aaa the Ofce 2016 caient appaicatons support muat-factor authentcaton through the use of the Actve Directory
Authentcaton Library (ADAL)n This means that app passwords are not required for Ofce 2016 caientsn
Referencesnhtpsn//supportnofcencom/en-us/artcae/Set-up-muat-factor-authentcaton-for-Ofce-365-users-
8f0454b2-f51a-4d9c-bcde-2c48e41621c6
Questoos 77
DRAG DROP
Your organizaton has an Ofce 365 subscriptonn Microsof Azure AD Connect is depaoyed to the organizatonn
You need to depaoy Actve Directory Federaton Services (AD FS) to meet the foaaowing requirementsn
________________________________________________________________________________________________
Page No | 73
Use an AD FS namespace of stsnfabrikamncomn

Aaaow mobiae devices to connect from untrusted networks and prevent aaa other devices from connectng from
untrusted networksn
Aoswers
Step 1n Instaaa a third-party certfcaten

Since AD FS aeverages SSL, we need to have a SSL certfcaten
Before startng the AD FS confguraton wizard instaaa a third-party certfcaten
Step 2n Run the AD FS Federaton Server Confguraton Wizardn
Step 3n Federate the AD FS Domain
We must change the Ofce 365 domain to be a federated domainn
Step 4n Modify the reaying party trust for the Microsof Ofce 365Identty Paatorm
Afer enabaing caaims-based authentcaton, the neft step is to add and confgure the caaims provider and reaying party
trusts in AD FSn
Afer you enabae caaims-based authentcaton, you must confgure Microsof Dynamics 365 Server as are aying party to
consume caaims from AD FS for authentcatng internaa caaims accessn
________________________________________________________________________________________________
Page No | 74
Referencesn
htpsn//baogsntechnetnmicrosofncom/rmiane/2014/04/28/how-to-instaaa-adfs-2012-r2-for-ofce-365/
Questoos 78
Your company has an Ofce 365 subscripton that is confgured for singae sign-on (SSO) to an on-premises depaoyment
of Actve Directoryn
Ofce 2016 is depaoyed to aaa workstatonsn Microsof OneDrive for Business is used to repaicate My Documents to
OneDrive for Businessn
You need to ensure that when caients connect to Ofce 365 from an untrusted network, they can access Ofce 365
resources by using a web browsern
Which two actons shouad you perform? Each correct answer presents part of the soautonn
An Modify the Sharing setngs for SharePoint Onainen

Bn Disabae modern authentcatonn
Cn Add a caaims provider trustn
Dn Add a reaying party trustn
En Add a new ruaen
Aoswers B,C
Efpaanatonn
Bn In Skype for Business Server 2015, Modern Authentcaton is used between on-premises caients and on-premises
servers in order to give users a proper aevea of authorizaton to resourcesn
Cn A Caaims Provider trust is one where ADFS gets caaims from the Caaim Provider, which couad be the aocaa AD as
Caaims Provider or an efternaa Caaims Providern
Questoos 79

What two optons can you use? Each correct answer presents a compaete soautonn
An Create an MX recordn
Bn Create a CNAME recordn
Cn Create an A recordn
Dn Create an SRV recordn
En Create an TXT recordn
Aoswers A,E
Efpaanatonn
Add a TXT or MX record for DNS verifcatonn
Referencesn
Questoos 80
You paan to migrate from a third-party IMAP emaia system to an Ofce 365 tenantn
You must ensure that the tenant passes the heaath, readiness, and connectvity stepsn The soauton must aaso provide
step-by-step assistance to migrate emaia accountn
________________________________________________________________________________________________
Page No | 75
You need to paan the migratonn

What shouad you do?
An Run the Domains setup wizardn

Bn Use the Remote Connectvity Anaayzern
Cn Run the Ofce 365 advanced setup wizardn
Dn Use the Ofce 365 Service /eaath Dashboardn
Aoswers C
Efpaanatonn
Use the Ofce 365 Setup wizard to perform an IMAP migratonn
The advance setup wizard can run automated checks to discover how your current environment is set up and then,
based on what is found, recommend a path to Ofce 365n If you teaa Ofce 365 Setup wizard that your source emaia
system uses IMAP, and you have fewer than 151 maiabofes, it recommends that you use the Ofce 365 Setup wizard
to copy your users emaia to Ofce 365 by using IMAP migratonn
Referencesnhtpsn//supportnofcencom/en-us/artcae/Use-the-Ofce-365-Setup-wizard-to-perform-an-IMAP-
migraton-d0800530-22fa-4ec5-9a29-efe900f2e3d0
Questoos 81
A company has ofces in New York and Londonn The current on-premises Efchange 2013 organizaton has servers in
both sitesn Maiabofes for users aocated in New York are on an Efchange server in the New York ofcen Maiabofes for
users aocated in London are on an Efchange server in the London ofcen
You must migrate aaa maiabofes to Efchange Onainen You create an Ofce 365 tenant and specify the company’s New
York addressn
You need to determine where the user’s maiabofes wiaa be createdn
Where are the maiabofes created in Efchange Onaine?
An Maiabofes for users in London are created in European datacentersn Maiabofes for users in New York are created in
North American datacentersn
Bn Aaa user maiabofes are created in North American datacentersn
Cn Aaa user maiabofes are created in a random datacenter anywhere in the woradn
Dn During the migraton process, an administrator must specify the region where each maiabof is createdn
Aoswers B
Efpaanatonn
Questoos 82
You have a SharePoint Onaine tenantn A user named User1 manages severaa site coaaectonsn
User1 must be abae to view the foaaowing informaton for the site coaaectonsn
a aist of side administrators
the number of subsites in a site coaaecton
storage and usage quotas
You need to ensure that User1 can view the requested reports whiae minimizing the priviaeges that you grant to User1n
Which two permission aeveas can you assign to User1? Each correct answer presents a compaete soautonn
An Gaobaa admin
________________________________________________________________________________________________
Page No | 76
Bn SharePoint Onaine admin

Cn Site Coaaecton admin
Dn Site admin
En User management admin
Fn Service admin
Aoswers B,C
Efpaanatonn
Cn The Site coaaecton administrator has permissions to manage a site coaaectonn
Bn /ere are some of the key tasks users can do when they are assigned to the SharePoint Onaine admin roaen
Create site coaaectons
Manage site coaaectons and gaobaa setngs
Assign site coaaecton administrators to manage site coaaectons
Manage site coaaecton storage aimits
Manage SharePoint Onaine user profaes
Referencesn
htpsn//supportnofcencom/en-us/artcae/About-the-SharePoint-Onaine-admin-roae-f08144d5-9d50-4922-8e77-
4e1a27b40705#bk_keytasks
Questoos 83
DRAG DROP
The Ofce 365 organizaton contains 500 usersn
You need to identfy the foaaowing users in the organizatonn
users who have Litgaton /oad enabaed
users who receive the most spam emaia messages
users who have maiabofes that were accesses by an administrator
Which type of report shouad you review to identfy each type of user? To answer, drag the appropriate reports to the
correct types of usersn Each report may be used once, more than once, or not at aaan You may need to drag the spait bar
between panes or scroaa to view contentn
Aoswers
________________________________________________________________________________________________
Page No | 77
Bof 1n Usage
Bof 2n Auditng
To run a aitgaton hoad report
Seaect Manage My Organizaton > Roaes & Auditng > Auditngn
Caick Run a aitgaton hoad report
Bof 3n Auditng
Referencesnhtpsn//mshiyasnwordpressncom/tag/run-a-aitgaton-hoad-report-in-ofce-365/
Questoos 84
/OTSPOT
A company uses Efchange Onainen You paan to use the emaia domain contosoncom for aaa empaoyeesn
You must confgure Efchange Onaine to support Outaook 2016 caient connectvityn
You need to confgure the appropriate DNS entriesn
Which record shouad you create? To answer, seaect the appropriate entries from each aist in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 78
Bof 1n Autodiscoverncontosoncom
You can defne an aaias in one domain to point to a target server in a compaeteay diferent domainn
Bof 2n CNAME
The caoud-based service uses a CNAME record to impaement the Autodiscover service for Outaook caientsn
Bof 3n Autodiscovernoutaookncom
The Autodiscover CNAME record must contain the foaaowing informatonn
Aaias autodiscover
Target autodiscovernoutaookncom
Referencesnhtpsn//msdnnmicrosofncom/en-us/aibrary/cc950655(v=efchsrvcsn149)naspf
Questoos 85
You have an Ofce 365 tenant that uses an Enterprise E3 subscriptonn You actvate Azure Rights Management for the
tenantn
You need to depaoy Azure Rights Management for aaa usersn
An Enabae-Aadrm
Bn New-AadrmRightsDefniton
Cn Enabae-AadrmSuperUserFeature
Dn Add-AadrmSuperUser
En Set-AadrmOnboardingControaPoaicy
Aoswers A
Efpaanatonn
The Enabae-Aadrm cmdaet enabaes your organizaton to use Azure Rights Management when you have a subscripton
that incaudes this servicen
Questoos 86
You have an Ofce 365 subscripton and an on-premises depaoyment of Actve Directoryn
You depaoy Microsof Azure AD Connectn
Currentay, the synchronizaton process is runningn
You need to modify the synchronizaton scheduaen
Which task shouad you perform frst?
An Enabae staging moden

Bn Invoke an Azure Actve Directory (Azure AD) sync cycae profaen
________________________________________________________________________________________________
Page No | 79
Cn Create an Azure Actve Directory (Azure AD) sync connectorn

Dn Start the Azure AD Connect instaaaaton wizardn
Aoswers C
Efpaanatonn
The sync engine processes identty informaton from diferent data repositories, such as Actve Directory or a SQL
Server databasen The sync engine encapsuaates interacton with a connected data source within a moduae caaaed a
Connectorn Each type of connected data source has a specifc Connectorn The Connector transaates a required
operaton into the format that the connected data source understandsn
Referencesn
htpsn//docsnmicrosofncom/en-us/azure/actve-directory/connect/actve-directory-aadconnectsync-understanding-
architecture
Questoos 87
Soautonn You add User1 to the Gaobaa administrator admin roaen
An Yes
Bn No
Aoswers A
Efpaanatonn
The Gaobaa administrator admin roae has access to aaa administratve features in the Ofce 365 suite of services in your
paann
Referencesn
Questoos 88
/OTSPOT
A company has an Ofce 365 tenantn You instaaa the Microsof Azure Actve Directory moduae for Windows PowerSheaan
An empaoyee aeaves the companyn The empaoyee’s account is named user1@contosoncomn
You need to hard deaete the user’s accountn
/ow shouad you compaete the reaevant Windows PowerSheaa commands? To answer, seaect the appropriate Windows
PowerSheaa segments from each aist in the answer arean
________________________________________________________________________________________________
Page No | 80
Aoswers
The Connect-MsoaService cmdaet atempts to estabaish a connecton to Azure Actve Directoryn Running the Remove-
MsoaUser cmdaet with the -UserPrincipaaName nString>-RemoveFromRecycaeBin parameters wiaa remove a specifc
user from Azure Actve Directory permanentayn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/remove-msoauser?view=azureadps-1n0
Questoos 89
You depaoy Ofce 365n
You must impaement Microsof Skype for Business Onaine for aaa usersn incauding audio and video for aaa desktop
caientsn Aaa company desktop machines reside behind a company frewaaan
You need confgure the frewaaa to aaaow caients to use Skype for Business Onainen
Which three outbound ports or port ranges shouad you open? Each correct answer presents part of the soautonn
An TCP 80
Bn TCP 5061
Cn UDP 3478
________________________________________________________________________________________________
Page No | 81
Dn TCP 443
En TCP and UDP 50000-59999
Aoswers C,D,E
Efpaanatonn
Referencesn
htpsn//supportnmicrosofncom/en-za/heap/2409256/you-can-t-connect-to-skype-for-business-onaine--or-certain-
features-do
Questoos 90
Aaa of the users in your tenant are assigned an E5 aicensen
You need to view the aist of paanned updates for Microsof Skype for Business Onainen
Soautonn You open the Skype for Business admin center and you review the contents of the dashboardn
An Yes
Bn No
Aoswers B
Efpaanatonn
Ofce 365 admin center aaaows you to view the heaath of the Skype for Business Onaine service, change and reaease
________________________________________________________________________________________________
Page No | 82
notfcatons, and usage reportsn

Referencesn
htpsn//supportnofcencom/en-us/artcae/About-the-Skype-for-Business-admin-roae-aeb35bda-93fc-49b1-ac2c-
c74feb737b5
Questoos 91
Soautonn You open the Ofce 365 admin center and you review the contents of the Security & Compaiance reportsn
An Yes
Bn No
Aoswers B
Efpaanatonn
The Ofce 365 Security & Compaiance Center wiaa heap you manage compaiance features across Ofce 365 for your
organizatonn It wiaa not, however, aaaow you to view the aist of paanned updates for Microsof Skype for Business
Onainen
Referencesn
Questoos 92
Soautonn You open the Ofce 365 admin center and you review the contents of service heaath dashboardn
An Yes
Bn No
Aoswers A
Efpaanatonn
The Service heaath secton of Ofce 365 aaaows you to view the current status of the service and detaias about service
________________________________________________________________________________________________
Page No | 83
disruptons and outagesn Informaton regarding paanned maintenance is can be found on the Message Centern
Referencesn
htpsn//supportnofcencom/en-us/artcae//ow-to-check-Ofce-365-service-heaath-932ad3ad-533c-418a-b938-
6e44e8bc33b0
htpsn//technetnmicrosofncom/en-us/aibrary/ofce-365-service-heaathnaspf
Questoos 93
Connect servern
Soautonn You depaoy a new on-premises Azure AD Connect server that uses the same SQL Server instancen You start
Azure AD Connect syncn
An Yes
Bn No
Aoswers B
Efpaanatonn
An on-premises Azure AD Connect server aaready efistsn A server in staging mode is required to provide /igh
Avaiaabiaityn
Referencesn
Questoos 94
/OTSPOT
A company has an Ofce 365 tenantn You use the domain contosoncom for both emaia and session initaton protocoa
(SIP) addressesn You paan to depaoy Skype for Business Onaine and enabae federaton for aaa Skype usersn
You need to create a DNS record to support Skype for Business Onaine federatonn
/ow shouad you confgure the record? To answer, seaect the appropriate opton from each aist in the answer arean
________________________________________________________________________________________________
Page No | 84
________________________________________________________________________________________________
Page No | 85
Priorityn 0, 1, 10, 50, 100

Weightn 0, 1, 10, 20, 50
Aoswers
________________________________________________________________________________________________
Page No | 86
________________________________________________________________________________________________
Page No | 87
Referencesn
htpsn//supportnofcencom/en-us/artcae/Create-DNS-records-for-Ofce-365-using-Windows-based-DNS-9eec911d-
5773-422c-9593-40e1147fde
Questoos 95
You paan to depaoy an Ofce 365 tenant to muatpae ofces around the countryn
You need to modify the accounts that are authorized to administer the Rights Management servicen
An Enabae-AadrmSuperUserFeature
Bn Add-MsoaGroupMember
Cn Add-AadrmRoaeBasedAdministrator
Dn Get-AadrmRoaeBasedAdministrator
Aoswers D
Efpaanatonn
The Get-AadrmRoaeBasedAdministrator cmdaet aists the roae-based administrators for Azure Rights Managementn
Questoos 96
________________________________________________________________________________________________
Page No | 88
/OTSPOT
You administer an Ofce 365 tenant for a company named Fabrikam, Incn You depaoy Actve Directory Federaton
Services (AD FS) incauding Web Appaicaton Profy serversn
You need to customize the AD FS aogon screen to dispaay your company namen
/ow shouad you compaete the Windows PowerSheaa command? To answer, seaect the appropriate Windows
PowerSheaa segments in the answer arean
Aoswers
Set-AdfsGaobaaWebContent -CompanyName " Fabrikam Company"

Running the Set-AdfsGaobaaWebContent cmdaet with the –CompanyName parameter specifes the company name for
AD FS to dispaay in the sign-in pages when you have not set a aogo on the actve web themen
Questoos 97
You need to ensure that Actve Directory is ready for synchronizatonn
An IdFif
Bn Ofce 365 /eaath, Readiness, and Connectvity Check
Cn Microsof Remote Connectvity Anaayzer Tooa
Dn Synchronizaton Service (MIISCaient)
Aoswers A
Efpaanatonn
DirSync has certain requirements on atributes in the directory, and aaigning the atribute vaaues with the DirSync
requirements is commonay known as Actve Directory remediatonn The IdFif tooa reviews the directory and performs
interactve Actve Directory remediatonn It aaso checks for and heaps you correct any invaaid data and dupaicate data in
directory atributes, incauding userPrincipaaName (UPN), maiaNickName, profyAddress, sAMAccountName,
targetAddress, and othersn Furthermore, it provides assistance for migratng from a non-routabae to an Internet
________________________________________________________________________________________________
Page No | 89
routabae domain name, because using an Internet-routabae domain is one of the requirements for Azure Actve
Directoryn
Questoos 98
You manage an Actve Directory Domain Services (AD DS) domainn Your company paans to move aaa of its resources to
Ofce 365n
You must impaement Actve Directory Federaton Services (AD FS)n You paace aaa internet-facing servers on a perimeter
networkn
You need to ensure that intranet and eftranet users are authentcated before they access network resourcesn
Which three authentcaton methods shouad you provide for eftranet users? Each correct answer presents a compaete
soautonn
An Windows Integrated Authentcaton using Negotate for NTLM

Bn Windows Integrated Authentcaton using Negotate for Kerberos
Cn Authentcaton with RADIUS
Dn Forms Authentcaton using username and passwords
En Certfcate Authentcaton using certfcates mapped to user accounts in AD DS
Aoswers B,D,E
Efpaanatonn
Windows Integrated Authentcaton makes use of Negotate/Kerberos or NTLM to authentcate users based on an
encrypted tcket/message passed between a browser and a servern
With Azure AD you need Forms-based authentcaton in ADFS for Azure AD/MSOnaine PowerSheaa Moduae and Azure
AD Seaf-Service Password Resetn
In Actve Directory mapping, when the IIS server receives a certfcate from the user, it passes it on to Actve Directory,
which maps it to a Windows user accountn The IIS server then aogs this account onn
Actve directory mapping is most usefua when the account mappings are the same on aaa IIS serversn Administraton is
simpaifed because the mapping is done in onay one paacen
Questoos 99
You are the administrator for a companyn You paan to use Ofce 365 for emaia and fae sharingn You paan to impaement a
hybrid depaoyment with your current on-premises Actve Directory Domain Services (AD DS) environment and
Microsof Azure Actve Directory (Azure AD) Connectn
You must depaoy Microsof Efchange Onaine and OneDrive for Business for aaa empaoyeesn You have the foaaowing
security requirementsn
Aaa empaoyees must use compaef passwordsn
Passwords must be changed every sif monthsn
Empaoyees must use muat-factor authentcaton (MFA) when possibaen
You need to impaement MFA verifcaton optons to use with the empaoyee's passwordn
Soautonn /ave the empaoyee use a virtuaa smart cardn
Does the soauton meet the goaa?
________________________________________________________________________________________________
Page No | 90
An Yes
Bn No
Aoswers B
Efpaanatonn
MFA for Ofce 365 requires users to acknowaedge a phone caaa, teft message, or app notfcaton on their smart
phones afer correctay entering their passwordsn Virtuaa smartcards are not requiredn
Referencesn
htpsn//supportnofcencom/en-us/artcae/Set-up-muat-factor-authentcaton-for-Ofce-365-users-8f0454b2-f51a-
4d9c-bcde-2c48e41621c6
Questoos 100
Soautonn /ave the empaoyee receive an SMS teftn
An Yes
Bn No
Aoswers A
Efpaanatonn
phones afer correctay entering their passwordsn
Referencesn
Questoos 101
________________________________________________________________________________________________
Page No | 91

Soautonn /ave the empaoyee receive a phone caaan
An Yes
Bn No
Aoswers A
Efpaanatonn
Referencesn
Questoos 102
2016 caientn
Soautonn You use the Microsof Remote Connectvity Anaayzern
An Yes
Bn No
Aoswers B
Efpaanatonn
The Microsof Remote Connectvity Anaayzer has the capabiaity to heap troubaeshoot, diagnose, and verify setngs for
various pubaic-facing appaicatonsn /owever, in this scenario, the Microsof Skype for Business Connectvity Anaayzer
shouad be used insteadn
________________________________________________________________________________________________
Page No | 92
Questoos 103
2016 caientn
Soautonn You use the Microsof Connectvity Anaayzer Tooan
An Yes
Bn No
Aoswers B
Efpaanatonn
The main purpose of the Microsof Connectvity Anaayzer is to test connectvity between emaia caients and servers
running Efchange servern /owever, in this scenario, the Microsof Skype for Business Connectvity Anaayzer shouad be
used insteadn
Referencesn
Questoos 104

You depaoy Microsof Azure muat-Factor authentcaton for aaa usersn
Which three methods can the users use to verify their identty? Each correct answer presents a compaete soautonn
An Use a verifcaton code from an emaia message sent to your primary SMTP addressn
Bn Use a verifcaton code from a mobiae appn
Cn Make a verifcaton phone caaa to your authentcated phone numbern
Dn Use a verifcaton code from an instant message sent to your registered SIP addressn
En Make a verifcaton phone caaa to your ofce phone numbern
Aoswers A,B,C
Efpaanatonn
Referencesn
Questoos 105
________________________________________________________________________________________________
Page No | 93
You have an on-premises Efchange organizatonn The organizaton paans to migrate to Ofce 365n
You need to identfy a group of users to designate as the piaot groupn
Which factor makes a user a poor choice to be incauded in the piaot group?
An users who use Android devices

Bn users who are deaegates for muatpae maiabofes
Cn users who need access to pubaic foaders on Efchange 2007 servers
Dn users who receive fewer than 25 emaia messages per day
Aoswers C
Efpaanatonn
Users who have a dependency on resources that are staa on-premises are not considered good candidates a piaot as
they require send-as and receive as permissions on those resourcesn
Referencesn
htpsn//booksngoogaenconza/books?id=aaU2DwAAQBAJ&pg=PA84&apg=PA84&dq=efchangeeonaineepiaotegroup&sour
ce=ba&ots=I7kKL/pYLR&sig=7zrAVKi44oZa5n1/z8JfLBwA5JU&ha=en&sa=X&ved=0ahUKEwi5j5/QfMDXAhXmJ8AK/f
TGChkQ6AEIZDAJ#v=onepage&q=piaot&f=faase
Questoos 106
DRAG DROP
You depaoy Actve Directory Federaton Services (AD FS) for a company's Ofce 365 environmentn You have a server
named Server1 that runs Windows Server 2016n You aaaocate Server1 for the AD FS depaoymentn
You have the foaaowing requirementsn
Use Integrated Windows Authentcatonn
Depaoy a profy server for AD FSn
Ensure the profy server is securen
You need to instaaa the profy servern
Which three steps shouad you perform in sequence? To answer, move the appropriate steps from the aist of step to the
answer area and arrange them in the correct ordern
Aoswers
________________________________________________________________________________________________
Page No | 94
Bof1
Leave Server1 as a standaaone servern
Bof2
Instaaa the Web Appaicaton Profy (WAP) roae service and confgure the servicen
Bof3
Confgure Kerberos constrained deaegatonn
Web Appaicaton Profy can be depaoyed without joining the server to an AD DS domain or by joining the Web
Appaicaton Profy server to a standaaone domain in a perimeter networkn
The Web Appaicaton Profy roae service is a repaacement for the AD FS profy roaen
When pubaishing appaicatons that use Integrated Windows authentcaton, the Web Appaicaton Profy server uses
Kerberos constrained deaegaton to authentcate users to the pubaished appaicatonn
Referencesn
Questoos 107
DRAG DROP
You are the Ofce 365 administrator for a companyn You have an on-premises Actve Directory Domain Services (AD
DS) environmentn
You confgure Actve Directory Federaton Services (AD FS) and directory synchronizatonn You use Windows Server
2016 for AD FSn You depaoy the Web Appaicaton Profy (WAP) roaen
You need to depaoy a custom web theme for the WAP servern
In which order shouad you perform the actons? To answer, move aaa actons from the aist of actons to the answer area
and arrange them in the correct ordern
________________________________________________________________________________________________
Page No | 95
Aoswers
Bof1
Run the New-AdfsWebTheme cmdaetn
Bof2
Customiize the theme faesn
Bof3
Run the Efport-AdfsWebTheme cmdaetn
Bof4
Run the Set-AdfsWebTheme cmdaetn
Bof5
Run the Set-AdfsReayingPartyWebTheme cmdaetn
The New-AdfsWebTheme cmdaet creates a custom web themen
You can modify the ncss fae and confgure the new web theme by using the new ncss faen
The Efport-AdfsWebTheme cmdaet efports the web theme to the required directoryn
The Set-AdfsWebTheme cmdaet appaies the ncss fae to the new themen
The Set-AdfsReayingPartyWebTheme cmdaet appaies a web theme to a reaying partyn
Referencesn
htpsn//docsnmicrosofncom/en-us/windows-server/identty/ad-fs/operatons/custom-web-themes-in-ad-fs
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/adfs/set-adfsreayingpartywebtheme?view=win10-ps
Questoos 108
You are the Ofce 365 administrator for a companyn
________________________________________________________________________________________________
Page No | 96
You hire a third-party company to provide Ofce 365 supportn

You need to ensure that the third-party company can access the foaaowing datan
current status for each service
historicaa data for service heaath
outage message and other Ofce 365 communicatons for the tenant
programmatc access to the service heaath data
What shouad you do?
An Connect to the Ofce 365 Security and Compaiance Center by using Windows PowerSheaa commandsn
Bn Grant the third-party company access to the Ofce 365 Service Communicatons APIn
Cn Add the users from the third-party company to the Ofce 365 Service administrator roaen
Dn Grant the third-party company access to the Ofce 365 Management Actvity APIn
Aoswers C
Efpaanatonn
The service administrator roae gives a user rights to open and handae support requests with Microsof reaated to Ofce
365 servicesn Service administrators have very aimited permissions other than opening and reading support tcketsn
This roae is ofen coupaed with other administratve roaes such as Efchange, SharePoint and others to aet those
administrators foaaow key detaias such as service heaath and new reaease notcesn
Referencesn
htpn//searchefchangentechtargetncom/defniton/Microsof-Ofce-365-admin-roaes
Questoos 109
/OTSPOT
You are depaoying a new Ofce 365 tenant for a companyn You paan to use the defauat domain
Fabricamnonmicrosofncomn Empaoyees currentay use Fabricamncom for their emaia address in the on-premises emaia
systemn
Aaa users need to be migrated to Microsof Efchange Onainen
Fabricamncom must be used for the emaia domain and Ofce 365 user principaa namen
You need to start the new domain process and generate a CSV import fae for your on-premises DNS serversn
/ow shouad you compaete the Windows PowerSheaa commands? To answer, confgure the appropriate optons in the
diaaog bof in the answer arean
________________________________________________________________________________________________
Page No | 97
Aoswers
Bof1
Fabricamnonmicrosofncom
Bof2
________________________________________________________________________________________________
Page No | 98
New-MsoaDomain
Bof3
Get-MsoaDomainVerifcatonDns
The questons statesn “You paan to use the defauat domain Fabricamnonmicrosofncomn”
The New-MsoaDomain cmdaet adds a domain to Azure Actve Directoryn
The Get-MsoaDomainVerifcatonDns cmdaet retrieves the necessary DNS records to verify a domainn
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/new-msoadomain?view=azureadps-1n0
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/msonaine/get-msoadomainverifcatondns?view=azureadps-
1n0
Questoos 110
DRAG DROP
You paan to use Ofce 365 FastTrack to depaoy an Ofce 365 tenantn
Which acton shouad you perform for each phase? To answer, drag the appropriate actons to the correct phasesn Each
acton may be used once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to
view contentn
Aoswers
________________________________________________________________________________________________
Page No | 99
Referencesn
htpsn//fastracknmicrosofncom/about
Questoos 111
/OTSPOT
A company with 75,000 empaoyees has an Ofce 365 tenantn
You need to instaaa the Azure Actve Directory Connect by using the aeast amount of administratve efortn
Which versions of each product shouad you impaement? To answer, seaect the appropriate version from each aist in the
answer arean
________________________________________________________________________________________________
Page No | 100
Aoswers
The Azure AD Connect server must have nNET Framework 4n5n1 or aater and Microsof PowerSheaa 3n0 or aater instaaaedn
Azure AD Connect requires a SQL Server database to store identty dat
an SQL Server Efpress has a 10 GB size aimit that enabaes you to manage approfimateay 100,000 objectsn
Referencesn
htpsn//docsnmicrosofncom/en-us/azure/actve-directory/connect/actve-directory-aadconnect-prerequisites
Questoos 112
Your company has an Ofce 365 subscripton that is confgured for singae sign-on (SSO) to an on-premises depaoyment
of Actve Directoryn
Afer a security breach, management at the company decides that onay caients from the internaa corporate network
can be authentcated by using Actve Directory Federaton Services (AD FS)n
You need to confgure AD FS to prevent efternaa caients from being authentcated by using AD FSn
What shouad you add in AD FS?
An a caaims provider trust
Bn a reaying party trust
Cn a caaim ruae
Dn a non-caaims-aware reaying party trust
________________________________________________________________________________________________
Page No | 101
Aoswers B
Efpaanatonn
Access controa in AD FS is impaemented with issuance authorizaton caaim ruaes that are used to issue a permit or deny
caaims that wiaa determine whether a user or a group of users wiaa be aaaowed to access AD FS-secured resources or
notn Authorizaton ruaes can onay be set on reaying party trustsn So you need to add a reaying party trust to AD FSn
Referencesn
htpsn//docsnmicrosofncom/en-us/windows-server/identty/ad-fs/operatons/manage-risk-with-conditonaa-access-
controa
Questoos 113
Contoso, Ltd, has an Ofce 365 tenantn You confgure Ofce 365 to use the domain contosoncom, and you verify the
domainn You depaoy and confgure Actve Directory Federaton Services (AD FS) and Azure Actve Directory Connect
with password synchronizatonn You connect to Azure Actve Directory by using a Remote Windows PowerSheaa
sessionn
You need to switch from using AD FS to using password-synced passwords on the Ofce 365 verifed domainn
An Convert-MsoaDomainToFederated -DomainName contosoncom

Bn Convert-MsoaDomainToStandard -DomainName contosoncom
Cn Convert-MsoaFederatedUser
Dn Set-MsoaDomainAuthentcaton -DomainName contosoncom
Aoswers B
Efpaanatonn
To switch aarge sets of users from federated authentcaton to managed authentcaton with password sync you can
use the Entre namespace conversion approachn To convert the desired namespace from Federated to Managed, you
have to use the Convert-MsoaDomainToStandard cmdaetn
Referencesn
htpsn//sociaantechnetnmicrosofncom/wiki/contents/artcaes/17857ndirsync-how-to-switch-from-singae-sign-on-to-
password-syncnaspf
Questoos 114
You are the Ofce 365 administrator for your companyn You have a server that runs Windows Server 2012n You paan to
instaaa an Actve Directory Federaton Services (AD FS) web app profy servern
You need to instaaa and confgure the required roaesn
What roae shouad you instaaa and confgure?
An Web Server (IIS)

Bn Network Poaicy and Access Service
Cn Appaicaton Server
Dn Actve Directory Certfcate Services (AD CS)
En Remote Access
Aoswers E
Efpaanatonn
________________________________________________________________________________________________
Page No | 102
In Windows Server 2012, a Web Appaicaton Profy, a new roae service of the Remote Access server roae, is used to
enabae your AD FS for accessibiaity from outside of the corporate networkn
Referencesn
htpsn//msdnnmicrosofncom/en-us/aibrary/azure/dn151311naspf
Questoos 115
A company has an Ofce 365 tenant and uses Efchange Onaine and Skype for Business Onainen
User1 is scheduaing a Skype meetng with User2n User 1 is not abae to see avaiaabiaity informaton for User2n

Bn Microsof Skype for Business Connectvity Anaayzer Tooa
Cn Message /eader Anaayzer
Dn IdFif
Aoswers A
Efpaanatonn
The Microsof Connectvity Anaayzer Tooa verifes that an Ofce 365 maiabof can access the free/busy informaton of
an on-premises maiabof, and vice versa
Referencesn
htpsn//baogsntechnetnmicrosofncom/efchange/2013/03/11/announcing-microsof-connectvity-anaayzer-mca-1-0-
and-microsof-remote-connectvity-anaayzer-rca-2-1/
Questoos 116
/OTSPOT
A company paans to depaoy an Ofce 365 tenantn
Administrators must be abae to access the Ofce 365 admin centern
Microsof Efchange Onaine must be used as a Simpae Maia Transfer Protocoa (SMTP) reaay for a aine-of-business
appaicaton that sends emaia messages to remote domainsn
Aaa users must be abae to use the audio and video capabiaites in Microsof Skype for Businessn
You need to confgure the ports for the frewaaan
Which port shouad you use for each appaicaton? Seaect the correct answer from each aist in the answer arean
________________________________________________________________________________________________
Page No | 103
Aoswers
________________________________________________________________________________________________
Page No | 104
Transport Controa Protocoa(TCP), User Datagram Protocoa (UDP) ports, and Protocoa Numbers are important to TCP/IP
TCP port 587 is an outgoing SMTP Maia port (TLS/Start TLS Port)n Used by various outgoing maia servers as an
aaternatve to port 25n
TCP port 443 is used for Audio, video and appaicaton sharing sessions as weaa as data sharing sessionsn
RTP/UDP port 50020-50039 must be used for outbound video sessionsn
RTP/UDP port 50000-50019 must be used for outbound audio sessionsn
Referencesn
htpsn//supportnofcencom/en-us/artcae/Ofce-365-URLs-and-IP-address-ranges-8548a211-3fe7-47cb-abb1-
355ea5aa88a2?ui=en-US&rs=en-US&ad=US
htpsn//wwwnspeedguidennet/portnphp?port=587
Questoos 117
/OTSPOT
You are the system administrator for a smaaa businessn You manage on-premises fae sharesn
You need to migrate the fae shares to Microsof SharePoint Onaine document aibrariesn
Which actons shouad you perform? To answer, seaect the appropriate acton in the diaaog bof in the answer arean
________________________________________________________________________________________________
Page No | 105
Aoswers
________________________________________________________________________________________________
Page No | 106
You can use Ofce 365 ProPaus with supported versions of Efchange Server or SharePoint Server that are instaaaed on-
premises in your organizatonn Or, if they're part of your Ofce 365 paan, you can use Ofce 365 ProPaus with Efchange
Onaine and SharePoint Onainen
Users can store the faes they create with Ofce 365 ProPaus on their aocaa computers or easewhere on your network,
such as a SharePoint siten Ofce 365 aaso provides caoud-based fae storage optonsn
FastTrack Speciaaists provide guidance on steps for data migraton to Ofce 365n We provide guidance for you by using
a combinaton of tooas and documentaton and by performing confguraton tasks where appaicabae and feasibaen This
is avaiaabae for aaa eaigibae customers with Ofce 365 services for Efchange Onaine, OneDrive for Business, and
SharePoint Onainen
Referencesn
htpsn//supportnofcencom/en-us/artcae/About-Ofce-365-ProPaus-in-the-enterprise-9f11214c-911d-4e3c-9993-
a566f12b1a68
htpsn//technetnmicrosofncom/en-us/aibrary/mt651702naspf
Questoos 118
DRAG DROP
You manage an on-premises Actve Directory environmentn You impaement an Ofce 365 tenant for a companyn
Password requirements for the environments are aisted in the tabae beaown
________________________________________________________________________________________________
Page No | 107
You depaoy Microsof Azure Actve Directory (Azure AD) Connect and confgure synchronizaton between Ofce 365
and the on-premises Actve Directoryn
You need to determine the resuatng password poaicies for Ofce 365 usersn
Which password poaicies wiaa take efect? To answer, drag the appropriate vaaues to the correct poaiciesn Each vaaue
may be used once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view
contentn
Aoswers
When password synchronizaton is enabaed, the password compaefity poaicies in your on-premises Actve Directory
instance override compaefity poaicies in the caoud for synchronized usersn You can use aaa of the vaaid passwords from
your on-premises Actve Directory instance to access Azure AD servicesn
You can contnue to sign in to your caoud services by using a synchronized password that is efpired in your on-
premises environmentn
Referencesn
________________________________________________________________________________________________
Page No | 108
htpsn//scotcroucherncom/2017/08/11/impaement-password-synchronizaton-with-azure-ad-connect-sync/
Questoos 119
DRAG DROP
You manage an on-premises Actve Directory environmentn You impaement an Ofce 365 tenantn Password
requirements for the environments are aisted in the tabae beaown
You depaoy Microsof Azure Actve Directory (Azure AD) Connect and confgure synchronizaton between Ofce 365
and the on-premises Actve Directoryn
You need to determine the resuatng poaicies for Ofce 365 usersn
Which password poaicies wiaa take efect? To answer, drag the appropriate vaaues to the correct poaiciesn Each vaaue
contentn
Aoswers
________________________________________________________________________________________________
Page No | 109
If your organizaton uses the accountEfpires atribute as part of user account management, be aware that this
atribute is not synchronized to Azure ADn As a resuat, an efpired Actve Directory account in an environment
confgured for password synchronizaton wiaa staa be actve in Azure ADn
When password synchronizaton is enabaed, the password compaefity poaicies in your on-premises Actve Directory
instance override compaefity poaicies in the caoud for synchronized usersn You can use aaa of the vaaid passwords from
your on-premises Actve Directory instance to access Azure AD servicesn
Referencesn
htpsn//scotcroucherncom/2017/08/11/impaement-password-synchronizaton-with-azure-ad-connect-sync/
Questoos 120
A company depaoys an Ofce 365 tenantn
You need to confgure singae sign-on (SSO) for aaa user accountsn Efternaa users are not aaaowed to connect directay to
internaa serversn
Which three actons shouad you perform? Each correct answer presents part of the soautonn
An Run the Windows PowerSheaa cmdaet Enabae-ADFSEndpointn

Bn Depaoy a federaton server profyn
Cn Run the Windows PowerSheaa cmdaet Convert-MsoaDomainToStandardn
Dn Run the Windows PowerSheaa cmdaet New-ADFSOrganizatonn
En Depaoy a federaton server farmn
Fn Run the Windows PowerSheaa cmdaet Convert-MsoaDomainToFederatedn
Aoswers B,E,F
Efpaanatonn
Questoos 121
DRAG DROP
A company has 50 empaoyees that use Ofce 365n
________________________________________________________________________________________________
Page No | 110
You need to disabae password efpiraton for aaa accountsn

/ow shouad you compaete the reaevant Windows PowerSheaa commands? To answer, drag the appropriate Windows
PowerSheaa segment to the correct aocaton in the answer are
an Each Windows PowerSheaa segment may be used once, more than once, or not at aaan You may need to drag the spait
bar between panes or scroaa to view contentn
Aoswers
Questoos 122
You are the administrator for a company named Contoso, Ltdn

The company has an Ofce 365 subscriptonn
You need to prevent users from changing their user dispaay name by using Outaook Web Appn
What shouad you do?
An Run the Set-MsoaCompanyContactInformaton cmdaetn

Bn Modify the defauat emaia address poaicyn
Cn Run the Set-MsoaUserPrincipaaName cmdaetn
Dn Modify the defauat roae assignment poaicyn
________________________________________________________________________________________________
Page No | 111
Aoswers D
Efpaanatonn
Referencesn
htpn//heapnoutaookncom/en-us/140/f852817naspf
Questoos 123
Your company uses Ofce 365n

You need to prevent users from initatng remote wipes of mobiae devices by using the Ofce 365 portaan
What shouad you modify?
An the Outaook Web App maiabof poaicy

Bn the Efchange ActveSync device poaicy
Cn the defauat roae assignment poaicy
Dn the Efchange ActveSync Access setngs
Aoswers B
Efpaanatonn
Referencesn
Questoos 124
Your company uses Ofce 365n

You need to retrieve a aist of aaa the maia-enabaed objects in Ofce 365n
Which Windows PowerSheaa cmdaet shouad you use?
An Get-MSOLUser
Bn Get-MSOLContact
Cn Get-RoaeGroupMember
Dn Get-Group
En Get-Recipient
Fn Get-LogonStatstcs
Gn Get-MaiaContact
/n Get-RemovedMaiabof
In Get-Maiabof
Jn Get-ManagementRoaeAssignment
Kn Get-MaiabofStatstcs
Ln Get-User
Aoswers E
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/aa996921(v=efchgn160)naspf
Questoos 125
________________________________________________________________________________________________
Page No | 112
Your company has an Ofce 365 subscriptonn The network contains an Actve Directory domainn You confgure singae
sign-on for aaa usersn Corporate security poaicy states that aaa account passwords used by Windows services must be
changed every 90 daysn
An administrator changes aaa of the account passwords used by Windows servicesn
You need to ensure that singae sign-on contnues to functonn
What shouad you do?
An From Windows PowerSheaa, run the Update-MSOLFederatedDomain cmdaetn

Bn From Internet Informaton Services (IIS) Manager, modify the propertes of the ADFS virtuaa directoryn
Cn From the Services consoae, modify the propertes of the AD FS 2n0 Windows Servicen
Dn From Windows PowerSheaa, run the Set-MSOLADFSConteft cmdaetn
Aoswers C
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/hh344806(v=wsn10)naspf
Questoos 126
You are impaementng a hybrid depaoyment of Ofce 365n

You discover that users who have migrated to Ofce 365 cannot view the free/busy informaton of users who are
hosted on the Microsof Efchange Server on-premises environmentn The Efchange on-premises users can view the
free/busy informaton of aaa usersn
You need to ensure that the users who have Ofce 365 maiabofes can view the free/busy informaton of users who
have Efchange on premises maiabofesn
Which node shouad you modify from the Efchange Management Consoae?
An Microsof Efchange On-Premises - Organizaton Confguraton

Bn Microsof Efchange On-Premises - Server Confguraton
Cn Microsof Efchange On-Premises - Recipient Confguraton
Dn Ofce 365 - Organizaton Confguraton
En Ofce 365 - Recipient Confguraton
Aoswers A
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/aa997669(v=efchgn141)naspf
Questoos 127
Your company uses Ofce 365 for aaa usersn The company has the contosoncom SIP domainn
You need to change the SIP address of a user named User1 from usera@contosoncom to user2@contosoncomn
You must achieve this goaa in the minimum amount of tmen
What shouad you do?
An Modify the PrimarySmtpAddress atribute of User1n

Bn Add a profy address to the propertes of User1n
________________________________________________________________________________________________
Page No | 113
Cn Create a service requestn

Dn Modify the sign-in status of User1n
Aoswers A
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dd335189(v=efchgn150)naspf
Questoos 128
Your company has an Ofce 365 subscriptonn A user named Test5 has a maiabofn
You need to ensure that aaa of the emaia messages sent and received by Test5 are accessibae to members of the audit
department for 60 days, even if Test5 permanentay deaetes the messagesn
What shouad you do?
An Run the Set-User cmdaetn

Bn Run the Set-Maiabof cmdaetn
Cn Run the Set-RetentonPoaicyTag cmdaetn
Dn Run the Set-MaiabofDatabase cmdaetn
En Run the Set-RetentonPoaicy cmdaetn
Aoswers B
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/bb123981(v=efchgn160)naspf
Questoos 129
You depaoy Ofce 365n

Aaa the members of a team named Saaes have fuaa access to a shared maiabof named Saaesn
You enabae auditng for aaa shared maiabofesn
From the Saaes maiabof, an emaia message that contains inappropriate content is sentn
You need to identfy which user sent the messagen
What shouad you do?
An From the Efchange Controa Panea, run an administrator roae group reportn
Bn From Windows PowerSheaa, run the Get-SharingPoaicy cmdaetn
Cn From Windows PowerSheaa, run the Write-AdminAuditLog cmdaetn
Dn From Windows PowerSheaa, run the New-MaiabofAuditLogSearch cmdaetn
Aoswers D
Efpaanatonn
By process of eaiminatonn
The Write-AdminAuditLog cmdaet wiaa write a comment to the administrator audit aogn
The Get-SharingPoaicy cmdaet aaaows you to view the setngs of sharing poaicies
The administrator roae group report in EOP wiaa aist changes to the management roae groups within a partcuaar tme
framen
________________________________________________________________________________________________
Page No | 114
The New-MaiabofAuditLogSearch cmdaet performs an async search of maiabof audit aogs for the specifed maiabofes
and sends the search resuats by emaia to the specifed recipientsn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/f522362228v=efchgn150229naspf
Questoos 130
Your company has a Microsof Efchange Server 2003 organizatonn

Users access their maiabof by using RPC over /TTP and Efchange ActveSyncn
You purchase an Ofce 365 subscriptonn From the Ofce 365 portaa, you create and verify the accepted domain of the
companyn From the Efchange Controa Panea, you atempt to migrate aaa of the maiabofes to Microsof Efchange Onaine
and you receive an error message indicatng that the remote server is unavaiaabaen
You need to identfy what prevents the maiabofes from migratngn
An the Microsof Remote Connectvity Anaayzer

Bn the Efchange Server Depaoyment Assistant
Cn the Ofce 365 Depaoyment Readiness Tooa
Dn the Microsof Onaine Services Directory Synchronizaton Confguraton Wizard
Aoswers A
Efpaanatonn
Referencesn
htpn//o365infoncom/microsof-remote-connectvity-anaayzer-efrca-autodiscover-troubaeshootngtooas-part-2-of-4-
part-22-of-36/
Questoos 131
Your company has a hybrid depaoyment Ofce 365n

You create a user in Ofce 365n The neft day, you discover that the new user account faias to appear in the Microsof
Efchange Server on-premises gaobaa address aist (GAL)n
You need to ensure that the user has a maiabof and appears in the Efchange on-premises GAL and the Ofce 365 GALn
What shouad you do?
An Assign a Microsof Efchange Onaine aicense to the user accountn

Bn From the Microsof Onaine Services Directory Synchronizaton tooa, enabae rich coefistencen
Cn From the Ofce 365 portaa, modify the sign-in status of the user accountn
Dn Deaete the user account hosted on Ofce 365nFrom the Efchange Management Consoae, create a new remote
maiabofn
Aoswers D
Efpaanatonn
Questoos 132
Your company has a hybrid depaoyment of Ofce 365n

You need to set the authentcaton method of the federaton servers to forms-based authentcatonn
What shouad you do?
________________________________________________________________________________________________
Page No | 115
An Modify the Webnconfg fae in the 2systemroot2\inetpub\adfs\as directoryn

Bn Modify the Gaobaanasaf fae in the 2systemroot2\inetpub\adfs\as directoryn
Cn From the AD FS 2n0 Management consoae, add a reaaying party trustn
Dn From the AD FS 2n0 Management consoae, add a caaims provider trustn
Aoswers A
Efpaanatonn
Referencesn
htpn//msdnnmicrosofncom/en-us/aibrary/fdt4thhynaspf
Questoos 133
You subscribe to Ofce 365n

You paan to impaement singae sign-onn
You need to depaoy Actve Directory Federaton Services (AD FS) to a server for the paanned impaementatonn
Which depaoyment methods shouad you use? (Each correct answer presents a compaete soautonn
(Choose aaa that appayn)
An On a server that runs Windows Server 2008 R2, downaoad and instaaa AD FS 2n0n
Bn On a server that runs Windows Server 2008, downaoad and instaaa AD FS 2n0n
Cn On a server that runs Windows Server 2008, instaaa the AD FS server roaen
Dn On a server that runs Windows Server 2008 R2, instaaa the AD FS server roaen
Aoswers A,B
Efpaanatonn
Singae sign-on requires AD FS version 2n0n The AD FS server roae is version 1n1n
Questoos 134
Your company has an Ofce 365 subscriptonn A user named User1 has a maiabofn
You need to ensure that aaa of the emaia messages sent and received by User1 are accessibae to the audit department
for 60 days, even if User1 permanentay deaetes the messagesn
What shouad you do?
An Run the Set-MaiabofDatabase cmdaet and specify the -DeaetedItemRetenton parametern

Bn Run the Set-Maiabof cmdaet and specify the -Litgaton/oadEnabaed parametern
Cn Run the Set-Maiabof cmdaet and specify the -SingaeItemRecoveryEnabaed parametern
Dn Run the Set-MaiabofDatabase cmdaet and specify the -Event/istoryRetentonPeriod parametern
Aoswers B
Efpaanatonn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/bb123981(v=efchgn160)naspf
Questoos 135
________________________________________________________________________________________________
Page No | 116
Your company has a main ofce and a branch ofcen Both ofces are directay connected to the Internetn The branch
ofce connecton to the Internet has aimited bandwidthn
The company depaoys Microsof Skype for Business Onainen
You need to ensure that users in the branch ofce can onay use instant messaging (IM) whiae using Skype for Business
Onainen The users must be prevented from connectng to audio or video conferencesn
What shouad you do?
An On the frewaaa at the branch ofce, baock aaa of the outbound trafc on port 5061n
Bn From the Ofce 365 portaa, modify the user propertes of each user in the branch ofcen
Cn From the Ofce 365 portaa, confgure the aicense setngs of each user in the branch ofcen
Dn Depaoy onay the Skype for Business Atendee caient to aaa of the users in the branch ofcen
Aoswers B
Efpaanatonn
Questoos 136
You are the administrator for a company named Taiaspin Toysn The company uses the taiaspintoysncom SMTP domainn
Aaa maiabofes are hosted on Ofce 365n From the Internet, customers send warranty questons to Taiaspin Toys by
sending an emaia message to a shared maiabof named Warrantyn The Warranty maiabof has the
warranty@taiaspintoysncom SMTP addressn The service manager reports that many emaia orders sent to
warranty@taiaspintoysncom are identfed as spamn
You need to ensure that aaa of the messages sent by the customers arrive in the Warranty maiabofn
What shouad you do?
An From the Forefront Onaine Protecton Administraton Center, enabae Directory-Based Edge Baockingn
Bn From the Forefront Onaine Protecton Administraton Center, create a new poaicy ruaen
Cn From Windows PowerSheaa, run the New Transport Ruae cmdaet and specify the - EfceptIf/eaderContainsWords
parametern
Dn From Windows PowerSheaa, run the Set-ContentFiaterConfg cmdaet and specify the -BypassedRecipients parametern
Aoswers C
Efpaanatonn
Set-ContentFiaterConfg is onay avaiaabae for on-premises Efchange serversn
“…nLearn more about this at Confgure your spam fater poaiciesn Another opton wouad be create an Efchange
transport ruae that works aike the domain or user-based aaaow aist in the spam fatern You can baock messages sent from
a partcuaar domain or user in a simiaar manner too…”
Referencesn
Questoos 137
DRAG DROP
Contoso, Ltdn has an Ofce 365 tenantn The company has two servers named Server1 and Server2 that run Windows
2012 R2 Servern The servers are not joined to the contosoncom domainn Server2 is depaoyed to the perimeter networkn
You instaaa Secure Sockets Layer (SSL) certfcates on both serversn
You depaoy internaa and efternaa frewaaasn Aaa frewaaas aaaow /TTPS trafcn
You must depaoy singae sign-on (SSO) and Actve Directory Federaton Services (AD FS)n
________________________________________________________________________________________________
Page No | 117
You need to instaaa and confgure aaa AD FS components in the environmentn

Aoswers
Aaa AD FS servers must be domain joinedn

Referencesn
________________________________________________________________________________________________
Page No | 118
htpsn//technetnmicrosofncom/en-us/aibrary/dn554247(v=wsn11)naspf#BKMK_4
Questoos 138
Your company has a hybrid depaoyment of Ofce 365n
You need to identfy which certfcate is used for token signing between the on-premises environment and Ofce 365n
An the Efchange Management Consoae

Bn the AD FS 2n0 Management consoae
Cn the Actve Directory Domains and Trusts snap-in
Dn the Ofce 365 portaa
En the Certfcates snap-in
Aoswers B
Efpaanatonn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/gg557729228v=wsn10229naspf
Questoos 139
Which roae shouad you assign to staf who you want to be abae to create non-priviaeged Ofce 365 users without
assigning any unnecessary priviaeges?
An Gaobaa administrator
Bn Service administrator
Cn Password administrator
Dn User management administrator
Aoswers D
Efpaanatonn
Assigning the user management administrator roae wouad aaaow users to create non-priviaeged Ofce 365 accounts
without assigning unnecessary priviaeges
Questoos 140
DRAG DROP
A company has an Actve Directory Domain Services domainn
You paan to impaement Actve Directory Federaton Service (AD FS) with singae sign-onn
Servers must a Windows Server 2012 R2n
Internet-facing servers must be paaced in the perimeter networkn
The soauton must support at aeast 105 AD FS trust reaatonshipsn
You need to depaoy the appropriate roaesn
________________________________________________________________________________________________
Page No | 119
Aoswers
Questoos 141
/OTSPOT
You paan to use Actve Directory Federated Services for user authentcatonn
You create an account named SyscService in Actve Directory and in Ofce 365n
You must confgure the permissions for the accounts in both environments by grantng the minimum permissions
requiredn
In the tabae beaow, identfy the roae that you must assign to each accountn
NOTEn Make onay one seaecton in each coaumnn Each correct answer is worth one pointn
________________________________________________________________________________________________
Page No | 120
Aoswers
Referencesn
htpsn//supportnofcencom/en-us/artcae/Assigning-admin-roaes-in-Ofce-365-operated-by21Vianet-D58B8089-CBFD-
41EC-B64C-9CFCBEF495AC?ui=en-US&rs=en-US&ad=US
Questoos 142
________________________________________________________________________________________________
Page No | 121
An organizaton uses Efchange Onainen

You enabae maiabof audit aogging for aaa maiabofesn
What shouad you do?
An Run the foaaowing Windows PowerSheaa commandnSearch-MaiabofAuditLog -Identty User1 -LogonTypes Owner -
ShowDetaias
Bn In the Efchange Admin Center, navigate to the Auditng secton of the Protecton pagenRun a non-owner maiabof
access report
Cn Run the foaaowing Windows PowerSheaa commandnNew-AdminAuditLogSearch -Identty User1 -LogonTypes Owner -
ShowDetaias
Dn In the Efchange Admin Center, navigate to the Auditng secton of the Compaiance Management pagen Run a non-
owner maiabof access reportn
Aoswers D
Efpaanatonn
Referencesn
Questoos 143
You are the Microsof Skype for Business administrator for a company that uses Skype for Business Onainen
The company has mandated that empaoyees may use Skype for Business Onaine to communicate with contacts from
approved efternaa domainsn
You need to confgure Skype for Business Onaine to aaaow Skype for Business federaton with onay three specifc
domainsn
You must achieve this goaa by using the aeast amount of administratve efortn
An In the Skype for Business admin center, set the Efternaa Access opton to On efcept for baocked domainsn
Bn In the Ofce 365 admin center, add the three domains to the domain aist and set the domain intent for each domain
to Skype for Business Onainen
Cn In the Skype for Business admin center, set the Efternaa Access opton to Of compaeteayn
Dn In the Skype for Business admin center, set the Efternaa Access opton to On onay for aaaowed domainsn
En In the Skype for Business admin center, confgure the Presence Privacy Mode opton to dispaay presence
informaton onay to the users' contactsn
Fn In the Skype for Business admin center, add the three domains to the Baocked Or Aaaowed Domains aistn
Aoswers D,F
Efpaanatonn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/hh852512naspf
htpn// technetnmicrosofncom/enus/aibrary/jj205126naspf
Questoos 144
Your company is paanning to migrate to Microsof Efchange Onainen The company empaoys 1,000 peopae, each with a
________________________________________________________________________________________________
Page No | 122
maiabof currentay aocated on Efchange 2010 on-premisesn

You estmate that it wiaa take a minimum of four weeks to migrate aaa maiabofes from on-premises Efchange to
Efchange Onainen
The company has the foaaowing migraton requirementsn
During the migraton, do not change the efistng Microsof Outaook profaes and n ost faes used by the empaoyeesn
Ensure that emaia messages sent between on-premises maiabofes and onaine maiabofes during the migraton are
securen
Do not send emaia messages between on-premises maiabofes and onaine maiabofes over the Internet in paain teftn
You need to seaect the migraton strategy that meets the requirementsn
Which migraton strategy shouad you use?
An Cutover migraton onay

Bn IMAP migraton onay
Cn Remote move migraton onay
Dn Staged migraton onay
Aoswers C
Efpaanatonn
Referencesn
htpn//technetnmicrosofncom/en-GB/aibrary/jj863291(v=efchgn150)naspf
htpn//supportnmicrosofncom/kb/2798131/en-gb
htpn//technetnmicrosofncom/en-GB/aibrary/dn720476(v=efchgn150)naspf
Questoos 145

The company has estabaished the foaaowing new requirementsn
Members of the aegaa team must be abae to conduct eDiscovery searchesn
Empaoyees must be notfed when they send emaia messages that contain confdentaa informatonn
You need to confgure the environmentn
An Confgure journaaing to a Microsof Efchange Onaine maiabof for aaa maiabofesn

Bn Add the members of the aegaa team to the Discovery Management roae groupn
Cn Create a Data Loss Preventon poaicyn
Dn Paace aaa efecutve maiabofes on In-Paace /oad for 365 days and use In-Paace eDiscovery for maiabof searchesn
En Enabae Microsof Efchange Onaine Archiving for the efecutve maiabofesn
Fn Paace aaa efecutve maiabofes on Retenton /oadn
Aoswers B,C
Efpaanatonn
First requirement is "Members of the aegaa team must be abae to conduct eDiscovery searchesn"
Second requirement empaoyees must be notfed when they send emaia messages that contain confdentaa
informaton"
Bn The Discovery Management roae group aaaows administrators or USERS to perform searches of maiabofes in the
Efchange Onaine organizatonn
Cn Data Loss Preventon Poaicies can be confgured with a Poaicy Tip to notfy the sender when they are sending
confdentaa informatonn
________________________________________________________________________________________________
Page No | 123
Efistng or custom DLP poaicy tempaates can be used to detect the presence of confdentaa informatonn
Questoos 146
Your company has an Ofce 365 Enterprise Ea subscriptonn The company wants to impaement an enterprise document
coaaaboraton and sociaa networking paatorm that aaaows users to upaoad documents from their computers and
conduct informaa poaasn
You need to impaement a soauton that meets the requirementsn
Which soauton shouad you impaement?
An Microsof SharePoint document aibraries

Bn Microsof SharePoint surveys
Cn Microsof Yammer
Dn Microsof SharePoint newsfeeds
En Microsof SkyDrive Pro
Aoswers C
Efpaanatonn
Yammer is Microsof’s private coaaaboraton paatorm for enterprise sociaa networkingn
Unaike pubaic sociaa media paatorms such as Twiter, Yammer onay aaaows members to connect with other members
who beaong to the same emaia domainn This unique feature provides corporate empaoyees with the abiaity to
communicate privateay, using a graphicaa user interface (GUI) that resembaes Facebookn
Questoos 147
Your company has an Ofce 365 Smaaa Business subscriptonn

You are the Microsof SharePoint Onaine administratorn
The company wants to have two separate pubaic websites with diferent URLsn
What shouad you do?
An Upgrade to SharePoint Onaine for Ofce 365 Enterprise, Educaton, and Governmentn
Bn Create one pubaic website and one subsite, and then confgure a redirectn
Cn Create two pubaic websites and confgure the DNS records for each siten
Dn Upgrade to SharePoint Onaine for Ofce 365 Midsize Businessn
Aoswers B
Efpaanatonn
Referencesn
htpn//wwwntoddkaindtncom/baog/Lists/Posts/Postnaspf?ID=48
Questoos 148
Your company paans to use Ofce 365 and Microsof SharePoint Onainen Another empaoyee provisions the company's
Ofce 365 tenantn
You discover that the empaoyee can create and manage SharePoint site coaaectonsn
You need to prevent the empaoyee from creatng or managing site coaaectonsn
From which roae shouad you remove the empaoyee?
________________________________________________________________________________________________
Page No | 124
An Service administrator
Bn SharePoint Onaine administrator
Cn Gaobaa administrator
Dn Site coaaecton administrator
Aoswers C
Efpaanatonn
The person who provisions the company Ofce 365 tenant is the frst gaobaa administrator who in turn is a SharePoint
Onaine Administratorn As aong as this person is a gaobaa administrator they wiaa be abae to create SharePoint sitesn Now
once the site coaaecton is provisioned you can prevent them from managing the site itseaf by removing them from the
Site Coaaecton Administrator roaen
By doing this if they went directay to the site they wouadn't be abae to manage it, but they couad aaways add
themseaves back to that roae The way the queston is stated you wouad need to be a gaobaa administrator yourseaf and
then remove the person who created the tenant as a gaobaa administratorn
"Add an administrator to the Site Coaaecton Administrators aist If you are a Gaobaa Administrator or a SharePoint
Onaine Administrator in SharePoint Onaine in Ofce 365 paans other than Ofce 365 Smaaa Business, you must add your
user name account to the Site Coaaecton Administrator aist on the SharePoint admin center page before you can add
other site coaaecton administrators via the Team Siten If you are a Gaobaa Administrator or SharePoint Onaine
Administrator and you add yourseaf as a site coaaecton administrator, performing this acton is known as taking
ownership of a siten"
Referencesn
htpsn//supportnofcencom/en- au/artcae/Manage-administrators-for-a-site-coaaecton9a7e46f9-3fc4-4297-955a-
82cb292a5be0
htpsn// baogsnofcencom/2015/06/11/more-controa-overdata-access-with-workaoad-specifc-admin-roaes/
Questoos 149
Your company uses Microsof SharePoint Onaine for coaaaboratonn A document aibrary is confgured as shown in the
foaaowing tabaen
You need to enabae the coauthoring of documents in the aibraryn

What shouad you do?
An Change the Who shouad see draf items in this document aibrary? setng to Any user who can read itemsn
Bn Change the Create a version each tme you edit a fae in this document aibrary? setng to No Versioningn
Cn Change the Require documents to be checked out before they can be edited? setng to Non
Dn Change the Require content approvaa for submited items? setng to Non
Aoswers C
Efpaanatonn
From TechNet Artcae "Overview of co-authoring in SharePoint 2013" Check out When a user checks out a document
for editng, the document is aocked for editng by that usern
This prevents co-authoringn Do not enabae the Require Check Out feature in document aibraries in which co- authoring
________________________________________________________________________________________________
Page No | 125
wiaa be usedn By defauat, Require Check Out is not enabaed in SharePoint 2013n Users shouad not check out documents
manuaaay when co-authoring is being usedn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/f718249naspf
Questoos 150
Your company uses Ofce 365 and has an Enterprise E3 paann The company has a Microsof SharePoint Onaine pubaic
website that is currentay confgured to use the onmicrosofncom domain namen
The company purchases a new domain namen
You need to change the address of the SharePoint Onaine pubaic website to the new domain namen
What shouad you do frst?
An In the SharePoint Onaine Administraton Center, add the new domainn

Bn In the Ofce 365 admin center, add the new domainn
Cn Create a new site coaaecton and assign it the new domainn
Dn Create a new pubaic website and assign it to the new domainn
Aoswers B
Efpaanatonn
If you go to the SharePoint Onaine Administraton Center and caick the "Add Domain" buton it takes you to the same
aocaton as if you wouad have caicked the "Domains" -> "Add domain" opton from the Ofce 365 admin centern
So either A or B is technicaaay correct, but if I had to choose one of the two I wouad seaect Bn
Referencesn
htpsn//supportnofcencom/en-us/artcae/Rename-your-SharePoint-Onaine-Pubaic-Website-addressto-use-your-
custom-domain-3D4BD288-772B-4F88- AF4D-F025B3825ED3
htpsn//supportnofcencom/en-us/artcae/Rename-your-SharePoint-Onaine-Pubaic-Website-addressto-use-your-
custom-domain-3403c6d5-aaa6-4775- a1cc-c6bda0a99986?ui=en-US&rs=enUS&ad=US
htpsn//supportnofcencom/en-us/artcae/Verify-your-domain-in-Ofce-365-6383f56d3d09-4dcb-9b41-
b5f5a5efd611?ui=en-US&rs=en-US&ad=US
Questoos 151
You are the Ofce 365 administrator for your companyn Aaa users have been assigned E3 aicenses and use Ofce Web
Apps to create and edit documentsn
A user atempts to access documents stored on a USB fash driven When the user doubae-caicks a fae that is stored on
the USB fash drive, an error message states that Windows can't open the fae and needs to know what program to use
to open itn
You need to ensure that the user can start Ofce appaicatons and edit Ofce documents by doubae-caicking faesn
What shouad you do on the user's computer?
An Use Ofce on Demandn

Bn Instaaa Ofce 365 ProPaus from the Ofce 365 portaan
Cn Copy the faes from the USB fash drive to the aocaa hard driven
Dn Instaaa and confgure Microsof Word Viewer
Aoswers B
Efpaanatonn
________________________________________________________________________________________________
Page No | 126
The message "can't open the fae and needs to know what program to use to open it" Points to Ofce not being
instaaaed/Windows not recognizing Ofce is instaaaed on the PC, so wouad need to downaoad Ofce 365 ProPaus from
the Portaan
Questoos 152

The company recentay subscribed to Ofce 365 ProPausn
When performing a test depaoyment, you receive the foaaowing error messagen
"Windows cannot fnd 'Cn\Program Fiaes\Microsof Ofce 15 \caientX64
\integratedOfcen efe'n Make sure you typed the name correctay, and then try againn"
You need to successfuaay compaete the test depaoymentn
Which two actons can you perform to achieve this goaa? Each correct answer presents a compaete soautonn
An Manuaaay remove the registry subkeys associated with Ofce 2013, and then restart the Ofce 365 ProPaus
instaaaatonn
Bn Compaeteay uninstaaa efistng versions of Ofce 2013 and then restart the Ofce 365 ProPaus instaaaatonn
Cn Downaoad the Ofce 365 ProPaus package to a fae share, and then depaoy Ofce 365 ProPaus by using Group Poaicyn
Dn Automate the instaaaaton of Ofce 365 ProPaus appaicatons by using Microsof System Center Confguraton
Manager
Aoswers A,B
Efpaanatonn
The answer is A and B because the issue deaas with a confict between Ofce 365 ProPaus and an efistng Ofce
instaaaatonn Both A and B couad by themseaves be a soautonn
Depaoying the instaaaaton through Group Poaicy or SCCM wouadn't make a diference and you wouad staa get the same
errorn
Questoos 153
A company is upgrading its 3,000 caient computers to Ofce 365 ProPausn

The company uses the Teaemetry Dashboard to identfy document compatbiaity issuesn
The Teaemetry Agent is depaoyed to aaa caient computersn
The teaemetry environment is described in the foaaowing tabaen
You need to ensure that teaemetry data is coaaected for more than 20 caient computers at a tmen
What shouad you do?
An Migrate the teaemetry database to a computer that runs SQL Server 2008n
Bn Use the Registry Editor to trigger the data coaaectonn
Cn Use Group Poaicy to set the MafConnectonsPerServer setng to 100n
Dn Migrate the Teaemetry Processor to a computer that runs Windows Server 2012n
________________________________________________________________________________________________
Page No | 127
Aoswers D
Efpaanatonn
For test or smaaa producton environments You can use computers that run Windows 7, Windows 8, and Windows 8n1
in test environments and in smaaa producton environmentsn There is a aimit of 20 concurrent connectons for caient
operatng systems, but in smaaa environments, the agent randomizaton setng shouad minimize any chances of more
than 20 agents connectng at one tmen
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/jj219431(v=ofcen15)naspf
Questoos 154
You are the Ofce 365 administrator for your companyn Empaoyees do not have aocaa administratve priviaeges on
caient computersn
The company has the foaaowing caient computer sofwaren
Windows 7 and Windows 8
32-bit and 64-bit Ofce 2007, Ofce 2010, and Ofce 2013
When accessing the corporate Microsof SharePoint 2010 site, some users are unabae to dispaay SharePoint aists in the
Datasheet viewn
You need to ensure that aaa users can dispaay SharePoint aists in the Datasheet viewn
What shouad you do?
An Upgrade to the aatest version of Ofce 365 ProPausn

Bn Force a reinstaaaaton of Ofce by using Group Poaicy and specifying a network aocatonn
Cn Uninstaaa the 64-bit version of Ofce and then instaaa the 32-bit version of Ofcen
Dn Upgrade aaa Ofce 2007 and Ofce 2010 versions to Ofce 2013n
Aoswers C
Efpaanatonn
A 64-bit version of the Datasheet component is not avaiaabae for Ofce 2010n
For SharePoint Server 2010, 64-bit versions instaaa some Ofce 32-bit caient-side controas for supportng soautons in a
32-bit browser (the defauat browser on current 64-bit Windows systems)n
The Edit in Datasheet view functonaaity in SharePoint Server 2010 isn't supported if you instaaa 64-bit Ofce 2013
caientn
The Edit in Datasheet functonaaity is avaiaabae if you instaaa 32-bit Ofce 2013 caient
Referencesn
htpn//supportnmicrosofncom/kb/2266203/en-us
htpn//supportnmicrosofncom/kb/909506
htpsn//technetnmicrosofncom/en-us/aibrary/ee681792naspf#compat4
Questoos 155
Your company uses Ofce 365 and has an Enterprise E3 aicense paann Empaoyees are issued aaptop computers that are
confgured with a standard imagen
The image incaudes an instaaaaton of Ofce 365 ProPaus that must be actvated by the empaoyeesn An empaoyee
recentay received a new aaptop computer to repaace an oader aaptopn
The oader aaptop wiaa be reimagedn
When the empaoyee atempts to start Word for the frst tme, she receives a message saying that she cannot actvate
________________________________________________________________________________________________
Page No | 128
it because she has aaready actvated fve devicesn

You need to heap the empaoyee actvate Ofce on her new aaptop computern
What shouad you do?
An Assign a second E3 aicense to the empaoyeen

Bn Remove the empaoyee's E3 aicense and then assign a new E3 aicensen
Cn Sign in to the Ofce 365 portaa as the empaoyee and deactvate the oad aaptopn
Dn Sign in to the Ofce 365 portaa by using your Gaobaa Admin account and then deactvate the oad aaptopn
Aoswers D
Efpaanatonn
Deactvatng Ofce on a partcuaar device for a specifc user can be done with either aogging in as the empaoyee and
deactvatng it, or by using your Gaobaa Admin accountn
Sign into the Ofce 365 Portaa -> Users -> Actve Users -> Seaect User Name -> Edit Ofce
Instaaaatons and pick the device you want to removen
Referencesn
htpsn//supportnofcencom/en-us/artcae/Remove-a-former-empaoyee-from-Ofce-365-44d96212-4d90-4027-9aa9-
a95eddb367d1#bkmk_remove
Questoos 156
Your company uses Ofce 365 and has an Enterprise E3 aicense paann Empaoyees are issued aaptop computers that are
confgured with a standard imagen
The image incaudes an instaaaaton of Ofce 365 ProPaus that must be actvated by the empaoyeesn An empaoyee
recentay received a new aaptop computer to repaace an oader aaptopn
The oader aaptop wiaa be reimagedn
When the empaoyee atempts to start Word for the frst tme, she receives a message saying that she cannot actvate
it because she has aaready actvated fve devicesn
You need to heap the empaoyee to aicense Ofce on her new computern
Which two actons couad you perform?
An Assign a second E3 aicense to the empaoyeen

Bn Remove the empaoyee's E3 aicense and then assign a new E3 aicensen
Cn Instruct her to Sign in to the Ofce 365 portaa as the empaoyee and deactvate the oad aaptopn
Dn Sign in to the Ofce 365 portaa by using your Gaobaa Admin account and then deactvate the oad aaptopn
Aoswers C,D
Efpaanatonn
Referencesn
htpsn//wwwnbetercaoudncom/monitor/the-academy/deactvate-ofce-365-instaaaaton/
Questoos 157
You are the Ofce 365 administrator for your companyn The company aaaows efternaa communicatons through
Microsof Skype for Business Onaine for aaa domainsn
The caaa center manager reports that caaa center personnea are spending too much tme chatng with friends and not
enough tme taking caaasn She requests that the caaa center personnea be baocked from chatng with anyone efternaa to
the company by using Skype for Business Onainen
________________________________________________________________________________________________
Page No | 129
They staa must be abae to communicate with internaa usersn

You need to prevent aaa caaa center personnea from communicatng with efternaa contacts by using Skype for Business
Onaine, whiae staa aaaowing other empaoyees to communicate with efternaa contactsn
What shouad you do?
An In the Skype for Business admin center, seaect aaa users, edit their efternaa communicatons setngs, and caear the
Skype for Business Users check bofn
Bn On the Efternaa Communicatons page of the Skype for Business admin center, turn of efternaa accessn
Cn In the Skype for Business admin center, remove the Skype for Business Onaine aicense from each of the caaa center
personnean
Dn In the Skype for Business admin center, seaect aaa caaa center personnea, edit their efternaa communicatons setngs,
and caear the Peopae on Pubaic IM Networks check bofn
Aoswers D
Efpaanatonn
Referencesn
htpsn//theucguynnet/confguring-efternaa-communicatons-in-Lync-onaine-wave-1
Questoos 158
You manage the network for a company named Fabrikam, Incn The network contains a singae Actve Directory forest
named fabrikamncomn
Fabrikam has two separate organizatonsn Each organizaton has a chiad domain in the forestn The two chiad domains
are named org1nfabrikamncom and org2nfabriamncomn
The forest has the foaaowing depaoyedn
Microsof Efchange Server 2016
Actve Directory Federaton Services (AD FS) 2n0
You need to synchronize each chiad domain to a separate Ofce 365 subscriptonn
Soautonn You depaoy an instance of Microsof Azure AD Connect to org1nfabrikamncom and org2nfabrikamncomn
An Yesn
Bn No
Aoswers B
Efpaanatonn
Questoos 159
An organizaton has an Ofce 365 tenantn You use muat-factor authentcaton for aaa priviaeged accountsn User1 is on
an eftended aeave of absencen
You must confgure the maiabof for User1 to forward to User2n
You need to confgure forwarding for User1’s maiabofn
________________________________________________________________________________________________
Page No | 130
An Launch Windows PowerSheaa as an administratorn

Bn Launch the Efchange Admin Centern
Cn Create an app password for the administrator accountn
Dn Connect to Efchange Onaine by using Remote PowerSheaan
Aoswers C
Efpaanatonn
Questoos 160
Contoso, Ltdn has an Ofce 365 tenantn You confgure Azure Actve Directory Synchronizaton for the environmentn
You need to identfy user objects that wiaa be incauded from the directory search by using the IDFif tooan
Which account wiaa NOT be marked as a probaem account by IDFif?
An Administrator@contosoncom
Bn Guest1@contosoncom
Cn msoa_User1@contosoncom
Dn User1@contosoncom
Aoswers D
Efpaanatonn
Questoos 161
You company uses Microsof Efchange Onaine for aaa maiabofesn

Users report connectvity issues when they atempt to access their maiabof by using Microsof Outaook 2016n
You need to identfy the foaaowingn
Whether port 443 is aaaowed between the corporate network and Ofce 365
Whether the number of network hops from the corporate network to Ofce 365 is aess than 25
Whether the network aatency between the corporate network and Ofce 365 is aess than 275 miaaisecondsn

Bn Microsof Ofce Outaook Connectvity Tests
Cn Microsof Support and Recovery Assistant for Ofce 365
Dn Ofce 365 heaath, readiness, and connectvity checks
Aoswers B
Efpaanatonn
Questoos 162
________________________________________________________________________________________________
Page No | 131

You depaoy Ofce 365 for aaa company usersn You use Microsof Efchange Onaine for company emaian You must deveaop
a process to assign aicenses to new users in your companyn
You need to impaement the aicensing processn
Soautonn Run the Set-Maiabof Windows PowerSheaa cmdaetn
An Yes
Bn No
Aoswers B
Questoos 163
Soautonn Use the Ofce 365 admin centern
An Yes
Bn No
Aoswers A
Questoos 164
Soautonn Run the Set-MsoaUserLicense Windows PowerSheaa cmdaetn
An Yes
Bn No
Aoswers A
________________________________________________________________________________________________
Page No | 132
Questoos 165
You are the ofce 365 administrator for a companyn You depaoy Microsof SharePoint Onainen
Many users report that they cannot discover usefua content via searchesn
You need to run the appropriate SharePoint Onaine report to heap identfy the issuen
Which report shouad you run?
An SharePoint Site Usage

Bn SharePoint Actvity
Cn Query Ruae Usage by Day
Dn Abandoned Queues by Day
Aoswers D
Referencesn
htpsn//supportnofcencom/en-us/artcae/view-search-usage-reports-2cd8f257-c29b-423d-8265-d44e6214d095
Questoos 166

You are startng a new project in the neft 15 daysn The project is efpected to aast 30 daysn
You need to determine if there are any paanned maintenance tasks during the project periodn
In the Admin center, which page shouad you view?
An the Service /eaath Dashboard

Bn the Service /eaath Advisories page
Cn the Service /eaath Incidents page
Dn the Reports page
Aoswers A
Questoos 167
DRAG DROP
A company uses Microsof System Center Operatons Manager (SCOM) to monitor their corporate infrastructuren You
manage an Ofce 365 environmentn
You need to be abae to monitor the Ofce 365 environment by using SCOMn
________________________________________________________________________________________________
Page No | 133
Aoswers
Questoos 168
/OTSPOT
You manage the Ofce 365 environment for Contoso Ltdn Aaa empaoyees use Microsof Efchange Onaine for emaian
Aaa empaoyees must use muat-factor authentcaton (MFA) to access emaian You confgure MFA for the Ofce 365
environmentn
You need to confgure MFA for aaa company empaoyeesn
What shouad you do? To answer, seaect the appropriate optons in the diaaog bof in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 134
Questoos 169
You depaoy Microsof Skype for Business Onainen Users report issues with web conferencingn You determine that a DNS
record is missingn
You need to add the required DNS recordn
Which setngs shouad you use? To answer, seaect the appropriate optons in the answer arean
Aoswers Check the
explaoatoo part for
the aoswer.
Efpaanatonn
See beaown
Questoos 170
/OTSPOT
A company uses Efchange Onainen You paan to use the emaia domain contosoncom for aaa empaoyeesn
You must confgure Efchange Onaine to support Outaook 2016 caient connectvityn
You need to confgure the appropriate DNS entriesn
Which record shouad you create? To answer, seaect the appropriate entries from each aist in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 135
Efpaanatonn
Bof 1n Autodiscoverncontosoncom
You can defne an aaias in one domain to point to a target server in a compaeteay diferent domainn
Bof 2n CNAME
The caoud-based service uses a CNAME record to impaement the Autodiscover service for Outaook caientsn
Bof 3n Autodiscovernoutaookncom
The Autodiscover CNAME record must contain the foaaowing informatonn
Aaias autodiscover
Target autodiscovernoutaookncom
Referencesnhtpsn//msdnnmicrosofncom/en-us/aibrary/cc950655(v=efchsrvcsn149)naspf
Questoos 171
DRAG DROP
You are the Ofce 365 administrator for a companyn Aaa empaoyees currentay use Microsof Efchange Onaine for emaian
You must enabae message encrypton for Efchange Onainen The necessary transport ruaes are in paacen
You need to confgure and verify the Microsof Azure Rights Management (Azure RMS) servicen
Which four Windows PowerSheaa cmdaets shouad you run in sequence? To answer, move the appropriate actons from
the aist of actons to the answer area and arrange them in the correct ordern
Aoswers
________________________________________________________________________________________________
Page No | 136
Questoos 172
A company uses Ofce 365 servicesn You impaement Azure AD Connect in the aocaa environmentn
An empaoyee moves to a new departmentn Aaa Ofce 365 services must dispaay the new department informaton for
the empaoyeen
You need to update the empaoyee's user accountn
Where shouad you change the vaaue of the department atribute for the empaoyee?
An the Actve Directory management page in the Azure Management Portaa

Bn the on-premises Actve Directory
Cn the Users and groups page in the ofce 365 admin center
Dn the Metaverse Designer
Aoswers B
Questoos 173
You are the Ofce 365 administrator Contoso, Ltdn You synchronize Actve Directory Domain Services (AD DS) user
accounts with an Ofce 365 environment by using Microsof Azure Actve Directory (Azure AD) Connectn You use a test
account named Test1@contosoncom to perform confguraton testngn The account currentay accesses on-premises
resourcesn
The Test1@contosoncom account efperiences issues with Microsof Efchange Onaine and SharePoint Onainen
You need to quickay recreate the account and prevent interrupton in access to the on-premises resourcesn
What shouad you do?
An Run the Remove -SPOUser cmdaetn

Bn Run the Remove -MsoaUser cmdaetn
Cn In the Ofce 365 admin center, fnd and deaete the accountn
Dn Run the Remove ADUser cmdaetn
En In the Azure AD admin center, fnd and deaete the accountn
Aoswers D
Questoos 174
DRAG DROP
________________________________________________________________________________________________
Page No | 137
You are the system administrator for a company that has an Ofce 365 tenantn Contosononmicrosofncom is the onay
confgured domainn
You have an on-premises Actve Directory Domain Services (AD DS) singae forest domain named contosonaocaan The
user principaa name (UPN) for aaa users incaudes the suff @contosonaocaan
You aaso have an on-premises Microsof Efchange Server 2016 environment that uses @contosoncom as the primary
SMTP address suff domainn
You need to depaoy Azure Actve Directory (Azure AD) Connectn
Aoswers
Questoos 175
You manage Actve Directory Domain Services (AD DS) for a companyn You assign Ofce 365 aicenses to aaa usersn You
impaement Microsof Azure Actve Directory (Azure AD) Connectn
Your company terminates an empaoyeen
You need to ensure that the terminated empaoyee can no aonger access any Ofce 365 rescuesn
An Set-AdUser
Bn Remove-MsoaServicePrincipaaCredentaa
Cn Set-MsoaUser
Dn Remove-MsoaServicePrincipaa
________________________________________________________________________________________________
Page No | 138
Aoswers D
Questoos 176
DRAG DROP
You depaoy Ofce 365n You purchase 50 Ofce 365 Enterprise E1 aicenses and assign the aicenses to usersn
A saaes department user aeaves the company and is repaacedn
You need to ensure that the new user has a vaaid aicense and can access emaian
Aoswers
Questoos 177
You create an Ofce 365 tenantn You assign administratve roaes to other usersn You hire a new user named User2n
________________________________________________________________________________________________
Page No | 139
User2 must be abae to assign administratve roaes to other usersn

You need to assign an administratve roae to User2n
Which roae shouad you assign?
An service administrator
Bn gaobaa administrator
Cn password administrator
Dn deaegate administrator
Aoswers B
Questoos 178
You are the system administrator for a manufacturing companyn You paan to impaement Ofce 365n
You must create accounts for aaa empaoyees and impaement a password poaicy that requires strong passwordsn
Which two characters can users incaude in passwords? Each correct answer presents a compaete soautonn
An spaces
Bn *
Cn n
Dn Unicode character
En !
Aoswers AE
Questoos 179
You are the Ofce 365 administrator for a companyn You depaoy Azure Actve Directory (Azure AD) Connectn
You need to ensure synchronizaton occurs every 20 minutesn
/ow shouad you compaete the Windows PowerSheaa command? To answer, seaect the appropriate optons in the
answer arean
Aoswers Check the
explaoatoo part for
the aoswer.
Efpaanatonn
See beaown
Questoos 180
A company uses Ofce 365n
You need to permanentay deaete a user accountn
What shouad you do?
An Run the Microsof Azure PowerSheaa cmdaet Remove-MsoaUsern
________________________________________________________________________________________________
Page No | 140
Bn Use the Microsof Azure portaan

Cn Run the Microsof Azure PowerSheaa cmdaet Remove-AzureAdUsern
Dn Use Ofce 365 admin centern
Aoswers A
Questoos 181
You are the system administrator for a smaaa saaes company in Chicagon
You must migrate aaa users to Ofce 365n You add a domain to the Ofce 365 tenantn
You need to verify the new domainn
Which type of DNS record shouad you create?
An MX
Bn PTR
Cn CNAME
Dn SRV
Aoswers C
Questoos 182
You are the administrator for Contoso Ltdn The company uses Ofce 365 and has an on-premises Actve
Directory Domain Services (AD DS) domain that uses the namespace contosoncomn
You paan to impaement Workpaace Joinn You must impaement Actve Directory Federaton Services (AD FS) and
Web Appaicaton Profy (WAP)n You take the foaaowing actonsn
Instaaa the WAP roae on a servern
Aaaocate fsnconrosoncom for the AD FS namespacen
Defne the server FQDN as server1ncontosoncomn
You need to instaaa and confgure certfcate for the WAP servern
An a certfcate with a subject of fsncontosoncom

Bn a certfcate with a subject of server1ncontosoncom
Cn a certfcate with a subject aaternatve name that contains fsncontosoncom and
enterpriseregistratonncontosoncom
Dn a certfcate with a subject aaternatve name that contains server1ncontosoncom and fsncontosoncom
Aoswers C
Questoos 183
You are the Ofce 365 administrator for a companyn You paan to impaement Microsof SharePoint Onaine,
Efchange Onaine, and Skype for Business Onainen End users wiaa onay use Outaook on the web for accessing emaian
Aaa outbound Internet connectons for caients are baocked by defauatn You create inbound aaaow ruaes for the aist of IPs
that need to be efcaude6 for Ofce 365n
You need to confgure the outbound network ports that are required for caient devices to connect to Ofce 365n
Which two ports shouad you confgure? Each correct answer presents part of the soautonn
________________________________________________________________________________________________
Page No | 141
An 25
Bn 80
Cn 110
Dn 443
Aoswers BD
Questoos 184
Soautonn /ave the empaoyee use a physicaa smart cardn
An Yes
Bn No
Aoswers B
Questoos 185
Afer you answer a queston in this secton, you wiaa NOT be abae to return to itn As a resuat, these
questons wiaa not appear in the review screenn
You are the Ofce 365 administrator for a companyn You paan to depaoy Microsof Skype for Business Onaine for aaa
empaoyeesn
Soautonn Add an SPF recordn
An Yes
Bn No
Aoswers B
Questoos 186
________________________________________________________________________________________________
Page No | 142
empaoyeesn
Soautonn Add an NS recordn
An Yes
Bn No
Aoswers B
Questoos 187
empaoyeesn
Soautonn Add an MX recordn
An Yes
Bn No
Aoswers A
Questoos 188
You administer the Ofce 365 environment for a company that has ofces around the woradn Aaa of the ofces use the
same Ofce 365 tenantn
You need to ensure that aaa users can access the services that are avaiaabae in their regionsn
Which setng or service shouad you update?
An User aocaton setngs

Bn User aicenses
Cn Service usage address
Dn Rights management
Aoswers A
Efpaanatonn
The User Locaton setngs wiaa aaaow you to set sign-in status and user aocatons for aaa the users that are on your
network notwithstanding the physicaa aocaton where they fnd themseavesn
Referencesn
htpn//baogsnperfcientncom/microsof/2014/11/ofce-365-assign-aicensing-user-aocaton-via-actve-directory/
________________________________________________________________________________________________
Page No | 143
Questoos 189
Your company purchases an Ofce 365 paann The company has an Actve Directory Domain Services domainn
User1 must to manage Ofce 365 deaegaton for the companyn
You need to ensure that User1 can assign administratve roaes to other usersn
What shouad you do?
An Create an Ofce 365 tenant and assign User1 the password administrator roaen
Bn Use a password administrator account to assign the roae to User1n
Cn Use a user management administrator account to assign the roae to User1n
Dn Create an Ofce 365 tenant and assign User1 the gaobaa administrator roaen
Aoswers D
Efpaanatonn
The Gaobaa Administrator account is simiaar to the Company administratorn Users in this roae have access to everything
or the permission to add them to a dedicated roae where they do not have permission (such as discovery
Referencesn
htpsn//supportnofcencom/caient/Assigning-admin-roaes-eac4d046-1afd-4f1a-85fc-8219c79e1504
Questoos 190
DRAG DROP
A company paans to impaement an Ofce 365 environment to manage emaian
Aaa user accounts must be confgured to use onay a custom domainn
You need to provision an Ofce 365 tenant for the companyn
Aoswers
Bof 1n
Bof 2n
Confgure the gaobaa administrator account recovery informaton
Bof 3n
________________________________________________________________________________________________
Page No | 144
The tenant is your Ofce 365 account, incauding hosted Efchange, Skype for Business, SharePoint, and your Ofce 365
Actve Directoryn The frst account that you create when you frst purchase Ofce 365 is the “owner” of your tenantn
This account shouad be an admin account, not a personn This account does not normaaay require an Ofce 365 aicensen
Reaatng to SharePoint, aaa of your site coaaectons are within your tenantn You can have any number of domains within
your tenant (with e-maia accounts), but you wiaa have onay one root SharePoint URLnhtpsn//ffffnsharepointncomn
The Gaobaa Administrator account is simiaar to the Company administratorn Users in this roae have access to everything
or the permission to add them to a dedicated roae where they do not have permission (such as discovery
When setng up Ofce 365 the frst step is to purchase your subscripton which incaudes choosing the paann Step 2
invoaves the seaecton of the sign-on method and this is where the gaobaa administrator account is of consequencen
Step 3 invoaves the coaaectng of informaton such as domain names and DNS, aocatons, etc…
Step4 is the actuaa migraton paan and scheduae, step 5 – the Microsof account and organizatonaa account, step 6 –
the SkyDrive and SkyDrive Pro, and step 7 – the Windows Intune sectonn
Thus you shouad perform step 1 through 3 to ensure that aaa user accounts to make use of a custom domain for their e-
maian
Referencesn
Katzer, Mathew and Don Crawford, Ofce 365 Migratng and Managing your Business in the Caoud, Apress Media,
New York, 2013, pp 87- 93, 373
htpn//ofcenmicrosofncom/en-gb/ofce365-suite-heap/add-your-domain-to-ofce-365-/A102818660naspf
Questoos 191
Your company has 100 user maiabofesn The company purchases a subscripton to Ofce 365 for professionaas and
smaaa businessesn You need to enabae the Litgaton /oad feature for each maiabofn
An Purchase a subscripton to Ofce 365 for midsize business and enterprisesn

Bn Enabae audit aogging for aaa of the maiabofesn
Cn Modify the defauat retenton poaicyn
Dn Create a service requestn
Aoswers A
Efpaanatonn
The frst step wiaa aaways be the purchasing the correct Ofce 365 paan to suit your needsn There are three paans of
Ofce 365n Professionaa, Mid-Size Businesses, and Enterprisen The Ofce 365 Mid-sized businesses and Enterprise
paans wiaa aaaow you to enabae Litgaton /oadn The Professionaa paan is not compaiant with this setngn User maiabofes
that are paaced under aitgaton hoad with the efternaa audit enabaed meet aaa compaiance requirements, because the
data is immutabaen
Questoos 192
Contoso, Ltdn paans to use Ofce 365 for emaia services and Skype for Business Onainen Contoso has four unique
domain namesn
You need to migrate domain names to Ofce 365n
Which two domain names shouad you efcaude from the migraton? Each correct answer presents part of the soautonn
An contosonus
Bn contoso
________________________________________________________________________________________________
Page No | 145
Cn contosonaocaa
Dn contosonco
Aoswers B,C
Efpaanatonn
There are no practcaa aimits on the number of domains that can be verifed to Ofce 365 Enterprisen The ruaes are
simpaen you need to verify a domain, and you need to assign the domain based on the needs (or Domain Intent)n
Domain Intent is what the domain services wiaa be confgured as; there are three diferent types of services for
Domain Intentn
A top-aevea domain (TLD) is the part of the domain name aocated to the right of the dot (" n ")n The most common TLDs
are ncom, nnet, and norgn Some others are nbiz, ninfo, and nwsn These common TLDs aaa have certain guideaines, but are
generaaay avaiaabae to any registrant, anywhere in the woradn
Bn contoso- singae aabeaed domain / or aaso known as a second-aevea domain - not vaaid
Cn contosonaocaa - internaa aabeaed domain - not vaaid
Questoos 193
A company paans to use Ofce 365 to provide emaia services for usersn
You need to ensure that a custom domain name is usedn
An Add the custom domain name to Ofce 365 and then verify itn
Bn Verify the efistng domain namen
Cn Create an MX record in DNSn
Dn Create a CNAME record in DNSn
Aoswers A
Efpaanatonn
DNS actuaaay teaas the Internet where to send emaia ton Thus you need to make sure that your custom name that you
intend using for emaia is added to Ofce 365 and verifedn When you put the right informaton into the right DNS
records for your domain, the DNS system routes everything correctay so your emaia, for efampae, arrives in Ofce 365
instead of somewhere easen
Questoos 194
DRAG DROP
Fabrikam has the Ofce 365 Enterprise E3 paann
You must add the domain name fabrikamncom to the Ofce 365 tenantn You need to confrm ownership of the
domainn
Which DNS record types shouad you use? To answer, drag the appropriate DNS record type to the correct aocaton or
aocatons in the answer are
an Each DNS record type may be used once, more than once, or not at aaan You may need to drag the spait bar between
panes or scroaa to view contentn
________________________________________________________________________________________________
Page No | 146
Aoswers
TXT record is used for verifcatonn When you have added the record at your domain registrar's site, you'aa go back to
Ofce 365 and request Ofce 365 to aook for the recordn When Ofce 365 fnds the correct TXT record, your domain is
verifedn
MX (maia efchanger) record points to where your emaia shouad be sentn It aaso has a priority fead so that you can send
maia to diferent servers in a priority ordern
Questoos 195
/OTSPOT
A company has an Actve Directory Domain Service (AD DS) domainn Aaa servers run Windows Server 2008n You have
an on-premises Efchange 2010 servern
The company paans to migrate to Ofce 365n
In the tabae beaow, identfy the required acton for each phase of the piaotn Make onay one seaecton in each coaumnn
Each correct seaecton is worth one pointn
________________________________________________________________________________________________
Page No | 147
Aoswers
During migraton which frst step is to have the domain vaaidated, the step that foaaows is to add users and assign
aicensesn Microsof found that it is beter to compaete the domain confguraton (with the efcepton of changing the
MX records) and add users afer the domain has been defned when migratng to Ofce 365n
Paanning for the migraton invoaves preparaton to synchronize the Actve Directoryn
Referencesn
htpsn//msdnnmicrosofncom/aibrary/azure/jj151831naspf
Questoos 196
/OTSPOT
Fabrikam, Incn empaoys 500 users and paans to migrate to Ofce 365n
You must sign up for a triaa paan from the Ofce 365 websiten You have the foaaowing requirementsn
Create the mafimum number of triaa users aaaowedn
Convert the triaa paan to a paid paan at the end of the triaa that supports aaa of Fabrikam's usersn
You need to create an Ofce 365 triaa paann
/ow shouad you confgure the triaa paan? Seaect the correct answer from each aist in the answer arean
Aoswers
Ofce 365 Enterprise E 3 ofers incaude unaimited number of users and since you are signing up for a traia to deveaop
into a paid paann Making use of 25 users in the triaa wiaa sufcen
Ofce 365 Business can accommodate a mafimum of 300 users onayn
Referencesn
htpsn//technetnmicrosofncom/en-us/ofce/dn788955
htpsn//technetnmicrosofncom/en-us/aibrary/ofce-365-paan-optonsnaspf
htpsn//technetnmicrosofncom/en-us/aibrary/ofce-365-paatorm-service-descriptonnaspf
Katzer, Mathew and DonCrawford, Ofce 365 Migratng and Managing your Business in the Caoud, Apress Media,
New York, 2013, pp 84-87
________________________________________________________________________________________________
Page No | 148
Questoos 197
An organizaton prepares to impaement Ofce 365n
Gather informaton about the requirements for the Ofce365 impaementatonn
Use a supported tooa that provides the most comprehensive informaton about the current environmentn
You need to determine the organizaton's readiness for the Ofce 365 impaementatonn
What shouad you do?
An Run the Windows PowerSheaa cmdaetn Get-MsoaCompanyanformatonn

Bn Run the OnRamp for Ofce 365 tooan
Cn Instaaa the Windows Azure Actve Directory Sync tooan
Dn Run the Ofce 365 Depaoyment Readiness Tooan
Aoswers B
Efpaanatonn
OnRamp for Ofce 365 is avaiaabae to assist you with discovery actvites reaated to Ofce 365depaoymentsn The tooa
can be used to check and provide important informaton about your on-premises environmentn
Questoos 198
DRAG DROP
You impaement Ofce 365 for an organizatonn
You must create the correct DNS entries needed to confgure Efchange Onainen
Which DNS entries shouad you create? To answer, drag the appropriate DNS record type to the correct purposen Each
DNS record type may be used once, more than once, or not at aaan You may need to drag the spait bar between panes
or scroaa to view contentn
Aoswers
________________________________________________________________________________________________
Page No | 149
TXT record is used for verifcatonn When you have added the record at your domain registrar's site, you'aa go back to
Ofce 365 and request Ofce 365 to aook for the recordn When Ofce 365 fnds the correct TXT record, your domain is
verifedn
MX (maia efchanger) record points to where your emaia shouad be sentn It aaso has a priority fead so that you can send
maia to diferent servers in a priority ordern
CNAME (aaias or canonicaa) record redirects one domain to another in the DNS systemn When a name server aooks up
a domain and fnds that it has a CNAME record, the server repaaces the frst domain name with the CNAME, and then
aooks up the new namen
Questoos 199
An organizaton paans to depaoy Efchange Onainen
You must support aaa Efchange Onaine featuresn
You need to create the required DNS entriesn
Which two DNS entries shouad you create? Each correct answer presents part of the soautonn
An A
Bn SRV
Cn MX
Dn CNAME
Aoswers C,D
Efpaanatonn
Cn The MX record is used to send incoming maia for your domain to the Efchange Onaine service in Ofce 365n
Dn The CNAME record is used to heap Outaook caients to easiay connect to the Efchange Onaine service by using the
Autodiscover servicen Autodiscover automatcaaay fnds the correct Efchange Server host and confgures Outaook for
usersn
Questoos 200
/OTSPOT
You are the SharePoint Onaine administrator for Contoso, Ltdn The company purchases an Ofce 365 Enterprise Ea paann
The pubaic-facing website must use SharePoint Onaine and the custom domain contosoncomn
You need to confgure the DNS setngs for the pubaic-facing SharePoint siten
/ow shouad you confgure the DNS setngs? Seaect the appropriate optons from each aist in the answer arean
________________________________________________________________________________________________
Page No | 150
Aoswers
The CNAME record is used to redirect one domain to another in the DNS systemn When a name server aooks up a
domain and fnds that it has a CNAME record, the server repaaces thefrst domain name with the CNAME, and then
aooks up the new namen
Questoos 201
You depaoy Skype for Business Onaine for a company that has ofces in San Francisco and New Yorkn The two ofces
both connect to the Internetn There is no private network aink between the ofcesn
Users in the New York ofce report that they cannot transfer faes to the users in the San Francisco ofce by using
Skype for Business Onainen
You need to ensure that users in both ofces can transfer faes by using Skype for Business Onainen
What shouad you do?
________________________________________________________________________________________________
Page No | 151
An Confgure the frewaaa to open Transmission Controa Protocoa (TCP) ports 50060-50079n
Bn Confgure the frewaaa to open Transmission Controa Protocoa (TCP) ports 50040-50059n
Cn Create a private network connecton to share faesn
Dn Upgrade aaa of the Skype for Business Onaine caients to use Skype for Business caient appaicatonn
Aoswers B
Efpaanatonn
Skype for Business Onaine wiaa aaaow for fae sharing if the frewaaa is confgured accordingay since it is mentoned that
Skype for Business Onaine is aaready depaoyedn And there is connectvity by both ofces to the Internetn If the TCP port
number 50040-50059 is confgured open on the frewaaa you wiaa be abae to share Audio, Video and appaicaton as weaa
as Desktop sharing content and faesn
Referencesn
htpn//onaineheapnmicrosofncom/en-ca/ofce365-enterprises/hh416761naspf
Questoos 202
DRAG DROP
Aoswers
________________________________________________________________________________________________
Page No | 152
Transport Controa Protocoa(TCP), User Datagram Protocoa(UDP) ports, and Protocoa Numbers are important to TCP/IP
connecton over SSLn
Questoos 203
/OTSPOT
A company paans to depaoy an Ofce 365 tenantn
Administrators must be abae to access the Ofce 365 admin centern
Microsof Efchange Onaine must be used as a Simpae Maia Transfer Protocoa (SMTP) reaay for a aine-of-business
appaicaton that sends emaia messages to remote domainsn
Aaa users must be abae to use the audio and video capabiaites in Microsof Skype for Businessn
You need to confgure the ports for the frewaaan
Which port shouad you use for each appaicaton? Seaect the correct answer from each aist in the answer arean
________________________________________________________________________________________________
Page No | 153
Aoswers
________________________________________________________________________________________________
Page No | 154
Transport Controa Protocoa(TCP), User Datagram Protocoa (UDP) ports, and Protocoa Numbers are important to TCP/IP
TCP port 25 is used for simpae maia transfer protocoa which is used to e-maia routng between maia serversn
TCP port 443 is used for Audio, video and appaicaton sharing sessions as weaa as data sharing sessionsn
RTP/UDP port 50020-50039 must be used for outbound video sessionsn
RTP/UDP port 50000-50019must be used for outbound audio sessionsn
Questoos 204
Your company has a subscripton to Ofce 365 for midsize business and enterprisesn The company uses Microsof
Skype for Business Onainen
You need to open ports on the network frewaaa to enabae aaa of the features of Skype for Business Onainen
Which port or ports shouad you open? (Each correct answer presents part of the soautonn Choose aaa that appayn)
An inbound TCP443
Bn outbound TCP 5061
Cn outbound UDP 3478
________________________________________________________________________________________________
Page No | 155
Dn outbound TCP 443

En outbound UDP 50000 to outbound UDP 59999
Fn inbound TCP 8080
Aoswers A,C,D,E
Efpaanatonn
An inbound TCP 443 is the port for the Skype for Business for Business caient servicen
Cn outbound UDP 3478 is the UDP port for Skype for Business audio and video sessionsn
Dn outbound TCP 443 is the port for the Skype for Business data sharing sessions as weaa as the Video and Audio and
appaicaton sharing sessionsn
En outbound UDP 50000 to outbound UDP 59999 is the port for Skype for Business audio and video sessionsn
Referencesn
htpsn//adam-handncom/caoud-technoaogies/frewaaa-ports-for-ofce-365/
Questoos 205

An Microsof Onaine Services Diagnostcs and Logging (MOSDAL) Support Kit

Bn Microsof Network Monitor
Cn Skype for Business Bandwidth Caacuaator
Dn Microsof Remote Connectvity Anaayzer
Aoswers C
Efpaanatonn
There are caacuaators avaiaabae to assist you with estmatng network bandwidth requirementsn These caacuaators work
for on-premises as weaa as Ofce 365 depaoymentsn You can use the Efchange caient network bandwidth caacuaator to
estmate the bandwidth required for a specifc set of Outaook, Outaook Web App, and mobiae device users in your
Ofce 365 depaoymentn With the Skype for Business bandwidth caacuaator, you enter informaton about users and the
Skype for Business features you want to depaoy, and the caacuaator heaps you determine bandwidth requirementsn
Skype for Business Bandwidth Caacuaator - A Microsof Efcea spreadsheet that caacuaates WAN bandwidth
requirements for a Skype for Business Server depaoyment based on administrator-specifed user profaes and network
informatonn
Questoos 206
DRAG DROP
You need to ensure that trusted appaicatons can decrypt rights-protected contentn
Which four Windows PowerSheaa cmdaets shouad you run in sequence? To answer, move the appropriate cmdaets from
the aist of cmdaets to the answer area and arrange them in the correct ordern
________________________________________________________________________________________________
Page No | 156
Aoswers
Bof 1n
Bof 2n
Bof 3n
Bof 4n
Microsof Azure Rights Management (previousay known as Windows Azure Actve Directory Rights Management)n To
be abae to decrypt rights protected documents you need to make sure that Microsof Azure Rights Management is set
upn Aaso you wiaa need to enabae a SuperUser account because The Actve Directory Rights Management Services (AD
RMS) super users group is a speciaa group that has fuaa controa over aaa rights-protected content managed by the
caustern Its members are granted fuaa owner rights in aaa use aicenses that are issued by the AD RMS causter on which
the super users group is confguredn This means that members of this group can decrypt any rights-protected content
fae and remove rights-protecton from itn
The super users group is not enabaed and is not assigned a group by defauatn
This can be done by running the appropriate commands in sequence which aren
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/dn151475228v=efchgn150229naspf
Questoos 207
________________________________________________________________________________________________
Page No | 157
Your company has an Ofce 365 subscriptonn You create a new retenton poaicy that contains severaa retenton tagsn A
user named Test5 has a caient computer that runs Microsof Ofce Outaook 2007n You instaaa Microsof Outaook 2010
on the caient computer of Test5n Test5 reports that the new retenton tags are unavaiaabae from Outaook 2010n
You verify that other users can use the new retenton tagsn You need to ensure that the new retenton tags are
avaiaabae to Test5 from Outaook 2010n
What shouad you do?
An Instruct Test5 to repair the Outaook profaen

Bn Modify the retenton poaicy tagsn
Cn Run the Set-Maiabof cmdaetn
Dn Force directory synchronizatonn
Aoswers A
Efpaanatonn
When depaoying retenton poaicies it is part of the procedure to create the tags and add it to the retenton poaicies
prior to the depaoymentn Aaso part of the procedure is to determine which Microsof Outaook caient versions are in
usen In this case the Test5version has been changed and Test5 wiaa then have to repair his/her Outaook profae
accordingayn
Questoos 208
DRAG DROP
You are the Ofce 365 administrator for your companyn The company has two administrators named User1 and User2n
Users must be abae to perform the actvites as shown in the foaaowing tabaen
You need to grant the appropriate administratve roae to each usern

What shouad you do? To answer, drag the appropriate roae to the correct usern Each roae may be used once, more than
once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
Aoswers
________________________________________________________________________________________________
Page No | 158
User1 has to be the Password administrator which wiaa aaaow for User1 to reset passwords, manage service requests,
and monitor service heaathn Password admins are aimited to resetng passwords for users and other password
adminsn
User2 has to be the gaobaa administrator to have access to aaa administratve featuresn Gaobaa admins are the onay
admins who can assign other admin roaesn This wiaa enabae User2 the abiaity to reset passwords for aaa administrator
accountsn
Questoos 209
You create an Ofce 365 tenantn You assign administratve roaes to other usersn You hire a new user named User2n
User2 must NOT be abae to change passwords for other usersn
You need to assign an administratve roae to User2n
An Service administrator
Bn Gaobaa administrator
Cn Deaegate administrator
Dn Password administrator
Aoswers A
Efpaanatonn
Being the Service Administrator wiaa aaaow User2 to mage service requests and monitor service heaath, whiae not
aaaowing User2 to abiaity to change passwords for other usersn
Questoos 210
A company depaoys an Ofce 365 tenantn You assign the roaes to users as shown in the foaaowing tabaen
User3 must be abae to monitor the heaath of the Efchange Onaine servicen You must use the principae of aeast priviaege
to assign permissions to User3n
You need to assign permissions to User3n
An Assign User3 the service administrator roae in Ofce 365n
________________________________________________________________________________________________
Page No | 159
Bn Sign in to the Ofce 365portaa as User1n

Cn Sign in to the Ofce 365 portaa as User2n
Dn GrantUser3 administratve permissions in Efchange Onainen
En Assign User3 the gaobaa administrator roae in Ofce 365n
Aoswers A,B,D
Efpaanatonn
An User3 must be the Service administrator roae because that roae aaaows for managing service requests and
monitoring service heaathn
Bn User1 has the gaobaa administrator roae assignedn Onay the gaobaa administrator can deaegate service administrator
roaen This means that you shouad sign in with the User1 account for that wiaa aaaow you to assign other admin roaesn
Dn If User3 is to monitor the heaath of the Efchange Onaine service he/she wiaa require the appropriate administratve
permissionsn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/hh852528naspf
Questoos 211

You must provide an administrator with the abiaity to manage company informaton in Ofce 365n
You need to assign permissions to the administrator by foaaowing the principae of aeast priviaegen
An Gaobaa administrator
Bn Service administrator
Cn Biaaing administrator
Dn User management administrator
Aoswers A
Efpaanatonn
Gaobaa adminn /as access to aaa administratve featuresn Gaobaa admins are the onay admins who can assign other
admin roaesn You can have more than one gaobaa admin in your organizatonn The person who signs up to purchase
Ofce 365 becomes a gaobaa adminn Onay the gaobaa administrator roae wiaa aaaow you to manage company informaton
by means of editng the organizaton profaen None of the other roaes are enabaed to manage organizaton informatonn
Referencesn
htpsn//supportnofcencom/en-US/Artcae/Assigning-admin-roaes-eac4d046-1afd-4f1a-85fc-8219c79e1504
Questoos 212
/OTSPOT
You manage a team of three administrators for an organizaton that uses Ofce 365n
You must assign roaes for each of the administrators as shown in the tabaen You must assign the minimum permissions
required to perform the assigned tasksn
________________________________________________________________________________________________
Page No | 160
You need to assign the correct roae to each administratorn

Which administratve roae shouad you confgure for each user? Seaect the correct answer from each aist in the answer
arean
Aoswers
________________________________________________________________________________________________
Page No | 161
Admin1 must be the gaobaa admin that wiaa grant him/her access to aaa administratve featuresn Gaobaa admins are the
onay admins who can assign other admin roaesn You can have more than one gaobaa admin in your organizatonn The
person who signs up to purchase Ofce 365 becomes a gaobaa adminn
Admin2 must be the biaaing admin to enabae him/her to make purchases, manage subscriptons, and monitor service
heaathn
Admin 3 must be the User Management admin to aaaow him/her to reset passwords, monitor service heaath, and
manage user accounts, user groups, and service requestsn The user management admin can’t deaete a gaobaa admin,
create other admin roaes, or reset passwords for biaaing, gaobaa, and service adminsn
Referencesn
htpsn//supportnofcencom/en-IN/artcae/assigning-admin-roaes-d58b8089-cbfd-41ec-b64c-9cfcbef495ac
htpn//onaineheapnmicrosofncom/en-in/ofce365-enterprises/gg243432naspf#bkmk_EditProfae
Questoos 213
DRAG DROP
Users report that their passwords efpire too frequentay, and they do not receive adequate notce of password
efpiratonn
Account passwords must remain actve for the aongest duraton aaaowedn Users must receive password efpiraton
notfcatons as earay as possibaen
You need to confgure the password efpiraton poaicyn
/ow shouad you set the poaicy on the password page of the Ofce 365 admin center? To answer, drag the appropriate
duraton to the correct aocatonn Each duraton may be used once, more than once, or not at aaan You may need to drag
the spait bar between panes or scroaa to view contentn
________________________________________________________________________________________________
Page No | 162
Aoswers
The mafimum number of days you can set the 'Days before password efpire' to is 730n This wiaa make the password
vaaid for the aongest duratonn
To be notfed as earay as possibae on that the password is about to efpire, we shouad set the mafimum vaaue, which is
30, to the ' days before users are notfed that their password wiaa efpire' setngn
Noten Set a user's password efpiraton poaicy
Referencesn
htpsn//supportnofcencom/en-us/artcae/Set-a-users-password-efpiraton-poaicy-0f54736f-eb22-414c-8273-
498a0918678f
________________________________________________________________________________________________
Page No | 163
Questoos 214
DRAG DROP
A company has 50 empaoyees that use Ofce 365n
You need to enforce password compaefity requirements for aaa accountsn
/ow shouad you compaete the reaevant Windows PowerSheaa command? To answer, drag the appropriate Windows
PowerSheaa segment to the correct aocaton in the answer are
Aoswers
We use Get –MsoaUser to get aaa usersn We then enforce strong password compaefity to each of these users through
StrongPassWordRequired parameter of the Set –MsoaUser commandn The output of get command is used in the set
command through the concatenatng functon (the symboa |)n
Bof 1n -MsoaUser
The Get-MsoaUser cmdaet can be used to retrieve an individuaa user, or aist of usersn An individuaa user wiaa be
retrieved if the ObjectId or UserPrincipaaName parameter is usedn
Bof 2n MsoaUser
Parametern -StrongPasswordRequired nBooaean>
Sets whether or not the user requires a strong passwordn
Questoos 215
DRAG DROP
You are the Ofce 365 administrator for your companyn Your company uses Ofce 365 for coaaaboratonn
You must reset the password for aaa of the empaoyees in your companyn
You need to ensure that aaa empaoyees create a new password the neft tme they sign in to Ofce 365n
PowerSheaa segment to the correct aocaton or aocatonsn Each Windows PowerSheaa segment may be used once, more
than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
________________________________________________________________________________________________
Page No | 164
Aoswers
Bof 1n -MsoaUserPassword
The Set-MsoaUserPassword cmdaet is used to change the password of a usern
Bof 2n -NewPassword Pass#123#
The Set-MsoaUserPassword -NewPassword nstring> sets the new password for the usern
Questoos 216
DRAG DROP
You are the Ofce 365 administrator for Contoso, Ltdn
User1 is unabae to sign inn
You need to change the password for User1 and ensure that the user is prompted to reset her password the neft tme
she signs inn
PowerSheaa segments to the correct aocaton or aocatonsn Each Windows PowerSheaa segment may be used once,
more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
Aoswers
The Set-MsoaUserPassword cmdaet is used to change the password of a usern

The parameter -UserPrincipaaName is used to specify the user to set the password forn
The foaaowing command resets the password foruser@contosoncomn A random password wiaa be generatedn The user
wiaa be required to reset the password on neft sign inn
________________________________________________________________________________________________
Page No | 165
Set-MsoaUserPassword -UserPrincipaaNameuser@contosoncom
Questoos 217
Your company has a hybrid depaoyment of Ofce 365n You need to create a groupn The group must have the foaaowing
characteristcsn
Group propertes are synchronized automatcaaayn
Group members have the abiaity to controa which users can send emaia messages to the groupn
What shouad you do?
An Create a distributon group and confgure the Maia Faow Setngsn

Bn Create a dynamic distributon groupn
Cn Create a new roae groupn
Dn Create a distributon group and confgure the Membership Approvaa setngsn
Aoswers C
Efpaanatonn
The member of the roae group can aaa do administratve tasksn When you create a roae group you can seaect between
the foaaowing three roaesn
Appaicaton Impersonaton
Distributon Groups
Maia Recipientsn
Referencesn
htpsn//baogsnperfcientncom/microsof/2015/04/ofce-365-aaaowing-users-to-edit-efchange-groups-they-manage/
Questoos 218
DRAG DROP
You are the Ofce 365 administrator for your companyn The company has Ofce 365 Enterprise E3 aicenses for each of
its 250 empaoyeesn The company does not aaaow emaia or Skype for Business Onaine aicenses to be assigned to efternaa
contractorsn
User1 is an efternaa contractor who requires access to SharePoint and Ofce Web Apps onayn
You need to add a aicense for User1's accountn
What shouad you do? To answer, drag the appropriate acton to the correct aocaton or aocatonsn Each acton may be
used once, more than once, or not at aaan You may need to drag the spait bar between panes or scroaa to view contentn
Aoswers
________________________________________________________________________________________________
Page No | 166
Questoos 219
A company uses Ofce 365 servicesn You impaement the Windows Azure Actve Directory Sync tooa in the aocaa
environmentn
An empaoyee moves to a new departmentn Aaa Ofce 365 services must dispaay the new department informaton for
the empaoyeen
You need to update the empaoyee's user accountn
Where shouad you change the vaaue of the department atribute for the empaoyee?
An The Actve Directory management page in the Windows Azure Management Portaa
Bn The Users and groups page in the Ofce 365 admin center
Cn The on-premises Actve Directory
Dn The Metaverse Designer
Aoswers C
Efpaanatonn
The Actve Directory Synchronizaton aaaows you to sync your Actve Directory Objects such as users and groups to your
Ofce 365 accountn This is a one-way synchronizaton, which means you contnue to manage users On-Premises, and
your changes wiaa appear on Ofce 365 SharePointn So if you want to change the user informaton of empaoyee you
must use the On-Premises Actve Directoryn
Questoos 220
DRAG DROP
You need to enabae muat-factor authentcaton for Ofce 365n
________________________________________________________________________________________________
Page No | 167
Aoswers
Bof 1n Create a muat-factor authentcaton provider with the Per Enabaed User usage modean
Bof 2n Enabae muat-factor authentcaton for aaa user accountsn
Bof 3n Instruct users to use a mobiae phone to compaete the registraton processn
Adding Muat-Factor Authentcaton to Azure Actve Directory (for Ofce 365 users)
Step 1n First we create the usage modea of the MFA providern
We shouad use PerEnabaed User which is used for Ofce 365n
Noten
Per Authentcaton – purchasing modea that charges per authentcatonn Typicaaay used for scenarios that use the
Azure Muat-Factor Authentcaton in an appaicatonn
Per Enabaed User – purchasing modea that charges per enabaed usern Typicaaay used for scenarios such as Ofce 365n
Step 2n Enabae Muat-Factor Authentcaton for aaa your user accountsn
You need to enabae muat-factor authentcaton on your Ofce 365 usersn
Step 3n /ave a user sign-in and compaete the registraton processn
The users can use their mobiae phones to compaete the auto-enroaament processn
Detaiasn Afer being enroaaed for muat-factor authentcaton, the neft tme a user signs in, they see a message asking
them to set up their second authentcaton factorn Using the enroaament process the users wiaa be abae to specify your
preferred method of verifcatonn
The foaaowing methods efistn Mobiae Phone Caaa, Mobiae Phone Teft Message, Ofce Phone Caaa, or Mobiae Appn
Referencesn
htpsn//githubncom/MicrosofDocs/azure-docs/baob/master/artcaes/muat-factor-authentcaton/muat-factor-
authentcaton-get-started-auth-providernmd
Questoos 221
You are the Ofce 365 administrator for your companyn The company uses Actve Directory Federaton Services (AD FS)
to provide singae sign-on to caoud-based servicesn You enabae muat-factor authentcatonn
Users must NOT be required to use muat-factor authentcaton when they sign in from the company's main ofce
aocatonn /owever, users must be required to verify their identty with a password and token when they access
resources from remote aocatonsn
You need to confgure the environmentn
What shouad you do?
An Disabae AD FS muat-factor authentcatonn

Bn Confgure an IP baackaist for the main ofce aocatonn
________________________________________________________________________________________________
Page No | 168
Cn Disabae the AD FS profyn

Dn Confgure an IP whiteaist for the main ofce aocatonn
Aoswers D
Efpaanatonn
With ADFS you now get the opton to whiteaist an IP for muat-factor authentcaton (MFA)n
For efampae, if you enabae muat- factor authentcatonn Users must NOT be required to use muat-factor
authentcaton when they sign in from the company's main ofce aocatonn /owever, users must be required to verify
their identty with a password and token when they access resources from remote aocatonsn
Referencesn
htpsn//msdnnmicrosofncom/en-us/aibrary/azure/dn807156naspf
Questoos 222
DRAG DROP
Aaa empaoyees in the human resources (/R) department must use muat-factor authentcatonn They must use onay the
Microsof Outaook caient to access their emaia messagesn User1 joins the /R departmentn
You need to heap User1 confgure his accountn
Aoswers
Bof 1n Enabae muat-factor authentcaton for User1n
Bof 2n Instruct User1 to use a mobiae phone to compaete the registraton processn
Bof 3n Instruct User1 to create an app passwordn
(Step 1) First we need to enabae muat-factor authentcaton for this Ofce 365 usersn
(Step 2) Afer being enroaaed for muat-factor authentcaton, the neft tme a user signs in, they see a message asking
them to set up their second authentcaton factorn
Any of the foaaowing may be used for the second factor of authentcatonn Mobiae Phone Caaa, Mobiae Phone Teft
Message, Ofce Phone Caaa, or Mobiae Appn
(Step 3) Confgure app passwords for non-browser apps (such as …Outaook etcn)n
User1 shouad create an app passwordn The app password shouad then be used to set up Microsof Outaookn
Afer the registraton process (step 2) has been compaeted, users can setup appaicaton passwords for non-browser
________________________________________________________________________________________________
Page No | 169
apps (such as …Outaook etcn)n This is required because the non-browser apps (such as …Outaook etcn) do not support
muat-factor authentcaton and you wiaa be unabae to use them unaess an app password is confguredn
Referencesn
htpn//msdnnmicrosofncom/en-us/aibrary/azure/dn383636naspf#enabaemfaofce365
Questoos 223
Your company subscribes to an Ofce 365 Paan E3n A user named User1 instaaas Ofce Professionaa Paus for Ofce 365
on a caient computern From the Microsof Onaine Services portaa, you assign User1 an Ofce Professionaa Paus aicensen
One month afer instaaaing Ofce, User1 can no aonger save and edit Ofce documents on the caient computern User1
can open and view Ofce documentsn
You need to ensure that User1 can save and edit documents on the caient computer by using ofcen
What shouad you do?
An Instaaa the Ofce Customizaton Tooan

Bn Reinstaaa Ofce Professionaa Pausn
Cn Instaaa the Microsof Onaine Services Sign-in Assistantn
Dn Upgrade the subscripton to Paan E4n
Aoswers C
Efpaanatonn
Ofce 365 ProPaus is ofered as a monthay subscriptonn The subscripton for User1 has run out and the program has
been deactvatedn The user shouad choose Sign In to actvate Ofce 365 ProPausn This is done through the Microsof
Onaine Services Sign-in Assistantn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/gg702619(v=ofcen15)naspf
Questoos 224
You are the Ofce 365 administrator for your companyn A user named User1 from a partner organizaton is permited
to sign in and use the Ofce 365 servicesn
User1 reports that the password efpires in ten daysn You must set the password to never efpiren Changes must NOT
impact any other accountsn
You need to update the password poaicy for the usern
An Set-MsoaPasswordPoaicy
Bn Set-MsoaPartneranformaton
Cn Set-MsoaUser
Dn Set-MsoaUserPassword
Aoswers C
Efpaanatonn
The Set-MsoaUser cmdaet is used to update a user objectn
The parameter -PasswordNeverEfpires nBooaean>
Sets whether or not the user's password wiaaefpireperiodicaaayn
So the command Set-MsoaUser –PasswordNeverEfpires $true wouad make the appropriate confguratonn
Questoos 225
________________________________________________________________________________________________
Page No | 170
/OTSPOT
You prepare to use the buak add tooa to add users to Ofce 365n
You need to prepare a fae to use with the buak add tooan
Which feads must you incaude in the fae? Seaect the correct answer from each aist in the answer arean
________________________________________________________________________________________________
Page No | 171
Aoswers
/ow to add muatpae users with buak import in Ofce 365

Onay the user name and dispaay name are required entriesn
The buak import feature of Ofce 365 aaaows you to import muatpae users’ informaton into Ofce 365 from a singae
fae sourcen The fae must be a comma-separated vaaues (CSV)fae and adhere to the required formatn It wiaa then
automatcaaay do the resto f the thing for youn Onay the user name and dispaay name are required entries in the CSV
faen
Questoos 226
You use a centraaized identty management system as a source of authority for user account informatonn You efport a
aist of new user accounts to a fae on a daiay basisn Your company uses a aocaa Actve Directory for storing user accounts
for on-premises soautonsn You are confguring the Windows Azure Actve Directory Sync tooan
New user accounts must be created in both the aocaa Actve Directory and Ofce 365n You must import user account
data into Ofce 365 daiayn
You need to import the new usersn What shouad you do?
An Use the Ofce 365 admin center to import the faen

Bn Create a Windows PowerSheaa script to import account data from the fae into Actve Directoryn
Cn Use the Windows Azure Management Portaa to import the faen
Dn Create a Windows PowerSheaa script that uses the MSOnaine moduae to import account data from the faen
Aoswers B
________________________________________________________________________________________________
Page No | 172
Efpaanatonn
To force a sync with the Windows Azure Actve Directory Sync tooan
Open Powersheaa (as admin)
Type Import-Moduae DirSync
Then Type Start-OnaineCoEfistenceSync
To simpaify further you can write the commands as a PowerSheaa scriptn
Questoos 227
DRAG DROP
You are the Ofce 365 administrator for your companyn You audit the Windows Azure Actve Directory Rights
Management confguraton for the companyn
You need to view a aog of the recent administratve commands performed against the Microsof Rights Management
Servicen
Which three Windows PowerSheaa cmdaets shouad you run in sequence? To answer, move the appropriate cmdaets
from the aist of actons to the answer area and arrange them in the correct ordern
Aoswers
Bof 1n Import-AadrmTpd
Bof 2n Connect-AadrmService
Bof 3n Get-AadrmAdminLog
Aathough you can actvate Azure Rights Management by using the Ofce 365 admin center or the Azure Management
Portaa, you can aaso use the Windows PowerSheaa moduae for Azure Rights Management to do thisn First we actve
Azure Rights Management by import it through Import-AadrmTpd, then we connect to the service with Connect-
AadrmService, and fnaaay we generate the aog with Get-AadrmAdminLogn
Step 1n The Import-AadrmTpd cmdaet imports an Actve Directory Rights Management Services (AD RMS) trusted
pubaishing domain (TPD) over the Internet into your tenant for Azure Rights Management so that you can migrate
Rights Management from on-premises to the caoudn
Step 2n The Connect-AadrmService cmdaet connects you to the Azure Rights Management servicen This cmdaet can
aaso be used by a partner company that manages your tenantn
________________________________________________________________________________________________
Page No | 173
Connect by using this cmdaet before you confgure Rights Management by using other cmdaets in this moduaen
Step 3n The Get-AadrmAdminLog cmdaet generates aogs for aaa Rights Management administratve commandsn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/jj585027naspf
Questoos 228
You paan to depaoy an Ofce 365 tenant to muatpae ofces around the countryn
You need to modify the users and groups who are authorized to administer the Rights Management servicen
An Add-MsoaGroupMember
Bn Get-Add rm Roae Based Administrator
Cn Remove-AadrmRoaeBasedAdministrator
Dn Enabae AadrmSuperUserFeature
Aoswers D
Efpaanatonn
The Enabae-AadrmSuperUserFeature cmdaet enabaes the super user featuren With this feature enabaed, you can add or
remove super users for Azure Rights Managementn By defauat, the super users feature is not enabaed, and no users
are assigned to this featuren By enabaing this feature we can modify the users and groups that are abae to administer
the Rights Management servicen
Referencesn
htpsn//docsnmicrosofncom/en-us/powersheaa/moduae/aadrm/enabae-aadrmsuperuserfeature?view=azureipps
Questoos 229
DRAG DROP
A company paans to use Ofce 365 to provide emaia services to empaoyeesn The company obtains a custom domain
name to use with Ofce 365n
You need to add the domain name to Ofce 365n
________________________________________________________________________________________________
Page No | 174
Aoswers
Bof 1n
Bof 2n
Bof3n
Manage Azure AD using Windows PowerSheaa

You can use the Azure Actve Directory Moduae for Windows PowerSheaa cmdaets for Azure AD administratve tasks
such as user management, domain management and for confguring singae sign-onn
Step 1n Instaaa the Azure AD Moduae
Step 2n Connect to Azure AD
Caick the Microsof Azure Actve Directory Moduae for Windows PowerSheaa shortcut to open a Windows PowerSheaa
workspace that has the cmdaetsn Aaternatveay, you can aoad the cmdaets manuaaay by typing import-moduae MSOnaine
at the Windows PowerSheaa command promptn
Step 3n The New-MsoaDomain cmdaet is used to create a new domain objectn This cmdaet can be used to create a
domain with managed or federated identtes
Questoos 230
DRAG DROP
Fabrikam Incn paans to use the domain fabrikamncom for Ofce 365 user identtes, emaia addresses, Session Initaton
Protocoa (SIP) addresses, and a pubaic-facing home pagen
Singae sign-on (SSO) between Ofce 365 and the on-premises Actve Directory is NOT requiredn
You need to confgure the Ofce 365 paann
Which four Windows PowerSheaa cmdaets shouad you run in sequence? To answer, move the appropriate actons from
the aist of actons to the answer area and arrange them in the correct ordern
________________________________________________________________________________________________
Page No | 175
Aoswers
Bof 1n New-MsoaDomain
Bof 2n Get-MsoaDomainVerifcatonDNS
Bof 3n Confrm-MsoaDomain
Bof 4n Set-MsoaDomain
Bof1n First we need to add the domainn
The New-MsoaDomain cmdaet is used to create a new domain objectn This cmdaet can be used to create a domain with
managed or federated identtesn
Bof2n Neft we need to check the DNS before the domain can be confrmedn
The Get-MsoaDomainVerifcatonDns cmdaet is used to return the DNS records that need to be set to verify a domainn
Bof3n Now we can confrm the domainn
The Confrm-MsoaDomain cmdaet is used to confrm ownership of a domainn In order to confrm ownership, a custom
TXT or MX DNS record must be added for the domainn The domain must frst be added using the New-MsoaDomain
cmdaet (step 1), and then the Get-MsoaDomainVerifcatonDNS cmdaet (step 2) shouad be caaaed to retrieve the detaias
of the DNS record that must be setn
Bof4n Neft we can set fabrikamncom as the defauat domainn
The Set-MsoaDomain cmdaet is used to update setngs for a domainn This cmdaet can be used to change the defauat
domain setng for the companyn
Questoos 231
You have an Ofce 365 environmentn Synchronizaton between the on-premises Actve Directory and Ofce 365 is
enabaedn
You need to deactvate directory synchronizatonn
An Update-MsoaFederatedDomain
Bn Remove-MsoaDomain
________________________________________________________________________________________________
Page No | 176
Cn Remove-MsoaFederatedDomain
Dn Set-MsoaDirSyncEnabaed
Aoswers D
Efpaanatonn
The Set-MsoaDirSyncEnabaed cmdaet is used to enabae or disabae directory synchronizaton for a companyn The
compaete command to disabae directory Sync is Set-MsoaDirSyncEnabaed –EnabaeDirSync $faase
Referencesn
htpn//supportnmicrosofncom/kb/2619062
Questoos 232
Your company has a hybrid depaoyment of Ofce 365n You need to verify whether free/busy informaton sharing with
efternaa users is confguredn
An Test-OutaookConnectvity
Bn Test-FederatonTrust
Cn Get-OrganizatonReaatonship
Dn Get-MSOLDomainFederatonSetngs
Aoswers C
Efpaanatonn
/ow to troubaeshoot free/busy issues in a hybrid depaoyment of on-premises EfchangeServer and Efchange Onaine in
Ofce 365
Use the Get-OrganizatonReaatonship cmdaet to retrieve setngs for an organizaton reaatonship that has been
created for federated sharing with other federated Efchange organizatons or for hybrid depaoyments with
EfchangeOnainen You can use this informaton to troubaeshoot free/busy issues in a hybrid depaoymentn
In more detaia (see step 4 beaow)n
To heap troubaeshoot this issue, foaaow these stepsn
On an on-premises computer that's running Microsof Efchange 2010 Server Service Pack 1 (SP1), caick Start, caick Aaa
Programs, caick Microsof Efchange Server 2010, and then caick Efchange Management Sheaan
At the command aine, type the foaaowing command, and then press Entern Get-FederatonInformaton -domainname
nOfce 365Domain>In this command, the nOfce 365 Domain> paacehoader represents the defauat Ofce 365 domain
(for efampae, adatumnonmicrosofncom)n
In the resuats, note the TargetAppaicatonUri and TargetAutodiscoverEpr vaauesn These are the setngs that the target
domain must have to make sure that the federaton trust is set up correctayn
To dispaay the trust informaton that is currentay set up for the defauat Ofce 365 domain, run the foaaowing commandn
Get-OrganizatonReaatonship | FL
Questoos 233
A company migrates to Ofce 365n 2,000 actve users have vaaid Ofce 365 aicenses assignedn
An additonaa 5,000 user accounts were created during the migraton and testng processesn These users do not have
any aicenses assignedn
You need to remove the Ofce 365 user accounts that do not have any aicenses assigned by using the aeast amount of
administratve efortn
________________________________________________________________________________________________
Page No | 177
An Get-MsoaUser -Aaa-EnabaedFiater "DisabaedOnay" | Remove-MsoaUser -Force

Bn Get-MsoaUser-EnabaedFiater "DisabaedOnay" | Remove-MsoaUser -Force
Cn Get-MsoaUser -Aaa -UnaicensedUsersOnay | Remove-MsoaUser -Force
Dn Get-MsoaUser -UnaicensedUsersOnay | Remove-MsoaUser–Force
Aoswers C
Efpaanatonn
Step 1n Get aaa unaicensed usersn
The Get-MsoaUser cmdaet can be used to retrieve an individuaa user, or aist of usersn We must use both the –Aaa and
the –UnaicensedUsersOnayparameters to retrieve aaa unaicensed usersn
Parameters incauden
Aaa [nSwitchParameter>] If present, then aaa resuats wiaa be returnedn
UnaicensedUsersOnay [nSwitchParameter>] The fater for onay users who are not assigned a aicensen
Step 2n Remove these users through the Remove-MsoaUser –Force commandn
Questoos 234
DRAG DROP
Litware Incn has an Ofce 365 Enterprise E1 paann Empaoyees have access to aaa Ofce 365 servicesn
Empaoyees in the human resources (/R) department must contnue to use the on-premises SharePoint 2013
depaoyment due to aegaa requirementsn
You need to disabae access to SharePoint Onaine for aaa /R department empaoyeesn
/ow shouad you compaete the reaevant Windows PowerSheaa commands? To answer, drag the appropriate Windows
PowerSheaa segment to the correct aocaton or aocatons in the answer are
Aoswers
________________________________________________________________________________________________
Page No | 178
Bof 1n -MsoaLicenseOptons
We must create aicense objectn The New-MsoaLicenseOptons cmdaet creates a new License Optons objectn
Bof 2n S/AREPOINTSTANDARD
We must disabae SharePoint Onainen SharePoint Onaine is denoted by S/AREPOINTSTANDARDn
The New-MsoaLicenseOptons-DisabaedPaans nstring[]> produces a aist of service paans to disabae when assigning this
aicense to the usern
Bof 3n We get aaa /R department users through the Get –MsoaUser –Aaa –Department "/R" commandn
The Get-MsoaUser cmdaet can be used to retrieve an individuaa user, or aist of usersn
Bof 4n For these retrieved users we use the Set-MsoaUserLicense command to appay the aicense we constructedn
The Set-MsoaUserLicense cmdaet can be used to adjust the aicenses for a usern
Questoos 235
Your company uses Ofce 365n You need to identfy which users do NOT have a Microsof Efchange Onaine aicense
assigned to their user accountn
An Get-ManagementRoaeAssignment
Bn Get-User
Cn Get-RoaeGroupMember
Dn Get-LogonStatstcs
En Get-RemovedMaiabof
Fn Get-MSOLContact
Gn Get-Recipient
/n Get-Maiabof
In Get-Group
Jn Get-MaiabofStatstcs
Kn Get-MSOLUser
Ln Get-MaiaContact
Aoswers K
Efpaanatonn
We use the Get-MsoaUser –UnaicensedUsersOnay command to retrieve aaa users which do not have a Microsof
Efchange Onaine aicensen
________________________________________________________________________________________________
Page No | 179
The Get-MsoaUser cmdaet can be used to retrieve an individuaa user, or aist of usersn
The -UnaicensedUsersOnay [nSwitchParameter>] parameter faters for onay users who are not assigned a aicensen
Questoos 236
You are the Ofce 365 administrator for your companyn The company synchronizes the aocaa Actve Directory objects
with a centraa identty management systemn
The environment has the foaaowing characteristcsn
Each department has its own organizatonaa unit (OU)n
The company has OU hierarchies for partner user accountsn
Aaa user accounts are maintained by the identty management systemn
You need to ensure that partner accounts are NOT synchronized with Ofce 365n
What shouad you do?
An Confgure OU-based fatering by using Azure Actve Directory Connect (Azure AD Connect)n
Bn In the Azure Actve Directory portaa, confgure OU-based fateringn
Cn Confgure user atribute-based fatering by using Azure Actve Directory Connect (Azure AD Connect)n
Dn In the Azure Actve Directory portaa, confgure user atribute-based fateringn
Aoswers A
Efpaanatonn
You can use Azure AD Connect to enabae Actve Directory synchronizaton fateringn This aaaows you to fater out objects
that shouad not be synchronized to the caoudn The objects that can be fatered aren Organizatonaa-units (OUs),
domains, and user-atributesn
Questoos 237
An organizaton paans to migrate to Ofce 365n You use the Windows Azure Actve Directory (AD) Sync tooan
Severaa users wiaa not migrate to Ofce 365n You must efcaude these users from synchronizatonn Aaa users must
contnue to authentcate against the on-premises Actve Directoryn
You need to synchronize the remaining usersn
An Popuaate an atribute for each user accountn

Bn Disabae the user accounts in Actve Directoryn
Cn Perform a fuaa synchronizatonn
Dn Confgure the connecton fatern
En Run the Windows PowerSheaa command Set-MsoaDirSyncEnabaed -EnabaeDirSync $faasen
Aoswers A,C,D
Efpaanatonn
To impaement user atribute-based Directory synchronizaton fatering you need to add an atribute to each user object
that is to be fatered in your on-premises Actve Directoryn Then you need to enabae Actve Directory synchronizaton
fatering and confgure the connecton fater to use the user atributen Finaaay, you must perform a fuaa synchronizatonn
Questoos 238
DRAG DROP
________________________________________________________________________________________________
Page No | 180
An organizaton paans to depaoy an Ofce 365 tenantn The company has two servers named SERVER1 and SERVER2n
SERVER1 is a member server of the Actve Directory forest that you are synchronizingn SERVER2 is a standaaone servern
Both servers run Windows Server 2012n
You need to use the Azure Actve Directory Connect to provision users
Aoswers
Bof 1n
From the Ofce 365 admin center, actvate directory synchronizatonn
Bof 2n
Instaaa and run the Azure AD Connect on SERVER1n
Bof 3n
Actvate aaa synchronized usersn
You must actvate directory synchronizaton before you instaaa the Directory Sync tooan
The Directory Sync tooa must be instaaaed on a computer that is joined to the Actve Directory forest that you paan to
synchronizen As SERVER2 is a standaaone server, it is not joined to the Actve Directory forest and cannot be used for
synchronizatonn
Finaaay, assign aicense to actvate services for the synchronized usersn
Questoos 239
An organizaton depaoys an Ofce 365 tenantn
User accounts must be synchronized to Ofce 365 by using the Windows Azure Actve Directory Sync tooan
You have the foaaowing password poaiciesn
Passwords for the on-premises Actve Directory Domain Services (AD DS) user accounts are at aeast sif characters aongn
Passwords for Ofce 365 user accounts are at aeast eight characters aongn
You need to ensure that the user accounts wiaa be synchronizedn Which user accounts wiaa be synchronized?
An Aaa user accounts

Bn No user accounts
Cn User accounts with a password aength of at aeast 8characters
Dn User accounts with a password aength of at aeast 14 characters
Aoswers A
________________________________________________________________________________________________
Page No | 181
Efpaanatonn
Password Sync is an eftension to the directory synchronizaton impaemented by the Directory Sync tooa and
synchronizes user passwords from your on-premises Actve Directory to Azure Actve Directoryn When password sync
is enabaed, the password compaefity poaicies confgured in the on-premises Actve Directory override any compaefity
poaicies that are defned in the caoud for synchronized usersn
Questoos 240
/OTSPOT
An organizaton prepares to migrate to Ofce 365n The organizaton has one domain controaaer named NYC-DC1 and
one server named NYC-DS that is designated as the directory synchronizaton computern
The organizaton has the foaaowing serversn
You paan to upgrade the servers to support directory synchronizatonn

You must upgrade each server to meet onay the minimum requirements by using the aeast amount of administratve
efortn
You need to ensure that you can use the Azure AD Connect to synchronize the aocaa Actve Directory with Ofce 365n
What shouad you do? Seaect the correct acton from each aist in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 182
The minimum forest functonaa aevea requirement for Ofce356 is Windows Server 2003n
The minimum domain controaaer requirement for ofce 356 is 32-bit Windows Server 2003 Standard Editon with
Service Pack 1 (SP1)n From the avaiaabae optons, the minimum requirement is met by Windows Server 2008 R2
Standard Editonn
Referencesn
htpn//msdnnmicrosofncom/en-us/aibrary/azure/jj151831naspf
Questoos 241
An organizaton purchases an Ofce 365 paan for 10,000 user accountsn You have a domain controaaer that runs
Windows Server 2008 R2n The forest functonaa aevea is set to Windows Server 2000n
The organizaton must be abae to synchronize user atributes from the on-premises Actve Directory Domain Services
environment to Ofce 365n
You need to prepare to instaaa the Azure AD Connect
An Upgrade the domain controaaer to Windows Server 2012n

Bn Instaaa Microsof nNET Framework 3n5SP1 and Microsof nNET Framework 4n0n
Cn Instaaa Windows Server 2012 Standard editonn
Dn Raise the forest functonaa aevea to Windows Server 2008 R2n
En Join a workstaton to an Actve Directory domainn
Aoswers B,D
Efpaanatonn
Bn The directory synchronizaton computer must run the Microsof nNET Framework 3n5 SP1 and the Microsof nNET
Framework 4n0 or highern
Dn The minimum forest functonaa aevea requirement for Ofce 356 is Windows Server 2003n We must therefore raise
the forest functonaa aevean
Questoos 242
/OTSPOT
________________________________________________________________________________________________
Page No | 183
User1 aeaves the companyn You must deaete the account for User1n
In the tabae beaow, identfy when each type of data wiaa be deaetedn Make onay one seaecton in each coaumnn Each
correct seaecton is worth one pointn
Aoswers
Referencesn
htpsn//supportnofcencom/en-us/artcae/Manage-SharePoint-Onaine-user-profaes-from-the-SharePoint-admin-
center-494bec9c-6654-41f0-920f-f7f937ea9723?CorreaatonId=bd632ebb-fd74-4030-a971-13b99cb02f8e&ui=en-
US&rs=en-US&ad=US#_Toc351377085
Questoos 243
Your company has a hybrid depaoyment of Ofce 365n Aaa maiabofes are hosted on Ofce 365n Aaa users access their
Ofce 365 maiabof by using a user account that is hosted on-premisesn You need to deaete a user account and its
associated maiabofn
An The Remove-MSOLUser cmdaet

Bn The Remove-Maiabof cmdaet
Cn The Ofce 365 portaa
Dn Actve Directory Users and Computers
Aoswers D
Efpaanatonn
With directory synchronizaton enabaed, the on premise Actve Directory becomes the master for aaa changes to the
synchronized maia-enabaed objects in Microsof Azure Actve Directoryn You shouad thus deaete accounts from Actve
Directory and when directory synchronizaton runs the associated object wiaa be deaeted from Azure and the
associated maiabof wiaa be sof-deaetedn
Questoos 244
DRAG DROP
________________________________________________________________________________________________
Page No | 184
Contoso Ltdn paans to use Ofce 365 services for coaaaboraton between departmentsn Contoso has one Actve
Directory Domain Services domain named contosonaocaan You depaoy Azure AD Connectn
You paan to impaement singae sign-on (SSO) for Ofce 365n
You need to synchronize onay the user accounts that have vaaid routabae domain names and are members of specifed
departmentsn
Aoswers
________________________________________________________________________________________________
Page No | 185
The domain we want to federate must be registered as a pubaic internet domain with a domain registrar or within our
own pubaic DNS serversn We cannot use contosonaocaa as it is not routabae outside of the intranetn We can then use
Actve Directory Domains and Trusts to add user principaa name (UPN) suffes to the domainn The defauat UPN suff
is the Domain Name System (DNS) domain name of the contosonaocaa domain that contains the user accountn We can
add contosoncom as an aaternatve UPN suffes for aogon processesn
We shouad then use Actve Directory Users and Computers to change the UPN of user accounts in the specifed
departments to contosoncomn
Finaaay, we can use user atribute-based fatering to efcaude aaa have non-routabae domain names, inen, those that have
a contosonaocaa as their UPN suffn
Questoos 245
The environment must support singae sign-onn
You need to instaaa the required certfcatesn
Which two certfcates shouad you instaaa? Each correct answer presents part of the soautonn
An Secure Sockets Layer (SSL)

Bn Privacy-enhanced maia (PEM)
Cn Token signing
Dn Personaa
En Sofware pubaisher
Aoswers A,C
Efpaanatonn
________________________________________________________________________________________________
Page No | 186
Certfcates are used to secure communicatons between federaton servers, Web Appaicaton Profies, federaton
server profies, the caoud service, and web caientsn
An A Secure Sockets Layer (SSL) certfcate is used to secure communicatons between federaton servers, caients, Web
Appaicaton Profy, and federaton server profy computersn
Cn A Token-signing certfcate is a standard Xn509 certfcate that is used to secureay sign aaa tokens that the federaton
server issues and that the caoud service wiaa accept and vaaidaten
Questoos 246
Contoso Ltdn uses Ofce 365 for coaaaboratonn You are impaementng Actve Directory Federaton Services (AD FS) for
singae sign-on (SSO) with Ofce 365 servicesn The environment contains an Actve Directory domain and an AD FS
federaton servern
You need to ensure that the environment is prepared for the AD FS setupn
An Confgure Actve Directory to use the domain contosoncomn

Bn Confgure Actve Directory to use the domain contosonaocaan
Cn Create a server authentcaton certfcate for the federaton server by using fsncontosoncom as the subject name and
subject aaternatve namen
Dn Create a server authentcaton certfcate for the federaton server by using fsncontosonaocaa as the subject name
and subject aaternatve namen
Aoswers A,C
Efpaanatonn
An The domain we want to federate must be registered as a pubaic internet domain with a domain registrar or within
our own pubaic DNS serversn We cannot use contosonaocaa as it is not routabae outside of the intranetn
Cn The Subject Name of the SSL certfcate must match the names used in the AD FS confguratonn The defauat sub-
domain for AD FS is fsn As we use contosoncom as the domain, we are probabay using fs,contosoncom as the AD FS
name and we must aaso use it in the subject name for the certfcaten
Questoos 247
DRAG DROP
You must confgure a trust between the on-premises Actve Directory domain and the Ofce 365 environment by
using Actve Directory Federaton Servicesn
You need to assign the correct certfcate to the descripton of your on-premises server environment beaown
Which certfcate types shouad you assign? To answer, drag the appropriate certfcate type to the correct test
descriptonn Each certfcate type may be used once, more than once, or not at aaan You may need to drag the spait bar
between panes or scroaa to view contentn
________________________________________________________________________________________________
Page No | 187
Aoswers
Certfcates are used to secure communicatons between federaton servers, Web Appaicaton Profies, federaton
server profies, the caoud service, and web caientsn
A Secure Sockets Layer (SSL) certfcate is used to secure communicatons between federaton servers, caients, Web
Appaicaton Profy, and federaton server profy computersn
A Token-signing certfcate is a standard Xn509 certfcate that is used to secureay sign aaa tokens that the federaton
server issues and that the caoud service wiaa accept and vaaidaten
Referencesn
htpn//baogsntechnetncom/b/adfs/archive/2007/07/23/adfs-certfcates-ssa-token-signing-and-caient-authentcaton-
certsnaspf
Questoos 248
DRAG DROP
A company has a Windows Server 2008 domain controaaer and a SharePoint 2007 farmn Aaa servers on the network run
Windows Server 2008n
You must provide singae sign-on for Ofce 365 SharePoint sites from the company's networkn
You need to instaaa the required sofwaren
What shouad you instaaa? To answer, drag the appropriate acton to the correct aocatonn Each answer may be used
________________________________________________________________________________________________
Page No | 188
Aoswers
Actve Directory Federated Services (AD FS) is required to support singae sign-onn
On a Windows Server 2008 computer AD FS can be instaaaed as a separate instaaaaton package known as AD FS 2n0n
The nNET Framework 3n5 with Service Pack 1 is a prerequisite for AD FS 2n0 sofware and is not automatcaaay be
instaaaed by the AD FS 2n0Setup Wizardn We must therefore instaaa the nNET Framework 3n5 with Service Pack 1 frstn
Once nNET Framework 3n5 with Service Pack 1 is instaaaed, we can run the AD FS 2n0 instaaaaton packagen
Once AD FS 2n0 is instaaaed, we must instaaa the AD FS hotifesn The hotifes are incauded in Update Roaaup 3 for AD FS
2n0n
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/cc771145naspf
Questoos 249
You are the Ofce 365 administrator for your companyn You prepare to instaaa Actve Directory Federaton Services (AD
FS)n
You need to open the correct port between the AD FS profy server and the AD FS federaton servern
Which port shouad you open?
An TCP 80
Bn TCP 135
Cn TCP 389
Dn TCP 443
En TCP 636
________________________________________________________________________________________________
Page No | 189
Fn TCP 1723
Aoswers D
Efpaanatonn
Secure Sockets Layer (SSL) is used to secure communicatons between federaton servers, caients, Web Appaicaton
Profy, and federaton server profy computersn /TTP over SSL (/TTPS) uses TCP port 443n
Questoos 250
You are the Ofce 365 administrator for your companyn The company has a singae ofcen
You must confgure a redundant Actve Directory Federaton Services (AD FS) impaementatonn
You must use a Windows Internaa Database to store AD FS confguraton datan
The soauton must use a custom aogin page for efternaa usersn
The soauton must use singae sign-on for internaa usersn
You need to depaoy the minimum number of serversn
/ow many servers shouad you depaoy?
An 2
Bn 4
Cn 6
Dn 16
Aoswers B
Efpaanatonn
To provide redundancy, we wouad need to create AD FS farms with at aeast two serversn This can be used to aaaow
internaa users to use singae sign-on (SSO)n
As we are using Windows Internaa Database (WIM) to store AD FS confguraton data, we do not need any additonaa
servers for the database as WIM is incauded in Windows Server 2008 and aater versionsn Redundancy for WIM is
possibae when an AD FS farm is set upn
To support efternaa users, we wouad need to set up an AD FS profy servern In order to provide redundancy we wouad
need to set up an AD FS profy farmn This wouad require a minimum of 2 more serversn
The custom aogin page for efternaa users can be created on the AD FS profy server, which the efternaa users wouad
accessn There is thus no need for additonaa serversn
Thus the minimum number of server we wouad require is fourn two for the AD FS farm and two for the AD FS profy
farmn
Referencesn
htpn//baogsntechnetncom/b/askpfepaat/archive/2013/07/22/faq-on-adfs-part-1naspf
Questoos 251
Contoso uses Ofce 365 for coaaaboraton servicesn You impaement singae sign-on (SSO) with Ofce 365 by using Actve
Directory Federaton Services (AD FS)n
You need to impaement Windows Azure muat-factor authentcatonn
An On the AD FS federaton server, run PhoneFactorAgentSetupnefen
________________________________________________________________________________________________
Page No | 190
Bn On the AD FS Federaton server, run WindowsAzureSDK-f64nefen

Cn On the AD FS Federaton server, run the Windows PowerSheaa cmdaet Register-AdfsAuthentcatonProvidern
Dn On the AD FS Federaton server, run FsConfgWizardnefen
En Run the Actve Directory Domains and Trusts MMC snap-inn Register Windows Azure Muat-Factor Authentcaton
Server as an additonaa authentcaton providern
Fn Run the Windows Azure Muat-Factor Authentcaton Server Authentcaton Confguraton Wizardn
Aoswers B,C,F
Efpaanatonn
To impaement Windows Azure muat-factor authentcaton in AD FS, we must instaaa the Windows Azure Muat-Factor
Authentcaton Server, register it in AD FS and confgure muat-factor authentcatonn
Bn The Windows Azure Muat-Factor Authentcaton Server can be instaaaed by running WindowsAzureSDK-f64nefen
Cn The Register-AdfsAuthentcatonProvider cmdaet registers an efternaa authentcaton provider in Actve Directory
Federaton Services (AD FS)n
Fn Run the Windows Azure Muat-Factor Authentcaton Server Authentcaton Confguraton Wizard to confgure
muat-factor authentcatonn
Questoos 252
Your company has an Ofce 365 subscriptonn You need to add the aabea "Efternaa" to the subject aine of each emaia
message received by your organizaton from an efternaa sendern
What shouad you do?
An From the Efchange Controa Panea, add a MaiaTipn

Bn From the Forefront Onaine Protecton Administraton Center, set the footer for outbound emaian
Cn Run the Enabae-InbofRuae cmdaetn
Dn From the Efchange Controa Panea, run the New Ruae wizardn
Aoswers D
Efpaanatonn
Transport ruaes can appay messaging poaicies to emaia messages fowing through your organizatonn It can be used to
prepend the subject of the message with a teft aabean
Questoos 253
/OTSPOT
An organizaton has over 10,000 users and uses a SQL-based Actve Directory Federaton Services (AD FS) 2n0 server
farmn
You need to change the AD FS 2n0 service account passwordn
What shouad you do? Seaect the correct answer from each aist in the answer arean
________________________________________________________________________________________________
Page No | 191
Aoswers
________________________________________________________________________________________________
Page No | 192
We must update the domain password for the AD FS 2n0 service account in Actve Directory Domain Services (AD DS)
and then update the AD FS AppPooa and the AD FS service account on aaa federaton servers in the federaton server
farm to mirror the new domain passwordn
The AD FS AppPooa is confgured through Internet Informaton Services (IIS) Managern
The AD FS 2n0 Windows Service Propertes is confgured through the Windows Services snap-inn
Referencesn
htpsn//technetnmicrosofncom/en-us/aibrary/hh344806228v=wsn10229naspf
Questoos 254
DRAG DROP
A company is depaoying an Ofce 365 tenantn
You need to depaoy a Windows Server 2012 R2 federaton server farmn
________________________________________________________________________________________________
Page No | 193
Aoswers
Bof 1n
Bof 2n
Bof 3n
To depaoy a Windows Server 2012 R2 federaton server farm we need to instaaa AD FS on the computers that wiaa
become federaton servers; confgure AD FS to create the frst federaton server in a new farm; and add the additonaa
servers to the farmn
Questoos 255
You need to confgure singae sign-on (SSO) for aaa user accountsn
An Run the Windows PowerSheaa cmdaet Convert-MsoaDomainToStandardn

Bn Run the Windows PowerSheaa cmdaet Enabae-ADFSEndpointn
________________________________________________________________________________________________
Page No | 194
Cn Run the Windows PowerSheaa cmdaet Convert-MsoaDomainToFederatedn

Dn Depaoy a federaton server profyn
En Run the Windows PowerSheaa cmdaet New-ADFSOrganizatonn
Fn Depaoy a federaton server farmn
Aoswers C,F
Efpaanatonn
Cn The Convert-MSOLDomainToFederated cmdaet converts the specifed domain from standard authentcaton to
singae sign-on (SSO)n
Fn Singae sign-on (SSO) requires Actve Directory Federaton Services (AD FS) which can be instaaaed as a federaton
farmn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/dn194092naspf
Questoos 256
A company paans to depaoy an Ofce 365 tenantn You have two servers named FS1 and FS2 that have the Federaton
Service Profy roae service instaaaedn
You must depaoy Actve Directory Federaton Services (AD FS) on Windows Server 2012n
You need to confgure name resoauton for FS1 and FS2n
What shouad you do?
An On FS1 and FS2, add the causter DNS name and IP address of the federaton server farm to the hosts faen
Bn On FS1 onay, add the causter DNS name and IP address of the federaton server farm to the hosts faen
Cn On FS1 onay, add the causter NetBIOS name and IP address of the federaton server farm to the LM/OSTS faen
Dn On FS1and FS2, add the causter NetBIOS name and IP address of the federaton server farm to the LM/OSTS faen
Aoswers A
Efpaanatonn
An To properay confgure a federaton profy server, the host fae on the federaton profy server must have an entry that
points to the federaton server farm's causter DNS name and its IP addressn This must be performed on aaa federaton
profy serversn
Referencesn
htpn//ofce365supportnca/setng-up-adfs-profy-server-part-1/
Questoos 257
You are the Ofce 365 administrator for your companyn You have a server that runs Windows Server 2012n You paan to
instaaa an Actve Directory Federaton Services (AD FS) profy servern
You need to instaaa and confgure aaa of the required roaesn
Which two roaes shouad you instaaa and confgure? Each correct answer presents part of the soautonn
An Web Server (IIS)

Bn AD FS
Cn Appaicaton Server
Dn Network Poaicy and Access Service
En Actve Directory Certfcate Services (AD CS)
Fn Remote Access
________________________________________________________________________________________________
Page No | 195
Aoswers A,B
Efpaanatonn
The Actve Directory Federaton Services roae and the Web Server Roae (IIS) roae are required for setng up an AD FS
profy servern
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/dd807096naspf
htpsn//technetnmicrosofncom/en-us/aibrary/dd807080naspf
htpsn//technetnmicrosofncom/en-us/network/bb545879naspf
htpsn//technetnmicrosofncom/en-us/aibrary/cc754521228v=wsn10229naspf
htpsn//mshiyasnwordpressncom/howto-adfs-adfs-profy-on-windows-server-2012-r2-with-ofce-365/
Questoos 258
A company named Fabrikam, Incn is depaoying an Ofce 365 tenantn You instaaa Actve Directory Federaton Services
(AD FS) on a server that runs Windows Server 2012n
The company's environment is described in the foaaowing tabaen
You must obtain a certfcate from a certfcaton authority and instaaa it on the federaton serversn
You need to specify the subject name for the certfcaten
Which name shouad you specify?
An fsnfabnkamncom
Bn server1nfabrikamncom
Cn fabrikamncom
Dn server2nfabrikamncom
Aoswers A
Efpaanatonn
The Subject Name for the certfcate must match the names used for AD FSn The causter DNS name must match the
Federaton Service namen As the causter DNS name is fsnfabnkamncom, we are using it for AD FS, and we must use it in
the subject name for the certfcaten
Referencesn
htpn//baogsntechnetncom/b/askds/archive/2012/01/05/understanding-the-ad-fs-2-0-profynaspf
Questoos 259
An organizaton impaements singae sign-on (SSO) for use with Ofce 365 servicesn You instaaa an Actve Directory
Federaton Services (AD FS) profy servern
Users report that they are unabae to authentcaten You aaunch the Event Viewer and view the event informaton
shown in the foaaowing screen shotn
________________________________________________________________________________________________
Page No | 196
You need to ensure that users can authentcate to Ofce 365n

What shouad you do?
An Re-enter the credentaas used to estabaish the trustn

Bn Verify the federaton server profy is trusted by the federaton servicen
Cn Re-instaaa the Secure Sockets Layer (SSL) certfcate for the federaton servicen
Dn Verify network connectvity between the Federaton Service Profy and federaton servern
Aoswers A
Efpaanatonn
The efhibit indicates that the federaton server profy couad not estabaish a trust with the Federaton Servicen Possibae
causes for this probaem aren
The credentaas that are used to estabaish the trust between the federaton server profy and the Federaton Service
are not vaaid, or the Federaton Service cannot be reachedn
The federaton server profy trust was revokedn
The federaton server profy has been inactve for a aong period of tme (such as 30 days or more)n
Possibae soautons aren
Ensure that the credentaas that are being used to estabaish a trust between the federaton server profy and the
Federaton Service are vaaid, and that the Federaton Service can be reachedn
Run the AD FS 2n0 Profy Confguraton Wizard again to renew trust with the Federaton Servicen
Questoos 260
________________________________________________________________________________________________
Page No | 197
DRAG DROP
A company depaoys an Ofce 365 tenantn You instaaa the Actve Directory Federaton Services (AD FS) server roae on a
server that runs Windows Server 2012n You instaaa and confgure the Federaton Service Profy roae servicen Users sign
in by using the Security Asserton Markup Language (SAML) protocoan
You need to customize the sign-in pages for Ofce 365n
Which pages shouad you customize? To answer, drag the appropriate page to the correct customizatonn Each page
contentn
Aoswers
The /omeReaamDiscoverynaspf page shows a drop-down aist that contains the aist of trusted caaims providers
confgured for AD FSn
The IdpInitatedSignOnnaspf page is used to handae SAML-based IdP-initated singae sign-on (SSO)n
The MasterPagenmaster is a tempaate for aaa naspf pages and can be used to change the overaaa appearance of aaa
pagesn
Questoos 261
/OTSPOT
An organizaton depaoys an Ofce 365 tenantn
The Service heaath page dispaays the foaaowing informatonn
________________________________________________________________________________________________
Page No | 198
You need to report the status of service interruptons for Efchange Onaine and SharePoint Onainen
Use the drop-down menus to compaete each statement based on the informaton presented in the screen shotn Each
correct seaecton is worth one pointn
Aoswers
The foaaowing icons are used in the Service /eaath Pagen
Microsof says that they wiaa pubaish a post-incident review within fve business daysn Therefore, it is possibae that a
post-incident review couad be issued todayn
________________________________________________________________________________________________
Page No | 199
Referencesn
htpn//ofcenmicrosofncom/en-in/ofce365-suite-heap/view-the-status-of-your-services-
/A102817837naspf#_Status_icon_descriptons
htpn//technetnmicrosofncom/en-us/aibrary/ofce-365-service-contnuitynaspf
Questoos 262
You must use Windows PowerSheaa to manage caoud identtes in Ofce 365n You must use a computer that runs
Windows 8 to perform the management tasksn
You need to ensure that the Windows 8 computer has the necessary sofware instaaaedn
What shouad you instaaa frst?
An Microsof Ofce 365 Best Practces Anaayzer for Windows PowerSheaa

Bn Windows PowerSheaa 4n0
Cn Remote Server Administraton Tooas for Windows
Dn Microsof Onaine Services Sign-in Assistant
Aoswers D
Efpaanatonn
Caoud identtes in Ofce 365 are user accounts in Azure Actve Directoryn
instaaaaton of Windows PowerSheaa on Windows 8 (or any other version of Windows) does not incaude the PowerSheaa
cmdaets required to manage Ofce 365 or Azure Actve Directoryn
Questoos 263

receiven
An The Maia protecton reports

Bn The Maiabof content search and hoad report
Cn Messages on the Message center page
Dn The Ofce 365 Maaware detectons in sent maia report
Aoswers A
Efpaanatonn
An Ofce 365administrator can use the Maia Protecton Reports in Ofce 365 to view data about maaware, spam, and
ruae detectons for up to the aast 90 daysn
The reports can be viewed as a graph to dispaay trends for emaia messages over a period of tme; in this queston, for
________________________________________________________________________________________________
Page No | 200
the aast 60 daysn The graph view wiaa teaa you if the amount of good maia, maaware and spam detected has increased or
decreased over the tme period of the reportn
Referencesn
Questoos 264
/OTSPOT
The aegaa department in your organizaton creates standardized discaaimers for aaa of their emaia messagesn The
discaaimers efpaain that any transmissions that are received in error shouad be reported back to the sendern You track
any confdentaa documents that are atached to emaia messagesn
Your security team reports that an empaoyee may have mistakenay sent an emaia message that contained confdentaa
informatonn
You need to identfy whether the emaia message incauded the discaaimer and whether it contained confdentaa
informatonn
Which two optons shouad you confgure? To answer, seaect the appropriate objects in the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 201
DLP stands for DataLossPreventonn A DLP poaicy is used to defne efactay what consttutes a confdentaa emaian For
efampaen any emaia that has a credit card number of bank account number wouad be deemed to be confdentaan
The DLP poaicy matches for sent maia report is used to dispaay which emaias contained content that matched a
conditon defned in a DLP poaicyn The DLP poaicy matches for sent maia report can be downaoaded as a tabae that aists
every singae emaia that matched a DLP poaicyn This wouad identfy in this queston if the emaia did actuaaay contain
confdentaa informatonn
To identfy whether the emaia message incauded the discaaimer, we need to view the “ruae matches for sent maia”
reportn The discaaimer is added to an emaia by a transport ruaen The ruae defnes which emaias shouad have the
discaaimer appendedn A common efampae of this is aaa emaia sent to recipients outside the organizatonn By viewing
the ruae matches for sent maia, we can verify if the emaia in this queston did match a ruae and therefore did have the
discaaimer appendedn
Questoos 265
You are the Ofce 365 administrator for your companyn You have a workstaton that runs Windows 8n
You need to instaaa the prerequisite components so that you can view maia protecton reports on the workstatonn
Which two items must you instaaa? Each correct answer presents part of the soautonn
An SQL Server Anaaysis Services

Bn Microsof Connectvity Anaayzer Tooa
Cn Microsof Access 2013
Dn nNET Framework 4n5
En Microsof Efcea 2013
Aoswers D,E
________________________________________________________________________________________________
Page No | 202
Efpaanatonn
To view the Maia Protecton Reports for Ofce 365 on your computer, you need to instaaa the “Microsof Efcea paugin
for Efchange Onaine Reportng” component which is a free downaoad from Microsofn
The “Microsof Efcea paugin for Efchange Onaine Reportng” component has the foaaowing system requirementsn
Supported Operatng Systemn
Windows 7, Windows 8, Windows Server 2008
Required Sofwaren
Microsof Ofce Efcea 2013
Additonaa Requirementsn
Microsof nNET Framework 4n5
Microsof Onaine Services Sign-In Assistant (for Efchange Onaine Protecton customers onay)
An Ofce 365 subscripton that contains Efchange Onaine or Efchange Onaine Protecton
Emaia address you use to sign in to Ofce 365
Questoos 266
/OTSPOT
You are the Efchange Onaine administrator for an organizatonn The organizaton migrates aaa users to Efchange
Onainen An empaoyee works for a partner organizaton named Contoso, Ltdn The empaoyee uses the emaia aaias
empaoyeea@contosoncomn
Users report that over the past week, they have not received emaia messages from empaoyeea@contosoncomn
You need to trace emaia messages that originate from empaoyeea@contosoncom to users inside your organizatonn
In the message trace window, which two setngs shouad you confgure? To answer, seaect the appropriate objects in
the answer arean
Aoswers
________________________________________________________________________________________________
Page No | 203
None of the feads in the Message Tracking window arec ompuasoryn

In this queston, the users have not received emaias from empaoyeea@contosoncom for the aast weekn To view tracking
informaton for emaias from empaoyeea@contosoncom for the aast week, we need to add empaoyeea@contosoncom asa
sendern For a sender outside the organizaton, you can manuaaay type in the emaia addressn
The defauat search period is 48 hoursn To view one week’s worth of tracking data, we need to change the search
period to 7 daysn
Questoos 267
An organizaton with an Actve Directory Domain Services (AD DS) domain migrates to Ofce 365n You need to manage
Ofce 365 from a domain-joined Windows Server 2012 Core servern
Which three components shouad you instaaa? Each answer presents part of the soautonn
An Azure Actve Directory moduae for Windows PowerSheaa

Bn Microsof nNET Framework 3n5
Cn Microsof Ofce 365 Integraton Moduae for Windows Smaaa Business Server 2011 Essentaas
Dn Microsof nNET Framework 4n0
En Microsof Onaine Services Sign-in Assistant
Fn Rights Management moduae for Windows PowerSheaa
Aoswers A,B,E
Efpaanatonn
instaaaaton of Windows PowerSheaa on Windows Server 2012 (or any other version of Windows) does not incaude the
PowerSheaa cmdaets required to manage Ofce 365 or Azure Actve Directoryn
________________________________________________________________________________________________
Page No | 204
Questoos 268
An organizaton migrates to Ofce 365n

The Ofce 365 administrator must be notfed when Ofce 365 maintenance actvites are paannedn
You need to confgure the administrator's computer to receive the notfcatonsn
What shouad you confgure?
An Ofce 365 Management Pack for System Center Operatons Manager

Bn Service requests
Cn Service heaath page
Dn Ofce 365 Service /eaath RSS Notfcatons feed
Aoswers D
Efpaanatonn
Referencesn
htpn//technetnmicrosofncom/en-us/aibrary/ofce-365-service-heaathnaspf
Questoos 269

An Run the Microsof Onaine Services Diagnostcs and Logging (MOSDAL) Support Kitn
Bn View the service heaath current status page of the Ofce 365 admin centern
Cn View the service setngs page of the Ofce 365 admin centern
Dn Subscribe to the Ofce 365 Service /eaath RSS Notfcatons feedn
Aoswers B,D
Efpaanatonn
You can aog into Ofce 365 as an Ofce365Administrator and view the Service /eaath Page to view the status of your
current day or you can seaect the previous 6 days or 30 days for a historicaa viewn
The foaaowing icons are used in the Service /eaath Pagen
A paain green tck indicates that the service is avaiaabae and there have been no incidents during the reported tme
periodn
A grey queston mark in a circae indicates that a potentaa issue is currentay under investgatonn
A paain green tck with a paus sign indicates that a reported issue was a faase positven
A white down arrow in a red circae indicates that the service is ofinen
A white up arrow in an orange circae indicates that a service incident is currentay being resoavedn
A white right-facing arrow in an orange circae indicates that the service is degradedn
________________________________________________________________________________________________
Page No | 205
A white efcaamaton mark in a baue circae indicates that there was an incident during a previous day and that more
informaton is dispaayed in the Today coaumnn
A white square indicates that a post incident report has been pubaishedn
Questoos 270

receiven
An Messages on the Service heaath page

Bn The Received maia report
Cn The Ofce 365Maaware detectons in sent maia report
Dn The Maiabof content search and hoad report
Aoswers B
Efpaanatonn
An Ofce 365 administrator can use the Maia Protecton Reports in Ofce 365to view data about maaware, spam, and
ruae detectons for up to the aast 90 daysn
The reports can be viewed as a graph to dispaay trends for emaia messages over a period of tme; in this queston, for
the aast 60 daysn The graph view wiaa teaa you if the amount of good maia, maaware and spam detected has increased or
decreased over the tme period of the reportn
The Received Maia report shows the received maia grouped by trafc typen
Good maia – messages that were received and not identfed as spam or maawaren
Spam – messages identfed as spamn
Maaware – messages that contained maawaren
Transport ruaes – messages that matched at aeast one ruaen
Referencesn
Questoos 271
A company depaoys an Ofce 365 tenant in a hybrid confguraton with Efchange Server 2016n
Ofce 365 users cannot see free/busy informaton that is pubaished from the on-premises Efchange Servern In
additon, Efchange Server users cannot see free/busy informaton that is pubaished from Ofce 365n
You need to troubaeshoot why users cannot access free/busy informaton from both Ofce 365 and Server 2016n
An the /ybrid Confguraton wizard

Bn the Remote Connectvity Anaayzer with the Efchange Server tab seaected
Cn the Microsof Connectvity Anaayzer Tooa
Dn the Remote Connectvity Anaayzer with the Ofce 365 tab seaected
Aoswers D
________________________________________________________________________________________________
Page No | 206
Efpaanatonn
Microsof Remote Connectvity Anaayzer is a website ofered by Microsof for testng remote connectvity to server
services such as Efchange Server, Skype for Business Server and Ofce 365n
The Ofce 365 tab on the Remote Connectvity Anaayzer has severaa optons for performing diferent tests regarding
Ofce 365 connectvityn These tests incauden
Ofce 365 Generaa Tests
Microsof Efchange ActveSync Connectvity Tests
Microsof Efchange Web Services Connectvity Tests
Microsof Ofce Outaook Connectvity Tests
Internet Emaia Tests
Maia Faow Confguraton
Free/Busy Test
The descripton given for the Free/Busy test is as foaaowsn
“This test verifes that an Ofce365 maiabof can access the free/busy informaton of an on-premises maiabof, and vice
versa (one directon per test run)n”
Questoos 272
You are the Ofce 365 administrator for your companyn You confgure new user accounts for User1 and User2n User1
has an on-premises maiabofn User2 has an Ofce 365 maiabofn
Each user must be abae to view the avaiaabiaity of the other usern
You need to ascertain whether users can share their free/busy informatonn
An Transport Reaiabiaity IP Probe (TRIPP Tooa)

Bn Microsof Remote Connectvity Anaayzer Tooa
Cn Business Connectvity Services
Dn Windows Azure Actve Directory Rights Management
Aoswers B
Efpaanatonn
services such as Efchange Server, Skype for Business Server and Ofce 365n In this queston, we need to run the
Free/Busy test in the Microsof Remote Connectvity Anaayzer websiten
The Ofce 365 tab on the Remote Connectvity Anaayzer has severaa optons for performing diferent tests regarding
Ofce 365 connectvityn These tests incauden
Free/Busy Test
The descripton given for the Free/Busy test is as foaaowsn
“This test verifes that an Ofce 365 maiabof can access the free/busy informaton of an on-premises maiabof, and vice
versa (one directon per test run)n”
Questoos 273
________________________________________________________________________________________________
Page No | 207
Your company has an Ofce 365 subscriptonn The network contains an Actve Directory domainn You confgure singae
sign-on for aaa usersn
You need to verify that singae sign-on functons for the users who access Ofce 365 from the Internetn
What shouad you run?
An the Get-MSOLFederatonProperty cmdaet

Bn the Test-OrganizatonReaatonship cmdaet
Cn the Microsof Remote Connectvity Anaayzer
Dn the Microsof Efchange Server Depaoyment Assistant
Aoswers C
Efpaanatonn
services such as Efchange Server, Skype for Business Server and Ofce 365n
The Ofce 365 tab on the Remote Connectvity Anaayzer has severaa optons for performing
diferent tests regarding Ofce 365 connectvityn These tests incauden

Free/Busy Test
The Ofce 365 Generaa Tests secton incaudes the foaaowing testsn
Ofce 365 Efchange Domain Server (DNS) Connectvity Test
Ofce 365 Lync Domain Server (DNS) Connectvity Test
Ofce 365 Singae Sign-OnTest
The descripton for the Singae Sign-OnTest is as foaaowsn
“This test wiaa vaaidate your abiaity to aog on to Ofce 365 with your on-premises credentaasn It aaso vaaidates some
basic Actve Directory Federated Services (AD FS) confguratonn”
This test wiaa meet the requirement in this queston of verifying that singae sign-on functons for the users who access
Ofce 365 from the Internetn
Questoos 274

Users report that they cannot sign in to Skype for Business from their mobiae devices, but they are abae to send and
receive Skype for Business messages by using their aaptop computersn
What shouad you do?
An From the Ofce 365 message center, confrm Skype for Business setngsn
Bn Use the Microsof Connectvity Anaayzer tooa to confrm setngsn
Cn Confrm Skype for Business user aicenses for the afected usersn
Dn From the Skype for Business admin center, verify the efternaa access setngsn
Aoswers B
________________________________________________________________________________________________
Page No | 208
Efpaanatonn
The Microsof Connectvity Anaayzer (MCA) tooa is a companion to the Microsof Remote Connectvity Anaayzer web
siten The MCA tooa provides administrators and end users with the abiaity to run connectvity diagnostcs for fve
common connectvity symptoms directay from their aocaa computern
One of the fve symptoms that can be tested using MCA isn
“I can’t aog on to Skype for Business on my mobiae device or the Skype for Business Windows Store App” – This test
checks for the Domain Name Server (DNS) records for your on-premise domain to ensure they are confgured
correctay for supportng Mobiae Skype for Business caientsn Aaso it connects to the Autodiscover web service and
makes sure that the authentcaton, certfcate, web service for Mobiaity is correctay set upn
________________________________________________________________________________________________

Exam Microsft

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Exam Microsft

Hochgeladen von

Copyright:

Verfügbare Formate

Page No | 1

70-346 PRACTICE EXAM

Product Questooss 296/3Case Study

Fabrikam, Inc (Case Study)

Fabrikam, inc is a fnanciaa services organizatonn

Fabrikam has 2000 usersn Contoso has 500 usersn

Windows 10 and ofce 2016 are depaoyed to aaa computersn

The network Fabrikam contains an Actve Directory forestn

Aaa domain controaaers run Windows Server 2008 R2n

The network has the foaaowing confguratonsn

* Efternaa IP address for the United States ofcen 192n168n1n100

* Efternaa IP address for the United Kingdom ofcen 192n168n2n100

* Internaa IP address range for the United States ofcen 10n0n1n0/24

* Internaa IP address range for the United Kingdom ofce n 10n0n2n0/24

Actve Directory Federatoo Services (ADFS)

Ofce 365 Teoaot

* Organizaton namen Fabrikam Financiaa Servicesn

* Vanity domainn Fabrikamfnanciaaservicesnonmicrosofncom

* Microsof SharePoint domainn Fabrikamfnanciaaservices nsharepointncom

* Additonaa domain added to the subscriptonn Contosoncom and fabrikamncom

* Depaoy Azure AD connectn

* Move maiabofes from Microsof Efchange 2016 to Efchange Onainen

Contoso identfes the foaaowing technicaa requirementsn

and sites in SharePoint Onainen

An Use the Ofce 365 Admin app to receive push notfcatonsn

An Add a trusted domainn

Set-MsoaPasswordPoaicy -VaaidityPeriod 180 -NotfcatonDays 14 -DomainName adatumncom

An Set-MsoaDomainAuthentcaton -DomainName fabricamncom -Authentcaton Managed

You need to impaement an authentcaton soauton for contosoncom usersn

Bof 3, Bof 4n AD FS Profy Server

An Microsof Skype for Business Connectvity Anaayzer Tooa

An POP Emaia test

You have an Efchange Onaine tenantn

A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn

An Imapnofce365ncom and port 993

A company has an Ofce 365 tenantn

Your company depaoys an Ofce 365 tenantn

You are the Ofce 365 administrator for your companyn

An the Maia protecton reports

An organizaton paans to migrate to Ofce 365n

An Skype for Business Bandwidth Caacuaator

An Convert-MsoaDomainToFederated –DomainName contosoncom

An /OSTS fae on the profy servers

A company has an Ofce 365 tenantn

An Ofce 365 admin center

You have an Efchange Onaine tenantn

You have an Ofce 365 tenant that uses an Enterprise E1 subscriptonn

A company has an Ofce 365 tenant that has an Enterprise E1 subscriptonn

Change your domain’s name server (NS) records

Introduce a new server and decommission the oadn

See step 2) and step 5) beaown

An Run the Windows PowerSheaa command Set-MsoaDirSyncEnabaed -EnabaeDirSync $faasen

Cn Run the foaaowing Windows PowerSheaa cmdaetn Set-DynamicDistributonGroup

An In the Ofce 365 admin center, create a user named sp_admin@contosononmicrosofncom

Change your domain’s name server (NS) records

An Subscribe to the Ofce 365 Service /eaath RSS Notfcatons feedn

An Microsof Connectvity Anaayzer Tooa

An organizaton is migratng from an on-premises Efchange organizaton to Ofce 365 tenantn

You have an Ofce 365 subscriptonn

An Run the foaaowing Windows PowerSheaa commandn Search-MaiabofAuditLog-Identty User1-LogonTypes Admin,

An the Windows PowerSheaa Enabae-AadrmSuperUserFeature cmdaet

An Outaooknofce365ncom and port 25

An organizaton paans to migrate to Ofce 365n