MS 100

How many SPF records can an organization have per domain? A) 1 B) 2 C) 3 or more D) Unlimited

A) 1

How often do user need to connect to the internet to automatically validate their MS 365 license? A) 30 days B) 60 days C) 90 days

A) 30 days

You're the Microsoft 365 Administrator for Contoso, which has purchased a Microsoft 365 Apps for enterprise subscription. You're planning for each user to have a single Microsoft 365 Apps for enterprise license. You're also allowing each user to install Microsoft 365 Apps for enterprise on their personal computers. How many devices can each user deploy it on? A) 2 B) 5 C) 8

B) 5

What's required to start a Power Automate flow? A) An action B) A trigger C) A template

B) A trigger

Put the five steps for creating a bot in order: A) Analyze the performance of your bot B) Create the bot C) Test the bot D) Create a topic (conversation) for a bot E) Publish the bot

B) Create the bot D) Create a topic (conversation) for a bot C) Test the bot E) Publish the bot A) Analyze the performance of your bot

During which of the following migration types is it important to change the DNS MX record before an organization completes its final synchronization run? A) Full or Minimal Hybrid migration B) Cutover migration C) IMAP migration

B) Cutover migration

As the Enterprise Administrator for Contoso, you want to implement a protocol that connects Outlook to Exchange Online in Microsoft 365. Which of the following protocols should you use? A) RPC/HTTP B) MAPI/HTTP C) RPC/TCP

B) MAPI/HTTP

What provides app risk information? A) App governance B) Azure AD C) Microsoft Defender for Cloud Apps

C) Microsoft Defender for Cloud Apps

Each domain (with any attendant subdomains) can be validated to how many Microsoft 365 tenant accounts? A) One B) Two C) Three D) Unlimited

A) One

You create a Microsoft 365 Enterprise Premium subscription. You run the following PowerShell cmdlet: Get-MsolAccountSku | Select-Object ActiveUnits The cmdlet returns the number 0. What does this mean? A) There is no more licenses available to be assigned to users B) The enterprise premium subscription is not available C) There are no licenses assigned to users D) There are no users in the MS 365 tenant that have permission to use a license

A) There is no more licenses available to be assigned to users

During installation of Azure AD Connect, you can choose the Customized Settings option. When do companies typically use this option? A) When their users sign in with AD FS B) When they have a single Active Directory forest C) When they want to use the default setup option for Azure AD Connect

A) When their users sign in with AD FS

What permission model is the administrator roles in Microsoft 365 based upon? A) Microsoft 365 Rules-based Assessment Control B) Azure Role-Based Access Control C) Windows Role-based permissions model

B) Azure Role-Based Access Control

What is the PowerShell command to configure a malware rule that applies a policy to users, groups or domains for Exchange Online? A) New-MalwareFilterPolicy B) New-MalwareFilterRule C) New-MalwareFilter D) Set-MalwareFilter

B) New-MalwareFilterRule

The Consent Framework is built on what type of authentication? A) NTLM B) Oauth 2.0 C) Kerberos

B) Oauth 2.0

What kind of authentication synchronization does Microsoft recommend? A) Pass-through authentication (PTA) B) Password hash synchronization (PHS) C) Federated authentication

B) Password hash synchronization (PHS)

When an organization monitors its service health, what status indicates a service isn't functioning, and its users can't access the service? A) Investigating B) Service interruption C) Service degradation

B) Service interruption

Which of the following descriptions applies to a Severity B service issue? A) The issue affects multiple users or services B) The situation's business impact is moderate and the organization can handle it during business hours C) The issue is important but doesn't have a significant current service or productivity impact for the customer

B) The situation's business impact is moderate and the organization can handle it during business hours

Which deployment planning checklist item is for the following: Use the tools and guidance provided by Microsoft to resolve any situations that might occur in the following areas: Clean up Active Directory accounts. Get your data ready for a migration. Get your network ready. Update client software versions. If you have Active Directory Rights Management Services, prepare your environment. A) Determine your Deployment Goals B) Inventory your current environment and make key deployment decisions C) Fix potential deployment blockers D) Set up Microsoft 365 services to work for your organization

C) Fix potential deployment blockers

Which record for Exchange online is a requirement for Sender Policy Framework (SPF) anti-spam protection and for organizations that use federation. A) MX B) CNAME C) TXT

C) TXT

What are the size limitations of an IMAP migration A) 50 MB and unlimited items B) 1 GB and unlimited items C) 50 MB and 500,000 items D) 35 MB and 500,000 items

D) 35 MB and 500,000 items

The BLANK in the Azure AD Connect Synchronization Service Manager can be used to troubleshoot data-related problems. In the top half of the tab, a search query can be created based on a combination of attributes, such as the proxy address conflict in the previous example. The attribute properties of the affected objects will then be displayed. A) IDfixtool B) DirSync Status C) Directory Sync Status D) Metaverse Search Tab

D) Metaverse Search Tab

Put the 5 deployment planning checklist items in order A) Inventory your current environment and make key deployment decisions B) Roll out to users C) Setup MS 365 services to work for your organization D) Fix potential deployment blockers E) Determine your deployment goals

E) Determine your deployment goals A) Inventory your current environment and make key deployment decisions D) Fix potential deployment blockers C) Setup MS 365 services to work for your organization B) Roll out to users

Microsoft Adoption Score is on by default A) True B) False

False

You manage an Exchange Server 2016 and you are preparing for a hybrid deployment. You need to determine which authorization method you can use based on each scenario. 1. SMTP mail flow between MS 365/Office 365 and on premises Exchange 2. Autodiscover, Free/busy and multi mailbox search 3. Mailbox migrations (EWS) A) Certificate based B) WS Security authentication C) Basic

1. A 2. B 3 C

You plan to use the reports section in MS 365 admin center. You need to determine the scenarios for which you should use usage reports in the admin center. 1. You can use usage reports to determine the number of times that Exchange Online has been down in the past 30 days (Yes/No) 2. You can use usage reports to determine which apps users are using to access Exchange Online (Yes/No) 3. You can use usage reports to identify the most commonly used MS 365 services (Yes/No)

1. No 2. Yes 3. Yes

You manage a MS 365 tenant for your company. You consider assigning a user the user admin role. You need to determine the functions the user can perform. 1. User administrators can update password expiration policies (Yes/No) 2. User administrators can reset admin passwords (Yes/No) 3. User admins can create groups (Yes/No)

1. Yes 2. No 3. Yes

Your company has an on premises Exchange server, and it also uses Exchange Online. A user, named Userl has their mailbox within the on premises Exchange server, and they want to be able to send emails as another user named User2 who has their mailbox w1th1n Exchange Online. You need to meet User1's request using PowerShell cmdlets. Which two cmdlets should you use A) Add-ADPermission B) Set-MsolUser C) Add-RecipientPermission D) Get-Mailboxfolderpermission

A) Add-ADPermission C) Add-RecipientPermission

You're the Enterprise Administrator for Tailspin Toys. When a member of the Sales team recently left the company, you removed the Office 365 E3 license from the user's Microsoft 365 account. What will happen to any service data associated with that user? A) Any service data associated with that user is soft-deleted. However, you have a 30-day grace period in which you can recover the data before it gets permanently deleted B) Any service data associated with that user is soft-deleted. However, you can recover the data anytime after the data is deleted C) Any service data associated with that user is permanently deleted and can't be recovered

A) Any service data associated with that user is soft-deleted. However, you have a 30-day grace period in which you can recover the data before it gets permanently deleted

What provides detailed information about an app's activity at the API level? A) App governance B) Azure AD C) Microsoft Defender for Cloud Apps

A) App governance

Which Microsoft 365 Business subscription is the following: -Get desktop versions of Office apps: Outlook, Word, Excel, PowerPoint, OneNote (plus Access and Publisher for PC only). -Store and share files with 1 TB of OneDrive cloud storage per user. -Use one license to cover fully installed Office apps on five mobile devices, five tablets, and five PCs or Macs per user. -Automatically update your apps with new features and capabilities every month. A) Apps for Business B) Business Basic C) Business Standard D) Business Premium

A) Apps for Business

BLANK allows organizations to balance their need for security and employee productivity with the right processes and visibility. It provides capabilities to ensure the right people have the right access to the right resources. A) Azure AD Identity Governance B) Azure AD entitlement management C) Conditional Access

A) Azure AD Identity Governance

What Azure service enables organizations to detect potential vulnerabilities affecting its identities. In turn, they can respond to those vulnerabilities by configuring automated responses through conditional access policies to low, medium, and high sign-in risk and user risk.

A) Azure AD Identity Protection

What data is migrated when you do an IMAP migration A) Email data B) Contacts C) Calendar items D) Tasks

A) Email data

As Lucerne Publishing's Enterprise Administrator, Holly Spencer is interested in having Lucerne's users create canvas apps. Which of the following controls should they use to display records from a table of data? A) Gallery control B) Forms control C) Input controls

A) Gallery control

In a hybrid Exchange deploy, what tool supports both classic and modern hybrid topologies? A) Hybrid Configuration Wizard (HCW) B) Migration Manager C) Exchange Migration Tool

A) Hybrid Configuration Wizard (HCW)

As the Enterprise Administrator for Lucerne Publishing, you're trying to decide which migration option to use. Lucerne wants to keep its on-premises Exchange servers. Based on this requirement, which of the following migration options should you recommend? A) Hybrid configuration B) Staged migration C) Cutover migration

A) Hybrid configuration

What kind of email migration would you do for an email service such as Gmail or Yahoo? A) IMAP migration B) PST file migration C) Exchange migration D) Express migration

A) IMAP migration

What service does the following: Microsoft continually scans the Internet for user and password lists that bad actors sell and make available on the dark web. Azure AD can use this information to verify whether any of the usernames and passwords in your organization are compromised. So it's critical to enable password hash synchronization no matter what authentication method you use, whether that's Federated with ADFS or PTA. Leaked credentials are presented as a report. Use this information to block or force users to change their passwords when they try to sign in with leaked passwords. A) Identity protection B) Azure Information Protection C) Microsoft Defender

A) Identity protection

Which type of flows are triggered manually as needed? A) Instant flows B) Scheduled flows C) Automated flows

A) Instant flows

Which of the following default permission levels in SharePoint Online enables users to access shared resources and a specific asset? A) Limited Access B) Contribute C) Edit

A) Limited Access

You're the Enterprise Administrator for Contoso, which is planning to install Azure AD Connect. Which of the following permissions is required to install Azure AD Connect on a domain joined computer and successfully synchronize your directory to Microsoft 365? A) Local administrator permissions on the Azure AD Connect computer B) A Domain Admin account for your on-premises Active Directory C) A Domain User account for your on-premises Active Directory

A) Local administrator permissions on the Azure AD Connect computer

You manage an MS 365 tenant. A user is experience a technical issue. You need to create a service request. Which two tools can you use? A) MS 365 admin center B) MS 365 Admin app C) PowerShell D) Azure CLI D) Office 365 CLI

A) MS 365 admin center B) MS 365 Admin app

Which record for Exchange online is a requirement for SMTP communication between Exchange Online in Microsoft 365 and mail servers on the Internet. A) MX B) CNAME C) TXT

A) MX

BLANK provide an easy way for mail servers to know where to send email. You can think of it as a type of postal address. If you want Microsoft 365 to receive all email addressed to [email protected], the BLANK for contoso.com should point to Microsoft 365. A) MX Record B) SPF Record C) DKIM D) DMARC

A) MX Record

As the Enterprise Administrator for Tailspin Toys, you're planning your Microsoft 365 deployment. For your mail system, you plan to configure a hybrid Exchange environment. You want to document what the Exchange features will be like both before and after the hybrid deployment. Which of the following scenarios will result after configuring your hybrid deployment? A) Mailboxes will be on-premises and in Microsoft 365 B) On-premises Mailbox servers receive all Outlook on the web requests and displays mailbox information C) Free/busy sharing between on-premises users only

A) Mailboxes will be on-premises and in Microsoft 365

What type of filtering protects user mailboxes against infected messages. EOP uses multiple industry-leading detection engines to scan incoming and outgoing mail, with these engines being updated as new virus definitions appear. A) Malware filtering B) Spam filtering C) Connection filtering

A) Malware filtering

What has insight into what permissions an app has as well as which user granted these apps access to their O365 accounts? A) Microsoft Defender for cloud Apps B) Microsoft Apps Admin Center C) Microsoft Integrated Apps Center

A) Microsoft Defender for cloud Apps

As the Enterprise Administrator for Lucerne Publishing, Patti Fernandez is interested in using Power Virtual Agents to create chatbots. Patti wants to use advanced concepts, such as entities and variables, but only have the chatbots available internally. Which version of Power Virtual Agents should Patti use? A) Microsoft Teams app B) Web app C) Power Premium app

A) Microsoft Teams app

Where are the two places you can assign admin roles? A) Microsoft admin center B) PowerShell C) Exchange admin center D) Azure

A) Microsoft admin center B) PowerShell

Which of the following Microsoft Power Platform products enables users to create automated workflows between applications and services? A) Power Automate B) Power Apps C) Power BI

A) Power Automate

The BLANK is a free application that users can install on their local computers that lets them connect to, transform, and visualize their data. With it, users can connect to multiple sources of data and combine them (often called modeling) into a data model. This data model is used to build visuals and collections of visuals that can be shared as reports with other people inside their organization. A) Power BI Desktop B) Power BI Service C) Power BI Mobile Apps

A) Power BI Desktop

Changing your authentication method requires planning, testing, and potentially downtime. BLANK is a great way to test users migration from federation to cloud authentication.

A) Staged rollout

What are the two primary components of Azure AD Connect Sync: A) Synchronization services B) AD FS C) Synchronization agent D) Azure AD Connect Health

A) Synchronization services D) Azure AD Connect Health

Query data for Microsoft Viva Insights can be outputted as which of the following two A) csv B) xml C) OData link D) xlsx

A) csv C) OData link

If a user doesn't have a value for the userPrincipalName attribute for AD Sync, then the user object must contain a valid and unique value for the BLANK attribute. A) sAMAccountName B) Given Name C) Country D) userPrincipalName

A) sAMAccountName

Which of the following attributes must be valid and unique if a user will be AD Syncd: A) Display Name B) UserPrincipalName C) Country D) Given Name

B) UserPrincipalName

How many users does Microsoft 365 Business support? A) 100 B) 250 C) 300 D) 500

C) 300

In SharePoint, items are automatically purged from the site collection recycling bin after BLANK days. The timer starts when the item is placed in the local recycle bin. A) 30 B) 60 C) 93 D) 102

C) 93

In SharePoint Online, when is an item automatically purged from the Site Collection Recycle Bin? A) 60 days after the item was placed in the Site Collection Recycle Bin B) 45 days after the item was placed in the Second-stage Recycle Bin C) 93 days after the item was placed in the Local Recycle Bin

C) 93 days after the item was placed in the Local Recycle Bin

Which of the following items describes the eligible admin process? A)The Global Admin must assign an eligible user standing admin access to become an active admin B) An eligible user must sign up to become an active admin for a specific date C) A user with an inactive role must complete an activation process to activate the role for a predetermined amount of time

C) A user with an inactive role must complete an activation process to activate the role for a predetermined amount of time

Which of the following Microsoft Power Platform components enables users to predict outcomes to help improve business performance without writing code? A) Connectors B) Dataverse C) AI Builder

C) AI Builder

As the Enterprise Administrator for Fabrikam, Holly Spencer wants to create a Power BI Dashboard. What's the first step that Holly must complete to create a dashboard? A) Hover over a visual on the report that will be used in the dashboard to reveal the pin icon B) Select whether the visual on the report that will be used to create the dashboard is to be pinned to a new or existing dashboard C) Access a report Holly either owns or has been given edit privileges to

C) Access a report Holly either owns or has been given edit privileges to

Exchange Online uses several anti-spam technologies to minimize incoming spam messages. It scans incoming messages and stores the results in the BLANK that are part of every SMTP message. A) Spam confidence level B) Anti-spam filter C) Anti-spam Message Headers D) Connection filter

C) Anti-spam Message Headers

A user has added a new application. The application's permissions have been updated, the application is running, and the user is about to use it for the first time. What does the application need to obtain from Azure AD's /authorize endpoint before the user can access the application? A) Security token B) Endpoint authorization C) Authorization Code

C) Authorization Code

Contoso employs a hybrid identity model. Azure AD authenticates Contoso's remote users who access Microsoft 365 cloud services. Which of the following services authenticates Contoso's on-premises users who access Microsoft 365 cloud services? A) Active Directory Domain Services B) Azure AD Connect C) Azure Active Directory

C) Azure Active Directory

As the Microsoft 365 Administrator for Fabrikam, you plan to deploy Microsoft 365 Apps for enterprise throughout the organization. The company's guidelines allow each user to deploy it on their own devices. Which of the following issues is a typical obstacle that prevents users from successfully deploying Microsoft 365 Apps for enterprise? A) The user is running Windows Vista B) Time constraints C) Bandwidth limitations

C) Bandwidth limitations

Power BI Desktop supports multiple methods for connecting to data. In which method does Power BI Desktop query the underlying data source whenever a user creates or interacts with a visualization, which ensures the data being viewed is always current? A) Import B) Live Connection C) DirectQuery

C) DirectQuery

What kind of authentication synchronization supports third party authentication such as smartcard authentication? A) Pass-through authentication (PTA) B) Password hash synchronization (PHS) C) Federated authentication

C) Federated authentication

With this authentication method, Azure AD hands off the authentication process to a separate trusted authentication system, to validate the user's password. The authentication system can provide other advanced authentication requirements, such as smartcard-based authentication and third-party multi-factor authentication. A) Azure AD password hash synchronization B) Azure AD Pass-through authentication C) Federated authentication

C) Federated authentication

Which user identity model is deployed on-premises and communicates with AD DS on-premises. As such, Azure AD authorizes user accounts to access resources in Microsoft 365 based on the LDAP policy located on AD DS. Because the on-premises user account is used for authentication, the same password is used for signing in to Microsoft 365 and on-premises AD DS. A) Cloud identity B) Synchronized identity C) Federated identity

C) Federated identity

Which administrator role in Microsoft 365 is the only admin role who can assign other admin roles? A) Enterprise Administrator B) User Management Administrator C) Global Administrator

C) Global Administrator

Which Microsoft 365 provisioning option do companies prefer when they want more administrative versatility and another disaster recovery backup option? A) On-premises B) Cloud C) Hybrid

C) Hybrid

As the Enterprise Administrator for Fabrikam, you're trying to decide which migration option will be the best fit for the company. Fabrikam currently uses a third-party mail system. Given this requirement, which of the following migration options must Fabrikam use? A) Cutover migration B) Staged migration C) IMAP migration

C) IMAP migration

As the Enterprise Administrator for Contoso, Holly Dickson was approached by one of Contoso's users who complained they could not create a specific flow in Power Automate. The flow would schedule an automated daily data upload to SharePoint. Which of the following reasons would be a possible explanation as to why the user was unable to create this flow? A) The user was attempting to create a UI flow B) Automated daily data uploads can only be made to Exchange C) The user doesn't have permission to schedule an automated daily data upload to SharePoint

C) The user doesn't have permission to schedule an automated daily data upload to SharePoint

A BLANK is an Azure AD resource that can be a container for other Azure AD resources. This can contain only users, groups, or devices. It can restrict permissions in a role to any portion of your organization that you define. A) AD Role B) Task C) Privileged role D) Administrative unit

D) Administrative unit

BLANK helps receiving mail systems determine what to do with messages that fail SPF or DKIM checks. By doing so, BLANK provides another level of trust for your email partners. A) MX Record B) SPF Record C) DKIM D) DMARC

D) DMARC

Which of the following is the difference between Contribute and Edit in SharePoint permissions? A) Add and Customize Pages B) Edit Items C) Delete Items D) Manage Lists

D) Manage Lists

Which overall process for creating a tenant account for Microsoft 365 is the following: You have options for a migration if you don't want to move everybody over at once. You can periodically move groups of users to Microsoft 365 and maintain a hybrid environment until such time as all users are migrated. A) Set up accounts and mailboxes. B) Migrate existing data to Microsoft 365. C) Validate functionality. D) Migrate users over a period of time.

D) Migrate users over a period of time.

BLANK is a collection of software services, apps, and connectors that work together to turn your unrelated sources of data into coherent, visually immersive, and interactive insights. A) Power Automate B) Power Apps C) Power Virtual Agents D) Power BI

D) Power BI

Which Microsoft Power Platform product enables anyone to create powerful chatbots using a guided, no-code graphical interface, without the need for data scientists or developers. A) Power Apps B) Power automate C) Power BI D) Power Virtual Agents

D) Power Virtual Agents

Which of the following attributes must be valid and unique if a user will be AD Syncd: A) Display Name B) Given Name C) Country D) ProxyAddresses

D) ProxyAddresses

Many of the SharePoint hybrid features make use of a technique called BLANK. With it, when users attempt to access a service in SharePoint Server using site navigation, they're automatically redirected to the equivalent service in Microsoft 365. A) OneDrive B) Mapped Drives C) Profiles D) Redirection

D) Redirection

True or false - I cannot send an email to a security group.

False. You can.

You use the Microsoft 365 admin center to add a new domain to your subscription. Your company owns the domain name added. You need to configure DNS to support domain verification. Your company manages its own DNS resource records. Solution: You create a TXT resource record to verify that you own the domain. Does this solution meet the goal?

Yes

You use Azure AD Connect Express installation to configure PHS. Your network consists of a single Windows Active Directory (AD) domain and one Azure AD tenant. Your company plans to migrate to pass through authenucat1on (PTA). You use the Azure AD Connect wizard to enable PTA. You install the standalone authentication Agent on two member computers running Windows Server 2016 You need to 1dentify the impact of these changes. 1) Password hashes remain stored on Azure AD (Yes/No) 2. You must configure password writeback to support password changes from the cloud (Yes/No) 3. Automatic failover to PHS is provided by default (Yes/No)

1) Yes 2) Yes 3) No

Your company has a Microsoft 365 subscription and follows the principle of least privilege. You need to assign the appropriate role for a series of tasks 1. Assign a license 2. Unassign a license 3. Buy a license 4 Delete an account A) Billing admin B) License admin C) User admin D) Global admin E) Service support admin

1. B 2. B 3. A 4. C

As the Enterprise Administrator for Tailspin Toys, Holly Spencer contracted with an ISV to create a multi-tenant application. Holly's goal is to make the app available to Tailspin's customers and partners. Holly updated the application registration in the Azure portal so that it supports multi-tenancy. What's the next step that must be completed so that users from Tailspin's customers and partners can access the application? A) A user or administrator in other organizations must grant their users the ability to sign in to this application B) Holly must remove the application's service principal through the Azure portal C) Holly must assign the App ID URL a host name that matches a verified domain of Tailspin's Azure AD tenant

A) A user or administrator in other organizations must grant their users the ability to sign in to this application

As the Microsoft 365 Administrator for Lucerne Publishing, Inc., you've run into an issue that your IT team can't fix. You want to submit a service request to Microsoft seeking its assistance. What is your responsibility as Lucerne's Microsoft 365 Administrator when submitting a service request? A) Address client connectivity, client software, and mobility installation issues B) Troubleshoot and provide technical guidance for customer issues and escalations C) Aid with licensing, invoicing, subscription inquiries, and purchasing and trial inquiries

A) Address client connectivity, client software, and mobility installation issues

Because the other one does not support it, if you are planning to implement an Exchange hybrid deployment, which connect must you use? A) Azure AD Connect sync B) Azure AD Connect Cloud Sync

A) Azure AD Connect sync

What enables organizations to manage, control, and monitor user access. It provides access to resources in Azure AD, Azure Resources, and other Microsoft Online Services like Microsoft 365 and Microsoft Intune. A) Azure AD Privileged Identity Management (PIM) B) eDiscovery C) Compliance auditing D) Administrative units

A) Azure AD Privileged Identity Management (PIM)

As the Enterprise Administrator for Fabrikam, Allan Deyoung is preparing Fabrikam's environment for Azure AD Application Proxy. Allan must prepare for Azure AD Application Proxy by enabling communication to which of the following items? A) Azure data centers B) A server running Windows Server 2012 R2 or Windows Server 2016 C) Inbound traffic on port 443

A) Azure data centers

As the Enterprise Administrator for Northwind Traders, Patti Fernandez is implementing Power Automate flows. What must Patti do in Microsoft Power Platform to enable a Power Automate flow to call a publicly available API? A) Build a custom connector B) Install an on-premises data gateway C) Use Microsoft Dataverse

A) Build a custom connector

As the Enterprise Administrator for Contoso, you manage the company's Microsoft 365 tenant. You must add a DNS record for Exchange Online that will be used by Outlook clients to locate the Autodiscover service in Microsoft 365. Which DNS record type should you create? A) CNAME B) MX C) TXT

A) CNAME

What type of Power App focuses on the app creator's development experience. Users can design and build a business app in Microsoft Power Apps without writing code in a traditional programming language such as C#. Apps are designed by dragging and dropping elements onto a canvas, just as you would design a slide in PowerPoint. A) Canvas app B) Model-driven app C) Portal

A) Canvas app

Microsoft 365 uses visualizations to display the health of each of its services. What indicates a healthy status A) Check mark B) X C) Exclamation point

A) Check mark

As the Enterprise Administrator for Tailspin Toys, you're planning a Microsoft 365 deployment. You want to add a new custom domain where the internal DNS zone and external DNS zone have the same name. You want to design a DNS solution for the new domain that enables Microsoft 365 connectivity and meets this DNS requirement. What should you do? A) Configure split brain DNS B) Use DNS zones that are Active Directory integrated C) Use a primary zone for the domain for external use and a secondary zone that points to the primary zone for the internal use

A) Configure split brain DNS

As you plan your Microsoft 365 deployment, you're concerned about potential network issues that may occur when you migrate Northwind's mailboxes to Microsoft 365. Your initial concern is the amount of time it will take to complete the mailbox migration. You want a fast migration, but you're concerned with the time it may take to complete the data transfer. While there are many issues that can affect data transfer speeds, you want to begin by focusing on network capacity. Microsoft recommends several best practices to help maximize your network capacity. Which of the following best practices will ultimately minimize the amount of time it takes to migrate mailboxes to Microsoft 365? A) Contact your ISP to confirm your allocated bandwidth and to get details about any possible restrictions B) Work with your hardware vendors to understand your network devices and apply the vendor's latest recommended drivers and software updates C) Add IP addresses for Microsoft datacenter servers to your allowlist, or bypass all migration-related traffic from your network firewall

A) Contact your ISP to confirm your allocated bandwidth and to get details about any possible restrictions

Contoso has completed its directory synchronization of users and groups from its on-premises Active Directory to Microsoft 365. What is Contoso's source of authority for user and group objects that were synchronized? A) Contoso's on-premises Active Directory B) Microsoft 365 C) Azure Active Directory

A) Contoso's on-premises Active Directory

Contoso wants to collaborate with Fabrikam, which is another Azure AD organization. Which settings should Contoso use to manage inbound and outbound B2B collaboration with Fabrikam? A) Cross-tenant access settings B) External collaboration settings C) Invitation redemption settings

A) Cross-tenant access settings

What are the three update channels for Microsoft 365 Apps for enterprise? A) Current B) Monthly Enterprise C) Semi-Annual Enterprise D) Annual Enterprise

A) Current B) Monthly Enterprise C) Semi-Annual Enterprise

Contoso is planning to migrate its Exchange environment to Microsoft 365. It has an Exchange 2016 Server on-premises deployment with about 1500 users. As Contoso's Enterprise Administrator, Holly Dickson wants to migrate all of Contoso's data over a weekend. Which of the following migration strategies would be best for Contoso? A) Cutover migration B) PST migration C) IMAP migration

A) Cutover migration

You create a Microsoft 365 subscription for users in your company. Users are located in a phys1cal facil1ty protected by key card access and a security guards. Users primarily work onsite, but they can use their personal cell phones when they conduct business after hours via email. You need to enable password reset for these users by using the most secure method for this scenario. A) Office phone B) Email C) Mobile phone D) Mobile app code

A) Office phone

Your network has several geographic locations in both the United States and Europe. The network is configured as a single Active Directory Domain Services (AD DS) domain with domain controllers deployed in each location. Your company is implement1ng Microsoft 365 in a hybrid identity and a single Azure AD domain. The company plans to use pass through authentication (PTA) with support for password hash synchronization. You need to recommend a design that optimizes performance for authentication. Design complexity and ongoing support requirements should be kept to a minimum. What should you recommend? A) Deploy multiple on premise authentication agents B) Implement an AD FS infrastructure C) Deploy Azure AD Connect servers in staging mode in each location D) Revise the design plan to use two Azure AD domains

A) Deploy multiple on premise authentication agents

Which deployment planning checklist item is for the following: Work with your internal and external stakeholders to determine the following project goals: Agree on Scope and Timeline. Agree on project tracking mechanism. Develop success criteria and communication/ training plan. A) Determine your Deployment Goals B) Inventory your current environment and make key deployment decisions C) Fix potential deployment blockers D) Set up Microsoft 365 services to work for your organization E) Roll out to users

A) Determine your Deployment Goals

Microsoft Teams enables communication and collaboration with people outside of an organization. Which of the following methods is a way in which Teams can make that happen? A) External access (federation) B) Kerberos authentication C) OAuth 2.0 authentication

A) External access (federation)

What are the two roles of a delegated administrator in the partner portal? A) Full administration B) Limited administration C) Partial administration D) Global administration

A) Full administration B) Limited administration

Which mail migration strategy for moving email to the cloud is the following: An organization can use the Exchange Administration Center or the Exchange Management Shell to migrate the contents of its users' mailboxes from an IMAP messaging system to their Microsoft 365 mailboxes. This process also includes migrating the users' mailboxes from other hosted email services, such as Gmail or Yahoo Mail. A) IMAP migration B) Cutover migration C) Staged migration D) Hybrid deployment E) Third-party migration

A) IMAP migration

Microsoft is aware of a potential issue and is gathering more information about what's going on and the scope of impact. A) Investigating B) Service degradation C) Service interruption D) Restoring service

A) Investigating

Microsoft's detailed investigation of a potential issue results in a request for additional information from customers to allow it to investigate further. If Microsoft requires your action, it notifies you of the data or logs it needs. A) Investigation suspended B) Service restored C) False positive D) Post-incident report published

A) Investigation suspended

Used for migrating your on-premises file share content to Microsoft 365 in SharePoint. With the ability to set up multiple computers as "agents", BLANK lets you scale your migration project as much as you need. It can be accessed in the modern SharePoint admin center. It guides you through the setup of your agents and the creation of your tasks. You can specify global or task level settings, view all-up task progress, and download aggregated summary and task-level reports. A) Migration manager B) SharePoint Migration Tool (SPMT) C) Hybrid Configuration Wizard (HCW)

A) Migration manager

What is the PowerShell command to configure a malware policy for Exchange Online? A) New-MalwareFilterPolicy B) New-MalwareFilterRule C) New-MalwareFilter D) Set-MalwareFilter

A) New-MalwareFilterPolicy

As the Microsoft 365 Administrator for Lucerne Publishing, you want to use xml to customize Lucerne's Microsoft 365 Apps for enterprise deployment experience. You want to choose which applications to exclude and which language versions to include. Which of the following tools should you use? A) Office Deployment Tool B) Office Customization Tool C) Group Policy

A) Office Deployment Tool

The BLANK enables organizations to enforce policy settings for Microsoft 365 Apps for enterprise on a user's device. A) Office cloud policy service B) Office Customization Tool C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

A) Office cloud policy service

The BLANK creates the configuration files that large organizations can use to deploy Office. These configuration files give organizations more control over their Office installations. A) Office cloud policy service B) Office Customization Tool C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

B) Office Customization Tool

Your company has an on premises Active Directory (AD) infrastructure with 50 users. You plan to implement MS 365. When users log in to their AD domain, you want them to be able to use SSO so they can access the Microsoft 365 services without having to log in again. The company has the following security requirements. -Users must not be able to sign in before 6.00 AM or after 8:00 PM -Passwords must meet company specific complexity requirements -Authentication must be performed on·premises and not in the cloud You need to choose the appropriate authentication method that requires the least amount of infrastructure changes. A) PTA B) Third party authentication (TPA) C) PHS D) Federated authentication

A) PTA

Which Microsoft Power Platform product provides a rapid low-code development environment for building custom apps for business needs. It has services, connectors, and a scalable data service and app platform (known as Microsoft Dataverse) that enables simple integration and interaction with existing data. It enables the creation of web and mobile applications that run on all devices. A) Power Apps B) Power automate C) Power BI D) Power Virtual Agents

A) Power Apps

As Contoso's Enterprise Administrator, Holly Dickson is interested in implementing the Microsoft Power Platform CoE Starter Kit. Holly wants to use the CoE Starter Kit to help Contoso develop a strategy for adopting and supporting Microsoft Power Platform. Which of the following Microsoft Power Platform components will the Starter Kit help Holly focus on? A) Power Automate B) Power BI C) Power Virtual Agents

A) Power Automate

If directory synchronization has already been deployed, the user's UPN for Microsoft 365 may not match the user's on-premises UPN defined in Active Directory. This mismatch can occur if the user was assigned a Microsoft 365 subscription license before the domain was verified. To resolve this issue, BLANK can be used to update users' UPNs in Microsoft 365. This resolution will ensure each user's Microsoft 365 UPN matches their corporate user name and domain in the on-premises Active Directory. A) Powershell B) IdFix tool C) Active Directory

A) Powershell

Contoso wants to conduct workplace analysis using Microsoft Viva Insights. What are the required and optional data sources included in Viva Insights? A) Required data sources include Microsoft 365 and HR organizational data; Microsoft Dynamics CRM data is optional. B) Required data sources include Microsoft 365 and Microsoft Dynamics CRM data; HR organizational data is optional. C) Required data sources include HR organizational and Microsoft Dynamics CRM data; Microsoft 365 data is optional.

A) Required data sources include Microsoft 365 and HR organizational data; Microsoft Dynamics CRM data is optional.

Fabrikam recently experienced a degradation in service with SharePoint Online. As Fabrikam's Microsoft 365 Administrator, you've been monitoring the situation and want to complete an incident response plan. Which of the following steps should you complete to develop an incident response plan? A) Review for timeline checks once relevancy and degradation have been established B) Gather and validate information related to specific service requests C) Troubleshoot and provide technical guidance for customer issues and escalations

A) Review for timeline checks once relevancy and degradation have been established

As the Enterprise Administrator for Tailspin Toys, Patti Fernandez wants to create a report in Power BI Desktop. What's the first step that Patti must complete when creating a Power BI report? A) Select the data source for the report B) Create visualizations for the report C) Select the workspace to which the report will be published

A) Select the data source for the report

Microsoft recommends that when you assign someone the Exchange Administrator role, you should assign them a second role that works in conjunction with the Exchange Administrator role. This second role enables the user to see important information in the Microsoft 365 admin center, including the health of the Exchange Online service, and change and release notifications. What second role does Microsoft recommend assigning to a user who was assigned the Exchange Administrator role? A) Service Administrator B) Security Administrator C) Compliance Administrator

A) Service Administrator

The BLANK page displays all the current services and their availability. It also displays the health state of each cloud service in a table format. A) Service Health B) Overview C) Issue history D) Health

A) Service Health

A BLANK is a group of websites that have the same owner and share administrative settings, such as permissions and quotas. When you create it, a top-level site is automatically created. You can then create one or more subsites below the top-level site. The entire structure of the top-level site and all its subsites is called BLANK. A) Site collection B) Team site C) Hub Site D) Sub site

A) Site collection

What is it called when you have internal DNS zones and external DNS zones that have the same name? A) Split brain DNS/split DNS B) Duplicate DNS C) Duplicate DNS zones D) Split zone DNS

A) Split brain DNS/split DNS

As the Enterprise Administrator for Fabrikam, you're planning its migration to Microsoft 365. You plan to authenticate all of Fabrikam's users in Azure Active Directory. In doing so, you want the hashes of your users' passwords replicated between Fabrikam's on-premises environment and Microsoft 365. Which type of identity should you use? A) Synchronized identity B) Cloud identity C) Federated identity

A) Synchronized identity

What type of SharePoint page: Provides a location where you and your team can work on projects and share information from anywhere on any device. It includes a group of related web pages, a default document library for files, lists for data management, and web parts that you can customize to meet your needs. A Microsoft 365 group is automatically created when a user creates a team site in SharePoint Online. A) Team site B) Communication site C) Hub site

A) Team site

As the Enterprise Administrator for Northwind Traders, Patti Fernandez recently created a Power Automate flow. Patti later added another user as an owner of this flow. How will this action affect the flow? A) The flow will only be displayed under Team flows B) The flow will become a Microsoft 365 group flow C) The co-owners can create a new flow that uses the same connection as that flow

A) The flow will only be displayed under Team flows

Fabrikam is trying to determine which migration option to use. It's planning to migrate its Exchange environment to Microsoft 365. However, because Fabrikam doesn't want to keep its on-premises Exchange servers, it doesn't want to maintain a long-term coexistence with Microsoft 365. Based on this requirement, which of the following items should be the final deciding factor used by Fabrikam to determine its migration option? A) The number of user mailboxes to migrate B) Whether it's currently running a third-party mail system C) Whether its email system provides a POP3 protocol

A) The number of user mailboxes to migrate

Which property of an Azure AD B2B user indicates the relationship of the user to the host tenancy? A) UserType B) Source C) HostTenant

A) UserType

As the Microsoft 365 Administrator for Northwind Traders, you're planning the deployment of Microsoft 365 Apps for enterprise throughout the organization. You want to begin by installing the Readiness Toolkit to identify any compatibility issues with your Microsoft Visual Basic for Applications (VBA) macros and add-ins that you currently use with Office. Which of the following statements about the Readiness Toolkit is True? A) When creating an advanced Readiness report, make sure the computer on which you're running the Readiness Toolkit has access to the Internet B) You can use the Readiness Toolkit to repair or fix the code in your VBA macros C) You must uninstall an older version of the Readiness Toolkit that you previously installed before installing the most current version

A) When creating an advanced Readiness report, make sure the computer on which you're running the Readiness Toolkit has access to the Internet

Your network has an AD domain named CompanyA.com. Your company is investigating the requirements needed to implement cloud-based services that support Microsoft 365. The company requirements indicate that a federated hybrid solution is the best fit. You create a single Azure AD tenant. You evaluate the solution and determine network configuration requirements to deploy Azure Connect and to configure synchronization. You deploy Web Access Proxy (WAP) servers in your network's perimeter network. You need to 1dent1fy the firewall ports that must be open between Azure AD Connect and WAP. Which three ports should you 1denify? A) 5671 B) 80 C) 53 D) 5985 E) 443 F) 49443

B) 80 D) 5985 E) 443

As the Enterprise Administrator for Tailspin Toys, Allan Deyoung created a team site in SharePoint Online. What happened when Allan created this site? A) A SharePoint hub site was automatically created B) A Microsoft 365 group was automatically created C) The external sharing setting for this site was automatically set to "Only people in your organization"

B) A Microsoft 365 group was automatically created

As the Enterprise Administrator for Contoso, Holly Dickson is registering a new application using the Azure portal. Which of the "Supported account type" options should Holly select that targets the widest set of customers? A) Accounts in any organizational directory B) Accounts in any organizational directory and personal Microsoft account C) Accounts in this organizational directory only

B) Accounts in any organizational directory and personal Microsoft account

As the Enterprise Administrator for Contoso, Holly Dickson wants to implement Azure Active Directory (Azure AD) Business-to-Business (B2B) collaboration. Azure AD B2B will enable Contoso to maintain control over its corporate data while securely sharing its applications and services with guest users from another organization. Holly wants to enable guest users to sign in to Contoso's apps and services with their own work, school, or social identities. What happens if a guest user doesn't have a Microsoft account or an Azure AD account? A) A Contoso admin with User Management permissions must create a Microsoft 365 account for the guest user B) An account is created for the guest user when they redeem their invitation C) Contoso must manage the external account and password of the guest user

B) An account is created for the guest user when they redeem their invitation

You manage a Microsoft 365 tenant. Your company has an on-premises web application that users need to access. The company wants users to authenticate with the web application using their Microsoft 365 credentials. You need to install the appropriate component on an on-premises server. A) Azure CLI B) Application Proxy connector C) Azure AD connect D) Azure PowerShell

B) Application Proxy connector

As the Enterprise Administrator for Fabrikam, Holly Spencer is completing the prerequisites to running Azure AD Connect Cloud Sync. As part of that process, Holly has created a user account in the Azure AD portal. What's the next step that Holly must complete to ensure that Fabrikam doesn't get locked out of its tenant? A) Add one or more custom domain names to your Azure AD tenant B) Assign the user account hybrid identity administrator permissions on Fabrikam's Azure AD tenant C) Identify an on-premises server for the provisioning agent

B) Assign the user account hybrid identity administrator permissions on Fabrikam's Azure AD tenant

Outlook and other Office-related clients can use which of the following features to automatically locate services in Microsoft 365? A) RPC/tcp protocol B) Autodiscover C) Outlook Anywhere

B) Autodiscover

In which update model can administrators check for updated builds from an internal source with Office applications? A) Automatic from cloud B) Automatic from network C) Rerun setup.exe by using Electronic Software Delivery (ESD)

B) Automatic from network

What provides foundational app metadata and detailed information on sign-ins to apps? A) App governance B) Azure AD C) Microsoft Defender for Cloud Apps

B) Azure AD

As the Enterprise Administrator for Contoso, you're configuring Contoso's Microsoft 365 tenant. Your plan is to provision and manage your user accounts by synchronizing Microsoft 365 with Contoso's on-premises Active Directory. What tool can you use to synchronize on-premises Active Directory objects with Azure AD in Microsoft 365? A) Active Directory Federation Services B) Azure AD Connect C) Users and Computer's snap-in

B) Azure AD Connect

The two directory synchronization options are Azure AD Connect sync and Azure AD Connect Cloud Sync. Which one doesn't support Exchange hybrid deployments? A) Azure AD Connect sync B) Azure AD Connect Cloud Sync

B) Azure AD Connect Cloud Sync

You're the Enterprise Administrator for Contoso, which is planning to install Azure AD Connect. You're reviewing the prerequisites for Azure AD Connect. Which of the following items should you consider when determining which server to install it on? A) Azure AD Connect supports Windows Server 2003 and later B) Azure AD Connect can be installed on a domain controller, member server, or non-domain joined server C) You can have more than one Azure AD Connect server connected to a single Azure AD or Microsoft 365 tenant

B) Azure AD Connect can be installed on a domain controller, member server, or non-domain joined server

Which record for Exchange online has Outlook clients use this record to locate the Autodiscover service in Microsoft 365. A) MX B) CNAME C) TXT

B) CNAME

After you customize the configuration.xml file, what tool do you use to deploy Microsoft 365 Apps for enterprise throughout the company? A) Office Customization Tool B) Office Deployment Tool C) InTune

B) Office Deployment Tool

What type of SharePoint page: Are designed to inform and engage. If your intention is to broadcast information out to a broad audience, this is the better choice. Typically only a small set of members contributes content that is consumed by a much larger audience. A) Team site B) Communication site C) Hub site

B) Communication site

You have on-premises Skype for Business users who are simultaneously using Microsoft Teams. However, they're unable to inter-operate with Skype for Business users from their Teams client. They also can't communicate with users in federated organizations from their Teams client. You want to provide both of these functions to your users in Teams. To do so, you must move the users from on-premises Skype for Business to the cloud. Doing so requires that you configure a hybrid Skype for Business deployment. Once you've configured this hybrid deployment, what must you do to provide your users with inter-operability and federation support from their Teams client? A) Enable Direct Routing B) Configure the users to be in Teams Only mode C) Create a split domain when setting up your hybrid connectivity

B) Configure the users to be in Teams Only mode

Which of the following items is a lightweight agent that sits on-premises and supports the outbound connection to the Application Proxy service? A) Kerberos Constrained Delegation B) Connector C) External endpoint

B) Connector

As the Microsoft 365 Administrator for Fabrikam, you're planning the deployment of Microsoft 365 Apps for enterprise throughout the organization. You want to perform a centralized deployment of Microsoft 365 Apps for enterprise to support two requirements. First, you want to install the 64-bit English and German version of Office without Access and Publisher. Second, you want the EULA automatically accepted. Which of the following steps should you do as part of the deployment process to create this customized installation of Microsoft 365 Apps for enterprise? A) Customize the configuration.xml file using the Office Deployment Tool B) Customize the configuration.xml file using the Office Customization Tool C) Run the Office Deployment Tool and respond to the user prompts to define your customized settings

B) Customize the configuration.xml file using the Office Customization Tool

Which mail migration strategy for moving email to the cloud is the following: It migrates all on-premises mailboxes to Microsoft 365 over a few days. This migration should be used if an organization plans to move its entire email organization to Microsoft 365 and manage user accounts in Microsoft 365. A maximum of 2,000 mailboxes can be migrated from an on-premises Exchange organization to Microsoft 365 using this migration. The recommended number or mailboxes, however, is 150. Performance suffers once the number of mailboxes exceeds that amount. The mail contacts and distribution groups in an on-premises Exchange organization are also migrated. A) IMAP migration B) Cutover migration C) Staged migration D) Hybrid deployment E) Third-party migration

B) Cutover migration

When connecting Power Apps to data sources, connections to on-premises data sources, such as an on-premises SharePoint service, require the use of an on-premises BLANK. A) Connector B) Data gateway C) Workflow

B) Data gateway

As the Microsoft 365 Administrator for Lucerne Publishing, you've been monitoring Lucerne's service health. You know that some service behaviors may take longer than normal to complete. What status shows the steps to resolve a service incident have been completed? A) Restoring service B) Extended recovery C) Additional information

B) Extended recovery

What type of workplace analytical data does Microsoft Viva Insights use within the Microsoft 365 collaboration data? A) Email attachments B) Header-level data C) Body of emails

B) Header-level data

As the Enterprise Administrator for Contoso, Holly Dickson just created a Power BI dashboard. Holly now wants to share access to this dashboard. Which of the following items is a prerequisite to Holly being able to share this dashboard? A) Holly must select the "Allow recipients to share your dashboard (or report)" sharing option for the dashboard B) Holly must have a Power BI Pro license C) Holly must have an admin role in the workspace from which the dashboard is being shared

B) Holly must have a Power BI Pro license

As the Enterprise Administrator for Contoso, Patti Fernandez wants to connect and organize Contoso's SharePoint sites so that its users can search across all associated sites and apply common navigation, branding, and site structure across associated sites. Which type of SharePoint site should Patti create? A) Team site B) Hub site C) Site collection

B) Hub site

You're the Enterprise Administrator for Contoso, which has a Microsoft Enterprise E5 subscription. Contoso already uses SharePoint Online to support its collaboration efforts between users and teams. However, you're interested in creating a hybrid SharePoint environment to maximize collaboration. Of all the extra features that a hybrid SharePoint environment will provide, you're most interested in creating a modern productivity experience for your users. In this environment, your users will have a more seamless experience when navigating between Contoso's on-premises SharePoint Server and Microsoft 365. To achieve this result, which of the following features should you configure with the help of the SharePoint Online Hybrid Picker tool? A) Hybrid OneDrive B) Hybrid App Launcher C) Business to Business extranet sites

B) Hybrid App Launcher

You're the Enterprise Administrator for Tailspin Toys. You have chosen to run Azure AD Connect as your synchronization tool. Tailspin wants to have extra servers for disaster recovery purposes. How can this requirement be achieved? A) Install multiple Azure AD Connect servers connected to a single Azure AD or Microsoft 365 tenant B) Install an extra Azure AD Connect server(s) in staging mode C) Install Active Directory Federation Services

B) Install an extra Azure AD Connect server(s) in staging mode

Which deployment planning checklist item is for the following: Analyze your current environment to collect the following information: The number of user accounts (sign-in names, email addresses). The number and size of mailboxes (including shared mailboxes and conference rooms). Client versions and configurations (browsers, operating systems, office applications, mobile versions, and so on). Details on your network settings (DNS hosts, proxy and firewall configuration, internet connectivity). A) Determine your Deployment Goals B) Inventory your current environment and make key deployment decisions C) Fix potential deployment blockers D) Set up Microsoft 365 services to work for your organization E) Roll out to users

B) Inventory your current environment and make key deployment decisions

As the Enterprise Administrator for Tailspin Toys, Patti Fernandez has just finished creating a multi-tenant application. Patti wants to make this app available to Tailspin's customers and partners. How should Patti configure the App ID URL of the multi-tenant application so that Azure AD can find the app across all tenants? A) It must be tenant-specific B) It must be globally unique C) It must be tenant unique

B) It must be globally unique

You're the Enterprise Administrator for Contoso. After creating a security group in Microsoft 365 that's synchronized with your on-premises Active Directory, you now want to edit the group. Which of the following tools should you use to edit the group? A) Microsoft 365 admin center B) Local Active Directory management tools C) Windows PowerShell

B) Local Active Directory management tools

Microsoft 365 clients can connect to services such as Exchange Online and SharePoint Online. Each service contains a feature that clients use to make these connections. Which of the following features enables these connections? A) Fully qualified domain names (FQDNs) B) Microsoft 365 endpoints C) IPv4 and IPv6 address ranges

B) Microsoft 365 endpoints

What type of Power App uses Microsoft Dataverse. It requires a Microsoft Dataverse database and are built on top of the data modeled in that database environment. The app creator can determine the components (forms, charts, views, dashboards, and so on) to include in the app. However, the app layout and the views and detail screens are determined by the components and based on the data structure. A) Canvas app B) Model-driven app C) Portal

B) Model-driven app

The BLANK tab (the default view) shows any active issues, along with the service health of all the organization's Microsoft 365 services. The list of services displays their current health state, and any active incidents or advisories. A) Service Health B) Overview C) Issue history D) Health

B) Overview

Azure AD Connect provides which of the following features? A) Migrates Exchange public folders from your on-premises organization to Exchange Online B) Password writeback that enables your users to change and reset their passwords in the cloud and have your on-premises password policy applied C) Determines the on-premises domain suffixes, identifies whether any domains are already verified with Microsoft 365, and validates the appropriate DNS records

B) Password writeback that enables your users to change and reset their passwords in the cloud and have your on-premises password policy applied

As the Enterprise Administrator for Northwind Traders, Allan Deyoung recently implemented Power BI. There were several benefits of Power BI that attracted Allan to the product. One such benefit is that it will enable Northwind's Power BI Pro users to distribute dashboards and reports. Allan also liked the fact that the users who view the content won't need a Power BI Pro license. Which Power BI licensing option enables these features? A) Power BI (free) license B) Power BI Premium capacity license C) Power BI Mobile App license

B) Power BI Premium capacity license

The BLANK is the SaaS (Software as a Service) part of Power BI. It is a cloud-based suite of business analytics tools. It lets users connect to, visualize, and analyze data with greater speed, efficiency, and understanding. It also connects users to a broad range of live data through easy-to-use dashboards, provides interactive reports, delivers compelling visualizations that bring data to life, and enables users to share those visualizations with others. A) Power BI Desktop B) Power BI Service C) Power BI Mobile Apps

B) Power BI Service

Which Microsoft Power Platform product enables users to create automated workflows between applications and services. It helps automate repetitive business processes such as communication, data collections, and decision approvals. A) Power Apps B) Power automate C) Power BI D) Power Virtual Agents

B) Power automate

You create an Azure AD tenant with 100 users. You want to review the roles to which users are assigned. You need to choose the appropriate MS Cloud service to meet this requirement. Which cloud service should you use? A) Azure monitor B) Privileged Identity Management (PIM) C) MS Defender for cloud D) Azure Advisor

B) Privileged Identity Management (PIM)

You're the Enterprise Administrator for Contoso, which has a Microsoft 365 Enterprise E3 subscription. The IT team wants to use Visio. While you're happy to accommodate the IT team, you want to do so while minimizing your costs. What should you do? A) Upgrade your subscription to Microsoft 365 Enterprise E5 B) Purchase an add-on license for Visio Online C) Deploy the standalone version of Office 2019

B) Purchase an add-on license for Visio Online

During some malware outbreaks, Microsoft's anti-malware team may have enough information about a virus or other form of malware to write sophisticated policy rules that detect the threat even before a definition is available from any of the engines used by the service. Which of the following anti-malware protection options provides this level of protection? A) Layered defenses against malware B) Real-time threat response C) Fast anti-malware definition deployment

B) Real-time threat response

Contoso is conducting a workplace analysis project. It's using Microsoft Viva Insights to analyze the company's Microsoft 365 data. Contoso's workplace analysis project team has been discussing how Viva Insights should handle the data involving Fabrikam staff. Contoso has contracted with Fabrikam to upgrade Contoso's Fabication department. The technology used in the department has become outdated, which is negatively impacting Contoso's production process. After considerable discussion, the project team has decided to treat their employee's interactions with Fabrikam staff as internal meetings rather than external collaboration. What should Contoso's project team do to enable this analysis in Viva Insights? A) Examine individual activity from Fabrikam employees B) Reclassify Fabrikam's domain as internal C) There's nothing for Contoso's project team to do. Viva Insights analysis involving Contoso employees can't include Fabrikam employees

B) Reclassify Fabrikam's domain as internal

You're planning your company's deployment of Microsoft 365. As you work your way through the Microsoft 365 Deployment Planning Checklist, you want to start planning your rollout to Tailspin's users. Which of the following steps must you complete when rolling out Microsoft 365 to your users? A) Update client software versions B) Reconfigure your client systems to connect to Microsoft 365 C) Analyze your current environment to determine the intranet sites that you plan to migrate

B) Reconfigure your client systems to connect to Microsoft 365

Fabrikam has a Microsoft 365 Business Premium subscription. The company recently purchased a new subsidiary that will be named Fabrikam Residences. As Fabrikam's Enterprise Administrator, you want to add a custom domain titled fabrikamresidences.com for the new subsidiary. You also want to register a subdomain titled content.fabrikamresidences.com. This subdomain will be under the fabrikamresidences.com root domain. What should you do to add these two domains to your Microsoft 365 Business Premium subscription? A) Register the subdomain first and then register the root domain B) Register the root domain first and then register the subdomain C) Microsoft 365 Business Premium doesn't support subdomains. Fabrikam must upgrade to Microsoft 365 Enterprise before it can register a subdomain under a root domain

B) Register the root domain first and then register the subdomain

As the Enterprise Administrator for Northwind Traders, Patti Fernandez is concerned about data security when requesting support from Microsoft. If Patti needs a Microsoft support engineer to help troubleshoot and fix an issue, the engineer will have unlimited access to Northwind's data. What can Patti do to control the support engineer's access to Northwind's data? A) Create a DLP policy that provides limited access to the support engineer once a support case is opened B) Require the support engineer submit a Customer Lockbox request C) Give the support engineer remote access to Patti's computer so that Patti can monitor every action the engineer takes

B) Require the support engineer submit a Customer Lockbox request

A BLANK is a specially formatted text (TXT) record in DNS. It validates that only the organization that owns a domain is actually sending email from that domain. BLANK is a security measure that helps ensure someone doesn't impersonate another organization. This impersonation is often called spoofing. A) MX Record B) SPF Record C) DKIM D) DMARC

B) SPF Record

When an app or workflow creates a connection to a data source, the connector typically requires some form of authentication. Each type of authentication has different levels of security associated with it. It's important to understand what information and rights authors share with users who run their applications. Which of the following methods of authentication provides limited security because it doesn't rely on end-user authentication? A) Open-standard authorization (OAuth) B) SQL Server authentication C) Azure AD-integrated authentication

B) SQL Server authentication

Microsoft has confirmed that there's an issue that may affect use of a service or feature. For example, you may see this status if a service is performing more slowly than usual, there are intermittent interruptions, or a feature isn't working. A) Investigating B) Service degradation C) Service interruption D) Restoring service

B) Service degradation

Microsoft confirmed that corrective action resolved the underlying issue, and they restored the service to a healthy state. To find out what went wrong, view the issue details. A) Investigation suspended B) Service restored C) False positive D) Post-incident report published

B) Service restored

You can use the BLANK page in the Microsoft 365 Apps admin center to see which devices have installed the latest security updates for Office. A) Office cloud policy service B) Service/security update status C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

B) Service/security update status

BLANK is a free migration solution to help organizations migrate content from on-premises SharePoint sites to Microsoft 365. It supports migration to SharePoint, OneDrive, and Teams from: SharePoint Server 2010, 2013, and 2016 SharePoint Foundation 2010 and 2013 A) Migration manager B) SharePoint Migration Tool (SPMT) C) Hybrid Configuration Wizard (HCW)

B) SharePoint Migration Tool (SPMT)

Which of the following filters is the main component against malware or other harmful email attachments that want to grab a user's personal information from the user's computer? A) Malware filtering B) Spam filtering C) Connection filtering

B) Spam filtering

As the Enterprise Administrator for Contoso, you want to confirm your company's readiness to deploy Microsoft 365. You're especially interested in checking the company's DNS records and mail flow to test whether its mailing policies are working properly. Which of the following tools should you run to check Contoso's DNS records and mailing policies? A) Microsoft Message Analyzer B) Support and Recovery Assistant C) Azure AD Connect

B) Support and Recovery Assistant

Where in Microsoft Viva Insights does it show targeted suggestions to help improve focus, collaboration, wellbeing, and sales success? A) The Home page B) The Plans page C) The Analyze page

B) The Plans page

As Lucerne Publishing's Enterprise Administrator, Holly Spencer is interested in building an app for a Test Drive solution. Holly has discovered that this process is similar to building an app in Power Apps, with one exception. What is that exception? A) The app-maker must use imported data from the Common Data Service database B) The app-maker must use imported Excel data in table format C) The app-maker must use imported SharePoint list data

B) The app-maker must use imported Excel data in table format

Contoso's Enterprise Admin created a site collection in SharePoint Online. Which SharePoint Online groups were automatically created for that site collection? A) The default SharePoint Online groups that are associated with the Team Site template, which are the Team Site Visitors, Team Site Members, and Team Site Owners B) The default SharePoint Online groups that are created depend on the site template that's used to create the site C) The default SharePoint Online Security group

B) The default SharePoint Online groups that are created depend on the site template that's used to create the site

App governance oversees and governs OAuth-enabled apps that are registered with Azure AD. What other characteristic must OAuth-enabled apps have to be overseen and governed by App governance? A) They must be line-of-business apps developed by Microsoft partners B) They must access data through the Microsoft Graph API C) They must be a multi-tenant application

B) They must access data through the Microsoft Graph API

Which of the following statements is true concerning Microsoft Viva Insights settings? A) Working hours set by the admin apply to all employees included in the analysis population B) Updating minimum group size and hashed subject lines in Privacy settings causes the changes to go into effect immediately and apply retroactively C) Excluding a specific email address doesn't remove meeting hours for other employees who meet with the owner of that email address from the data set

B) Updating minimum group size and hashed subject lines in Privacy settings causes the changes to go into effect immediately and apply retroactively

Your network has a single AD DS domain. Your company is evaluating options to implement Azure AD. Your company already has an Azure AD tenant with the default domain, company1.onmicrosoft.com Your company wants to determine the features that should be supported during evaluation, minimizing changes to the current network infrastructure. The company domain does not currently support AD FS. You need to identify the hybrid identity options that require the installation and configuration of AD FS. Which two options should you choose? A) Sync new on premises, sync new user, contact and group accounts automatically. B) Use on premises MFA solutions. C) Use cloud-based MFA solutions D) Support smartcard authentication E) Support SSO using corporate credentials

B) Use on premises MFA solutions. D) Support smartcard authentication

BLANK is another way to manage sites, libraries, folders, and files. When it is enabled in a SharePoint list or library, an organization can store, track, and restore items in a list and files in a library whenever they change. A) Recycle bin B) Versioning C) Point-in-time recovery

B) Versioning

As the Enterprise Administrator for Contoso, Holly Dickson wants to create chatbots for Contoso's customers to engage with. Which version of Power Virtual Agents should Holly use? A) Microsoft Teams app B) Web app C) Power Pro app

B) Web app

Microsoft 365 uses visualizations to display the health of each of its services. What indicates an unavailable service A) Check mark B) X C) Exclamation point

B) X

How many global admins does Microsoft recommend for security guidelines when it comes to assigning roles? A) 1 B) 1-2 C) 2-4 D) 3-6

C) 2-4

Contoso is creating its organizational data file to upload into Microsoft Viva Insights. The file contains the Organization attribute, which the system uses to calculate network breadth. Network breadth is the number of organizations where an employee has had meaningful interactions in the last X number of days. What's the number of days (X) used by Viva Insights to calculate network breadth? A) 31 days B) 60 days C) 28 days

C) 28 days

As the Enterprise Admin for Contoso, Holly Dickson is trying to understand the difference between a Dynamic Distribution Group and a Distribution Group. What is the difference between these two types of groups? A) A Dynamic Distribution Group is the most common form of a globally available distribution list for sending out one-to-many e-mail messages. A Distribution Group is commonly used to create a global company distribution list using attributes in the company address book, such as region, office, department, or roles. B) A Dynamic Distribution Group is excellent for team and department collaboration when other resources such as OneNote or OneDrive are needed. A Distribution Group provides hooks into multiple Microsoft 365 services, it can be used as a tool to aid adoption and drive business value. C) A Dynamic Distribution Group creates a set of users based on an LDAP query in Active Directory to distribute messages. A Distribution Group distributes messages to the list of assigned users to the group

C) A Dynamic Distribution Group creates a set of users based on an LDAP query in Active Directory to distribute messages. A Distribution Group distributes messages to the list of assigned users to the group

Tailspin Toys is a small organization that doesn't have specialized IT administration roles. As such, it outsourced IT administrative functionality to a Microsoft partner. The partner then sent an email message to Tailspin Toys. In the email, the partner requested permission to act as an administrator on Tailspin's behalf. What should Tailspin do next? A) Assign the Full Administration role to the delegated administrator B) Assign the Limited Administration role to the delegated administrator C) Accept the delegated administration offer in Microsoft 365

C) Accept the delegated administration offer in Microsoft 365

Fabrikam currently has Exchange Server 2016 installed. It plans to implement a hybrid Exchange environment with Microsoft 365. Fabrikam has more than 100,000 objects. It has multiple on-premises Active Directory forests. It plans to synchronize user, group, and contact objects. It also wants to implement password hash synchronization and seamless single-sign-in. Which directory synchronization tool should Fabrikam choose? A) DirSync B) Azure AD Connect Cloud Sync C) Azure AD Connect sync

C) Azure AD Connect sync

Which of the following DNS record types must be created so that Outlook clients can use the Autodiscover process to connect to Exchange Online? A) TXT B) MX C) CNAME

C) CNAME

As the Enterprise Administrator for Contoso, you manage the company's Microsoft 365 tenant. You have a custom domain that you want to add to Microsoft 365. However, Contoso's IT team had several key members quit over the past year. You're not sure if one of those former employees registered the domain using their personal information. How can you find out who registered the domain? A) Contact any of the top 10 domain name registrars B) Contact any of the top 10 DNS hosting providers C) Check the WHOIS record for that domain by using an Internet WHOIS register

C) Check the WHOIS record for that domain by using an Internet WHOIS register

BLANK requires that internal Exchange servers are accessible from Exchange Online through the HTTPS protocol. This connection allows Exchange Online to connect to the internal Exchange organization for hybrid capabilities. Publishing your internal Exchange Servers to the Internet requires a dedicated public IP address and an official TLS certificate. A) Minimal hybrid migration B) Express migration C) Classic Hybrid topology D) Modern Hybrid topology

C) Classic Hybrid topology

As the Microsoft 365 Administrator for Fabrikam, you're planning the deployment of Microsoft 365 Apps for enterprise throughout the organization. What must Fabrikam's users do to maintain the full functionality of Microsoft 365 Apps for enterprise on their devices? A) Maintain a permanent connection to the Internet B) Access at least one Microsoft 365 Apps for enterprise product every 45 days C) Connect to the Internet at least every 30 days

C) Connect to the Internet at least every 30 days

As the Enterprise Administrator for Contoso, Holly Dickson wants to use Power Virtual Agents to create a chatbot. Holly has completed the first step in the process, which is creating the bot. What must Holly do next before defining the bot responses and the overall bot conversation? A) Specify a custom Power Apps environment for your Power Virtual Agents B) Interact with your bot using the Test Canvas C) Create a topic for the bot

C) Create a topic for the bot

BLANK lets an organization attach a digital signature to the message header of emails that it sends. Email systems that receive messages containing digital signatures use the signature to determine if the incoming email is legitimate. A) MX Record B) SPF Record C) DKIM D) DMARC

C) DKIM

Which layer of security in the Microsoft Power Platform's security model provides a space for organizations to store, manage, and share their business data, apps, and flows? A) Data gateways B) Dataverse C) Environments

C) Environments

You're the Enterprise Administrator for Tailspin Toys, Inc. You want to achieve the best experience using Microsoft Teams in your Microsoft 365 deployment. Which of the following feature sets should Tailspin Toys deploy? A) Azure AD Pass-through Authentication and Multi-factor authentication B) Azure AD Connect and Password Hash Synchronization C) Exchange Online and SharePoint Online

C) Exchange Online and SharePoint Online

As the Enterprise Administrator for Contoso, you're planning to set up some groups in Contoso's Microsoft 365 tenant. You want to create a dynamic distribution group. The recipients in this group will be recalculated every time you send a message that's based on filters and conditions that you define. Which of the following tools should you use to create the group? A) Microsoft 365 admin center B) Microsoft Outlook C) Exchange admin center

C) Exchange admin center

Microsoft 365 uses visualizations to display the health of each of its services. What indicates a degraded service A) Check mark B) X C) Exclamation point

C) Exclamation point

What is a key tool for an organization's decision-makers in Power BI. It includes a high-level, at-a-glance view of Microsoft 365 for business adoption, usage, mobility, communication, collaboration, and storage reports. A) Microsoft 365 usage analytics B) Power BI template app C) Executive Summary dashboard in Power BI D) Microsoft 365 Overview report

C) Executive Summary dashboard in Power BI

After a detailed investigation, Microsoft has confirmed the service is healthy and operating as designed. There was no impact on the service, or the incident's source was external to the service. Incidents and advisories with this status appear in the history view until they expire (after the period of time stated in the final post for that event). A) Investigation suspended B) Service restored C) False positive D) Post-incident report published

C) False positive

Fabrikam has completed its workplace analysis using Microsoft Viva Insights. Where should its management team go to view out-of-the-box insights on important business outcomes in Viva Insights? A) Query designer B) Peer analysis C) Home page

C) Home page

Change is a key benefit provided by SharePoint BLANK. They model relationships as links, rather than hierarchy or ownership. This design enables organizations to adapt to the changes in the way they work in a dynamic, changing world. BLANK helps you meet the needs of your organization by connecting and organizing sites based on project, department, division, region, and so on. A) Site collections B) Team sites C) Hub Sites D) Sub sites

C) Hub Sites

What type of SharePoint page: Provide an important building block for organizations that are designing their own intranets. Are the "connective tissue" a company can use when organizing sites together. A) Team site B) Communication site C) Hub site

C) Hub site

Contoso is planning to migrate its Exchange environment to Microsoft 365. It has an Exchange 2013 Server on-premises deployment with 1000 users. As Contoso's Enterprise Administrator, Holly Dickson wants to maintain this on-premises environment for recipient administration purposes. Which of the following migration strategies would be best for Contoso? A) Cutover migration B) PST migration C) Hybrid migration

C) Hybrid migration

As the Enterprise Administrator for Tailspin Toys, you're planning a migration to Microsoft 365. You're following Microsoft's Deployment Planning Checklist for Microsoft 365. You have finished determining your organization's deployment goals to meet its business requirements. What task should you do next? A) Fix potential deployment blockers B) Set up Microsoft 365 services to work for your organization C) Inventory the current environment

C) Inventory the current environment

The BLANK tab lets you look at your current health status and view the history of any service advisories and incidents that have affected your tenant. You can either view all activity (default), or select the filter option that displays just the activity from the past seven days. A) Service Health B) Overview C) Issue history D) Health

C) Issue history

Which of the following items is a key benefit of using Azure Active Directory Application Proxy? A) It helps on-premises workers by publishing on-premises applications to be accessed over the internet B) It makes user access to company applications more secure by requiring VPN tunneling C) It supports remote workers by publishing on-premises applications to be accessed over the internet

C) It supports remote workers by publishing on-premises applications to be accessed over the internet

As the Enterprise Administrator for Adventure Works Cycles, Holly Spencer wants to publish on-premises applications for remote access by Adventure Works' customers and partners. Because Adventure Works has a large deployment, Holly wants to improve latency for tenants that have applications hosted in different regions. Which of the following items is required when publishing on-premises applications for remote access that will achieve this goal? A) DNS TXT file B) Short Backend Application Timeout C) Location-based connector groups

C) Location-based connector groups

BLANK monitors reliability and performance metrics and provides custom guidance to help optimize and troubleshoot Microsoft 365 Apps on your client devices. A) Office cloud policy service B) Service update status C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

C) Microsoft 365 Apps health

What client connectivity tool is a diagnostic tool that lets users run tests to resolve many different problems. These problems include Outlook installation and activation issues, and issues that occur when you make a network connection in Microsoft Dynamics 365 or OneDrive for Business. The connectivity tests work for users after their mailboxes are moved to Microsoft 365. This tool tests from the client machine. A) Fix it tool B) ID Fix C) Microsoft 365 SaRA D) Microsoft Remote connectivity analyzer

C) Microsoft 365 SaRA

True or False - New app registrations for apps uploaded to Azure AD are visible to users by default.

False - They are hidden by default

Lucerne Publishing is starting to experience connectivity issues in its Microsoft 365 deployment. The problems began after it migrated its user mailboxes to Microsoft 365. The company has experienced Outlook installation and activation issues, and connectivity issues with OneDrive for Business. As Lucerne's Enterprise Administrator, you want to deploy a diagnostic tool to help identify and resolve these issues. You would also like a tool that generates a log file containing test results. Based on this information, which of the following tools should you use? A) Microsoft Message Analyzer B) Microsoft Remote Connectivity Analyzer C) Microsoft 365 Support and Recovery Assistant

C) Microsoft 365 Support and Recovery Assistant

As Contoso's Enterprise Administrator, you're planning to set up some groups in your Microsoft 365 tenant. You want to create a group that enables your Manufacturing team members to collaborate with one another. The group will provide them a shared workspace for email, conversations, files, and calendar events. What type of group should you create? A) Security group B) Distribution group C) Microsoft 365 group

C) Microsoft 365 group

Azure AD Connect includes an optional group writeback feature. Group writeback writes groups from Azure AD to on-premises Active Directory. Which type of groups can be written back from Azure AD to your on-premises Active Directory? A) Distribution groups B) Mail-enabled security groups C) Microsoft 365 groups

C) Microsoft 365 groups

What is the Powershell command to assign a role to a user account? A) New-UserRole B) Set-Role C) New-MgDirectoryRoleMemberByRef

C) New-MgDirectoryRoleMemberByRef

What do connections to on-premises data sources, such as an on-premises SharePoint service, require to provide quick and secure data transfer between on-premises data and the Power Platform products? A) Microsoft Dataverse B) Environments C) On-premises data gateway

C) On-premises data gateway

Blank is a last resort when trying to restore an item. With this option, an organization must submit a request to Microsoft Technical Support to have Microsoft recover the item. Submissions must not exceed 14 days after the time the file must be recovered. A) Recycle bin B) Versioning C) Point-in-time recovery

C) Point-in-time recovery

What type of Power App brings the power of no-code solutions to building externally facing websites. Through the Power Apps interface, app creators can build both anonymous and authenticated websites that enable users to create, view, and interact with data held in Microsoft Dataverse. A) Canvas app B) Model-driven app C) Portal

C) Portal

Which Microsoft Power Platform product delivers insight for analyzing data through the business analytics service. It can share those insights through data visualizations in reports and dashboards, which can help users make fast, informed decisions. Consider it as the analysis and insights leg of the Microsoft Power Platform. It enables users to display business data in ways that makes the most sense. A) Power Apps B) Power automate C) Power BI D) Power Virtual Agents

C) Power BI

Power BI offers a set of apps for iOS, Android, and Windows 10 mobile devices. These apps enable users to connect to and interact with their cloud and on-premises data. Also, users to which reports and dashboards have been shared can view and interact with those reports and dashboards. It doesn't matte whether they're on premises or in the cloud. A) Power BI Desktop B) Power BI Service C) Power BI Mobile Apps

C) Power BI Mobile Apps

Which Power BI component is a cloud-based suite of business analytics tools that lets users connect to, visualize, and analyze data with greater speed, efficiency, and understanding? A) Power BI Desktop B) Mobile apps C) Power BI service

C) Power BI service

Your company 1s developing a customized mobile app solution that allows users to access their Exchange Online mailboxes. The mobile app must authenticate users with Azure Active Directory (Azure AD). and it must allow the users to use their existing Microsoft 365 credentials. The app solution works as follows, -A mobile app accesses an API hosted in Azure -The API uses REST to access exchange You need to determine the minimum required number of app registrations. How many app registrations should you create? A) Four B) One C) Two D) Three

C) Two

You're the Microsoft 365 Administrator for Tailspin Toys, which has replaced its legacy Office apps with the Microsoft 365 Apps for enterprise productivity suite. Tailspin has developed a large number of macros and add-ins to customize its Office apps to improve user productivity. As such, it's important that Tailspin's IT department thoroughly test all new Office releases for compatibility before redeploying them throughout the company. In addition, Tailspin has selected devices that require extensive testing before rolling out new Office features to ensure they comply with regulatory and governmental requirements. Given Tailspin's extensive testing requirements, which of the following update channels should it use? A) Current Channel B) Monthly Enterprise Channel C) Semi-Annual Enterprise Channel

C) Semi-Annual Enterprise Channel

Microsoft determines that an issue affects the ability for users to access the service. In this case, the issue is significant and consistently reproducible. A) Investigating B) Service degradation C) Service interruption D) Restoring service

C) Service interruption

You're the Enterprise Administrator for Tailwind Traders, which up until last month was located in Paris, France. When Tailwind purchased its Microsoft 365 subscription two years ago, its Organization Profile listed the country/region in which the company is headquartered as France. However, Tailwind recently moved its corporate headquarters to New York. To change the company's headquarters for its Microsoft 365 subscription to the United States, what must you do? A) Use the Microsoft 365 admin center to access Tailwind's Organization Profile and change the country/region of the company's headquarters to the United States B) Contact Microsoft Support Services and have them update the country/region of your Microsoft 365 subscription to the United States C) Sign up for a new account, choose the United States as the desired country/region, and purchase a new subscription

C) Sign up for a new account, choose the United States as the desired country/region, and purchase a new subscription

As the Enterprise Administrator for Contoso, Holly Dickson wants to run the SharePoint Migration Tool to migrate the company's SharePoint Server content to SharePoint Online. Which of the following items will the SharePoint Migration Tool migrate? A) Inaccessible documents B) Files under 30 GB C) Site, document, and folder metadata

C) Site, document, and folder metadata

Which mail migration strategy for moving email to the cloud is the following: This migration is similar to a cutover migration in that it ultimately enables an organization to migrate all its mailboxes to Microsoft 365. However, this migrates batches of on-premises mailboxes to Microsoft 365 over the course of a few weeks or months. A) IMAP migration B) Cutover migration C) Staged migration D) Hybrid deployment E) Third-party migration

C) Staged migration

You're the Enterprise Administrator for Tailspin Toys, Inc. As you plan your Microsoft 365 deployment, you want to select the most appropriate strategy for Tailspin Toys when migrating mail, calendar, and contact information to the cloud. You want to move your entire email organization (3000 mailboxes) to Microsoft 365 and manage user accounts in Microsoft 365. You realize it may take more than a few days to migrate batches of on-premises mailboxes to Microsoft 365. In fact, it may take a few weeks or months. Which migration strategy should you employ to meet these business requirements? A) Cutover migration B) IMAP migration C) Staged migration

C) Staged migration

Which Microsoft 365 administrator role creates and manages Microsoft 365 groups? A) SharePoint Administrator B) Exchange Administrator C) Teams Administrator

C) Teams Administrator

You're the Enterprise Administrator for Tailwind Traders, which up until last month was located in Paris, France. When Tailwind purchased its Microsoft 365 subscription two years ago, it set the Preferred Language setting in its Organization Profile to French. However, Tailwind recently moved its corporate headquarters to New York. Following the relocation, you changed the Preferred Language from French to English (US). In doing so, the language for all communications that are sent from Microsoft to Tailwind Traders will now be in English (US). However, what aspect of your Microsoft 365 deployment will still be in French? A) The language used by Exchange Online will still be French B) The language used by Outlook will still be French C) The language used by SharePoint Online will still be French

C) The language used by SharePoint Online will still be French

You're the Enterprise Administrator for Tailspin Toys, which has a Microsoft 365 Enterprise E3 subscription. When a member of the Accounting department recently left the company, you deleted the user's account. What will happen to the user's Microsoft 365 license? A) Because the user account is soft deleted for 30 days, the license will remain unavailable for 30 days before it can be assigned to another user B) To ensure the license isn't assigned to another user in the event the deleted user account is restored, the license is placed on hold and can't be reassigned until the Global Admin runs a PowerShell command that releases the hold C) The license for that user becomes available and can be assigned to another user

C) The license for that user becomes available and can be assigned to another user

As the Enterprise Administrator for Northwind Traders, Alan Deyoung has implemented Azure AD Application Proxy. Doing so enables Northwind to support remote workers by publishing on-premises applications to be accessed over the internet. Alan has organized Northwind's connectors into connector groups, with each group handling traffic to specific applications. To optimize Northwind's network structure, Alan also wants to implement load-balancing. What should Alan do next to load-balance this traffic to specific applications? A) Alan should deploy at least two connectors B) Alan should verify the Microsoft Azure AD Application Proxy Connector service is running C) There's nothing else that Alan must do

C) There's nothing else that Alan must do

When organizations implement Microsoft Teams, they'll experience degraded performance when which of the following network activities occurs? A) The burst packet loss from clients to Microsoft Edge is greater than 1% during any 15-second interval B) The Round-trip time from clients to Microsoft Edge is greater than 50 ms C) They actively block specific ports, or they don't open the correct ports

C) They actively block specific ports, or they don't open the correct ports

The company is a sole proprietorship located in Florida that recently deployed Microsoft 365. You want to create a file storage and sharing strategy that fits your company's needs, but you're not sure what approach to take. It has since come to your attention that Microsoft 365 provides file storage and sharing strategies that are based on industry type. Which of the following file storage and sharing strategies is recommended for sole proprietorships like Margie's Travel? A) Create a Microsoft 365 team site to store shared documents, and create a private Microsoft 365 team subsite to store files that you want to keep private from the rest of the team B) Use Microsoft 365 team subsites to store and share documents intended for a specific customer C) Use OneDrive for Business to store your own files and share them with customers on a case-by-case basis

C) Use OneDrive for Business to store your own files and share them with customers on a case-by-case basis

As the Enterprise Administrator for Tailspin Toys, you're planning to use Azure AD Connect as your directory synchronization tool. Tailspin's Active Directory has less than 100,000 objects. Which of the following statements applies given the company's configuration? A) You must plan for another SQL Server to manage the database and load B) You can use more than one Azure AD Connect server connected to a single Azure AD C) You can use the light version of SQL Server Express that will be installed on the Azure AD Connect server

C) You can use the light version of SQL Server Express that will be installed on the Azure AD Connect server

Which SharePoint Hybrid option would you choose for the following: Administrators can create a modern productivity experience for their users. It helps users to have a more seamless experience when navigating between your on-premises SharePoint Server and Microsoft 365. This hybrid feature further integrates Microsoft 365 with your on-premises SharePoint server farm by placing tiles like Office 365 Delve and Video. This option also sets up hybrid OneDrive for Business with user profile redirection, and sites features. A) Hybrid Search B) Business to Business (B2B) extranet sites C) Hybrid Sites Features D) Hybrid App Launcher

D) Hybrid App Launcher

Which mail migration strategy for moving email to the cloud is the following: This enables organizations to extend the feature-rich experience and administrative control they have with their existing on-premises Exchange organization to the cloud. It provides the seamless look and feel of a single Exchange organization between Microsoft 365 and an on-premises Exchange Server 2013 or Microsoft Exchange Server 2010. This can also serve as an intermediate step to moving completely to a Microsoft 365 organization. A) IMAP migration B) Cutover migration C) Staged migration D) Hybrid deployment E) Third-party migration

D) Hybrid deployment

The BLANK contains the following reports: Adoption, usage, communication, collaboration, storage and mobility. You can view them by choosing the tab on top of the report page. All values of the month shown on the top section of the report refer to the latest complete month. A) Microsoft 365 usage analytics B) Power BI template app C) Executive Summary dashboard in Power BI D) Microsoft 365 Overview report

D) Microsoft 365 Overview report

With regards to Power Apps, BLANK is a type of data source that lets an organization securely store and manage data that's used by business applications. A) Microsoft Dynamics B) Data Gateway C) Microsoft Workflow D) Microsoft Dataverse

D) Microsoft Dataverse

What client connectivity tool can do the following: -Identify connectivity issues between email clients and an organization's Exchange Server. -Identify connectivity issues between email clients and Microsoft 365. -Troubleshoot Exchange Server and Microsoft 365 deployments. -Identify common problems. This tool connects from the internet. A) Fix it tool B) ID Fix C) Microsoft 365 SaRA D) Microsoft Remote connectivity analyzer

D) Microsoft Remote connectivity analyzer

BLANK provides powerful organizational analytics solutions. It taps into Microsoft 365 email and calendar metadata, including to/from data, subject lines, and timestamps. Its goal is to show how an organization collaborates and spends time. It turns this digital exhaust—that is, the data that comes naturally from our everyday work—into a set of behavioral metrics. An organization can analyze these metrics to understand what's going on in the company. A) Office Deployment Tool B) Office Customization Tool C) Hybrid Configuration Wizard (HCW) D) Microsoft Viva Insights

D) Microsoft Viva Insights

True or false, when dealing with an IP allowlist and an IP blocklist in Exchange Online, the block setting typically overrides the allow setting?

False - the allow setting typically overrides the block setting

BLANK doesn't require any inbound HTTPS connection from Exchange Online to the internal Exchange organization. Instead, the Exchange Hybrid Agent connects the on-premises Exchange organization and Exchange Online. This agent is installed on a server and runs as a service that connects to Exchange Online using an outbound HTTPS connection. The Hybrid Agent supports free/busy requests from Exchange Online to the on-premises Exchange server and mailbox migrations. A) Minimal hybrid migration B) Express migration C) Classic Hybrid topology D) Modern Hybrid topology

D) Modern Hybrid topology

Your AD supports two forest root domains named company1.com and companya.com. You create an Azure AD. You run the Azure AD connect installation wizard and configure PTA with company1.com. You need to add synchronization for companya.com. Which two PowerShell cmdlets should you run? A) Convert-MsolDomainToFederated -SupportMultipleDomain -DomainName companya.com B) Update-msolfederateddomain -DomainName companya.com -SupportMultipleDomain C) New-MsolFederatedDomain -SupportMultipleDomain -DomainName company1.com D) New-MsolFederalDomain -SupportMultipleDomain -DomainName companya.com E) Update-msolfederatedDomain -DomainName company1.com -SupportMultipleDomain

D) New-MsolFederalDomain -SupportMultipleDomain -DomainName companya.com E) Update-msolfederatedDomain -DomainName company1.com -SupportMultipleDomain

Microsoft has published a Post Incident Report for a specific issue that includes root cause information and next steps to ensure a similar issue doesn't reoccur. A) Investigation suspended B) Service restored C) False positive D) Post-incident report published

D) Post-incident report published

What is a tool someone can use to translate the email header information? A) Exchange Online Protection (EOP) B) Hybrid Configuration Wizard (HCW) C) Migration Manager D) Remote Connectivity Analyzer (RCA)

D) Remote Connectivity Analyzer (RCA)

The cause of the issue has been identified. Microsoft knows what corrective action to take, and it's bringing the service back to a healthy state. A) Investigating B) Service degradation C) Service interruption D) Restoring service

D) Restoring service

With BLANK, you can automatically deliver monthly Office updates for specific users or groups. You can apply it to a set of devices in the Microsoft 365 Apps admin center. A) Office cloud policy service B) Service update status C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

D) Servicing profile

Which deployment planning checklist item is for the following: Complete the following steps to configure your Microsoft 365 subscription: Verify the domains you want to use with your subscription. Configure application settings (email, instant messaging, online meetings, web collaboration, file storage, Yammer). Optionally prepare for directory synchronization. Optionally prepare for single sign-on. Prepare your organization. Prepare service desk for upcoming migration. Test the deployment and optional migration process. Tell your users about the upcoming changes and how it will affect them. A) Determine your Deployment Goals B) Inventory your current environment and make key deployment decisions C) Fix potential deployment blockers D) Set up Microsoft 365 services to work for your organization E) Roll out to users

D) Set up Microsoft 365 services to work for your organization

To configure connection filters in Exchange Online using Windows PowerShell, the BLANK cmdlet must be used. A) New-HostedConnectionFilter B) New-HostedConnectionFilterRule C) New-HostedConnectionFilterPolicy D) Set-HostedConnectionFilterPolicy

D) Set-HostedConnectionFilterPolicy

You manage a Microsoft 365 tenant that has a Microsoft 365 E5 subscription. You need to temporarily allow a user to assume administrative responsibilities for Exchange Online and SharePoint. A) Assign the user the global admin role B) Assign the user the user admin role C) In the MS 365 Admin center, assign the user the exchange admin and sharepoint admin roles D) Use privileged identity management (PIM) from Azure portal to add the user to the exchange admin and sharepoint admin role

D) Use privileged identity management (PIM) from Azure portal to add the user to the exchange admin and sharepoint admin role

The BLANK in the Microsoft 365 Apps admin center displays information about the state of Office installations on devices in your organization. A) Office cloud policy service B) Service update status C) Microsoft 365 Apps health D) Servicing profile E) Inventory page

E) Inventory page

Which deployment planning checklist item is for the following: Complete the following steps to set up your user accounts and mailboxes: Add your users and assign the appropriate licenses. Optionally migrate data (email, files, and so on). Validate functionality then complete final step. Migrate DNS settings to point to Microsoft 365. Tell your users when they can start using Microsoft 365. Reconfigure your client systems (Office, Outlook, Outlook for Mac, and mobile devices) to connect to Microsoft 365. A) Determine your Deployment Goals B) Inventory your current environment and make key deployment decisions C) Fix potential deployment blockers D) Set up Microsoft 365 services to work for your organization E) Roll out to users

E) Roll out to users

Company1.com \ Perimeter network --- Azure AD / Company2.com You network includes two Azure Directory Doman Services (AD DS) forest root domains. Your company plans to add an Azure AD tenant as shown in the exh1b1t. You need to develop a plan that lets you consolidate users from Company1.com and Company2.com into the same Azure AD tenant. You plan to implement pass through authentication (PTA). Solution: You plan to deploy two instances of Azure AD Connect. Each instance is deployed on a separate member server in each domain's internal network. Does this solution meet the goal?

No

Company1.com \ Perimeter network --- Azure AD / Company2.com You network includes two Azure Directory Doman Services (AD DS) forest root domains. Your company plans to add an Azure AD tenant as shown in the exh1b1t. You need to develop a plan that lets you consolidate users from Company1.com and Company2.com into the same Azure AD tenant. You plan to implement pass through authentication (PTA). Solution: You plan to install Azure AD connect on two non-member servers deployed in the perimeter network. You configure filtering by domain with one domain for each Azure AD connect server Does this solution meet the goal?

No

You use the Microsoft 365 admin center to add a new domain to your subscription. Your company owns the domain name added. You need to configure DNS to support domain verification. Your company manages its own DNS resource records. Solution: You create a CNAME resource record to verify that you own the domain. Does this solution meet the goal?

No

Your company has a Microsoft 365 E5 subscription. The subscription contains the users shown in the following table Name Role Use1 --- Global Reader User2 --- Security Operator User3 --- Helpdesk Administrator User4 --- Exchange Adm1n1strator Users5 --- Global Adm1rnstrator User6 --- None User1 loses the password for their account and so they report the issue to User3, who resets their password. User 5 plans to enable Self -Service Password Reset (SSPR) in Azure AD for users so that they can reset their own passwords without having to contact User3. In order to be able to benefit from SSPR, users must configure at least one authentication method. You need to recommend an authentication method that complies with SSPR in order to enable users to benefit from it. Solution: Configure Temporary Access Pass Does this Solution meet the goal?

No

Your company has a Microsoft 365 E5 subscription. The subscription contains the users shown in the following table Name Role Use1 --- Global Reader User2 --- Security Operator User3 --- Helpdesk Administrator User4 --- Exchange Adm1n1strator Users5 --- Global Adm1rnstrator User6 --- None User1 loses the password for their account and so they report the issue to User3, who resets their password. User 5 plans to enable Self -Service Password Reset (SSPR) in Azure AD for users so that they can reset their own passwords without having to contact User3. In order to be able to benefit from SSPR, users must configure at least one authentication method. You need to recommend an authentication method that complies with SSPR in order to enable users to benefit from it. Solution: Fast Identity Online (FIDO) 2 security key Does this Solution meet the goal?

No

Your network 1s configured as an Azure Directory Domain Services (AD DS) domain. You deploy AD FS on your on premises domain. This includes an AD FS farm with two AD FS servers deployed on your internal network and two Web Access Proxies (WAPs) deployed in your perimeter network. You configure a hybrid identity with an Azure AD tenant. You run a custom Azure AD Connect installation to enable federated authentication. Your configuration includes an active Azure AD Connect server and an Azure AD Connect server in staging mode. You need to monitor information about authentication activity. This should include: • Number and types of authentication. • Number and types of authentication errors. Solution: You install the Azure AD Connect Health agent for AD DS on each DC. You run Register-AzureADConnectHealthsyncAgent on each sync server. Does this solution meet the goal?

No

Your network 1s configured as an Azure Directory Domain Services (AD DS) domain. You deploy AD FS on your on premises domain. This includes an AD FS farm with two AD FS servers deployed on your internal network and two Web Access Proxies (WAPs) deployed in your perimeter network. You configure a hybrid identity with an Azure AD tenant. You run a custom Azure AD Connect installation to enable federated authentication. Your configuration includes an active Azure AD Connect server and an Azure AD Connect server in staging mode. You need to monitor information about authentication activity. This should include: • Number and types of authentication. • Number and types of authentication errors. Solution: You install the Azure AD Connect Health agent for AD FS on each of your sync servers. You enable auditing on your AD FS servers. Does this solution meet the goal?

No

Microsoft Adoption Score supports an organization's journey to digital transformation. Adoption Score provides insights about how an organization uses Microsoft 365 and the technology experiences that support it. A) True B) False

True

True or False - The only thing you can do with a security group that a Microsoft 365 group cannot is add devices to it.

True

True or false - Azure AD Connect Health is part of Azure AD Premium and requires the necessary licenses to be available.

True

True or false - Security groups created in Microsoft 365 can be used with SharePoint, Exchange, MDM, Windows, and more. A security group you create in SharePoint is only recognized by that SharePoint site collection.

True

True or false, the Readiness Toolkit for Office add-ins and Microsoft Visual Basic for Applications (VBA) macros and add-ins can help identify compatibility issues with the VBA macros and add-ins that an organization uses with Office. The Readiness Toolkit includes the Readiness Report Creator, which creates an Excel report with VBA macro compatibility. A) True B) False

True

True or false, you can set an expiration date to access SharePoint information when setting up permission levels.

True

Company1.com \ Perimeter network --- Azure AD / Company2.com You network includes two Azure Directory Doman Services (AD DS) forest root domains. Your company plans to add an Azure AD tenant as shown in the exh1b1t. You need to develop a plan that lets you consolidate users from Company1.com and Company2.com into the same Azure AD tenant. You plan to implement pass through authentication (PTA). Solution: You plan to install Azure AD connect on a company1.com member server in the perimeter network. Does this solution meet the goal?

Yes

You use the Microsoft 365 admin center to add a new domain to your subscription. Your company owns the domain name added. You need to configure DNS to support domain verification. Your company manages its own DNS resource records. Solution: Your create an MX resource record to verify that you own the domain. Does this solution meet the goal?

Yes

Your company has a Microsoft 365 E5 subscription. The subscription contains the users shown in the following table Name Role Use1 --- Global Reader User2 --- Security Operator User3 --- Helpdesk Administrator User4 --- Exchange Adm1n1strator Users5 --- Global Adm1rnstrator User6 --- None User1 loses the password for their account and so they report the issue to User3, who resets their password. User 5 plans to enable Self -Service Password Reset (SSPR) in Azure AD for users so that they can reset their own passwords without having to contact User3. In order to be able to benefit from SSPR, users must configure at least one authentication method. You need to recommend an authentication method that complies with SSPR in order to enable users to benefit from it. Solution: Email One Time Password (OTP). Does this Solution meet the goal?

Yes

Your network 1s configured as an Azure Directory Domain Services (AD DS) domain. You deploy AD FS on your on premises domain. This includes an AD FS farm with two AD FS servers deployed on your internal network and two Web Access Proxies (WAPs) deployed in your perimeter network. You configure a hybrid identity with an Azure AD tenant. You run a custom Azure AD Connect installation to enable federated authentication. Your configuration includes an active Azure AD Connect server and an Azure AD Connect server in staging mode. You need to monitor information about authentication activity. This should include: • Number and types of authentication. • Number and types of authentication errors. Solution: You install the Azure AD Connect Health agent for AD FS on each of your AD FS and WAP servers. You enable auditing on your AD FS servers. Does this solution meet the goal?

Yes

What are the 4 types of Microsoft 365 Business subscriptions?

1. Microsoft 365 Apps for Business 2. Microsoft 365 Business Basic 3. Microsoft 365 Business Standard 4. Microsoft 365 Business Premium

What are the three Subscription types/tiers that Microsoft offers?

1. Microsoft 365 Business 2. Microsoft 365 Enterprise 3. Microsoft 365 Education

What is the first crucial decision in setting up an Azure AD Hybrid identity solution?

A) Authentication

What additional things do you need to setup in order to configure a multi-forest deployment when planning for authentication? (Choose 2) A) Autodiscover (Each exchange forest must be authoritative for at least one SMTP namespace) B) Certificates C) A joint forest D) You can only choose one forest

A) Autodiscover (Each exchange forest must be authoritative for at least one SMTP namespace) B) Certificates

What should an organization always do when it plans its network requirements for a Microsoft 365 deployment? A) Avoid VPN tunneling through other company locations B) Require user authentication on outbound proxies C) Locate your more active network systems between a client and the Microsoft 365 resource

A) Avoid VPN tunneling through other company locations

Azure AD Connect is made up of two primary components. One of the components is Synchronization services. This component is responsible for synchronizing users, groups, and other objects. It's also responsible for making sure identity information for your on-premises users and groups is matching the cloud. What is the second primary component of Azure AD Connect? A) Azure AD Connect Health B) Azure AD Federation service C) Azure AD Pass-through Authentication service

A) Azure AD Connect Health

Contoso currently has on-premises Exchange Server and SharePoint deployments. The company plans to deploy each service in a hybrid environment as part of its transition to Microsoft 365. It also plans to use password authentication along with multi-factor authentication for added security. Given these requirements, which directory synchronization method should Contoso use? A) Azure AD Connect sync B) Azure AD Connect Cloud Sync C) Azure AD modern synchronization

A) Azure AD Connect sync

What are the two Microsoft directory synchronization tools used for synchronizing your AD DS to Azure AD? A) Azure AD Connect sync B) Azure AD Connect Cloud Sync C) IDFix D) Sync Center

A) Azure AD Connect sync B) Azure AD Connect Cloud Sync

Which Azure AD Premium license includes Azure AD Identity Protection and Azure AD Privileged Identity Management

A) Azure AD Premium P2

In cloud authentication, this method is the simplest way to enable authentication for on-premises directory objects in Azure AD. Users can use the same username and password that they use on-premises without having to deploy any extra infrastructure. A) Azure AD password hash synchronization B) Azure AD Pass-through authentication C) Federated authentication

A) Azure AD password hash synchronization

What are the two main ways you can verify that you own the domain you are trying to add to your tenant?

A) By adding a txt or mx record

How is Azure AD pass-through authentication configured? A) By using Azure AD Connect B) In the Microsoft 365 admin center C) In the Azure AD admin center

A) By using Azure AD Connect

Which of the following Azure AD authentication method only needs is a subscription and a sign-in account. The strategy is managed from a web interface from the Microsoft 365 Admin Center or by remotely accessing the service using PowerShell. A) Cloud only B) Password hash synchronization C) Azure AD Pass-through authentication D) Azure AD Passs-through authentication with seamless SSO E) Federated SSO with AD FS

A) Cloud only

Which overall process for creating a tenant account for Microsoft 365 is the following: Verify the domains that you plan to use with the tenant, configure application settings, directory synchronization, and single sign-on. A) Configure the Microsoft 365 subscription. B) Set up accounts and mailboxes. C) Migrate existing data to Microsoft 365. D) Validate functionality.

A) Configure the Microsoft 365 subscription.

Which overall process for creating a tenant account for Microsoft 365 is the following: An organization can mix different Microsoft 365 plans according to its business needs. For example, an organization can purchase 200 Business Essentials seats, 200 Business Premium seats, and 200 Office 365 E3 seats on a single tenant. A) Decide which Microsoft 365 plan(s) meet your organization's requirements. B) Inventory the current environment in the organization. C) Make key deployment decisions. D) Fix potential deployment blockers and clean up your organization.

A) Decide which Microsoft 365 plan(s) meet your organization's requirements.

Azure Active Directory single sign-on creates Azure AD Connect trace log files. These files contain personal data. What best practice can you employ to improve the privacy of the data that's stored in these files? A) Ensure no data is kept beyond 48 hours B) Purge log files as they come available C) Request a custom policy from Microsoft Support services

A) Ensure no data is kept beyond 48 hours

What PowerShell command can you run that will allow you to run commands directly from the computer?

A) Enter-PSSession

What Microsoft 365 add-on can be added to the Office 365 E3 and E5 subscriptions. This service provides organizations with other options to protect against unknown device intrusions, malware threats, and other identity protection. When it is added to a Microsoft 365 E5 subscription, Cloud App Security and Azure Advanced Threat Protection (ATP) are also included.

A) Enterprise Mobility and Security

What tool can you use to clean up your AD environment?

A) IdFix Directory Synchronization Error Remediation

What tool discovers and remediates identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory?

A) IdFix Directory Synchronization Error Remediation

What powershell command can you run to install the Exchange online management?

A) Install-module -name ExchangeOnlineManagement

What PowerShell command can you run to install the Microsoft commands?

A) Install-module msonline

Which Microsoft 365 subscription is the following: Includes online versions of Office, including Word, Excel, and PowerPoint, and cloud file storage and sharing capabilities with 1-TB storage per user. It also includes the option to fully install Office applications locally. It also provides enterprise app management and self-service business intelligence capabilities.

A) Microsoft 365 Apps for enterprise

What PowerShell command will let you create a Microsoft 365 group?

A) New-UnifiedGroup (in ExchangeOnline)

What PowerShell will let you create a security group?

A) New-msolgroup

What connects your Office 365 tenant to Azure monitor/Azure Sentinel?

A) Office 365 connector

What kind of authentication synchronization uses an agent to talk to your domain and verify who you are? A) Pass-through authentication (PTA) B) Password hash synchronization (PHS) C) Federated authentication

A) Pass-through authentication (PTA)

As the Enterprise Administrator for Contoso, you're planning its Microsoft 365 deployment. You're currently investigating authentication strategies. While you're interested in Azure AD Connect Pass-through authentication, you're concerned whether Contoso's environment can support it. If you implement pass-through authentication, which of the following scenarios will it support? A) Users sign in to Outlook clients using legacy protocols such as Exchange ActiveSync, SMTP, POP, and IMAP B) Users sign in to Skype for Business client applications without modern authentication C) Access to calendar sharing and free/busy information in Exchange hybrid environments on Office 2010 only

A) Users sign in to Outlook clients using legacy protocols such as Exchange ActiveSync, SMTP, POP, and IMAP

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft Office 365 tenant. You suspect that several Office 365 features were recently updated. You need to view a list of the features that were recently updated in the tenant. Solution: You use Message center in the Microsoft 365 admin center. Does this meet the goal? A) Yes B) No

A) Yes

Why would you choose a full hybrid (co-existence) exchange migration instead of a cut over? (Choose 3) A) You have more than 2,000 users B) You plan to keep mailboxes in your environment and in the cloud for a long period of time C) You need free/busy sync'd between the cloud and on premise D) You need to purchase licenses

A) You have more than 2,000 users B) You plan to keep mailboxes in your environment and in the cloud for a long period of time C) You need free/busy sync'd between the cloud and on premise

When passwords are changed in Microsoft 365, they can be written back to the on-premises Active Directory. Which of the following requirements must be met to enable this feature? A) You need an Azure Active Directory Premium license B) Your domain controllers must be at least Windows Server 2003 C) You need a Microsoft 365 E5 license

A) You need an Azure Active Directory Premium license

Which overall process for creating a tenant account for Microsoft 365 is the following: This step is optional; it's only required if you plan to keep your existing data. A) Set up accounts and mailboxes. B) Validate functionality. C) Migrate existing data to Microsoft 365. D) Decide which Microsoft 365 plan(s) meet your organization's requirements.

C) Migrate existing data to Microsoft 365.

What Azure service enables organizations to minimize the number of people who have persistent access to privileged operations. This service introduces the concept of an eligible administrator. Eligible admins are users who need privileged access now and then, but not every day. The role is inactive until the user needs access. At that point, they must complete an activation process and become an active admin for a predetermined amount of time.

Azure AD Privileged Identity Management

Put the following process steps for creating a tenant account for Microsoft 365 in order: A) Configure the Microsoft 365 subscription. B) Set up accounts and mailboxes. C) Make key deployment decisions. D) Inventory the current environment in the organization. E) Validate functionality. F) Migrate existing data to Microsoft 365. G) Fix potential deployment blockers and clean up your organization. H) Decide which Microsoft 365 plan(s) meet your organization's requirements. I) Migrate users over a period of time.

Answer H) Decide which Microsoft 365 plan(s) meet your organization's requirements. D) Inventory the current environment in the organization. C) Make key deployment decisions. G) Fix potential deployment blockers and clean up your organization. A) Configure the Microsoft 365 subscription. B) Set up accounts and mailboxes. F) Migrate existing data to Microsoft 365. E) Validate functionality. I) Migrate users over a period of time.

What is the mode called for the backup server for your Azure AD server?

Azure AD Connect server in Staging mode

You're the Enterprise Administrator for Contoso, which is planning to migrate to Microsoft 365. What's the first thing you should do when planning Contoso's tenant setup and creating its tenant account? A) Inventory the current environment in the organization B) Decide which Microsoft 365 plan(s) meet your organization's requirements C) Fix potential deployment blockers and clean up your organization

B) Decide which Microsoft 365 plan(s) meet your organization's requirements

Azure AD entitlement management introduces the concept of a(n) BLANK. A(n) BLANK is a bundle of all the resources with the access a user needs to work on a project or perform their task. It is used to govern access for your internal employees, and also users outside your organization. A) Azure AD Identity Governance B) Access Package C) Conditional Access

B) Access Package

Conditional Access policies are enforced at what point during authentication? A) When you are initially trying to sign in B) After first-factor authentication is completed C) After second-factor authentication is completed

B) After first-factor authentication is completed

In cloud authentication, this method provides a simple password validation for Azure AD authentication services by using a software agent that runs on one or more on-premises servers. The servers validate the users directly with your on-premises Active Directory, which ensures that the password validation doesn't happen in the cloud. A) Azure AD password hash synchronization B) Azure AD Pass-through authentication C) Federated authentication

B) Azure AD Pass-through authentication

BLANK is an Azure AD Identity Governance feature. It enables organizations to manage identity and access lifecycle at scale. It does so by automating access request workflows, access assignments, reviews, and expiration. It can help you more efficiently manage access to groups, applications, and SharePoint Online sites for internal users. It can also do the same for users outside your organization who need access to those resources. A) Azure AD Identity Governance B) Azure AD entitlement management C) Conditional Access

B) Azure AD entitlement management

Which Microsoft 365 Business subscription is the following: -Host email with a 50-GB mailbox and custom email domain address. -Create a hub for teamwork to connect your teams with Microsoft Teams. -Access web versions of Office apps: Outlook, Word, Excel, PowerPoint, OneNote (plus Access and Publisher for PC only). -Store and share files with 1 TB of OneDrive cloud storage per user. -Host online meetings and video conferencing for up to 250 users. A) Apps for Business B) Business Basic C) Business Standard D) Business Premium

B) Business Basic

In your role as Enterprise Administrator for Lucerne Publishing, Inc., you're cleaning up the company's on-premises Active Directory environment by running the IdFix tool. The IdFix tool detects a topleveldomain error. Which of the following changes would be representative of a fix that you would make for this type of error? A) Change myaddress@lucerne publishing.com to [email protected] B) Change [email protected] to [email protected] C) Change my"work"[email protected] to [email protected]

B) Change [email protected] to [email protected]

You're the Enterprise Administrator for Fabrikam, Inc. You're reviewing the different identity strategies that Microsoft 365 provides for companies to authenticate into its services. As part of your review, you're looking for the strategy that has the least setup requirements. Which of the following identity strategies meets this Fabrikam business requirement? A) Password Hash Synchronization B) Cloud Only C) Azure AD Pass-Through Authentication

B) Cloud Only

Fabrikam has multiple on-premises Active Directory forests and a single Microsoft 365 tenant. To complete its hybrid deployment prerequisites, what must Fabrikam do so that its secure mail transport functions correctly in its hybrid deployment? A) Simplify its on-premises environment by combining its Active Directory forests B) Each forest must use a globally trusted, dedicated CA-issued certificate C) Consider deploying Microsoft 365 only in your primary sign-in forest for your initial rollout of Microsoft 365

B) Each forest must use a globally trusted, dedicated CA-issued certificate

You're the Enterprise Administrator for Fabrikam, Inc. You're reviewing the different deployment strategies that Microsoft 365 provides for companies to authenticate into its services. In which of the following deployment strategies does authentication occur on-premises? A) Password Hash Synchronization + Seamless SSO B) Federation with AD FS C) Azure AD Pass-Through Authentication + Seamless SSO

B) Federation with AD FS

Which Microsoft 365 administrator role can change the password of a user who's assigned to the Microsoft 365 Global administrator role? A) User Management administrator B) Global administrator C) Password administrator

B) Global administrator

Which overall process for creating a tenant account for Microsoft 365 is the following: This step involves identifying the number of user accounts and the number and size of mailboxes, as well as collecting client versions and configurations, detailed file storage information, intranet sites to migrate, and online meeting and Instant Messaging systems to migrate. A) Decide which Microsoft 365 plan(s) meet your organization's requirements. B) Inventory the current environment in the organization. C) Make key deployment decisions. D) Fix potential deployment blockers and clean up your organization.

B) Inventory the current environment in the organization.

Where can you create, modify, and desync custom user objects when directory synchronization is implemented? A) Microsoft 365 admin center B) Local Active Directory Users and Computers snap-in in your on-premises Active Directory C) Exchange Online admin center

B) Local Active Directory Users and Computers snap-in in your on-premises Active Directory

Name two tools that helps with analyzing your network readiness for planning network intgration to MS 365 A) ID Fix tool B) Microsoft Remote Connectivity Analyzer C) AD Sync D) Microsoft 365 Support and Recovery Assistant (SARA)

B) Microsoft Remote Connectivity Analyzer D) Microsoft 365 Support and Recovery Assistant (SARA)

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft Office 365 tenant. You suspect that several Office 365 features were recently updated. You need to view a list of the features that were recently updated in the tenant. Solution: You use the View service requests option in the Microsoft 365 admin center. Does this meet the goal? A) Yes B) No

B) No

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft Office 365 tenant. You suspect that several Office 365 features were recently updated. You need to view a list of the features that were recently updated in the tenant. Solution: You use Dashboard in Security & Compliance. Does this meet the goal? A) Yes B) No

B) No

Which authentication mode supports multi-forest environments if there are forest trusts between your AD forests and if name suffix routing is correctly configured? A) Hash synchronization B) Pass-through C) Federated

B) Pass-through

Which of the following Azure AD authentication method hashes of user passwords are synchronized from on-premises Active Directory to Azure AD. When passwords are changed or reset on-premises, the new password hashes are immediately synchronized to Azure AD. This design enables users to always use the same password for cloud resources and on-premises resources. The passwords themselves are NEVER sent to Azure AD or stored in Azure AD in clear text. A) Cloud only B) Password hash synchronization C) Azure AD Pass-through authentication D) Azure AD Passs-through authentication with seamless SSO E) Federated SSO with AD FS

B) Password hash synchronization

What kind of authentication synchronization synchronizes your domain and Microsoft so that a remote user can still log into Microsoft even if Microsoft cannot communicate with your domain? A) Pass-through authentication (PTA) B) Password hash synchronization (PHS) C) Federated authentication

B) Password hash synchronization (PHS)

Contoso has chosen to implement Conditional Access policies. Conditional Access will enable it to protect the company's regulated content by requiring certain criteria be met before granting access to the content. What prerequisite must Contoso complete to implement Conditional Access policies? A) Install Microsoft Intune B) Purchase an Azure AD Premium license C) Implement Azure AD Identity Governance

B) Purchase an Azure AD Premium license

Which overall process for creating a tenant account for Microsoft 365 is the following: Assign the appropriate license types to users and migrate email and files to the subscription. A) Configure the Microsoft 365 subscription. B) Set up accounts and mailboxes. C) Migrate existing data to Microsoft 365. D) Validate functionality.

B) Set up accounts and mailboxes.

BLANK locks out bad actors who are trying to guess users' passwords or use brute-force methods to gain access. It can recognize sign-ins coming from valid users and treat them differently than ones of attackers and other unknown sources. It locks out the attackers, while letting an organization's users continue to access their accounts and be productive. A) Safe Lock B) Smart Lockout C) Conditional Access

B) Smart Lockout

You're the Enterprise Administrator for Tailspin Toys, Inc. Your company's Microsoft 365 tenant is deployed in a Cloud Only environment. You're interested in enabling Azure Active Directory Multi-Factor Authentication (MFA). Which of the following authentication options can Tailspin Toys use as a second type of authentication for MFA? A) Physical or virtual smart card B) Text message C) Azure AD Multi-Factor Authentication App

B) Text message

When doing a cut over migration to Exchange Online, what is the maximum limit of mailboxes that can be migrated? A) 500 B) 1,000 C) 2,000 D) 5,000

C) 2,000

As the Enterprise Administrator for Northwind Traders, you accidentally deleted a user account in your on-premises Active Directory. Since the deletion is synchronized to Microsoft 365, the user object was put in a deleted state and no longer appears in the Microsoft 365 Active Users list. How long do you have to recover the deleted account before it can no longer be restored? A) 45 days B) 60 days C) 30 days

C) 30 days

Which of the following Azure AD authentication method allows your users to sign in to both on-premises and cloud-based applications by using the same passwords. It signs users in by validating their passwords directly against on-premises Active Directory. A) Cloud only B) Password hash synchronization C) Azure AD Pass-through authentication D) Azure AD Passs-through authentication with seamless SSO E) Federated SSO with AD FS

C) Azure AD Pass-through authentication

As the Enterprise Administrator for Tailspin Toys, you're investigating several challenges currently faced by the company. First, users don't know what access they should have, or they don't know who to contact to approve their access. Second, once they receive access to a resource, they often hold on to that access longer than is required for business purposes. Which of the following Microsoft 365 features will help you address these issues at Tailspin Toys? A) Self-service password reset B) Azure AD Smart Lockout C) Azure AD entitlement management

C) Azure AD entitlement management

Lucerne Publishing has an existing on-premises directory, and it wants to move its apps to Microsoft 365. The company spent considerable time and effort determining the correct authentication method that it wants to use. In doing so, it considered the time, existing infrastructure, complexity, and implementation costs. Lucerne narrowed down its primary authentication requirement to one key factor. It wants its users to use the same username and password that they use on-premises without having to deploy any extra infrastructure. Given this overriding requirement, which authentication method should Lucerne Publishing employ? A) Federated authentication B) Azure AD Pass-through Authentication C) Azure AD password hash synchronization

C) Azure AD password hash synchronization

Which Microsoft 365 Business subscription is the following: -Get desktop versions of Office apps: Outlook, Word, Excel, PowerPoint, OneNote (plus Access and Publisher for PC only). -Host email with a 50-GB mailbox and custom email domain. -Create a hub for teamwork with Microsoft Teams. -Store and share files with 1 TB of OneDrive cloud storage per user. -Use one license to cover fully installed, Office apps on five mobile devices, five tablets, and five PCs or Macs per user. A) Apps for Business B) Business Basic C) Business Standard D) Business Premium

C) Business Standard

BLANK is the protection of regulated content in a system by requiring certain criteria to be met before granting access to the content. BLANK brings signals together to make decisions and enforce organizational policies. It is at the heart of the new identity-driven control plane. At their simplest are if-then statements. A) Azure AD Identity Governance B) Access Package C) Conditional Access

C) Conditional Access

As Contoso's enterprise administrator, you're creating an access package within Azure AD entitlement management. This package will manage access to SharePoint Online sites for your internal users. As part of the access package, you're creating an internal user policy. Which of the following items must you define as part of the internal user policy? A) The sites that Contoso's internal users need access to B) The roles that Contoso's internal users must be assigned to access the sites C) Contoso's internal users who are eligible to request access

C) Contoso's internal users who are eligible to request access

BLANK is a feature in Azure AD that eliminates friction caused by UserPrincipalName and ProxyAddress conflicts when running directory synchronization. This feature allows object attributes to be synchronized even if they aren't unique. Instead of completely failing to provision or update an object with a duplicate attribute, Azure AD quarantines the duplicate attribute. A) Identity Synchronization Tool B) Synchronization Service Manager C) Duplicate Attribute Resiliency D) Directory Synchronization Troubleshooter

C) Duplicate Attribute Resiliency

AD FS allows the secure sharing of identity information between trusted business partners (known as a BLANK) across an extranet, and it uses Active Directory Domain Service to authenticate users. A) Hash synchronization B) Pass-through C) Federated

C) Federated

Which overall process for creating a tenant account for Microsoft 365 is the following: Clean up user accounts, get data and the network ready for migration, update client software. A) Inventory the current environment in the organization. B) Make key deployment decisions. C) Fix potential deployment blockers and clean up your organization. D) Configure the Microsoft 365 subscription.

C) Fix potential deployment blockers and clean up your organization.

Which overall process for creating a tenant account for Microsoft 365 is the following: Determine how you'll create or synchronize accounts, handle user authentication, data migration, and whether you want hybrid integration. A) Decide which Microsoft 365 plan(s) meet your organization's requirements. B) Inventory the current environment in the organization. C) Make key deployment decisions. D) Fix potential deployment blockers and clean up your organization.

C) Make key deployment decisions.

You're the Enterprise Administrator for Contoso, which is planning to migrate to Microsoft 365. They've narrowed down the Microsoft 365 plan to the business plans that take advantage of support for unlimited users. The company has also identified the following requirements: the ability to install Office 2019 apps on Mac computers, the ability to install Office on smartphones and tablets, and support for business-class email. You have been asked to identify the Microsoft 365 plan that meets these requirements while minimizing the total cost. Which plan should you use? A) Office 365 E3 B) Office 365 F3 C) Microsoft 365 Apps for enterprise

C) Microsoft 365 Apps for enterprise

Your company has an on-premises Microsoft Exchange Server 2016 organization and a Microsoft 365 Enterprise E5 subscription.You plan to migrate mailboxes and groups to Exchange Online.You start a new migration batch.Users report slow performance when they use the on-premises Exchange Server organization.You discover that the migration is causing the slow performance.You need to reduce the impact of the mailbox migration on the end-users.What should you do? A) Create a mail flow rule B) Configure back pressure C) Modify the migration endpoint settings D) Create a throttling policy

C) Modify the migration endpoint settings

When dealing with Azure AD SSO trace log files, which file maintains the state of the previous installation of Azure AD Connect or Azure AD Connect Cloud Sync. It's then used when an upgrade installation is run. This file never contains any data about a person, and it should never be deleted. A) UserData.xml B) InstallData.xml C) PersistedState.xml D) UserState.xml

C) PersistedState.xml

As the Enterprise Administrator for Northwind Traders, you accidentally deleted a user account in your on-premises Active Directory. Because the deletion was synchronized to Microsoft 365, the user object was put in a deleted state and no longer appears in the Microsoft 365 Active Users list. Since you prefer to use Windows PowerShell to do system maintenance, which PowerShell cmdlet should you use to recover the deleted user? A) Recover-MsolUser B) Recycle-MsolUser C) Restore-MsolUser

C) Restore-MsolUser

Tailspin Toys wants to remediate Active Directory identity issues when onboarding to Microsoft 365. It wants to focus specifically on the Windows Server Active Directory errors reported by Azure AD Connect Cloud Sync. Tailspin plans to use Azure AD Connect Cloud Sync as its directory synchronization tool. What should Tailspin Toys do to help clean up its Active Directory? A) Run Azure AD Smart Lockout B) Run Azure AD Connect C) Run IdFix

C) Run IdFix

What security feature would display this to a user if their account gets locked: Your account is temporarily locked to prevent unauthorized use. Try again later, and if you still have trouble, contact your admin. A) Safe Lock B) Conditional Access C) Smart Lockout

C) Smart Lockout

As Fabrikam's Enterprise Administrator, you're planning a migration to Microsoft 365. You plan to authenticate all users in Azure Active Directory. As part of this process, the hashes of your users' passwords must be replicated between Fabrikam's on-premises environment and Microsoft 365. Which of the following identity types should you use? A) Cloud Only B) Federated identity C) Synchronized identity

C) Synchronized identity

Key troubleshooting tasks for directory synchronization include analyzing logs for errors and remediating synchronization errors. Which of the following errors can typically occur during directory synchronization from your on-premises Active Directory to Microsoft 365? A) The email from your Outlook client got stuck in the Outbox folder and can't be sent B) Phone calls from your Skype for Business client have poor audio quality C) Unexpected changes in Active Directory that affect OU scoping or attribute filtering

C) Unexpected changes in Active Directory that affect OU scoping or attribute filtering

As Fabrikam's Enterprise Administrator, you're using the sample deployment planning checklist provided in this training to help keep your Microsoft 365 deployment on schedule. You determined your deployment goals and inventoried your current environment. Which of the following tasks should you do next? A) Collect details about any intranet sites that you plan to migrate B) Prepare for directory synchronization C) Update client software versions

C) Update client software versions

Which overall process for creating a tenant account for Microsoft 365 is the following: Ensure all relevant services are functional. A) Set up accounts and mailboxes. B) Migrate existing data to Microsoft 365. C) Validate functionality. D) Migrate users over a period of time.

C) Validate functionality.

You recently migrated your on-premises email solution to Microsoft Exchange Online and are evaluating which licenses to purchase.You want the members of two groups named IT and Managers to be able to use the features shown in the following table. Feature = Microsoft Azure AD conditional access - Available to IT group, managers group Feature Microsoft Azure AD Privileged Identity Management - Available to IT Group The IT group contains 50 users. The Managers group contains 200 users.You need to recommend which licenses must be purchased for the planned solution. The solution must minimize licensing costs.Which licenses should you recommend? A) 250 MS 365 E3 only B) 50 MS 365 E3 and 200 MS 365 E5 C) 250 MS 365 E5 only D) 200 MS 365 E3 and 50 MS 365 E5

D) 200 MS 365 E3 and 50 MS 365 E5

Which of the following Azure AD authentication method is when your users are accessing applications on their corporate machines inside your corporate network, they don't need to type in their passwords to sign in A) Cloud only B) Password hash synchronization C) Azure AD Pass-through authentication D) Azure AD Pass-through authentication with seamless SSO E) Federated SSO with AD FS

D) Azure AD Pass-through authentication with seamless SSO

Which Microsoft 365 Business subscription is the following: -Stay up to date with the latest versions of Word, Excel, PowerPoint, and more. -Connect with customers and coworkers using Outlook, Exchange, and Teams. -Manage your files from anywhere with 1 TB of cloud storage on OneDrive per user. -Defend your business against advanced cyberthreats with sophisticated phishing and ransomware protection. -Control access to sensitive information using encryption to help keep data from being accidentally shared. -Secure devices that connect to your data and help keep iOS, Android, Windows, and Mac devices safe and up to date. A) Apps for Business B) Business Basic C) Business Standard D) Business Premium

D) Business Premium

Which of the following Azure AD authentication method users sign in to Azure AD-based services with their on-premises passwords. This service uses an intermediary server call to a WAP, which uses proxy DNS names to route users to their required location. While they're on the corporate network, they don't even have to enter their passwords. It can be the most complex and costliest to set up. A) Cloud only B) Password hash synchronization C) Azure AD Pass-through authentication D) Azure AD Passs-through authentication with seamless SSO E) Federated SSO with AD FS

E) Federated SSO with AD FS

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. You purchase a domain named contoso.com from a registrar and add all the required DNS records. You create a user account named User1. User1 is configured to sign in as [email protected]. You need to configure User1 to sign in as [email protected]. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: Actions (3 choices) A) Run set-msolDomainAuthentication -TenantID contoso.com B) Modify the email address of User1 C) Modify the username of User 1 D) Verify the custom domain E) Add contoso.com as a SAN for an X.509 certificate F) Add a custom domain name

F) Add a custom domain name; D) Verify the custom domain; C) Modify the username of User1

True or False - Group writeback is an optional feature in Azure AD Connect and Azure AD Connect Cloud Sync.

False - Group writeback is an optional feature in Azure AD Connect. However, group writeback isn't available in Azure AD Connect Cloud Sync.

What license is designed for Firstline workers? It does not include a license to install office applications locally because it's a cloud-based subscription that only provides access to online versions of office?

Office 365 F3

What is the attribute that uniquely identifies an object as being the same object on premise and in Azure AD?

SourceAnchor attribute or immutableID

True or False - Password writeback is supported in both Azure AD Connect and Azure AD Connect Cloud Sync. However, device writeback is only supported in Azure AD Connect.

True