ms-900 "Non a-b-c"

Because cloud computing rents cloud-based resources, it removes much of the ____________ associated with owning and maintaining physical assets on-premises. > *Capex* > *Opex*

> *Capex*

Which of the following Microsoft tools requires the tenant admin to approve a request before access to your datacenter is granted to Microsoft engineers? > *Service Trust Portal* > *Microsoft Intune* > *Customer Lockbox for Office 365* > *Compliance Manager*

> *Customer Lockbox for Office 365*

Which of the following block or allow network traffic based on the traffic's properties? > *DLP policy* > *Firewall* > *MAC address* > *Router*

> *Firewall*

Which of the following are feature pillars of Windows 10 Enterprise? > *Limited hardware support* > *Complex updates* > *Intelligent security* > *Rigid management*

> *Intelligent security*

The two office update channels are

> *Security and Quality updates*

You are the Microsoft 365 administrator for a company. Your company wants to learn more about what happens if the availability terms of the Microsoft Office 365 services are not met. Where can you find this information? > *Service Level agreement* > *Microsoft Services agreement* > *Microsoft Cloud agreement* > *Microsoft Products and Services agreement* > *Microsoft Enterprise agreement*

> *Service Level agreement*

What types of services does Microsoft Azure offer? > *Directory services,Backup* > *Directory services,Backup,Human resources* > *Virtual machines,Directory services,Backup,Streaming media services*

> *Virtual machines,Directory services,Backup,Streaming media services*

*Yes | No* > *Microsoft 365 Global Administrators use Microsoft Workplace Analytics to examine network traffic patterns for troubleshooting purposes* Yes O | No O > *Microsoft Workplace Analytics can be helpful in understanding the collaboration patterns and usage of variouse Microsoft 365 services* Yes O | No O > *Microsoft Workplace Analytics helps employees work more effeciently so that they can become more productive* Yes O | No O

> Microsoft 365 Global Administrators use Microsoft Workplace Analytics to examine network traffic patterns for troubleshooting purposes: *NO* > Microsoft Workplace Analytics can be helpful in understanding the collaboration patterns and usage of variouse Microsoft 365 services: *YES* > Microsoft Workplace Analytics helps employees work more effeciently so that they can become more productive: *NO*

*Yes | No* > *You can secure web apps that are published through Azure AD Application Proxy by using Multi-Factor Authentication (MFA) in the cloud* Yes O | No O > *You secure web apps that are published through Azure AD Application Proxy by using MFA server on-premises* Yes O | No O

> You can secure web apps that are published through Azure AD Application Proxy by using Multi-Factor Authentication (MFA) in the cloud: *YES* > You secure web apps that are published through Azure AD Application Proxy by using MFA server on-premises: *NO*

What is the license requirement to use privileged identity management

Azure AD premium P2

When talking about cloud services, what does the term "scalable" mean? > *Able to build models* > *Abel to resize organizational data structures* > *Able to add or reduce service capacity on demand* > *Service are deployed in a redudant manner*

*Able to add or reduce service capacity on demand*

What is the maximum number of licenses you can purchase under a Microsoft 365 Business subscription? > *100* > *200* > *300* > *500*

> *300*

An organization plan to deploy Microsoft Office 2019 of Office 365 ProPlus. What are two advantages of Office 365 ProPlus? > *Features remain constant through the lifetime of the applications* > *Office 365 ProPlus includes downgrade rights* > *A single license may be deployed to multiple devices* > *Fully functional Office mobile apps are free to install and use*

> *A single license may be deployed to multiple devices* > *Fully functional Office mobile apps are free to install and use*

Which of the following tools does the Service Trust Portal NOT include? > *Compliance Manager* > *Trust documents* > *Regional compliance guidance* > *Accessibility assurance controls* > *Privacy*

> *Accessibility assurance controls*

Which of the following is a key capability of Compliance Manager in Microsoft 365? > *Workplace analytics* > *Actionable insights* > *MyAnalytics* > *Streamlined compliance*

> *Actionable insights*

You are the Microsoft Administrator for a company. Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicios code. You need to remove the message from inboxes and disable the PDF threat if an affected document is opened. Which feature should you implement? > *Microsoft Exchange Admin Center block lists* > *Sender Policy Framework* > *Advanced Threat Protection Anti-Phising* > *Zero-hour auto purge* > *DKIM signed messages with mail flow rules*

> *Advanced Threat Protection Anti-Phising*

Which of the following is considered a data security threat? (Select two) > *Data leakage via removable media* > *Unauthorized user accessing information on a server* > *An eavesdropping attack* > *A denial of service attack*

> *An eavesdropping attack* > *A denial of service attack*

You are the Microsoft 365 Administrator for a company. All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the application. You need to implement a Microsoft Intune Policy to enforce the security requirement. Which policy should you use? > *Device Compliance* > *Device Configuration* > *App Protection* > *App Configuration*

> *App Protection*

A company is moving to Microsoft Azure. Some applications cannot be moved. You need to identify which applications will remain in a hybrid environment after the migration. Which applications will remain in a hybrid environment? > *Applications that manage sensitive information* > *Applications that use a USB sensitive information access* > *Legacy applications that use a message-based interface* > *A new server that runs several line-of-business applications*

> *Applications that manage sensitive information*

Pick one of the 3 Actions: Apply Retention Policies | Apply Preservation Policies | Configure the Microsoft SharePoint second-stage recycle bin. > *Delete documents that are no longer used*

> *Apply Retention Policies*

Pick one of the 3 Actions: Apply Supervision Policies | Configure document approval | Configure Microsoft Outlook mail tips. > *Ensure that classifications are enforced*

> *Apply Supervision Policies*

A company that has 50 employees plans to purchase a Microsoft 365 Business subscription. Which two payment methods are available? > *Paypal* > *Automatic bank Transfer* > *Enterprise Agreement* > *Credit Card or Debit Card*

> *Automatic bank Transfer* > *Credit Card or Debit Card*

Drag and Drop Private Preview | Public Preview | General Availability > *Available to all customers* > *Can be turnt on for evaluation* > *Available to specific customers* > *Compliance testing completed* > *Available for purchase*

> *Available to all customers: General Availability > *Can be turnt on for evaluation: Public Preview > *Available to specific customers: Private Preview > *Compliance testing completed: Private Preview > *Available for purchase: General Availability

Mobile device management (MDM) autoenrollment is a feature in which version of Azure AD? > *Azure AD Free* > *Azure AD Basic* > *Azure AD Premium P1*

> *Azure AD Premium P1*

You want your users to have the ability to manage their group memberships themselves. What version of Azure AD supports this capability? > *Azure AD Free* > *Azure AD Basic* > *Azure AD Premium P1* > *Azure AD Premium P2*

> *Azure AD Premium P1*

You want the ability to elevate a user's account to that of a temporary administrator. Which Microsoft 365 identity management feature could help with this? > *Azure MFA* > *Azure AD Privileged Identity Management* > *Microsoft Identity Manager* > *Azure AD Identity Protection*

> *Azure AD Privileged Identity Management*

A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs.You should implement Information Rights Management.Review the underlined text. If it makes the statement correct, select No change is needed. if the statement is incorrect, select the answer choice that makes the statement correct. > *No change needed* > *Azure Information Protection Premium P2* > *Azure Information Protection Premium P1* > *Microsoft 365 E3*

> *Azure Information Protection Premium P2*

You are a security manager for your organization. You need to configure document classification. Which tool should you use? > *Classification Explorer* > *Azure Identity Protection* > *Azure Information Protection* > *Exchange data Loss Prevention policies*

> *Azure Information Protection*

You are a Microsoft 365 administrator for a company. You need to identify security vulnerabilities by using the Office 365 Attack Simulator. Which three attack simulations are available? (Each correct answer presents a complete solution. Choose three.) > *Brute-force password* > *Cross-site scripting* > *Password-spray* > *Denial-of-service* > *Display name spear-phishing*

> *Brute-force password* > *Password-spray* > *Display name spear-phishing*

Which of the following best describes the benefits of cloud computing? > *Cloud computing is cost effective, elastic and on-premises* > *Cloud computing is scalable, inelastic but always current* > *Cloud computing is scalable, elastic and reliable* > *Cloud computing is cost effective but unreliable*

> *Cloud computing is scalable, elastic and reliable*

Which of the following do Amazon Web Services (AWS) and Google Cloud offer in common with Microsoft cloud services? (Select two) > *Cloud-based compute power* > *Native integration with Active Directory* > *Hot and cold cloud-based data storage* > *Office 365 productivity tools*

> *Cloud-based compute power* > *Hot and cold cloud-based data storage*

Windows 10 devices have built-in mobile device management features. Other devices, such as Android and iOS devices can only be enrolled to MDM by using which of the following? > *Windows Information Protection* > *System Center Configuration Manager* > *Google Play* > *Company Portal app*

> *Company Portal app*

Which management tool(s) in Microsoft 365 can help you address needs that relate to General Data Protection Regulation (GDPR) or The Health Insurance Portability and Accountability Act (HIPAA)? (Select two) > *Compliance Manager* > *Service Trust Portal (STP)* > *Intune* > *Azure AD*

> *Compliance Manager* > *Service Trust Portal (STP)*

Which of the following in Microsoft 365 helps protect sensitive data by evaluating users, devices, apps, location, and risk before granting access to corporate data? > *Multi-factor authentication* > *Microsoft Identity Manager* > *Password reset with writeback* > *Conditional Access* > *Azure AD Connect Health*

> *Conditional Access*

You are the Microsoft 365 Administrator for a company. A user experiences an issue with SharePoint Online. You need to resolve the issue. Which two options can you use? > *Go to the SharePoint Admin Center and create a support request* > *Contact Microsoft technical support by telephone* > *Create a new service request from the Microsoft 365 Admin Center* > *Create a service request from the SharePoint Portal*

> *Contact Microsoft technical support by telephone* > *Create a new service request from the Microsoft 365 Admin Center*

You are the Microsoft 365 Administrator for a company. An employee requests personal data under General Data Protection Regulation (GDPR) guidelines. You need to retreve data for that employee. What should you do? > *Create a Data Subject Request Case* > *Create a Retention Policy* > *Create a Data-loss Prevention Policy* > *Create a GDPR Assessment*

> *Create a Data Subject Request Case*

A company plans to migrate to Microsoft 365. You need to advice the company about how Microsoft provices protection in a Multitenancy environment. What are three ways that Microsoft provides protection? > *Customer content at rest is encypted on the server by using BitLocker* > *Microsoft Azure AD provies authorization and role based access control at the tenant layer* > *Customer contant at rest is encrypted on the server by using Transport Layer Security (TLS)* > *Microsoft Azure AD provides authorization at the transport layer* > *Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant* > *Mailbox databases in Microsoft Exchange Online contain mailboxes from multiple tenants*

> *Customer content at rest is encypted on the server by using BitLocker* > *Microsoft Azure AD provies authorization and role based access control at the tenant layer* > *Customer contant at rest is encrypted on the server by using Transport Layer Security (TLS)*

A company uses Microsoft 365 Business to address its compliance needs. A customer requests a complete disclosure of all personal data that relates to them. You need to create a new data subject request (DSR) case and ensure that compliance managers can view all DSR case finding. In which two areas must you perform actions? > *Data admin:* Manage DLP Policies | Manage Labels | Azure IP | App Discovery Reports > *Security Admin: Office 365 Secure Score | Windows Secure Score | Connect office to Cloud App | Threats in the news* > *Compliance Officer:* Manage eDiscovery Cases | Manage retention Policies | View Office 365 Label Usage | Manage Supervision Policies > *Security Operator:* Azure ATP | Windows ATP | Office 365 Threat Explorer | Cloud App Security

> *Data admin: App Discovery Reports* > *Compliance Officer: Manage eDiscovery Cases*

You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users. You need to implement self-service password reset. You want to achieve this goal while minimizing costs. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) > *Upgrade your subscription to Azure AD Premium P2* > *Deploy Azure AD Connect* > *Deploy Azure Information Protection* > *Upgrade your subscription to Azure AD Premium P1*

> *Deploy Azure AD Connect* > *Upgrade your subscription to Azure AD Premium P1*

Long-term Servicing Channel

> *Designed to be used only with specialized devices that can't be regularly updated or that don't need to be updated (like ATMs or a PC that runs medical equipment). The long-term servicing channel is released every two to three years. (Note that this channel is updated with security fixes as needed - your devices will still be secure.) Office 365 ProPlus isn't supported on this channel*

A company has Microsoft Surface devices that run Windows 10. The company plans to deploy devices by using Windows AutoPilot. You need to import a CSV file to ensure that the devices are ready for deployment. In the Microsoft 365 Device Management Portal, which two blades should you use? > *Dashboard* > *Device enrollment* > *Device compliance* > *Device configuration* > *Devices* > *Software updates* > *Client apps* > *Conditional Access* > *Users* > *Groups* > *Roles*

> *Device enrollment* > *Devices*

You use Microsoft Intune for device management. You must determine how many devices run each operating system. You must lunch Intune and navigate to the mobile apps blade. Select the "No changes is needed" if the underlined text makes the statement correct. > *Device Configuration* > *Device Compliance* > *No change is needed* > *Devices*

> *Devices*

A company plan to migrate to Microsoft 365. Employees must be able to collaborate by using Microsoft Yammer, SharePoint Online, Staff Hub, and Teams. You must minimize costs. You need to subscribe to Microsoft Office 365. Which subscription type should you use? > *E3* > *ProPlus* > *E1* > *Personal* > *F1*

> *E3*

Microsoft Intune manages apps and mobile devices by enrolling devices. When you enroll, you can use profiles to manage different settings and features. Which of the following are device profiles available for Windows 10? (Select three) > *Router status* > *Education* > *E-books* > *Certificates* > *Endpoint protection* > *3rd party process*

> *Education* > *Certificates* > *Endpoint protection*

You are the Microsoft Administrator for a company. You need to ensure that users receive a warning message if they select links in emails that might be unsafe. What should you do? > *Use Windows Powershell to install the latest antimalware engine updates* > *Enable Microsoft 365 Advanced Threat Protection* > *Use the Microsoft Exchange Admin Center to configure a new spam-filter policy* > *Use the Microsoft Exchange Admin Center to create a new antimalware policy*

> *Enable Microsoft 365 Advanced Threat Protection*

You need to reduce the amount of time that the IT team spends on user support. What are three possible ways to achieve this goal? > *Enable Miscrosoft Office 365 Customer Lockbox* > *Update all client devices to Windows 10* > *Use Windows Autopilot to deploy devices* > *Deploy Microsoft MyAnalytics to devices* > *Deploy Microsoft Office 365 Professional Plus to all client devices*

> *Enable Miscrosoft Office 365 Customer Lockbox* > *Use Windows Autopilot to deploy devices* > *Deploy Microsoft Office 365 Professional Plus to all client devices*

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items. Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. > *Enable policy to block legacy authentication* > *Enable user risk policy* > *Require multi-factor authentication for all users* > *Delete/block accounts not used in last 30 days* > *Do not expire passwords*

> *Enable policy to block legacy authentication* > *Enable user risk policy* > *Require multi-factor authentication for all users*

With Configuration Manager and Intune Configured for co-management, which two Intune Remote Actions are available? > *User Reset* > *Factory Reset* > *Remote Control* > *Application Reset*

> *Factory Reset* > *Remote Control*

All EMS products are offered in all Microsoft 365 subscriptions. > *True* > *False*

> *False*

Because it's accessible within a local network, a public cloud can provide much higher network speed compared to accessing resources over Internet. > *True* > *False*

> *False*

In a hybrid cloud, you're not responsible for hardware maintenance or updates. > *True* > *False*

> *False*

Private cloud computing models let you keep any system that uses out-of-date hardware or an out-of-date operating system running and accessible to your users. > *True* > *False*

> *False*

Which of the following is a channel where you can get direct access to Microsoft 365 planning materials and project managers? > *FastTrack* > *Microsoft 365 Tech Community* > *Premier Support* > *Microsoft 365 support forums*

> *FastTrack*

You are a Microsoft 365 administrator for a company. You use products that are in private preview, public preview, or general availability (GA). You need to determine at which phases you can receive support from the Microsoft 365 admin center. For which product phase or phases can you receive support > *GA, private preview, and public preview* > *GA and private preview only* > *GA only* > *GA and public preview only* > *Public preview and private preview only*

> *GA only*

A company has a Microsoft 365 subscription and a Microsoft Azure support plan.You need to implement only Azure services for which Microsoft provides technical support.Which two types of services and features can you implement? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. > *General availability* > *Targeted release* > *Public preview* > *Private preview*

> *General availability* > *Public preview*

Windows Insider Program

> *Get early access to pre-release Windows 10 builds, which update frequently (sometimes weekly). Use Insider builds to explore and test new and modified features before you deploy them. You can also provide direct feedback to Microsoft on these updates, helping improve the experience for others*

You are the Microsoft 365 administrator for a company. Which two admin roles can purchase more licenses? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point. > *Service administrator* > *User management administrator* > *Global administrator* > *billing administrator*

> *Global administrator* > *billing administrator*

Which of the following regulations apply to cloud computing? (Select three) > *Endangered Species Act* > *Health Insurance Portability and Accountability Act (HIPPA)* > *Sarbanes-Oxley Act* > *Gramm-Leach-Bliley Act (GLBA)* > *Cloud Compliance Act*

> *Health Insurance Portability and Accountability Act (HIPPA)* > *Sarbanes-Oxley Act* > *Gramm-Leach-Bliley Act (GLBA)*

Exchange Online hybrid is an example of what kind of cloud deployment model? > *Service Cloud* > *Hybrid Cloud* > *Private Cloud* > *Public Cloud*

> *Hybrid Cloud*

You want to leverage the cloud to host virtual machines (VMs). Which type of cloud service is this? > *Iaas* > *Saas* > *Paas*

> *Iaas*

__________ is the type of cloud service that would host a virtual machine, for example. > *Saas* > *Iaas* > *Paas*

> *Iaas*

Your company has a Microsoft 365 subscription.You need to implement security policies to ensure that sensitive data is protected.Which tools should you use? Use the Microsoft Authenticator app to enable multi-factor authentication > *Compliance Manager* > *Identify and access management (IAM)* > *Information rights management (IRM)*

> *Identify and access management (IAM)*

Which of the following are features provided by Cloud App Security? (Select three) > *Deploy apps to devices* > *Identify cloud apps used in your organization* > *Protect your sensitive information* > *Identify and mitigate threats in your cloud apps* > *Identify your organizations cloud subscriptions* > *Advanced Threat Analytics*

> *Identify cloud apps used in your organization* > *Protect your sensitive information* > *Identify and mitigate threats in your cloud apps*

Which of the following is considered to be a pillar of computer security systems? (Select four) > *Identity and access management* > *Firewalls* > *Threat protection* > *Antivirus software* > *Information protection* > *Encryption* > *Security management* > *Multi-factor authentication (MFA)*

> *Identity and access management* > *Threat protection* > *Information protection* > *Security management*

A company plans to migrate to Microsoft 365. Corporate devices run Windows 7 and Windows 10. You must upgrade all devices to use Office 365 ProPlus and minimize costs. You need to standardize corporate device deployments. Which three actions should you perform? > *Implement Windows Autopilot* > *Deploy Policies by using configuration manager* > *Upgrade all devices to Windows 10* > *Deploy policies by using Microsoft Intune* > *Instruct users to download and install Windows installer package of Office 365 ProPlus*

> *Implement Windows Autopilot* > *Upgrade all devices to Windows 10* > *Deploy policies by using Microsoft Intune*

Your company has a Microsoft 365 subscription.You need to implement security policies to ensure that sensitive data is protected.Which tools should you use? Classify documents to restrict permissions to content > *Compliance Manager* > *Identify and access management (IAM)* > *Information rights management (IRM)*

> *Information rights management (IRM)*

You are the IT manager for your organization. What is the simplest approach to have your users install Office on their client devices? > *Use the Office Deployment Tool* > *Install directly from the Office 365 portal* > *Use Configuration Manager* > *Use Microsoft Intune*

> *Install directly from the Office 365 portal*

A company has a Microsoft 365 subscription. You deploy Windows 10 devices by using Windows Autopilot.You need to ensure that team members can access data that is stored in OneDrive for Business when team members are at remote sites.What should you do? > *Enroll team members in Microsoft Azure AD multi-factor authentication* > *Add the devices to Microsoft 365 using the Devices tile* > *Enroll devices in Microsoft Intune* > *Instruct team members to sign in to their devices using their Microsoft Azure AD credentials*

> *Instruct team members to sign in to their devices using their Microsoft Azure AD credentials*

You are the Microsoft Administrator for a company. Users in IT department must receive new Office 365 Preview features before the features are deployed to other users in the company. You need to ensure only the users in the IT department receive preview features. Which two actions should you perform? > *Instruct users to navigate to https://insider.office.com and sign up for office insider* > *Instruct users to update Office ProPlus* > *In the organizational profile, set the update preference to Target Release for seleted users* > *Instruct users to uninstall Office ProPlus and then reinstall the software* > *In the organization prifile, set update preferance to Standard Release*

> *Instruct users to navigate to https://insider.office.com and sign up for office insider* > *In the organizational profile, set the update preference to Target Release for seleted users*

A company has a Microsoft 365 subscription. Employees use personal devices to access company data in the cloud. You need to restrict employees from copying data to personal OneDrive folders. What should you use? > *Information Rights Management* > *Microsoft Azure Security Center* > *Office 365 Advanced Threat Protection* > *Intune App Protection*

> *Intune App Protection*

Which Windows as a service (WaaS) update channel does not receive feature updates? > *Windows Insider program* > *Semi-Annual Channel* > *Semi-Annual Channel (Targeted)* > *Long-Term Servicing Channel*

> *Long-Term Servicing Channel*

Which one of the following Windows 10 update channels doesn't support Office 365 ProPlus? > *Windows Insider* > *Semi-Annual Channel* > *Long-term Servicing Channel*

> *Long-term Servicing Channel*

You are the Microsoft 365 administrator for a company. You need to track scheduled maintenance events in Microsoft 365 admin center.Where can you track these events? > *Reports* > *Support* > *Service Health* > *Message Center*

> *Message Center*

Microsoft 365 Active Reports are accessed through which interface? > *Security & Compliance Center* > *SharePoint Admin Center* > *Report Center* > *Microsoft 365 Admin Center*

> *Microsoft 365 Admin Center*

A company has 250 employees.You need to migrate all users to Microsoft 365 and meet the following requirements: -Provide a user-centric licensing solution for all users. -Manage devices from a single location. -Minimize licensing costs. Which licensing model should you use? > *Microsoft 365 Business* > *Microsoft 365 Education* > *Microsoft 365 Enterprise E* > *Microsoft 365 Enterprise E5*

> *Microsoft 365 Business*

Which of the following Microsoft 365 subscription plans includes Microsoft Azure Active Directory Plan 2 for advanced identity and access management? > *Microsoft 365 Business* > *Microsoft 365 E3* > *Microsoft 365 E5*

> *Microsoft 365 E5*

Which of the following is Not a Microsoft 365 subscription option? > *Microsoft 365 Enterprise* > *Microsoft 365 Business* > *Microsoft Education* > *Micosoft 365 F1* > *Microsoft 365 Home*

> *Microsoft 365 Home*

Which of the following is a cloud-based platform that combines customer relationship management and enterprise resource planning? > *Power BI* > *Microsoft Dynamics* > *Yammer* > *OneDrive for Business*

> *Microsoft Dynamics*

You are the Microsoft Administrator for a company. You need to customize a usage report for Microsoft Yammer. Which two tools can you use? > *Microsoft SQL Server Analysis Services* > *Microsoft SQL Server Reporting Services* > *Microsoft Power BI in a browser* > *Microsoft Power BI Desktop* > *Microsoft Visual Studio*

> *Microsoft Power BI in a browser* > *Microsoft Power BI Desktop*

Your company has a Microsoft Office 365 subscription. You need to co-author files with other users. Which tool should you use? > *Microsoft SharePoint Online* > *Microsoft Skype for business online* > *Microsoft Office Delve* > *Microsoft Exchange Online*business online* > *Microsoft Office Delve* > *Microsoft Exchange Online*

> *Microsoft SharePoint Online*

You need to identify which Microsoft platforms provde hybrid capabilities for migrating from a on-premises deployment. Which two platforms provide hybrid capabilities for migration? > *Microsoft Skype for business* > *Microsoft Yammer* > *Microsoft Exchange* > *Microsoft Teams*

> *Microsoft Skype for business* > *Microsoft Exchange*

A group of employees and users outside the company must be able to collaborate on a project in real time by using a whiteboard. Which Office 365 production should you configure? > *Microsoft Yammer* > *Microsoft Office Delve* > *Microsoft SharePoint Online* > *Microsoft Teams*

> *Microsoft Teams*

You are the Microsoft Administrator for a company. The company runs SharePoint Server and Exchange Server in an on-premises datacenter. The site collection for the finance department is currently encrypted using third-party software. You need to move as many services to Microsoft 365 as possible. What should you do? > *Migrate all SharePoint data and Exchange mailboxes to Microsoft 365* > *Leave SharePoint data for finance department users on-premises* > *Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365* > *Leave mailboxes for finance department users on-premises*

> *Migrate all SharePoint data and Exchange mailboxes to Microsoft 365*

You use Microsoft 365 Usage Analytics. You need to know the number of users who are active today and were also active last month. Which matric should you use? > *MoMReturning Users* > *EnabledUsers* > *ActiveUsers* > *CumulativeActiveUsers*

> *MoMReturning Users*

Which of the following Microsoft 365 features help guard against security issues arising from identity? (Select two) > *Multi-factor authentication (MFA)* > *Microsoft Azure Advanced Threat Protection (Azure ATP)* > *Data loss prevention* > *Windows Hello*

> *Multi-factor authentication (MFA)* > *Windows Hello*

You are the Microsoft 365 subscription administrator at your organization. As of 10:00 AM this morning, no one is able to connect their mailboxes to the Microsoft Exchange Online service. What should you do to check the service status? > *Navigate to Service health in the Microsoft 365 admin center* > *Visit the Microsoft Office 365 online forum* > *Visit the Microsoft Azure online forum* > *Send an email to Microsoft support*

> *Navigate to Service health in the Microsoft 365 admin center*

Which of the following is an automated assistance bot designed to help you find answers to Office 365 support questions? > *FastTrack* > *TechBot* > *PremierBot* > *O365 Assistant*

> *O365 Assistant*

Your company plans to purchase a Microsoft 365 subscription. The company requires intranet and team sites. You need to select an Microsoft 365 subscription that provides the required features. Which two subscriptions can you use? > *Office 365 Home* > *Office 365 Business Premium* > *Office 365 Business* > *Office 365 Business Essentials*

> *Office 365 Business Premium* > *Office 365 Business Essentials*

Which of the following are components that are included with Microsoft 365? (Select three) > *Office 365 Enterprise* > *Office 2016* > *Windows 10 Pro* > *Windows 10 Enterprise* > *Enterprise Mobility + Security*

> *Office 365 Enterprise* > *Windows 10 Enterprise* > *Enterprise Mobility + Security*

Compliance manager provides three key capabilities

> *Ongoing risk assessment, actionable insights, simplified compliance*

If you lease a server or use cloud services, the cost is based on a pay‐as‐you‐go model, which for accounting purposes is known as ___________. > *Capex* > *Opex*

> *Opex*

Which type of cloud service would have the cloud service provider managing apps as a service? > *Iaas* > *Saas* > *Paas*

> *Paas*

These apps help them with their manufacturing processes, both upstream from materials suppliers, and downstream to order processing and customer billing.Many of these systems are old and inflexible, and the IT organization within Contoso is looking for a way to use the cloud to extend these apps' capabilities, empowering remote workers, suppliers, and customers to more easily identify requirements, confirm production, and fill orders.What's your recommendation?How can Microsoft 365 address this company's needs? > *Iaas,Private,cloud only* > *Paas,Hybrid,,co-ex* > *Saas,Private,Co-ex*

> *Paas,Hybrid,,co-ex*

Your organization plans to deploy Microsoft in a hybrid scenario. You need to ensure that employees can use a smart card for authentication. Which hybride identity solution should you implement? > *Password hash synchronization with single sign-on* > *Active Directory Federation Services (AD FS)* > *PingFederate and Federation Integration* > *Pass-through authentication and single sign-on*

> *Pass-through authentication and single sign-on*

Which of the following costs are considered capital expenditures (CapEx)? (Select two) > *Electricity consumed in a datacenter* > *Administrator's time for managing accounts* > *Physical servers* > *Networking hardware*

> *Physical servers* > *Networking hardware*

A company experiences a Microsoft 365 outage that affects an entire region. You check the Service Health Dashboard and observe that the service is healthy. You need to find information in Service Health Dashboard that describes what happened during the outage. What should you use? > *Message Center* > *Incident Closure Summary* > *Post-Incident Review (PIR)* > *Service Request*

> *Post-Incident Review (PIR)*

A company is purchasing a Microsoft 365 subscription to replace the current on-premises IT infrastructure. You need to identify the impacts of subscribing to Microsoft 365. Which three outcomes can the company expect? Each correct answer presents a complete solution. (Choose three.) NOTE: Each correct selection is worth one point. > *Predictable Microsoft licensing costs* > *Increased Exchange Server Client Access License (CAL) costs* > *Increased Windows Server Client Access License (CAL) costs* > *Increased service scalability* > *Decreased on-premises infrastructure maintenance*

> *Predictable Microsoft licensing costs* > *Increased service scalability* > *Decreased on-premises infrastructure maintenance*

You are the Microsoft 365 Administrator for a company. You install Microsoft Office 365 ProPlus on 5 devices. You deactivate one device. Which task can you perform on the deactivated device > *Print and document* > *Leave comment in a document* > *Start a new document from a template* > *Set properties on a document*

> *Print and document*

You want a cloud subscription model that is the least expensive way to access services that are strictly hosted by a cloud service provider. Which cloud model describes this? > *Public cloud* > *Private cloud* > *Hybrid cloud* > *Cumulonimbus cloud*

> *Public cloud*

A shared _____________ cloud is the cloud computing model where many companies share common resources that are hosted by the same cloud service provider. > *Private* > *Hybrid* > *Public*

> *Public*

Pick one of the 3 Actions: Publish Labels | SharePoint permissions folder structure | Apply Microsoft SharePoint permissions. > *Classify Documents*

> *Publish Labels*

You are the Microsoft Administrator for a company. Your company plans to open a new office in UK. You need to provide Penetration Test and Security Assessment Reports (or the new office). Where can you locate the requested reports? > *Data Governance page of the Security and Compliance Portal* > *Compliance Manager page of the Service Trust Portal* > *Data Loss Prevention page of the Security and Compliance Portal* > *Regional Compliance page of the Service Trust Portal*

> *Regional Compliance page of the Service Trust Portal*

Your organization deploys Microsoft 365. Your goal is to significantly improve your security posture. Which of the following actions will improve your Microsoft 365 Secure Score the most? > *Require MFA for Azure AD privileged roles* > *Turn on mailbox auditing* > *Enable Password Hash Sync if hybrid* > *Store user documents in OneDrive for Business*

> *Require MFA for Azure AD privileged roles*

A company deploys Microsoft Intune. An employee loses a Windows 10 device that contains corporate date. You need to ensure that the corporate data on the device is secured as quck as possible. Which four options can you use? Home > Microsoft Intune > Devices-All devices > "The desktop/Win 10 machine" > *Retire* > *Wipe* > *Delete* > *Remote Lock* > *Sync* > *Restart* > *Fresh Restart*

> *Retire* > *Wipe* > *Delete* > *Remote Lock*

___________ is the type of cloud service that hosts and manages software for the end customer. > *Iaas* > *Saas* > *Paas*

> *Saas*

Moreover, they've been using a free web-based email system that isn't delivering the business-class services they need. They want to move completely away from this insecure mail and adopt a business-class mail system without having to pay huge up-front licensing and hardware costs.What's your recommendation?How can Microsoft 365 address this company's needs? > *Iaas,Private,cloud only* > *Saas,Hybrid,,cloud only* > *Saas,Private,Cloud only*

> *Saas,Private,Cloud only*

A company deploys Exchange Online and SharePoint Onlie. You must audit an assesment report for the Microsoft 365 cloud services that the company uses. You need to provide the required documents. Which Microsoft site should you use to obtain this information? > *Compliance Manager* > *Service Trust Portal* > *Office 365 Security and Compliance Center* > *Azure Portal*

> *Service Trust Portal*

A company has an Exchange Server environment. The company plans to migrate to the cloud. You need to recommend a cloud model that meets the following requirements - Upgrade the existing email environment - Minimize server and application maintenance Which model should you recommend? > *Platform as a service (paas)* > *Windows as a service (waas)* > *Software as a service (saas)* > *Infrastructure as a service (iaas)*

> *Software as a service (saas)*

You need to move videos to a Microsoft 365 tenant and ensure that the contents are automatically transcribed. Which Microsoft 365 service should you use? > *Yammer* > *Stream* > *Flow*

> *Stream*

Your company is running Microsoft Exchange Server 2007 and your employees use Microsoft Office 2007. You need to update your systems, but you want to minimize your CapEx impact. Which of the following is the best solution? > *Purchase Exchange Server 2016 and Office 2016* > *Purchase Exchange Server 2010 and Office 2010* > *Subscribe to Microsoft 365*

> *Subscribe to Microsoft 365*

You are a Microsoft Administrator for a company. Microsoft plans to release a new feature for Microsoft Excel. You need to ensure that the feature becomes available for employees to install as soon as possible. To which relese channel should you subscribe? > *Microsoft Release* > *Standard Release* > *Office 365 Team Release* > *Targeted Release*

> *Targeted Release*

Windows 10 Feature Update

> *These updates provide new functionality and are usually released twice a year. You should deploy these updates using your existing tools*

Windows 10 Quality Updates

> *These updates provide security updates and fixes and are usually released once a month. On the second Tuesday of the month*

A company plans to purchase Microsoft 365 Enterprise licenses. Which two options can you use? > *Through a Cloud Solution Provider (CSP)* > *From the Microsoft website using a corporate credit card* > *From the Microsoft retail store* > *With an Enterprise Agreement (EA) subscription for Microsoft*

> *Through a Cloud Solution Provider (CSP)* > *With an Enterprise Agreement (EA) subscription for Microsoft*

Hybrid cloud computing models let you keep any system that uses out-of-date hardware or an out-of-date operating system running and accessible to your users. > *True* > *False*

> *True*

In a hybrid cloud, you have flexibility to choose what you run locally versus what is put into the cloud. > *True* > *False*

> *True*

Microsoft 365 enables teamwork and collaboration through intuitive tools that allow you to work togheter in real time. > *True* > *False*

> *True*

Public cloud models offer pay-as-you-go pricing-you pay only for what you use. > *True* > *False*

> *True*

The private cloud offers more security and privacy, and allows for more customization and control of its resources and data. > *True* > *False*

> *True*

Which of the following is a compliance tool in the Service Trust Portal? > *Auditing* > *Security* > *Global Compliance* > *Trust documents*

> *Trust documents*

Which of the following is NOT part of Enterprise Mobility + Security?Azure AD Premium > *Azure Information Protection* > *Cloud App Security* > *Configuration Manager* > *Microsoft Intune* > *Unified Endpoint Management*

> *Unified Endpoint Management*

Semi-Annual Channel

> *Updated twice a year with new features. Devices in the semi-annual channel get updates as soon as Microsoft releases them. You can further control the timing of when specific devices get updated by using the deferral feature (available with Windows Update for Business, Configuration Manager, or Windows Server Update Services) to delay installation until it's convenient for your organization*

You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees. Employees must not be able to share documents or forward emails that contain sensitive information outside the company. You need to enforce the file sharing restrictions. What should you do? > *Use Microsoft Azure Information Protection to define a label* > *Associate the label with an Azure Right Management Template that prevents the sharing of files or emails that are marked with the label* > *Create a Microsoft SharePoint Online content type names Sensitivuty apply the contant type to other content types in Microsoft* > *A Microsoft Azure Rights Template that prevents the sharing of any content where the sensitivity column value is set to sensitive* > *Use Microsoft Information Rights Protection to define label* > *Associate the label with an AD Rights Management Template that prevents the sharing of files or email that are marked with the label* > *Create a label named sensitivity* > *Apply a Data Layer Protection Policy that notifies users when their documents contain Personally Identifiable Information (PII)*

> *Use Microsoft Information Rights Protection to define label*

A company assign a Microsoft 365 licenses to each employee. You need to install Microsoft Office 365 ProPlus on each employee device. Which three methods can you use? > *Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from a local distribution source* > *Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from an Office Windows Installer (MSI) package* > *Download the Office 365 ProPlus Windows Installer (MSI) package. Install Office ProPlus from a local distribution source* > *Use the Office Deployment Tool (ODT) to download files to a local distribution soruce. Install Office 365 ProPlus by using the downloaded files* > *Enable users to download and instiall Office 365 ProPlus from the Office 365 Portal*

> *Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from an Office Windows Installer (MSI) package* > *Use the Office Deployment Tool (ODT) to download files to a local distribution soruce. Install Office 365 ProPlus by using the downloaded files* > *Enable users to download and instiall Office 365 ProPlus from the Office 365 Portal*

When you enable external access by using the Microsoft Admin Portal, data is available to anonymous users. Select "No change is needed" if the statement is correct. If the statement is incorrect, select the answer choice that makes the statement correct. > *No change is needed* > *The everyone group is applied to all shares with full control* > *You must configure Acrive Directory Federation Services (AD FS)* > *Users can send sharing invitations for specific content*

> *Users can send sharing invitations for specific content*

For customers who are required to provide and control their own encryption keys, Microsoft 365 provides all the following options EXCEPT: > *Customer Key* > *Bring Your Own Key* > *Hold Your Own Key* > *Where's My Key*

> *Where's My Key*

In which circumstances would a cloud-only migration model be a good choice? (Select two) > *You have a large investment in on-premises infrastructure that you want to continue to leverage* > *You are a smaller company with minimal in-house technical resources* > *You want to completely move away from your existing on-premises systems* > *You want to operate your organization disconnected from the internet*

> *You are a smaller company with minimal in-house technical resources* > *You want to completely move away from your existing on-premises systems*

You are exploring which cloud service to subscribe to. Which of the following are reasons to select Microsoft cloud offerings? (Select three) > *You want to extract more value from your existing investment in Microsoft technologies* > *You want to be able to work with the most popular development environments, including Red Hat* > *You want access to a comprehensive set of compliance offerings* > *You want to maximize CapEx and minimize Operating Expenditures (OpEx)* > *You want a non-global cloud service provider*

> *You want to extract more value from your existing investment in Microsoft technologies* > *You want to be able to work with the most popular development environments, including Red Hat* > *You want access to a comprehensive set of compliance offerings*

You use Microsoft Business Products. When you try to create a support request, you receive the following message: You don't have permission to access this page or perform this action. You need to determine the cause of the error message. What is the cause? > *Your password is expired* > *Your account is disabled* > *Your company does not have Premier support* > *Your account is not a member of the global admin role*

> *Your account is not a member of the global admin role*

Data at rest

> *data is encrypted at the physical disk with BitLocker and in applications with service encryption*

The _____________ model is a combination of public and private clouds that allows you to run your applications in the most appropriate location. > *public* > *hybrid* > *private*

> *hybrid*

Data in transit

> *is encrypted with TLS (Transport Layer Security) as it moves across the network*

In a _______________ cloud, you create a cloud environment in your own datacenter and provide self-service access to your users. > *public* > *hybrid* > *private*

> *private*

Yes | No > *A sensitivity level can be used to prevent data loss from Windows devices by turning on the endpoint protection in Microsoft Intune* Yes O No O > *You can use a sensitivity label to mark the content of documents by adding a custom watermark* Yes O No O > *After a sensitivity level is applied, the content of documents is encrypted, but the content of email is not encrypted* Yes O No O

> A sensitivity level can be used to prevent data loss from Windows devices by turning on the endpoint protection in Microsoft Intune: *Yes* > You can use a sensitivity label to mark the content of documents by adding a custom watermark: *Yes* > After a sensitivity level is applied, the content of documents is encrypted, but the content of email is not encrypted: *No*

*Yes | No* > *Adopting cloud applications reduces the number of on-premises servers and services to manage* Yes O | No O > *For remote users, accessing applications stored in the cloud is easier than accessing appliations stored on a company network* Yes O | No O > *A loss of internet connectivity will not significantly impact functionality for users accessing applications and services in the cloud* Yes O | No O

> Adopting cloud applications reduces the number of on-premises servers and services to manage: *YES* > For remote users, accessing applications stored in the cloud is easier than accessing appliations stored on a company network: *YES* > A loss of internet connectivity will not significantly impact functionality for users accessing applications and services in the cloud: *NO*

*Drag and Drop* Responsible parties: Microsoft | IT Staff The company uses only Platform as a service (paas). You need to identify which solution components Microsoft must manage and which components IT staff must manage. Match each Responsible parties to its component > *Applications* > *Operating Systems* > *Storage* > *Application Data*

> Applications: *IT Staff* > Operating Systems: *Microsoft* > Storage: *Microsoft* > Application Data: *IT Staff*

Yes | No > *By default, all Microsoft 365 subscribers are configured for targeted release* Yes O No O > *To enable or disable targeted release in an organization, select each user who should receive early access to features and functionality from a list* Yes O No O > *To enable Microsoft Office Insider release in an organization, select user who should receive preview access to features and functions from a list* Yes O No O

> By default, all Microsoft 365 subscribers are configured for targeted release: *No* > To enable or disable targeted release in an organization, select each user who should receive early access to features and functionality from a list: *Yes* > To enable Microsoft Office Insider release in an organization, select user who should receive preview access to features and functions from a list: *No*

Yes | No > *Cloud solution Providers can bill customers for Microsoft 365 licenses on an annual basis* Yes O No O > *Cloud Solution Providers can provide 30-day trial licenses to customers* Yes O No O > *Cloud Solution Providers can only charge customers for licenses that the customer use* Yes O No O

> Cloud solution Providers can bill customers for Microsoft 365 licenses on an annual basis: *Yes* > Cloud Solution Providers can provide 30-day trial licenses to customers: *No* > Cloud Solution Providers can only charge customers for licenses that the customer use: *Yes*

*Drag and Drop* Feature Phases: Private | Public Preview | General Availability > *Complete compliance testing* > *Complete QA testing for recently released features* > *Prepare QA results and end-user documentation*

> Complete compliance testing: *Private Preview* > Complete QA testing for recently released features: *Public Preview* > Prepare QA results and end-user documentation: *General Availability*

Yes | No > *Compliance Manager performs an assessment against your entire Microsoft 365 environment and evaluates both Microsoft and customer controls* Yes O No O > *Compliance Manager allows you to assign individuals within the organization to be responsiple for the control* Yes O No O > *Compliance Manager provides the ability to take corrective actions from within the Service Trust portal* Yes O No O

> Compliance Manager performs an assessment against your entire Microsoft 365 environment and evaluates both Microsoft and customer controls: *Yes* > Compliance Manager allows you to assign individuals within the organization to be responsiple for the control: *Yes* > Compliance Manager provides the ability to take corrective actions from within the Service Trust portal: *Yes*

*Drag and Drop* Microsoft 365 Only | On-Premises Only | Both Microsoft 365 and On-Premises. > *Configure Multi Factor-Authentication for cloud services* > *Configure email disclaimers* > *Configure compliance* > *Set frequenct of Microsoft Office 365 Updates*

> Configure Multi Factor-Authentication for cloud services: *Both Microsoft 365 and On-Premises* > Configure email disclaimers: *Both Microsoft 365 and On-Premises* > Configure compliance: *Microsoft 365 Only* > Set frequenct of Microsoft Office 365 Updates: *On-Premises Only*

*Yes | No* > *Data Protection can be selectively applied to applications* Yes O | No O > *Microsoft Intune can define where corporate data is stored* Yes O | No O > *Once a device is registrered with Microsoft Intune, device wipe will include the users personal data* Yes O | No O

> Data Protection can be selectively applied to applications: *YES* > Microsoft Intune can define where corporate data is stored: *YES* > Once a device is registrered with Microsoft Intune, device wipe will include the users personal data: *NO*

*Drag and Drop* Solutions: Active Directory Federation Services (AD FS) | PingFederated and Federational Integration | Password hash synchronization with single sign-on | Pass-throug authentication and single sign-on > *Enabled a federation option for authentication in a hybride environment* > *Allow administrators to reset user passwords in Microsoft Azure AD* > *Support non federated users authenticating with on-premises AD and supports Multi Factor-Authentication*

> Enabled a federation option for authentication in a hybride environment: *Active Directory Federation Services (AD FS)* > Allow administrators to reset user passwords in Microsoft Azure AD: *Password hash synchronization with single sign-on* > Support non federated users authenticating with on-premises AD and supports Multi Factor-Authentication: *Pass-throug authentication and single sign-on*

*Drag and Drop* Supported environments: Exchange Server only | Exchange Online only | Exchange Server and Exchange Online > *Exchange Web Services (EWS) access to accounts* > *Custom EWS throttling settings* > *Information Rights Management, archiving, and legal holds*

> Exchange Web Services (EWS) access to accounts: * Exchange Server and Exchange Online* > Custom EWS throttling settings: *Exchange Server only* > Information Rights Management, archiving, and legal holds: *Exchange Server and Exchange Online*

Drag and Drop Applications: MyAnalytics | Workspace Analytics > *Included in Office 365 E5 license* > *Can be purchased only as an add-on license* > *Provides employee work and collaboration metrics* > *Permits upload of custom organizational data* > *Provides team work and collaboration*

> Included in Office 365 E5 license: *MyAnalytics* > Can be purchased only as an add-on license: *Workspace Analytics* > Provides employee work and collaboration metrics: *MyAnalytics* > Permits upload of custom organizational data: *Workspace Analytics* > Provides team work and collaboration: *Workspace Analytics*

Yes | No > *Intune app protection policies can protect access to Exchange Server on-premises mailboxes* Yes O No O > *Intune app protection policies support apps that connect to on-premises Microsoft SharePoint Server* Yes O No O > *Intune app protection policies require a mobile-device management (MDM) solution* Yes O No O

> Intune app protection policies can protect access to Exchange Server on-premises mailboxes: *Yes* > Intune app protection policies support apps that connect to on-premises Microsoft SharePoint Server: *No* > Intune app protection policies require a mobile-device management (MDM) solution: *No*

*Yes | No* > *Intune supports management of apps from third-party sores* Yes O | No O > *Intune supports volume licensing of iOS and Android store apps* Yes O | No O > *Intune supports the management of line-of-business and public-facing apps* Yes O | No O

> Intune supports management of apps from third-party sores: *NO* > Intune supports volume licensing of iOS and Android store apps: *YES* > Intune supports the management of line-of-business and public-facing apps: *YES*

*Yes | No* > *It is possible to connect cloud services to on-premises server resources* Yes O | No O > *Scaling Cloud-hosted infrastructure components includes expanding server resources and networking components* Yes O | No O

> It is possible to connect cloud services to on-premises server resources: *YES* > Scaling Cloud-hosted infrastructure components includes expanding server resources and networking components: *YES*

*Yes | No* > *Licensing through a Cloud Solution Provider (CSP) allows you to purchase nonprepetual software for on-premises use* Yes O | No O > *Licensing through a Cloud Solution Provider (CSP) allows you to receive a discount based on volume* Yes O | No O > *Licensing through a Cloud Solution Provider (CSP) allows you to receive technical support on your Microsoft services from a certified partner* Yes O | No O

> Licensing through a Cloud Solution Provider (CSP) allows you to purchase nonprepetual software for on-premises use: *NO* > Licensing through a Cloud Solution Provider (CSP) allows you to receive a discount based on volume: *YES* > Licensing through a Cloud Solution Provider (CSP) allows you to receive technical support on your Microsoft services from a certified partner: *YES*

*Drag and Drop* Office 365 Plans: ProPlus | Enterprise E1 | Enterprise E3 | Enterprise E5 > *Local copy of Microsoft Outlook that connects to an Exchange Server instance* > *Search and discover with Delve* > *eDiscovery with in-pace, hold, and export* > *Advanced eDiscovery with in-place search, hold, export , and analytics*

> Local copy of Microsoft Outlook that connects to an Exchange Server instance: *ProPlus* > Search and discover with Delve: *Enterprise E1* > eDiscovery with in-pace, hold, and export: *Enterprise E3* > Advanced eDiscovery with in-place search, hold, export , and analytics: *Enterprise E5*

*Drag and Drop* Authentication Sources: AD DS Only | Azure AD Only | AD DS and Azure AD > *Log on to devices by using Windows Hello* > *Log on to devices that are managed by Microsoft Intune* > *Sign in to Outlook on the web by using Multi-Factor Authentication*

> Log on to devies by using Windows Hello: *AD DS and Azure AD* > Log on to devices that are managed by Microsoft Intune: *AD DS Only* > Sign in to Outlook on the web by using Multi-Factor Authentication: *Azure AD Only*

Yes | No > *Microsoft MyAnalytics supports Microsoft PowerBI templates* Yes O No O > *Microsoft MyAnalytics supports Microsoft Outlook add-ins* Yes O No O > *Microsoft MyAnalytics supports weekly email digests* Yes O No O

> Microsoft MyAnalytics supports Microsoft PowerBI templates: *No* > Microsoft MyAnalytics supports Microsoft Outlook add-ins: *Yes* > Microsoft MyAnalytics supports weekly email digests: *No*

*Yes | No* > *Microsoft cloud services offer significant energy savings for Microsoft and it's customers* Yes O | No O > *Lower costs, no hardware maintenance, near-inlimited scalability, and high reliability are all advantages of a private cloud* Yes O | No O > *Microsoft cloud services offer security options and have the ability to provision resources quickly* Yes O | No O

> Microsoft cloud services offer significant energy savings for Microsoft and it's customers: *YES* > Lower costs, no hardware maintenance, near-inlimited scalability, and high reliability are all advantages of a private cloud: *NO* > Microsoft cloud services offer security options and have the ability to provision resources quickly: *YES*

*Drag and Drop* Scenarios: Provide physical access to hardware | Do not require patching of operating systems | Monitor usage of the file storage > *On-premises only* > *Cloud only* > *Both cloud and on-premises*

> On-premises only: *Provide physical access to hardware* > Cloud only: *Do not require patching of operating systems* > Both cloud and on-premises: *Monitor usage of the file storage*

Drag and Drop Deployment scenerios: Widespread deployment | Limited deployment for a short duration | Limited deployment for a small number of organizations for a short duration > *Private Release* > *Public Preview* > *General Availability*

> Private Release : *Limited deployment for a small number of organizations for a short duration* > Public Preview: *Limited deployment for a short duration* > General Availability: *Widespread deployment*

*Drag and Drop* Cloud Models: Private | Public | Hybrid > *Provide an on-demand Sandbox environment* > *Provide failover capabilities between resources that you manage and resources in other regions* > *Deploy Virtual Machines that support USB devices*

> Provide an on-demand Sandbox environment: *Public* > Provide failover capabilities between resources that you manage and resources in other regions: *Hybrid* > Deploy Virtual Machines that support USB devices: *Private*

Drag and Drop Features: Microsoft Office 365 Secure Score | Customer Lockbox | Microsoft Office 365 Advanced Threat Protection | Data Loss Prevention > *Provide recommendations to reduce risk* > *Control how a Microsoft support engineer accesses data during a help session* > *Protect against unknown malware viruses, and malicious URL's* > *Identify sensitivite data and create policies that help prevent users from accidentally or intentionally sharing the data*

> Provide recommendations to reduce risk: Microsoft Office 365 Secure Score > Control how a Microsoft support engineer accesses data during a help session: Customer Lockbox > Protect against unknown malware viruses, and malicious URL's: Microsoft Office 365 Advanced Threat Protection > Identify sensitivite data and create policies that help prevent users from accidentally or intentionally sharing the data: Data Loss Prevention

*Drag and Drop* Features: Cloud Discovery Dashboard | Microsoft Azure AD | Microsoft Azure Security Center | Microsoft Azure Information Protection. > *Provides insight into which apps are being used in the organization and the risk levels for the apps* > *Classify and label emails and documents in the organization* > *Block users from accessing cloud apps from certain devices* > *Manage Security Policies, monitor attacks against Virtual Machines, and provide remediation for vulnerbilities*

> Provides insight into which apps are being used in the organization and the risk levels for the apps: *Cloud Discovery Dashboard* > Classify and label emails and documents in the organization: *Microsoft Azure Information Protection* > Block users from accessing cloud apps from certain devices: *Microsoft Azure AD* > Manage Security Policies, monitor attacks against Virtual Machines, and provide remediation for vulnerbilities: *Microsoft Azure Security Center*

*Drag and Drop* Scenarios: Exchange Online integrated with on-premises Exchange Server | Custom web and mobile application securely connected to an on-premises datastore | Server-based workloads on a Virtual Machine that are connected to an on-premises network > *Software as a service (saas)* > *Platform as a service (paas)* > *Infrastructure as a service (iaas)*

> Software as a service (saas): *Exchange Online integrated with on-premises Exchange Serve* > Platform as a service (paas): *Custom web and mobile application securely connected to an on-premises datastore* > Infrastructure as a service (iaas): *Server-based workloads on a Virtual Machine that are connected to an on-premises network*

Yes | No > *Users have the same passwords in the cloud and on-premises* Yes O No O > *Users must sign in again when using Microsoft 365* Yes O No O > *You can configure federated authentication to require a smart card* Yes O No O

> Users have the same passwords in the cloud and on-premises: *Yes* > Users must sign in again when using Microsoft 365: *No* > You can configure federated authentication to require a smart card: *Yes*

Select the appropirate options in the answer area. Service: Windows Virtual Desktop | Azure AD Application Proxy | Azure AD Connect | Microsoft Intune > *Users must be able to use incompatible applications on a Windows 10 device* > *Cloud-based applications must use the same credentials as on-premises applications* > *Users must be prevented from copying company data from managed applications installed on unmanaged devices*

> Users must be able to use incompatible applications on a Windows 10 device: *Windows Virtual Desktop* > Cloud-based applications must use the same credentials as on-premises applications: *Azure AD Connect* > Users must be prevented from copying company data from managed applications installed on unmanaged devices: *Microsoft Intune*

Drag and Drop F1 | E3 | E5 | Business Premium > *Web mail + Mobile app* > *Outlook + Mobile app* > *Windows 10 Enterprise, Outlook * > *Windows 10 Enterprise, Outlook, Phone system, etc*

> Web mail + Mobile app: F1 > Outlook + Mobile app: E3 > Windows 10 Enterprise, Outlook: Business Premium > Windows 10 Enterprise, Outlook, Phone system, etc: E5

*Drag and Drop* Classifications: Platform as a service (paas) | Software as a service (saas) | Infrastructure as a service (iaas) > *Website hosting* > *A Virtual Machines that runs Linux* > *Document storage that uses OneDrive for Business*

> Website hosting: *Platform as a service (paas)* > A Virtual Machines that runs Linux: *Infrastructure as a service (iaas)* > Document storage that uses OneDrive for Business: *Software as a service (saas)*

License Required or not: Required | Not Required > *Windows 10 Pro Upgrade* > *Microsoft Office Professional* > *Windows Server* > *Microsoft Excange Client Access*

> Windows 10 Pro Upgrade: *Not Required* > Microsoft Office Professional: *Required* > Windows Server: *Required* > Microsoft Excange Client Access: *Required*

*Yes | No* > *You can assign apps to devices that are not enrolled with Microsoft Intune* Yes O | No O > *You can assign wrapped apps, or apps that incorporate the Intune SDK, only if the device is enrolled with Intune* Yes O | No O > *You can install available apps from the web-based company Portal app regardless of wheter the device is enrolled with Intune* Yes O | No O

> You can assign apps to devices that are not enrolled with Microsoft Intune: *YES* > You can assign wrapped apps, or apps that incorporate the Intune SDK, only if the device is enrolled with Intune: *NO* > You can install available apps from the web-based company Portal app regardless of wheter the device is enrolled with Intune: *YES*

Yes | No > *You can create eDiscovery cases to preserve data in Exchange Online mailboxes* Yes O No O > *Members of the discovery management role group have permissions to export messages* Yes O No O > *You can create one eDiscovery case to preserve data in an Exchange Server mailbox and a OneDrive for Business site* Yes O No O

> You can create eDiscovery cases to preserve data in Exchange Online mailboxes: *Yes* > Members of the discovery management role group have permissions to export messages: *Yes* > You can create one eDiscovery case to preserve data in an Exchange Server mailbox and a OneDrive for Business site: *Yes*

*Yes | No* > *You can manage Azure AD-joined machines by using group policy* Yes O | No O > *Azure AD requires integration with Active Directory Domain Services by using Secure Lightweight Directory Access Protocol (LDAP)* Yes O | No O > *Azure AD supports Azure AD Authentication Library (ADAL) Authentication* Yes O | No O

> You can manage Azure AD-joined machines by using group policy: *NO* > Azure AD requires integration with Active Directory Domain Services by using Secure Lightweight Directory Access Protocol (LDAP): *YES* > Azure AD supports Azure AD Authentication Library (ADAL) Authentication: *NO*

Yes | No > *You can suppliment the default templates to apply restrictive controls* Yes O No O > *Classification and protection information is available for on-premises file servers* Yes O No O > *Installing the Azure Information Protection client installs an information protection bar to Microsoft Excel* Yes O No O

> You can suppliment the default templates to apply restrictive controls: *Yes* > Classification and protection information is available for on-premises file servers: *Yes* > Installing the Azure Information Protection client installs an information protection bar to Microsoft Excel: *Yes*

*Drag and Drop* Actions: Migrate to the cloud | Remain on-premises > *You have a legacy application that requires connectivity with an on-premises data store* > *You need to deploy an external-facing website* > *You need to deploy a Microsoft SharePoint collaboration site for partners*

> You have a legacy application that requires connectivity with an on-premises data store : *Remain on-premises* > You need to deploy an external-facing website: *Migrate to the cloud* > You need to deploy a Microsoft SharePoint collaboration site for partners: *Migrate to the cloud*