Your company has a Microsoft 365 subscription with an Azure AD. Which one from the following user roles can review the list in Azure AD Identity protection? If there are more than one answers choose the one that gives the user the least amount of privileges.

You are the Global Administrator of your company’s Microsoft Azure AD tenant. You want to assign another user, a role that will allow that user to view all sign-in reports. This way there will be one more user that can monitor sign-in activity for possible imposters. Which roles could you assign to the user?

You are the IT administrator of a company that has an on-premise network that contains 2 domains. The company subscribed to a Microsoft 365 subscription. You have deployed a federated solution to the environment, but while configuring it you forgot to use the -SupportMultipleDomain parameter. Which is the first action you have to take to correct your mistake?

You want to assign roles to the users of your company’s Microsoft Azure AD. Which role has the ability to add a user in a security group which will be used to manage administrative accounts?

Your company has 6 domains which are contained in 3 AD forests. Each forest contains 2 domains. All clients are domain-joined and have Windows 10 installed. You are tasked with the configuration of a Hybrid Azure AD join for the computers. You have already created an Azure AD tenant and you now need to ensure that the Windows 10 devices can discover it. What do you need to create?

Your company has an on-premises AD and an Azure AD tenant. You have already implemented directory synchronization for all the employees of the company. You need to synchronize 50 new user accounts to Azure AD as quickly as possible. Which is the proper command to run?

Your company has an on-premises network and an Azure AD tenant named mycompany.onmicrosoft.com. The on-premise’s network uses a firewall that contains a list of allowed outbound domains. You want to implement directory synchronization. What domain should the firewall configuration contain in the list of allowed outbound domains, for the synchronization to complete successfully?

Your company is subscribed in a Microsoft 365 Enterprise E5 subscription. What should you do if you wanted to enforce MFA on all cloud-based application for a specific group of users?

Your company is working on a project in collaboration with another company. In the scope of this collaboration between the two companies you need to share your company’s Microsoft Exchange Online calendar with the partner company. Both companies have a Microsoft 365 tenant. This process has to be completed immediately. Which is the proper course of action?

You are the IT administrator of a company, that has a Microsoft Office 365 tenant and you want to view all the new features that were part of the latest Office 365 update in the tenant. Can you use the messages section of the Office 365 Admin mobile app to achieve this?

You have created an XML file for the deployment of Microsoft 365 Apps for Enterprise in all the computers of your company. You used the value SemiAnnualPreview in the Update channel attribute. When will the new feature be released?

Your company is a Microsoft Azure AD tenant and has implemented Windows Information Protection. You want to modify which users will be affected by WIP. What should you do?

Your company has a Microsoft 365 enterprise subscription. There is a conditional access policy that forces MFA when a user uses a mobile device to access Microsoft SharePoint. How can you view a list of the users that used MFA to authenticate?

Your company has an Azure AD with MFA enabled. You want to have some kind of report if there are users that did not pass the MFA challenge. What do you do?

You have created an XML file for the deployment of Microsoft 365 Apps for Enterprise in all the computers of your company. You used the value SemiAnnualPreview in the Update channel attribute. When will security updates be released?

Your company owns a Microsoft 365 subscription and you have enabled MFA in your company’s Azure AD tenant. Which one is the proper PowerShell command to generate a report that lists all the users who completed the Azure MFA registration process?

Your company hosts 3 Apps on its 3 on-premises servers (one app in each server) Your company bought a Microsoft 365 subscription and implemented directory synchronization. You are now tasked with publishing these applications, making sure they are all accessible through the My Apps portal. The solutions you choose should require the least amount of administrative effort. What is the first step?

Your company has bought a Microsoft 365 Enterprise subscription. You are the administrator tasked with deploying Microsoft 365 Apps for enterprises. You have assigned the proper licenses. Your task has one limitation. The Microsoft 365 Apps for application installation has to happen from a network share in your company’s network and not from the internet. Installation from the internet should be prevented. You have prepared the necessary XML file and the network share but you have to find a way to prevent the users from installing Office 365 from the internet. What should you do?

Your company has MFA configured for all users for its Microsoft 365 subscription. The employees are complaining that they are prompted to use MFA a lot of times per day on their company-owned devices. What can you do to reduce the number of times MFA is needed in company-owned devices?

You need to make sure that all the employees can authenticate without issues. Which is the best authentication strategy to use?

Your company has a Microsoft 365 subscription which contains 3 Microsoft SharePoint Online sites. You want to limit the ability of your company’s employees to invite external users to access files on the SharePoint sites. The employees should be only able to invite authenticated users to the sites. Which is the proper course of action?

Your company has an on-premises Microsoft SharePoint Server 2016, but want to migrate some of its functionality to SharePoint Online. To that end you created a Microsoft 365 tenant. What feature of the SharePoint Hybrid Configuration Wizard should you use to make sure that Microsoft OneDrive sites will redirect the users to online content?

Your company has an Azure AD tenant with MFA enabled. You have enabled the ability for the users to report fraud and the setting to automatically block users who reported fraud. How can users report fraud on their accounts?

Your company has a Microsoft 365 subscription. A lot of your employees that have Microsoft Office 365 ProPlus and use it daily, need to be offline for extended periods of time. How many days can they be offline, before their Office installation becomes deactivated?

Your company has an Azure AD tenant with name mycompnay.onmicrosoft.com. One of the company’s administrators wants to create an account for an external user with a Microsoft outlook.com account. An error message appears notifying the administrator that he lacks the permission to invite external users. You are the global admin of the company and want to ensure that the administrator in question has the rights to add the user. You login to the Azure AD admin center. What should you do?

Do you have to verify augre.com as a custom domain?

You are tasked with deploying Microsoft 365 Apps for Enterprise to 300 computers in your company. There is a limitation though. You have to install the 64bit version of Office. You have created the proper XML file with the OfficeClientEdition attribute set to 64. On which computers will Office actually be installed?

Your company has an on-premises Microsoft SharePoint Server 2016, but want to migrate some of its functionality to SharePoint Online. To that end you created a Microsoft 365 tenant. What feature of the SharePoint Hybrid Configuration Wizard should you use to make sure that when the employees search for a file by using keywords, the response should contain both on-premises and online results?

You are tasked with the process of deploying Microsoft 365 Apps for Enterprise to 100 of the computers of your on-premises network that run Windows 10. The on-premises domain contains a Windows server 2016 and your company has already purchased the necessary Microsoft 365 subscription. All the Office installations should also include the German language pack. You have downloaded and extracted Microsoft ODT and all the necessary files to the shared folder from which the deployment will be initiated. You have also created the necessary XML configuration file. What is the last step you need to take to deploy Microsoft 365 Apps for Enterprise to all the computers?

Before you begin the migration, you have to decide on which DNS record to use. Which one would you choose?

Your company has an Azure AD tenant with name mycompnay.onmicrosoft.com. You want to create an account for a temporary employee with a Microsoft outlook.com account. The employee account should be able to sign in to mycompany.onmicrosoft.com using the outlook.com email. What is the proper course of action?

Your company plans to move its entire on-premises Microsoft Exchange Server 2013 organization to the cloud. The company acquired the necessary Microsoft 365 subscription and you are tasked with the job of moving all 60 of its employees (including their mail, contacts and calendars) to Exchange online. The on-premises server will be decommissioned. Which is the proper form of migration?

Your company has an Azure AD tenant with MFA enabled. You have enabled the ability for the users to report fraud and the setting to automatically block users who reported fraud. One of the employees reports fraud on his account. For how many days will the account be blocked automatically?

Your company’s network consists of an Active directory domain, which contains 3 domain controllers. It has also just subscribed to a Microsoft 365 plan and you are tasked with implementing several Microsoft 365 services. First step is to plan an authentication strategy. All the users have to be able to use their on-premises credentials. All the passwords (and their hashes) should be stored on-premises only and the authentication should only use the existing infrastructure. Which authentication strategy should you choose?

Your company has an Azure AD tenant with name mycompnay.onmicrosoft.com. You want to create an account for an external user with a Microsoft outlook.com account. This user will have access to a lot of your Microsoft 365 subscription resources. The external user account should be added to mycompany.onmicrosoft.com and be able to authenticate using the outlook .com email. What is the proper course of action?

Which method of migration should you recommend?

You are the IT administrator of a company, that has a Microsoft Office 365 tenant and you want to view all the new features that were part of the latest Office 365 update in the tenant. Can you use Monitoring and reports from the compliance admin center to achieve this?

You have to create the UM365Licenses group making sure you meet all the requirements. Which control method should you use?

You have to create the UM365Licenses group making sure you meet all the requirements. Which group type should you use?

Your company has an on-premise web application. The company has also bough a Microsoft 365 subscription. The users of the application are mainly external users and you have to make sure they are able to connect to the application. The first step is to install a connector. In which menu of the Azure Portal can you find the option to do so?

Your company consists of one main office and three branch offices. One of the branch offices handles sensitive data. Your company has implemented a Microsoft 365 tenant. As the IT administrator of the company you have to use one of Microsoft 365 features to make sure that MFA is enforced for the users in the branch office that handles the sensitive data. Which feature should you use?

Your company is a Microsoft Azure AD tenant and has implemented Windows Information Protection. You want to modify which application will be affected by WIP. What should you do?

You want to assign roles to the users of your company’s Microsoft Azure AD. Which role has the ability to create a guest user account?

Your company’s network contains an Active Directory domain named myconmpany.com. Your company also has an Azure AD tenant named mycompany.onmicrosoft.com. You have already implemented directory synchronization. You have developed an App that will require authorization to be used. Which one is the URL for the authorization endpoint of your app. The name of the app is myapp.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Office 365 tenant.
You suspect that several Office 365 features were recently updated.
You need to view a list of the features that were recently updated in the tenant.
Solution: You review the Security & Compliance report in the Microsoft 365 admin center.
Does this meet the goal?

You recently migrated your on-premises email solution to Microsoft Exchange Online and are evaluating which licenses to purchase.
You want the members of two groups named IT and Managers to be able to use the features shown in the following table.

Which licenses should you recommend?

You have a Microsoft 365 tenant that contains Microsoft Exchange Online.
You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant. You need to ensure that the calendar of every user is available to the users in adatum.com immediately.
What should you do?

You have a Microsoft 365 subscription.
You need to prevent phishing email messages from being delivered to your organization.
What should you do?

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

Your company has a Microsoft 365 subscription.
You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.
What should you use?

Your company has a Microsoft 365 subscription.
You upload several archive PST files to Microsoft 365 by using the Security & Compliance admin center.
A month later, you attempt to run an import job for the PST files.
You discover that the PST files were deleted from Microsoft 365.
What is the most likely cause of the files being deleted? More than one answer choice may achieve the goal. Select the BEST answer.

Your company has on-premises servers and a Microsoft Azure Active Directory (Azure AD) tenant.
Several months ago, the Azure AD Connect Health agent was installed on all the servers.
You review the health status of all the servers regularly.
Recently, you attempted to view the health status of a server named Server1 and discovered that the server is NOT listed on the Azure Active Directory Connect Servers list.
You suspect that another administrator removed Server1 from the list.
You need to ensure that you can view the health status of Server1.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 subscription.
You suspect that several Microsoft Office 365 applications or services were recently updated.
You need to identify which applications or services were recently updated.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Office 365 tenant.
You suspect that several Office 365 features were recently updated.
You need to view a list of the features that were recently updated in the tenant.
Solution: You use Monitoring and reports from the Compliance admin center.
Does this meet the goal?

DRAG DROP
Your network contains an on-premises Active Directory domain named contoso.com that is synced to a Microsoft Azure Active Directory (Azure AD) tenant. The onpremises domain contains a server named Server1 that runs Windows Server 2016 and 200 client computers that run Windows 10. Your company purchases a Microsoft 365 subscription.
On Server1, you create a file share named Share1. You extract the Microsoft Office Deployment Tool (ODT) to Share1.
You need to deploy Office 365 ProPlus, and the French language pack from Share1 to the Windows 10 computers.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

A:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure a pilot for co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You add Device1 to an Active Directory group.
Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure a pilot for co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.
Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).
You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).
You configure a pilot for co-management.
You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.
You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.
Solution: You create a device configuration profile from the Intune admin center.
Does this meet the goal?

In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.
Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)

Your company uses on-premises Windows Server File Classification Infrastructure 9FCI). Some documents on the on-premises file servers are classifies as Confidential.
You migrate the files from the on-premises file servers to Microsoft SharePoint Online.
You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded files based on the Confidential classification.
What should you do first?