Your company has an on-premises network of file servers which host shares that contain employees’ data. You are tasked with the migration of all the employees’ data to your company’s newly acquired Microsoft 365 subscription. You only need the employees’ data from the last 2 months. Which is the proper solution to import all the employees’ data Microsoft 365?

Where can you find all Microsoft 365 DLP reports?

You are the IT administrator of a company that has just bought a Microsoft 365 E3 subscription. All the computers in the company are currently running Windows 10 Pro. You want to change the Windows version to Enterprise automatically the next time the users sign-in to their computer. Which solutions can you use?

Your company bought a Microsoft 365 subscription and plans to move the mailboxes of all its employees to Microsoft 365. The company is currently using outlook.com as email solution. Which type of data can be migrated to Microsoft 365?

You have just been hired to work in the main office of a company that has offices in more than 15 cities in Europe and North America. The branch offices are connected with the main office using a WAN link. They are connected to the internet and resolve external host names by using the connection of the main office. This is not that efficient and they have asked you to implement a direct Internet connection in each office. You need to recommend a solution that will provide the quickest possible access to Microsoft 365 services. Which is the best course of action to achieve this?

You are the IT administrator of a company, that has a Microsoft Office 365 tenant and you want to view all the new features that were part of the latest Office 365 update in the tenant. Where in the Microsoft 365 admin center can you get this information?

Your company has an Active Directory domain and has just purchased a Microsoft 365 subscription. You are tasked with the deployment of several Microsoft 365 services. Can you have multiple Azure AD Connect sync servers connected to your Azure AD tenant?

You had been testing out Azure and had created an Azure AD tenant for your company named yourcompany.onmicrosoft.com. Testing is now done and you have bought a domain name for your company (yourcompany.com). You want to use the new domain name for Azure AD and make sure that all users login using the new domain name. This means they should login, using the username [email protected] instead of the [email protected] they are currently using. Which is the correct chain of actions you have to do to achieve this?

You are the IT administrator of a company and you have to recommend which Microsoft 365 licenses your company has to buy. The cost should be minimal. Your company has 3 departments. The IT department which is consisted of 10 employees and you, the sales department that consists of 25 employees and the managers with 5 users. The managers and the sales team need to use conditional access in Azure AD, while you and the rest of the IT department need to use PIM. Which is the combination of licenses your company should buy?

Your company has bought a Microsoft 365 subscription. You are tasked with the task to add the domain name that your company has also bought. You have added the domain and attempt to verify it only to discover that the email address the verification will be sent to is the wrong one. You need to change it first. What should you do?

Your company uses an on-premises Microsoft Exchange Server 2016 organization. The connection of the server to the internet is not that good, which result in very low bandwidth. There are 300 mailboxes to the server, which you have to migrate to the Exchange Online of your Microsoft 365 subscription. Which migration method is best to use if you want to minimize administrative effort?

You are the IT administrator of a company with a Microsoft 365 subscription plan. You believe you may have misassigned some Microsoft 365 licenses in a group of users. Where can you find a report of all the assigned licenses of the group?

When you are planning to migrate from an AD forest to Microsoft 365 then before implementing any type of directory synchronization you will need to purchase add and verify a custom domain name.

Is it possible to set the minimum interval between notification emails when you set up a policy alert?

Does Microsoft 365 ever delete archive PST files you have manually uploaded using the Security & Compliance admin center?

You want to check if a specific user in your company is licensed for SharePoint Online. All the users of your company are assigned Microsoft 365 E3 licenses, but not all of them have all the services assigned to them. Which is the proper course of action?

You are the IT administrator of a company with an Azure Active Directory hybrid identity implementation. Which authentication method should you choose provided that you need the employees to be able to sign in using a smartcard?

Your company has implemented Azure ATP. You are the IT administrator and you have configured an Azure ATP sensor. There is a delay between sensor updates. How much is it?

Can you use Microsoft Azure ATP to monitor a domain controller by deploying an Azure ATP standalone sensor and then configuring port mirroring?

You have a number of document libraries in your on-premises installation of Microsoft SharePoint. You have bought a Microsoft 365 subscription and created a Microsoft 365 tenant, with directory synchronization implemented. You have to migrate all the libraries from the on-premises environment to SharePoint online. You have created the necessary SharePoint sites and you know you have to use the SharePoint Migration tool to complete the migration. But you need to complete one more step before using the tool. Which one?

Your company bought a Microsoft 365 subscription and plans to move all its current email data to Microsoft Exchange Online. The company is currently using G Suite’s Gmail as email solution. What type of Migration can you use?

Your company has an on-premises network of file servers which host shares that contain employees’ data. You are tasked with the migration of all the employees’ data to your company’s newly acquired Microsoft 365 subscription. Which is the proper solution to import all the employees’ data into OneDrive?

You have a lot of archived PST files, which you are tasked with importing to Microsoft Exchange Online mailboxes. To complete the import, you will need a tool. Which one?

One of your company’s devices that is enrolled in Microsoft Intune belongs to 2 groups. One group has a policy assigned that requires BitLocker and the other group has a policy assigned that doesn’t require BitLocker. Is the device considered compliant to the Microsoft Intune policies?

Your company’s network has an Active Directory domain, and 2 Azure AD tenants. You have to implement synchronization between the on-premises AD and the Azure AD. Each tenant will contain some of the Active Directory users. What topology should you use?

You work for a company that has an Active Directory Domain. You deployed an Azure AD tenant. A colleague of yours has configured the synchronization of the domain to Azure AD. 15 user account (all belong to a single organizational unit) haven’t been synchronized. There were no errors in the synchronization according to Azure AD Connect Health and all the other user accounts were successfully synchronized. You believe that this OU was simply forgotten during the configuration of the synchronization. What should you do?

You are the IT administrator of a company that has a Microsoft Azure AD tenant. All employees have been put in 2 groups. One of the groups is nested in the other. The users in that nested group are not part of the parent group. Is it possible to assign Microsoft 365 Enterprise E5 licenses to the second group?

Which Microsoft 365 role group allows a user to publish retention labels from the Security & Compliance admin center?

Your company has a Microsoft 365 subscription. One of the employees of the sales department needs to use SharePoint Online. The employees in the sales department are not licensed to use SharePoint Online. What is the more efficient way to make sure the employee has a valid SharePoint Online license?

Which Microsoft 365 user role can view all Security & Compliance reports? (Use the principle of least privilege)

Your company purchased a Microsoft 365 subscription and created an Azure AD tenant. Your company’s network already contained an on-premise AD named ourdomain.com with multiple domain controllers. You need to create a federation authentication between the Azure AD and the on-premises AD. You have already added a custom domain name using the Azure Portal. Which tool should you use to establish the federation?

Your company purchased a Microsoft 365 subscription and created an Azure AD tenant. Your company’s network already contained an on-premise AD named ourdomain.com with multiple domain controllers. You need to create a federation authentication between the Azure AD and the on-premises AD. Which is the first action you should do before establishing the federation?

Your company’s network has 2 AD forests, and an Azure AD tenant. You have to implement synchronization between the on-premises AD and the Azure AD. The method you use should provide redundancy in case of a single sync server failure. What topology should you use?

Which user role in a Microsoft 365 subscription can view the SharePoint Online advisories in Service Health, in order to be able to investigate health issues?

Your company’s on-premises network is consisted of several servers. It also owns an Azure AD tenant. The Azure AD Connect Health agent was initially installed on all the servers, but was removed a few weeks later from the servers that were going to be migrated to the cloud. One of theses servers will not be migrated to the cloud after all. What can you do to be, again, able to monitor the health of this server?

Your company has a Microsoft 365 subscription with an Azure AD tenant. The company policy demands that the user passwords cannot contain the name of the company. What can you do to enforce this company policy?

Which of the following user roles in a Microsoft 365 subscription can modify password protection policies?

You want to assign roles to the users of your company’s Microsoft Azure AD. Which role has the ability to invite a guest user?

Which Microsoft 365 user role can create and manage Security & Compliance alerts? (Use the principle of least privilege)

You are an IT administrator of a company, which after your proposal, decided to migrate their on-premises Microsoft Exchange Server 2016 to a new Microsoft 365 Enterprise subscription. You are in charge of the migration, but the migration batch you have started, caused complains from the users of the on-premise Exchange server. It is clear to you that the migration is causing this issue. You need to reduce the performance impact of the migration. What is the best course of action?

You can use the Security & Compliance audit log search to monitor a variety of user actions. One of these actions is to monitor if someone opened a mailbox without being its owner.

Your company has a Microsoft 365 Enterprise subscription. You have created a password policy with the Lockout threshold attribute set to 2 and the Lockout duration set to 30 seconds. If the users get locked out, how long should it pass until they can try to sign in again?

You are tasked with designing the authentication strategy of your company for the deployment of various Microsoft 365 services. The authentication has to meet the following criteria: Authentication should fail if the users try to sign in outside of business hours There should be redundancy. Even if a server fails the authentication requests must be completed successfully. What should your authentication strategy be?

You are the IT administrator of a company that has a Microsoft Azure AD tenant. You need to assign various administrative roles to users. You want one of the employees to be able to modify the manager value of simple users (with no specific roles). Which role should you assign to that employee?

Which is not one of the permissions of a User administrator in Azure AD?

Your company has an Active Directory domain and an Azure AD. You are tasked with the synchronization of the domain to the Azure AD. The AD domain contains an Exchange installation. You plan to enable group writeback is enabled. Will the Office 365 groups be synchronized?

Your company has an on-premises Active Directory. Your company has just subscribed in Microsoft 365 with an Azure AD tenant and you need to implement directory synchronization. As the IT administrator you need to find a solution that will allow users to authenticate in Microsoft 365 services even if t the AD is unavailable. Furthermore, the passwords the users have cannot be less than 10 characters. What can you do?

Your company has an Active Directory domain and an Azure AD tenant. The user accounts of all the 200 employees of the company are synced. You need to modify one of the attributes in the user’s properties. What can you do?

Which Microsoft 365 user role can place a hold on all mailbox content?

You want to enable Azure Information Protection in your company. You want this deployment to be gradual. In the beginning you want to enable it only for a specific user group. Which command should you use?

A user in your company belongs in 2 groups. Both groups have specific restrictions set in Microsoft Intune, concerning their mobile devices. Which set of restriction will apply to the user in question.

Your company has an Azure AD tenant. There are 2 user groups in that tenant. The employees group and the managers group which is a subgroup of the employees group. You have assigned Exchange Online to the employees group. Select which option is true.

You company has an on-premises Active Directory domain that is synced to an Azure AD. Password synchronization is enabled but password writeback is disabled. Can you reset the password of an on-premises Active Directory user account?

Can you use directory extensions to extend the schema in Azure AD with your own attributes from on-premises Active Directory?

You are configuring a very strict DLP policy, that prohibits your company’s employees from sending emails outside the organization, which contain documents with sensitive data. Is it possible to add exceptions to this policy for email recipients with a specific email suffix?

Your company has an on-premises AD and an Azure AD tenant. You have already implemented directory synchronization for all the employees of the company. But several user accounts failed to sync to Azure AD. You need to find a solution to this as soon as possible. To do so, you first need to identify which accounts failed to sync. Which is the proper course of action?
Navigate to the AD Administrative Center and search for all the users. Then change the properties of the user accounts in question

Your company has a Microsoft 365 Enterprise subscription. You have created a password policy with the Lockout threshold attribute set to 2 and the Lockout duration set to 30 seconds. Select what is true.

Can the Guest inviter user role in a Microsoft 365 subscription create guest user accounts?

Your company’s network contains an AD forest named mycompany.local. There are 400 users in the forest and the UPN suffix it uses is mycompany.com. Your company bought Microsoft 365 subscription and deployed a Microsoft 365 tenant. You were tasked with the directory synchronization of the 30 users of the developer team. After the synchronization was completed, you realized that half of the users have usernames with a different UPN suffix. You need all the synchronized identities to use the on-premise UPN suffix (mycompany.com). What is the best course of action?

You are the IT administrator of a company that has a Microsoft Azure AD tenant. You need to assign various administrative roles to users. You want one of the employees to be able to reset the password of simple users (with no specific roles). Which role should you assign to that employee?