Microsoft MS-100 Exam Questions have been Updated

1. Topic 1, Contoso, Ltd



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.



The offices have the users and devices shown in the following table.





Contoso recently purchased a Microsoft 365 E5 subscription.



Existing Environment

The network contains an Active directory forest named contoso.com and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You recently configured the forest to sync to the Azure AD tenant.

You add and then verify adatum.com as an additional domain name.

All servers run Windows Server 2016.

All desktop computers and laptops run Windows 10 Enterprise and are joined to contoso.com.

All the mobile devices in the Montreal and Seattle offices run Android. All the mobile devices in the New York office run iOS.



Contoso has the users shown in the following table.







Contoso has the groups shown in the following table.







Microsoft Office 365 licenses are assigned only to Group2.

The network also contains external users from a vendor company who have Microsoft accounts that use a suffix of @outlook.com.



Requirements

Planned Changes

Contoso plans to provide email addresses for all the users in the following domains:

✑ East.adatum.com

✑ Contoso.adatum.com

✑ Humongousinsurance.com



Technical Requirements

Contoso identifies the following technical requirements:

✑ All new users must be assigned Office 365 licenses automatically.

✑ The principle of least privilege must be used whenever possible.



Security Requirements

Contoso identifies the following security requirements:

✑ Vendors must be able to authenticate by using their Microsoft account when accessing Contoso resources.

✑ User2 must be able to view reports and schedule the email delivery of security and compliance reports.

✑ The members of Group1 must be required to answer a security question before changing their password.

✑ User3 must be able to manage Office 365 connectors.

✑ User4 must be able to reset User3 password.



Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Reader role. From the Exchange admin center, you assign User2 the Compliance Management role.

Does this meet the goal?

2. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Administrator role. From the Exchange admin center, you add User2 to the View-Only Management role.

Does this meet the goal?

3. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Reader role.

From the Exchange admin center, you assign User2 the Help Desk role.

Does this meet the goal?

4. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals- Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As m result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirement.

Solution: From the Office 36S admin center, you assign User2 the Records Management role. From the Exchange 3dmm center, you assign User2 the Help Desk role.

Does that meet the goal?

5. You need to Add the custom domain name* to Office 36S K> support the planned changes as quickly as possible.

What should you create to verify the domain names successfully?

6. HOTSPOT

You need to meet the technical requirements for the user licenses.

Which two properties should you configure for each user? To answer, select the appropriate properties in the answer area. NOTE: Each correct selection is worth one point.

7. You need to meet the security requirement for Group1.

What should you do?

8. To which Azure AD role should you add User4 to meet the security requirement?

9. HOTSPOT

You need to meet the security requirements for User3. The solution must meet the technical requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

10. You need to meet the security requirement for the vendors.

What should you do?

11. You need to assign User2 the required roles to meet the security requirements and the technical requirements.

To which two roles should you assign User2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

12. You need to meet the security requirement for the vendors.

What should you do?

13. Topic 2, Fabrikam, Inc



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.

Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.



Existing Environment

Active Directory Environment

The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication.



Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.



All users authenticate to on-premises applications by signing in to their device by using a UPN format of [email protected].



Fabrikam does NOT plan to implement identity federation.



Network Infrastructure

Each office has a high-speed connection to the Internet.

Each office contains two domain controllers. All domain controllers are configured as a DNS server.

The public zone for fabrikam.com is managed by an external DNS server.

All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.

All shared company documents are stored on a Microsoft SharePoint Server farm.



Requirements

Planned Changes

Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.



Fabrikam plans to implement two pilot projects:

✑ Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.

✑ Project2: After the successful completion of Project1, Microsoft Teams & Skype for Business will be enabled in Microsoft 365 for the sales department users.

Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.



Technical Requirements

Fabrikam identifies the following technical requirements:

✑ All users must be able to exchange email messages successfully during Project1 by using their current email address.

✑ Users must be able to authenticate to cloud services if Active Directory becomes unavailable.

✑ A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

✑ Microsoft Office 365 ProPlus applications must be installed from a network share only.

✑ Disruptions to email address must be minimized.



Application Requirements

Fabrikam identifies the following application requirements:

✑ An on-premises web application named App1 must allow users to complete their expense reports online.

✑ The installation of feature updates for Office 365 ProPlus must be minimized.



Security Requirements

Fabrikam identifies the following security requirements:

✑ After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.

✑ The memberships of UserLicenses must be validated monthly. Unused user accounts must be removed from the group automatically.

✑ After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.

✑ The principle of least privilege must be used.



HOTSPOT

You create the Microsoft 365 tenant.

You implement Azure AD Connect as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

14. HOTSPOT

You need to meet the application requirements for the Office 365 ProPlus applications.

You create an XML files that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

15. You need to meet the application requirement for App1.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

16. You need to ensure that all the sales department users can authenticate successfully during Project1and Project2.

Which authentication strategy should you implement for the pilot projects?

17. DRAG DROP

You need to prepare the environment for Project1.

You create the Microsoft 365 tenant.

Which three actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

18. Which migration solution should you recommend for Project1?

19. You are evaluating the required processes for Project1.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

20. HOTSPOT

You need to create the UserLicenses group. The solution must meet the security requirements.

Which group type and control method should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

21. Which role should you assign to User1?

22. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and configure seamless SSO.

Does this meet the goal?

23. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. The solution contains two servers that have an Authentication Agent installed and password hash synchronization configured.

Does this meet the goal?

24. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that uses password hash synchronization and seamless SSO. The solution contains two servers that have an Authentication Agent installed.

Does this meet the goal?

25. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

* Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

* User passwords must be 10 characters or more.

Solution: Implement pass-through authentication and modify the password settings from the Default Domain Policy in Active Directory.

Does this meet the goal?

26. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant.

Solution: You use Monitoring and reports from the Compliance admin center.

Does this meet the goal?

27. You need to recommend which DNS record must be created before adding a domain name for the project.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

28. Which migration solution should you recommend for Project1?

29. Which migration solution should you recommend for Project1?

30. Topic 3, Litware inc



Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

General Overview

Litware, Inc. is a consulting company that has a main office in Montreal and a branch office in Seattle.

Litware collaborates with a third-party company named ADatum Corporation.



Environment

On-Premises Environment

The network of Litware contains an Active Directory domain named litware.com.

The domain contains three organizational units (OUs) named LitwareAdmins, Montreal Users, and Seattle Users and the users shown in the following table.





The domain contains 2,000 Windows 10 Pro devices and 100 servers that run Windows Server 2019.



Cloud environment

Litware has a pilot Microsoft 365 subscription that includes Microsoft Office 365 Enterprise E3 licenses and Azure Active Directory Premium Plan 2 licenses.

The subscription contains a verified DNS domain named litware.com.

Azure AD Connect is installed and has the following configurations:

✑ Password hash synchronization is enabled.

✑ Synchronization is enabled for the LitwareAdmins OU only.



Users are assigned the roles shown in the following table.





Self-service password reset (SSPR) is enabled.

The Azure Active Directory (Azure AD) tenant has Security defaults enabled.



Requirements

Planned Changes

Litware identifies the following issues:

✑ Admin1 cannot create conditional access policies.

✑ Admin4 receives an error when attempting to use SSPR.

✑ Users access new Office 365 service and feature updates before the updates are reviewed by Admin2.



Technical Requirements

Litware plans to implement the following changes:

✑ Implement Microsoft Intune.

✑ Implement Microsoft Teams.

✑ Implement Microsoft Defender for Office 365.

✑ Ensure that users can install Office 365 apps on their device.

✑ Convert all the Windows 10 Pro devices to Windows 10 Enterprise E5.

✑ Configure Azure AD Connect to sync the Montreal Users OU and the Seattle Users OU.



HOTSPOT

You need to ensure that Admin4 can use SSPR.

Which tool should you use, and which action should you perform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

31. HOTSPOT

You are evaluating the use of multi-factor authentication (MFA).

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

32. You need to configure just in time access to meet the technical requirements.

What should you use?

33. HOTSPOT

You need to configure the Office 365 service status notifications and limit access to the service and feature updates. The solution must meet the technical requirements.

What should you configure in the Microsoft 365 admin center? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. Topic 4 NEW Case Study



Case Study

Overview

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the question. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, n...... that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to ret........ to the question.



Existing Environment

Microsoft 365

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Microsoft SharePoint/Microsoft Exchange

Contoso has a Microsoft 365 subscription that uses a domain named contoso.com. Each user is assigned a Microsoft 365 Enterprise E5 licence.



Problem Statement

Contoso moves all email accounts to Microsoft 365.

Contoso migrates the SharePoint Server 2013 intranet sites of the research department to SharePoint Online.



Requirements

Business Goals

Contoso identifies the following issues:

* Users in the sales department report that prepanng quotations is time-consuming as it requires manually copying and pasting data from multiple sources.

* Users in the HR department must use multiple apps to manage the hiring process.

* The solution to claim expenses requires multiple manual steps.



Planned Changes

Contoso identifies the following business goals:

* Utilize core functionality of apps whenever possible.

* Reduce app development costs.

* Minimize training costs for end users.



Technical Requirements

Contoso plans to implement the following changes;

* Redesign the SharePoint Online sites of the research department to provide users with an expenence that is consistent with the Microsoft 365 portal. The research department has a third-party project management solution that uses the Microsoft identity platform in Azure AD.

* Create an email workflow solution for expense claims. Users will submit their expense claims and the system will email an approval request to their manager.

* Implement a bring your own device (BYOD) model that supports Windows 10, macOS, and Android devices.

* Develop a custom Microsoft 365 app named SalesApp for the sales department.

* Develop a custom Microsoft 365 app named HRApp for the HR department



Security Requirement

Contoso identifies the following technical requirements for app development:

* The expense claims solution must provide managers with claim information and the ability to manage the claim by using Microsoft Outlook. Outlook on the web, or Outlook for iOS and Android.

* HRApp must include a bot named HRBot that will answer HR questions. Users must be able to access the bot by ©mentioning HRBot in a Microsoft Teams channel or private chat.

* HRApp must enable users to query a third-party HR system by using a tab from within a Microsoft Teams channel.

* HRApp must include a messaging extension that enables users to search jobs by job title or job ID.

* SalesApp must be integrated with Microsoft Word and must combine images and text from multiple sources to create a quotation as a DOCX file.

* The distribution of SalesApp must be automatic and require minimal user interaction.

* Solutions for SharePoint Online and Microsoft Office must follow the current Office user interface (Ul) design.

* Development tools and solutions must support Windows and non-Windows devices.

* Development effort must be minimized.



HRApp Manifest

All solutions must support the Microsoft identity platform in Azure AD.

Intranet components must not share access tokens.



You need to recommend which API object the SharePoint Framework (SPFx) intranet components will use to access the research department s project management solution.

What should you recommend?

35. HOTSPOT

You need to modify the HRApp manifest to provide a tab that supports querying the third-party HR system.

Which section of the manifest should you modify, and which value should you set as the scope? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

36. You need to recommend a model for the expense claims solution.

What should you recommend?

37. You need to ensure that users can initiate private conversations with HRBot. The solution must meet the technical requirements for HRApp.

How should you configure the HRApp manifest?

38. You need to provide users with access to SalesApp. The solution must meet the technical requirements What should you include in the solution?

39. HOTSPOT

You need to recommend the development environment and tools for the redesign of the research department’s SharePoint Online sites.

What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

40. DRAG DROP

You need to configure HRApp to enable users to search for specific jobs by using chat in Microsoft Teams.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

41. You need to recommend which type of Office Add-in must be used for SalesApp.

What should you recommend?

42. HOTSPOT

You need to recommend the development environment and tools for the development of SalesApp.

What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

43. Topic 5, Misc. Questions



Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use the View service requests option in the Microsoft 365 admin center.

Does this meet the goal?

44. Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use Dashboard in Security & Compliance.

Does this meet the goal?

45. Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 36S tenant.

You suspect that several Office 365 features were recently updated.

You need to view a last of the features that were recently updated in the tenant.

Solution: You use Message center in the Microsoft 365 admin center.

Does this meet the goal?

46. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.

Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.

The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

Solution: For each device, you configure an additional Outlook profile that uses IMAP.

Does this meet the goal?

47. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.

Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.

The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

Solution: For each branch office, you add a direct connection to the Internet.

Does this meet the goal?

48. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.

Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.

The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

Solution: You deploy a site-to-site VPN from each branch office to Microsoft Azure.

Does this meet the goal?

49. You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites.

What should you do?

50. Your company has a hybrid deployment of Microsoft 36S.

Users authenticate by using pass-through authentication. Several Microsoft Azure AD Connect Authentication Agents are deployed.

You need to verify whether all the Authentication Agents are used for authentication.

What should you do?

51. You have an on premises web application that is published by using a URL of https://app.contoso.local.

You purchase a Microsoft 36S subscription.

Several external users must be able to connect to the web application

You need to recommend a solution for external access to the application. The solution must support multi-factor authentication.

Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

52. HOTSPOT

You have a Microsoft 365 subscription that contains a guest user named User1. User1 is assigned the User administrator role.

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. Contoso.com is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

53. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.

You suspect that an imposter is signing in to Azure AD by using the credentials of User1.

You need to ensure that an administrator named Admin1 can view all the sign in details of User 1 from the past 24 hours.

To which three roles should you add Admin1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

54. You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

Contoso.com contains the users shown in the following table.





Contoso.com is configured as shown in the following exhibit.





You need to ensure that guest users can be created in the tenant.

Which setting should you modify?

55. Your company recently purchased a Microsoft 365 subscription.

You enable Microsoft Azure Multi-Factor Authentication (Ml A) for all 500 users in the Azure Active Directory (Azure AD) tenant.

You need to generate a report that lists all the users who completed the Azure MFA registration process.

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

56. You have a Microsoft 365 Enterprise subscription.

You have a conditional access policy to force multi factor .mthentication when accessing Microsoft SharePoint from a mobile device

You need to view which users authenticated by using multi factor authentication.

What should you do?

57. You have a Microsoft 365 Enterprise E5 subscription.

You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.

What should you do?

58. HOTSPOT

You are confirming an enterprise application named Test App in Microsoft Azur as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

59. Your company has an on-premises Microsoft Exchange Server 2013 organization.

The company has 100 users.

The company purchases Microsoft 365 and plans to move its entire.- infrastructure to the cloud.

The company does NOT plan to sync the on-premises Active Directory domain to Microsoft Azure Active Directory (Azure AD).

You need to recommend which type of migration to use to move all email messages, contacts, and calendar items to Exchange Online.

What should you recommend?

60. HOTSPOT

Your network contains an on premises Active Directory domain named contoso.com. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You plan to establish federation authentication between on premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).

You need to establish the federation.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

61. HOTSPOT

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.





Group2 is a member of Group1.

You assign a Microsoft Office 365 Enterprise E3 license to User2 as shown in the following exhibit.





You assign Office 365 Enterprise E3 licenses to Group1 as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

62. You have a Microsoft 365 subscription.

You view the service advisories shown in the following exhibit.





You need to ensure that users who administer Microsoft SharePoint Online can view the advisories to investigate health issues.

Which role should you assign to the users?

63. You recently migrated your on-premises email solution to Microsoft Exchange Online and are evaluating which licenses to purchase.

You want the members of two groups named IT and Managers to be able to use the features shown in the following table.





The IT group contains 50 users. The Managers group contains 200 users.

You need to recommend which licenses must be purchased for the planned solution. The solution must minimize licensing costs.

Which licenses should you recommend?

64. DRAG DROP

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You purchase a domain named contoso.com from a registrar and add all the required DNS records.

You create a user account named User1. User1 is configured to sign in as [email protected].

You need to configure User1 to sign in as [email protected].

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

65. Your company has an on premises Microsoft Exchange Server 2016 organization and a Microsoft 365 Enterprise subscription. You plan to migrate mailboxes and groups to Exchange Online.

You start a new migration batch.

Users report *low performance when they use the on premises Exchange Server organization.

You discover that the migration is causing the slow performance.

You need to reduce the impact of the mailbox migration on the end-users.

What should you do?

66. Your Network contains an on-premises Active Directory domain named contoso.local. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Anne Active Directory (Azure AD) tenant named.contoso.onmicrosoft.com.

You plan to implement pass- through authentication.

You need to prepare the environment for the planned implementation of pass-through authentication.

Which three actions should you perform? Each correct answer presents pan of the solution. NOTE: Each correct selection is worth one point.

67. You have a Microsoft 365 tenant that contains Microsoft Exchange Online.

You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant.

You need to ensure that the calendar of every user is available to the users in adatum.com immediately.

What should you do?

68. HOTSPOT

You have a Microsoft 365 subscription.

You use the Microsoft Office Deployment tool to install Office 365 ProPlus.

You create a configuration file that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

69. You create a Microsoft 365 Enterprise subscription.

You assign licenses for all products to all users.

You need to ensure that all Microsoft Office 365 ProPlus installations occur from a network share. The solution must prevent the users from installing Office 365 ProPlus from the Internet.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

70. HOTSPOT

You create a Microsoft 365 subscription.

You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company.

You prepare the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

71. Your network contains the servers shown in the following table.





You purchase Microsoft 365 Enterprise E5 and plan to move all workloads to Microsoft 365 by using a hybrid identity solution and a hybrid deployment for all workloads.

You need to identify which server must be upgraded before you move to Microsoft 365.

What should you identify?

72. Your on-premises network contains five file servers. The file servers host shares that contain user data.

You plan to migrate the user data to a Microsoft 36S subscription.

You need to recommend a solution to import the user data into Microsoft OneDrive.

What should you include in the recommendation?

73. Your network contains an Active Directory forest named local.

You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that will use password hash synchronization.

From the Microsoft 365 admin center, you verify the contoso.com domain name. You need to prepare the environment foe the planned directory synchronization solution.

What should you do first?

74. Your company has a Microsoft 365 subscription.

Your plan to add 100 newly hired temporary users to the subscription next week.

You create the user accounts for the new users.

You need to assign licenses to the new users.

Which command should you run?

A)





B)





C)





D)

75. You have a Microsoft 365 subscription.

Your company deploys an Active Directory Federation Services (AD FS) solution.

You need to configure the environment to audit AD FS user authentication.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

76. Your network contains two Active Directory forests. Each forest contains two domains. All client computers run Windows 10 and are domain-joined.

You plan to configure Hybrid Azure AD join for the computers.

You create Microsoft Azure Active Directory (Azure AD) tenant.

You need to ensure that the computers can discover the Azure AD tenant.

What should you create?

77. Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.

The network uses a firewall that contains a list of allowed outbound domains.

You began to implement directory synchronization.

You discover that the firewall configuration contains only the following domain names in the list of allowed domains:

• *.microsof.com

• *.office.com

Directory synchronization fails.

You need to ensure that directory synchronization completes successfully.

What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

78. Your network contain*, an on-premises Active Directory forest.

You are evaluating the implementation of Microsoft 365 and the deployment of authentication strategy.

You need to recommend an authentication strategy that meets the following requirements:

• Allows users to sign in by using smart card-based certificates

• Allows users to connect to on premises and Microsoft 365 services by using SSO

Which authentication strategy should you recommend?

79. HOTSPOT

Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.





An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan’s account from Microsoft 365 and notice that his username is set to [email protected].

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

80. HOTSPOT

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.





You need to identify which users can perform the following administrative tasks:

✑ Reset the password of User4.

✑ Modify the value for the manager attribute of User4.

Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

81. HOTSPOT

Your company has offices in several cities and 100.000 users.

The network contains an Active Directory domain contoso.com.

You purchase Microsoft 365 and plan to deploy several Microsoft 365 services.

You are evaluating the implementation of pass-through authentication and seamless SSO. Azure AD Connect will NOT be in staging mode.

You need to identify the redundancy limits for the planned implementation.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

82. Your network contains an Active Directory domain named.Ki.ituin.com that is synced to Microsoft Azure Active Directory (Azure AD).

The domain contains 10O user accounts.

The city attribute for all the users is set to the city where the user resides.

You need to modify the value of the city attribute to the three letter airport code of each city.

What should you do?

83. HOTSPOT

You company has a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts.

You need to identify which users can perform the following administrative tasks:

✑ Create guest user accounts.

✑ Add User3 to Admin1.

Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

84. You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1

You enable Azure AD Identity Protection.

You need to ensure that User1 can review the list in Azure AD Identity Protection of users nagged for risk. The solution must use the principle of least privilege.

To which role should you add User1?

85. HOTSPOT

Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.

You implement directory synchronization for all 10.000 users in the organization.

You automate the creation of 100 new user accounts.

You need to ensure that the new user accounts synchronize to Azure AD as quickly as possible

Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct select ion is worth one point.

86. Your network contains three Active Directory forests.

You create a Microsoft Azure Active Directory (Azure AD) tenant.

You plan to sync the on premises Active Directory (Azure AD).

You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.

What should you include in the recommendation?

87. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant.

Solution: You review the Security & Compliance report in the Microsoft 365 admin center.

Does this meet the goal?

88. You have a Microsoft 365 subscription.

You need to prevent phishing email messages from being delivered to your organization.

What should you do?

89. Your company has a Microsoft 365 subscription. All identities are managed in the cloud.

The company purchases a new domain name.

You need to ensure that all new mailboxes use the new domain as their primary email address.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

90. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.





Group2 is a member of Group1.

You assign a Microsoft Office 365 Enterprise E3 license to Group1.

You need to identity how many Office 365 E3 licenses are assigned.

What should you identify?

91. You have a Microsoft 365 subscription.

A new corporate security policy states that you must automatically send DLP incident reports to the users in the legal department.

You need to schedule the email delivery of the reports. The solution must ensure that the reports are sent as frequently as possible.

How frequently can you share the reports?

92. Your company has a Microsoft 365 subscription.

You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.

What should you use?

93. Your company has a Microsoft 365 subscription.

You upload several archive PST files to Microsoft 365 by using the Security & Compliance admin center.

A month later, you attempt to run an import job for the PST files.

You discover that the PST files were deleted from Microsoft 365.

What is the most likely cause of the files being deleted? More than one answer choice may achieve the goal.

Select the BEST answer.

94. Your company has a main office and 20 branch offices in North America and Europe. Each branch office connects to the main office by using a WAN link. All the offices connect to the Internet and resolve external host names by using the main office connections.

You plan to deploy Microsoft 365 and to implement a direct Internet connection in each office.

You need to recommend a change to the infrastructure to provide the quickest possible access to Microsoft 365 services.

What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

95. Your network contains an Active Directory forest named adatum.local. The forest contains 500 users and uses adatum.com as a UPN suffix.

You deploy a Microsoft 365 tenant.

You implement directory synchronization and sync only 50 support users.

You discover that five of the synchronized users have usernames that use a UPN suffix of onmicrosoft.com.

You need to ensure that all synchronized identities retain the UPN set in their on-premises user account.

What should you do?

96. HOTSPOT

Your company has a Microsoft Office 365 subscription that contains the groups shown in the following table.





You have the licenses shown in the following table.





Another administrator removes User1 from Group1 and adds Group2 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

97. Your company has on-premises servers and a Microsoft Azure Active Directory (Azure AD) tenant.

Several months ago, the Azure AD Connect Health agent was installed on all the servers.

You review the health status of all the servers regularly.

Recently, you attempted to view the health status of a server named Server1 and discovered that the server is NOT listed on the Azure Active Directory Connect Servers list.

You suspect that another administrator removed Server1 from the list.

You need to ensure that you can view the health status of Server1.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

98. You have a Microsoft 365 subscription.

You suspect that several Microsoft Office 365 applications or services were recently updated.

You need to identify which applications or services were recently updated.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

99. Your company has 10,000 users who access all applications from an on-premises data center.

You plan to create a Microsoft 365 subscription and to migrate data to the cloud.

You plan to implement directory synchronization.

User account and group accounts must sync to Microsoft Azure Directory (Azure AD) successfully.

You discover that several user accounts fail to sync to Azure AD.

You need to identify which user accounts failed to sync. You must resolve the issue as quickly as possible.

What should you do?

100. Your network contains an Active Directory forest. The forest contains two domains named contoso.com and adatum.com.

Your company recently purchased a Microsoft 365 subscription.

You deploy a federated identity solution to the environment.

You use the following command to configure contoso.com for federation.

Convert-MsolDomaintoFederated CDomainName contoso.com

In the Microsoft 365 tenant, an administrator adds and verifies the adatum.com domain name.

You need to configure the adatum.com Active Directory domain for federated authentication.

Which two actions should you perform before you run the Azure AD Connect wizard? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

101. HOTSPOT

Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following two exhibits.









You create a user named User1 in Active Directory as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

102. HOTSPOT

Your company has a Microsoft 365 subscription that contains the users shown in the following table.





You need to identify which users can perform the following administrative tasks:

✑ Modify the password protection policy.

✑ Create guest user accounts.

Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

103. Your network contains a single Active Directory domain and two Microsoft Azure Active Directory (Azure AD) tenants.

You plan to implement directory synchronization for both Azure AD tenants. Each tenant will contain some of the Active Directory users.

You need to recommend a solution for the planned directory synchronization.

What should you include in the recommendation?

104. HOTSPOT

Your company has a hybrid deployment of Microsoft 365.

An on-premises user named User1 is synced to Microsoft Azure Active Directory (Azure AD).

Azure AD Connect is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

105. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement password hash synchronization and configure password protection in the Azure AD tenant.

Does this meet the goal?

106. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement pass-through authentication and configure password protection in the Azure AD tenant.

Does this meet the goal?

107. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

✑ Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

✑ Users passwords must be 10 characters or more.

Solution: Implement password hash synchronization and modify the password settings from the Default Domain Policy in Active Directory.

Does this meet the goal?

108. Your company has three main offices and one branch office. The branch office is used for research.

The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.

You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.

What should you include in the recommendation?

109. Your network contains an Active Directory domain named contoso.com.

All users authenticate by using a third-party authentication solution.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to recommend an identity strategy that meets the following requirements:

✑ Provides seamless SSO

✑ Minimizes the number of additional servers required to support the solution

✑ Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)

✑ Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account

You are evaluating the implementation of federation.

Which two requirements are met by using federation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

110. Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to identify an authentication strategy for the planned Microsoft 365 deployment.

The solution must meet the following requirements:

✑ Ensure that users can access Microsoft 365 by using their on-premises credentials.

✑ Use the existing server infrastructure only.

✑ Store all user passwords on-premises only.

✑ Be highly available.

Which authentication strategy should you identify?

111. Your network contains an on-premises Active Directory domain.

You have a Microsoft 365 subscription.

You implement a directory synchronization solution that uses pass-through authentication.

You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.





You discover that Active Directory users can use the passwords in the custom banned passwords list.

You need to ensure that banned passwords are effective for all users.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

112. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes a user named User1.

You enable multi-factor authentication for contoso.com and configure the following two fraud alert settings:

✑ Set Allow users to submit fraud alerts: On

✑ Automatically block users who report fraud: On

You need to instruct the users in your organization to use the fraud reporting features correctly.

What should you tell the users to do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

113. You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

An external user has a Microsoft account that uses an email address of [email protected].

An administrator named Admin1 attempts to create a user account for the external user and receives the error message shown in the following exhibit.





You need to ensure that Admin1 can add the user.

What should you do from the Azure Active Directory admin center?

114. HOTSPOT

You have a Microsoft 365 Enterprise subscription.

You create a password policy as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

115. Your company has a Microsoft 365 subscription that has multi-factor authentication configured for all users.

Users on the network report that they are prompted for multi-factor authentication multiple times a day.

You need to reduce the number of times the users are prompted for multi-factor authentication on their company-owned devices.

What should you do?

116. Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

An external vendor has a Microsoft account that has a username of [email protected].

You plan to provide [email protected] with access to several resources in the subscription.

You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that the external vendor can authenticate by using [email protected].

What should you do?

117. HOTSPOT

You are configuring an enterprise application named TestApp in Microsoft Azure as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

118. You have an on-premises Microsoft SharePoint Server 2016 environment.

You create a Microsoft 365 tenant.

You need to migrate some of the SharePoint sites to SharePoint Online.

The solution must meet the following requirements:

✑ Microsoft OneDrive sites must redirect users to online content.

✑ Users must be able to follow both on-premises and cloud-based sites.

✑ Users must have a single SharePoint profile for both on-premises and on the cloud.

When users search for a document by using keywords, the results must include online and on-premises results.

From the SharePoint Hybrid Configuration Wizard, you select the following features:

✑ Hybrid business to business (B2B) sites

✑ Hybrid OneDrive

✑ Hybrid Search

Which two requirements are met by using the SharePoint Hybrid Configuration Wizard features? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

119. DRAG DROP

You have several Microsoft SharePoint document libraries in your on-premises environment.

You have a Microsoft 365 tenant that has directory synchronization implemented.

You plan to move all the document libraries to SharePoint Online.

You need to recommend a migration strategy for the document libraries.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

120. You have a Microsoft 365 subscription. All users have client computers that run Windows 10 and have

Microsoft Office 365 ProPlus installed.

Some users in the research department work for extended periods of time without an Internet connection.

How many days can the research department users remain offline before they are prevented from editing

Office documents?

121. Your organization has an on-premises Microsoft Exchange Server 2016 organization. The organization is in the company’s main office in Melbourne. The main office has a low-bandwidth connection to the Internet.

The organization contains 250 mailboxes.

You purchase a Microsoft 365 subscription and plan to migrate to Exchange Online next month.

In 12 months, you plan to increase the bandwidth available for the Internet connection.

You need to recommend the best migration strategy for the organization. The solution must minimize administrative effort.

What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

122. HOTSPOT

Your company has 500 client computers that run Windows 10.

You plan to deploy Microsoft Office 365 ProPlus to all the computers.

You create the following XML file for the planned deployment.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

123. Your company has a Microsoft Azure Active Directory (Azure AD) directory tenant named contoso.onmicrosoft.com.

All users have client computers that run Windows 10 Pro and are joined to Azure AD.

The company purchases a Microsoft 365 E3 subscription.

You need to upgrade all the computers to Windows 10 Enterprise. The solution must minimize administrative effort.

You assign licenses from the Microsoft 365 admin center.

What should you do next?

124. Your company has a Microsoft 365 subscription.

You plan to move several archived PST files to Microsoft Exchange Online mailboxes.

You need to create an import job for the PST files.

Which three actions should you perform before you create the import job? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

125. Your network contains an Active Directory forest named contoso.local.

You purchase a Microsoft 365 subscription.

You plan to move to Microsoft and to implement a hybrid deployment solution for the next 12 months.

You need to prepare for the planned move to Microsoft 365.

What is the best action to perform before you implement directory synchronization? More than one answer choice may achieve the goal. Select the BEST answer.

126. HOTSPOT

Your company uses Gmail as a corporate email solution.

You purchase a Microsoft 365 subscription and plan to move all email data to Microsoft Exchange Online.

You plan to perform the migration by using the Exchange admin center.

You need to recommend which type of migration to use and which type of data to migrate.

What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

127. You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You add an app named App1 to the enterprise applications in contoso.com.

You need to configure self-service for App1.

What should you do first?

128. Your on-permission network contains the web application shown in the following table.





You purchase Microsoft 365, and the implement directory synchronization.

You plan to publish the web applications.

You need to ensure that all the applications are accessible by using the My Apps portal. The solution must minimize administrative effort.

What should you do first?

129. Your network contains an Active Directory domain named contoso.com.

You have a Microsoft 365 subscription.

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You implement directory synchronization.

The developers at your company plan to build an app named App1. App1 will connect to the Microsoft Graph

API to provide access to several Microsoft Office 365 services.

You need to provide the URI for the authorization endpoint that App1 must use.

What should you provide?

130. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You add Device1 to an Active Directory group.

Does this meet the goal?

131. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: Define a Configuration Manager device collection as the pilot collection. Add Device1 to the collection.

Does this meet the goal?

132. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure

Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You create a device configuration profile from the Intune admin center.

Does this meet the goal?

133. HOTSPOT

You have a Microsoft 365 subscription.

You create an alert policy as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information in the graphic. NOTE: Each correct selection is worth one point.

134. HOTSPOT

Your company is based in the United Kingdom (UK).

Users frequently handle data that contains Personally Identifiable Information (PII).

You create a data loss prevention (DLP) policy that applies to users inside and outside the company. The policy is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based in the information presented in the information presented in the graphic. NOTE: Each correct selection is worth one point.

135. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant.

Your company implements Windows Information Protection (WIP).

You need to modify which users and applications are affected by WIP.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

136. You have a Microsoft 365 subscription.

You configure a data loss prevention (DLP) policy.

You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

You need to prevent the users from bypassing the DLP policy.

What should you configure?

137. In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments.

Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.)





You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com.

What should you configure?

138. Your company uses on-premises Windows Server File Classification Infrastructure 9FCI). Some documents on the on-premises file servers are classifies as Confidential.

You migrate the files from the on-premises file servers to Microsoft SharePoint Online.

You need to ensure that you can implement data loss prevention (DLP) policies for the uploaded files based on the Confidential classification.

What should you do first?

139. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You have three applications App1, App2, App3. The Apps use files that have the same file extensions.

Your company uses Windows Information Protection (WIP).

WIP has the following configurations:

✑ Windows Information Protection mode: Silent

✑ Protected apps: App1

✑ Exempt apps: App2

From App1, you create a file named File1.

What is the effect of the configurations? To answer, select the appropriate options in the answer area.

140. Your company has 10 offices.

The network contains an Active Directory domain named contoso.com. The domain contains 500 client

computers. Each office is configured as a separate subnet.

You discover that one of the offices has the following:

✑ Computers that have several preinstalled applications

✑ Computers that use nonstandard computer names

✑ Computers that have Windows 10 preinstalled

✑ Computers that are in a workgroup

You must configure the computers to meet the following corporate requirements:

✑ All the computers must be joined to the domain.

✑ All the computers must have computer names that use a prefix of CONTOSO.

✑ All the computers must only have approved corporate applications installed.

You need to recommend a solution to redeploy the computers. The solution must minimize the deployment time.

141. You have a Microsoft 365 subscription.

You recently configured a Microsoft SharePoint Online tenant in the subscription.

You plan to create an alert policy.

You need to ensure that an alert is generated only when malware is detected in more than five documents stored in SharePoint Online during a period of 10 minutes.

What should you do first?

142. From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the Exhibit tab.)





You need to reduce the likelihood that the sign-ins are identified as risky.

What should you do?

143. DRAG DROP

You have a Microsoft 365 subscription.

You have the devices shown in the following table.





You need to onboard the devices to Windows Defender Advanced Threat Protection (ATP). The solution must avoid installing software on the devices whenever possible.

Which onboarding method should you use for each operating system? To answer, drag the appropriate methods to the correct operating systems. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

144. HOTSPOT

You have a Microsoft 365 subscription.

You need to implement Windows Defender Advanced Threat Protection (ATP) for all the supported devices enrolled devices enrolled on mobile device management (MDM).

What should you include in the device configuration profile? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

145. You have a Microsoft 365 tenant.

You have a line-of-business application named App1 that users access by using the My Apps portal.

After some recent security breaches, you implement a conditional access policy for App1 that uses Conditional Access App Control.

You need to be alerted by email if impossible travel is detected for a user of App1. The solution must ensure that alerts are generated for App1 only.

What should you do?

146. Your network contains an on-premises Active Directory domain.

Your company has a security policy that prevents additional software from being installed on domain

controllers.

You need to monitor a domain controller by using Microsoft Azure Advanced Threat Protection (ATP).

What should you do? More than once choice may achieve the goal. Select the BEST answer.

147. Your network contains an on-premises Active Directory domain named contoso.com. The domain contains 1,000 Windows 10 devices.

You perform a proof of concept (PoC) deployment of Windows Defender Advanced Threat Protection (ATP) for 10 test devices. During the onboarding process, you configure Windows Defender ATP-related data to be stored in the United States.

You plan to onboard all the devices to Windows Defender ATP data in Europe.

What should you do first?

148. You implement Microsoft Azure Advanced Threat Protection (Azure ATP).

You have an Azure ATP sensor configured as shown in the following exhibit.





How long after the Azure ATP cloud service is updated will the sensor update?

149. Your company has a Microsoft 365 E3 subscription.

All devices run Windows 10 Pro and are joined to Microsoft Azure Active Directory (Azure AD).

You need to change the edition of Windows 10 to Enterprise the next time users sign in to their computer. The solution must minimize downtime for the users.

What should you use?

150. HOTSPOT

You have three devices enrolled in Microsoft Intune as shown in the following table.





The device compliance policies in Intune are configured as shown in the following table.





The device compliance policies have the assignment shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

151. HOTSPOT

Your company has a Microsoft 365 tenant.

You plan to allow users from the engineering department to enroll their mobile device in mobile device management (MDM).

The device type restrictions are configured as shown in the following table.





The device limit restrictions are configured as shown in the following table.





What is the effective configuration for the members of the Engineering group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

152. Your network contains an Active Directory domain named contoso.com. The domain contains 1000 Windows 8.1 devices.

You plan to deploy a custom Windows 10 Enterprise image to the Windows 8.1 devices.

You need to recommend a Windows 10 deployment method.

What should you recommend?

153. You use Microsoft System Center Configuration manager (Current Branch) to manage devices.

Your company uses the following types of devices:

✑ Windows 10

✑ Windows 8.1

✑ Android

✑ iOS

Which devices can be managed by using co-management?

154. You have a Microsoft 365 subscription.

You plan to enable Microsoft Azure Information Protection.

You need to ensure that only the members of a group named PilotUsers can protect content.

What should you do?

155. Your company has a Microsoft 365 subscription.

You need to identify which users performed the following privileged administration tasks:

✑ Deleted a folder from the second-stage Recycle Bin if Microsoft SharePoint

✑ Opened a mailbox of which the user was not the owner

✑ Reset a user password

What should you use?

156. You have a Microsoft 365 subscription. You have a user named User1.

You need to ensure that User1 can place a hold on all mailbox content.

What permission should you assign to User1?

157. HOTSPOT

You have a new Microsoft 365 subscription.

A user named User1 has a mailbox in Microsoft Exchange Online.

You need to log any changes to the mailbox folder permissions of User1.

Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

158. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You sign up for Microsoft Store for Business.

The tenant contains the users shown in the following table.





Microsoft Store for Business has the following Shopping behavior settings:

✑ Allow users to shop is set to On.

✑ Make everyone a Basic Purchaser is set to Off.

You need to identify which users can install apps from the Microsoft for Business private store.

Which users should you identify?

159. You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

In the tenant, you create a user named User1.

You need to ensure that User1 can publish retention labels from the Security & Compliance admin center. The solution must use the principle of least privilege.

To which role group should you add User1?

160. HOTSPOT

You have a Microsoft 365 subscription.

You are configuring permissions for Security & Compliance.

You need to ensure that the users can perform the tasks shown in the following table.





The solution must use the principle of least privilege.

To which role should you assign each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

161. Your company has a Microsoft 365 E5 subscription.

Users in the research department work with sensitive data.

You need to prevent the research department users from accessing potentially unsafe websites by using

hyperlinks embedded in email messages and documents. Users in other departments must not be restricted.

What should you do from the Security & Compliance admin center?

162. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





Your company uses Windows Defender Advanced Threat Protection (ATP).

Windows Defender ATP contains the roles shown in the following table.





Windows Defender ATP contains the device groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

163. A user receives the following message when attempting to sign in to https://myapps.microsoft.com:

"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might be signing in from a new location, device, or app. Before you can continue, we need to verify your identity. Please contact your admin."

Which configuration prevents the users from signing in?

164. HOTSPOT

You have several devices enrolled in Microsoft Intune.

You have a Microsoft Azure Active Directory (Azure AD) tenant that includes the users shown in the following table.





The device type restrictions in Intune are configured as shown in the following table.





You add User3 as a device enrollment manager in Intune.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

165. HOTSPOT

You have the Microsoft Azure Active Directory (Azure AD) users shown in the following table.





Your company uses Microsoft Intune.

Several devices are enrolled in Intune as shown in the following table.





The device compliance policies in Intune are configured as shown in the following table.





You create a conditional access policy that has the following settings:

✑ The Assignments settings are configured as follows:

- Users and groups: Group1

- Cloud apps: Exchange Online

- Conditions: Include All device state, exclude Device marked as compliant

✑ Access controls is set to Block access.

For each of the following statements, select yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

166. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the SharePoint site, you create an alert.

Does this meet the goal?

167. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the SharePoint admin center, you modify the sharing settings.

Does this meet the goal?

168. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the Security & Compliance admin center, you create a threat management policy.

Does this meet the goal?

169. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Device Management admin center, you a trusted location and compliance policy.

Does this meet the goal?

170. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Microsoft 365 admin center, you configure the Organization profile settings.

Does this meet the goal?

171. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Azure Active Directory admin center, you create a trusted location and a conditional access policy.

Does this meet the goal?

172. HOTSPOT

You have a Microsoft 365 subscription that uses a default domain named contoso.com.

The domain contains the users shown in the following table.





The domain contains the devices shown in the following table.





The domain contains conditional access policies that control access to a cloud app named App1.

The policies are configured as shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

173. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

A user named User1 has files on a Windows 10 device as shown in the following table.





In Azure Information Protection, you create a label named Label1 that is configured to apply automatically. Label1 is configured as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

174. HOTSPOT

You have a Microsoft 365 subscription that uses a default named contoso.com.

Three files were created on February 1, 2019, as shown in the following table.





On March 1, 2019, you create two retention labels named Label1 and label2.

The settings for Label1 are configured as shown in the Label1 exhibit. (Click the Label1 tab.)

Label 1





The settings for Label2 are configured as shown in the Label1 exhibit. (Click the Label2 tab.)

Label 2





You apply the retention labels to Exchange email, SharePoint sites, and OneDrive accounts.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

175. HOTSPOT

You have retention policies in Microsoft 365 as shown in the following table.





Policy1 is configured as shown in the Policy1 exhibit. (Click the Policy1 tab.)

Policy1





Policy1 is configured as shown in the Policy2 exhibit. (Click the Policy2 tab.)

Policy2





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

176. You have a Microsoft 365 subscription.

From the Security & Compliance admin center, you create a content search of all the mailboxes that contain the word ProjectX.

You need to export the results of the content search.

What do you need to download the report?

177. HOTSPOT

You have a document in Microsoft OneDrive that is encrypted by using Microsoft Azure Information Protection as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

178. You have a Microsoft 365 subscription.

All users have their email stored in Microsoft Exchange Online

In the mailbox of a user named User, you need to preserve a copy of all the email messages that contain the word ProjectX.

What should you do first?

179. HOTSPOT

You have a Microsoft 365 subscription.

You have a group named Support. Users in the Support group frequently send email messages to external users.

The manager of the Support group wants to randomly review messages that contain attachments.

You need to provide the manager with the ability to review messages that contain attachments sent from the Support group users to external users. The manager must have access to only 10 percent of the messages.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

180. HOTSPOT

Your network contains an Active Directory domain named contoso.com.

The domain contains the file servers shown in the following table.





A file named File1.abc is stored on Server1. A file named File2.abc is stored on Server2. Three apps named App1, App2, and App3 all open files that have the .abc file extension.

You implement Windows Information Protection (WIP) by using the following configurations:

✑ Exempt apps: App2

✑ Protected apps: App1

✑ Windows Information Protection mode: Block

✑ Network boundary: IPv4 range of 192.168.1.1-192.168.1.255

You need to identify the apps from which you can open File1.abc

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

181. HOTSPOT

You have a data loss prevention (DLP) policy.

You need to increase the likelihood that the DLP policy will apply to data that contains medical terms from the International Classification of Diseases (ICD-9-CM). The solution must minimize the number of false positives.

Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

182. You have a Microsoft 365 subscription.

Your company purchases a new financial application named App1.

From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.

You need to prevent the missing information from affecting the score.

What should you configure from the Cloud Discover settings?

183. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.

What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

184. HOTSPOT

Your network contains an on-premises Active Directory domain. The domain contains a server named Server1.

Server1 has a share named Share1 that contains the files shown in the following table.





You have a hybrid deployment of Microsoft 365.

You create a Microsoft SharePoint site collection named Col lection1.

You plan to migrate Share1 to a document library in Collection1

You configure the SharePoint Migration Tool as shown in the exhibit. (Click the Exhibit tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

185. You have a Microsoft 365 Enterprise subscription.

You have a conditional access policy to force multi-factor authentication when accessing Microsoft SharePoint from a mobile device.

You need to view which users authenticated by using multi-factor authentication.

What should you do?

186. DRAG DROP

Your company has a hybrid deployment of Azure Active Directory (Azure AD).

You purchase a Microsoft 365 subscription.

Your company has a hybrid deployment of Azure Active Directory (Azure AD).

You purchase a Microsoft 365 subscription.

You plan to migrate the Home folder of each user to Microsoft 365 during several weeks. Each user has a device that runs Windows 10.

You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Each user has a device that runs Windows 10.

You need to recommend a solution to migrate the Home folder of five administrative users as quickly as possible.

Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

187. HOTSPOT

You have a Microsoft 365 subscription.

You need to provide an administrator named Admin1 with the ability to place holds on mailboxes, SharePoint Online sites, and OneDrive for Business locations. The solution must use the principle of least privilege.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

188. You have a Microsoft 365 subscription that uses an Azure Directory (Azure AD) tenant named Contoso.com.

The tenant contains the users shown in the following table.





You add another user named user5 to the User administrator role.

You need to identify which management tasks User5 can perform.

Which two tasks should you identify? Each correct answer presents a complete solution.

189. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: From the Synchronization Rules Editor, you create a new outbound synchronization rule.

Does this meet the goal?