MS-100 Microsoft 365 Identity and Services Free Online Dumps

1. Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.

You purchase Microsoft 365 and plan to implement several Microsoft 365 services.

You need to identify an authentication strategy for the planned Microsoft 365 deployment.

The solution must meet the following requirements:

✑ Ensure that users can access Microsoft 365 by using their on-premises credentials.

✑ Use the existing server infrastructure only.

✑ Store all user passwords on-premises only.

✑ Be highly available.

Which authentication strategy should you identify?

2. HOTSPOT

Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory (Azure AD) by using the Azure AD Connect Express Settings. Password writeback is disabled.

You create a user named User1 and enter Pass in the Password field as shown in the following exhibit.





The Azure AD password policy is configured as shown in the following exhibit.

3. HOTSPOT

Your network contains an on-premises Active Directory domain named Contoso.com.

Your company purchase a Microsoft 365 subscription and establishes a hybrid deployment of Azure Active Directory (Azure AD) by using password hash synchronization.

You need to identify where an administrator can reset the password of each new user.

What should you identify? To answer, select the appropriate option in the area . NOTE: Each correct selection is worth point.

4. HOTSPOT

You need to meet the application requirement for the Office 365 ProPlus applications.

You create a XML file that contains the following settings.





Use the drop-down menus to select the choice that complete each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

5. Your network contains an on-premises Active Directory domain named contoso.com. The domain contains 1,000 Windows 10 devices.

You perform a proof of concept (PoC) deployment of Windows Defender Advanced Threat Protection (ATP) for 10 test devices. During the onboarding process, you configure Windows Defender ATP-related data to be stored in the United States.

You plan to onboard all the devices to Windows Defender ATP data in Europe.

What should you do first?

6. A user receives the following message when attempting to sign in to https://myapps.microsoft.com:

"Your sign-in was blocked. We've detected something unusual about this sign-in. For example, you might be signing in from a new location, device, or app. Before you can continue, we need to verify your identity. Please contact your admin."

Which configuration prevents the users from signing in?

7. You have Microsoft 365 tenant that contains a Microsoft Power Platform environment named Environment1 (default). Environment1 contains a Microsoft Dataverse database.

In the tenant, you create a user named User1. You assign a Microsoft Power Apps license to User1.

Which security role for Environment1 is assigned automatically to User1?

8. You manage multiple devices by using Microsoft Endpoint Manager.

The devices run on the following operating systems:

✑ Android 8.0, Android 8.1.0, and Android 9

✑ iOS 12 and iOS 13

✑ MacOS 10.14

✑ Windows 10

You need to deploy Microsoft 365 apps to the devices.

From the Microsoft Endpoint Manager admin center, what is the minimum number of apps you should create?

9. HOTSPOT

Your company has a Microsoft 365 tenant named litwareinc.com.

The Guest access settings in Microsoft Teams are configured as shown in the following exhibit.





The External access settings in Microsoft Teams are configured as shown in the following exhibit.





The company has a third-party supplier named adventureworks.com.

Users in litwareinc.com collaborate with the following users by using Microsoft Teams:

✑ [email protected]

✑ [email protected]

For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

10. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





Your company uses Windows Defender Advanced Threat Protection (ATP).

Windows Defender ATP contains the roles shown in the following table.





Windows Defender ATP contains the device groups shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

11. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains a user named User1.

You suspect that an imposter is signing in to Azure AD by using the credentials of User1.

You need to ensure that an administrator named Admin1 can view all the sign in details of User1 from the past 24 hours.

To which three roles should you add Admin1? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

12. Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD).

The on-premises network contains a Microsoft SharePoint Server 2019 farm.

The company purchases a Microsoft 365 subscription.

You have the users shown in the following table





You plan to assign User1 and User2 the required roles to run the SharePoint Hybrid Configuration Wizard.

User1 will be used for on-premises credentials and User2 will be used for cloud credentials.

You need to assign the correct role to User2. The solution must use the principle of least privilege.

Which role should you assign to User2?

13. You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.

Corporate policy states that user passwords must not include the word Contoso.

What should you do to implement the corporate policy?

14. You have an on-premises Microsoft Exchange Server organization that contains 100 mailboxes.

You have a hybrid Microsoft 365 tenant.

You run the Hybrid Configuration wizard and migrate the mailboxes to the tenant.

You need to ensure that Microsoft 365 spam filtering is applied to incoming email.

What should you do?

15. You have a Microsoft 365 subscription.

You recently configured a Microsoft SharePoint Online tenant in the subscription.

You plan to create an alert policy.

You need to ensure that an alert is generated only when malware is detected in more than five documents stored in SharePoint Online during a period of 10 minutes.

What should you do first?

16. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection.

All the branch offices connect to the Internet by using the main office connection.

Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.

The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

Solution: For each device, you configure an additional Outlook profile that uses IMAP.

Does this meet the goal?

17. You network contains an on-premises Active Directory domain named contoso.com. The domain contains a Microsoft Exchange Server 2019 organization.

You plan to sync the domain to Azure Active Directory (Azure AD) and to enable device writeback and group writeback.

You need to identify which group types will sync from Azure AD.

Which two group types should you identify? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point . NOTE: Each correct selection is worth one point.

18. From the Microsoft Azure Active Directory (Azure AD) Identity Protection dashboard, you view the risk events shown in the exhibit. (Click the Exhibit tab.)





You need to reduce the likelihood that the sign-ins are identified as risky.

What should you do?

19. Your company has an on-premises Microsoft Exchange Server 2013 organization.

The company has 100 users.

The company purchases Microsoft 365 and plans to move its entire.- infrastructure to the cloud.

The company does NOT plan to sync the on-premises Active Directory domain to Microsoft Azure Active Directory (Azure AD).

You need to recommend which type of migration to use to move all email messages, contacts, and calendar items to Exchange Online.

What should you recommend?

20. You have a Microsoft 365 subscription. All users have client computers that run Windows 10 and have Microsoft Office 365 ProPlus installed.

Some users in the research department work for extended periods of time without an Internet connection.

How many days can the research department users remain offline before they are prevented from editing

Office documents?

21. HOTSPOT

Your network contains an on-premises Active Directory forest named contoso.com.

The forest contains the users shown in the following table.





You create an Azure Active Directory (Azure AD) tenant named fabrikam.onmicrosoft.com.

You plan to sync the users in the forest to fabrikam.onmicrosoft.com by using Azure AD Connect.

Which username will be assigned to User1 and User2 in Azure AD after the synchronization? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

22. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





The domain syncs to an Azure Active Directory (Azure AD) tenant named contoso.com as shown in the exhibit. (Click the Exhibit tab.)





User2 fails to authenticate to Azure AD when signing in as [email protected].

You need to ensure that User2 can access the resources in Azure AD.

Solution: From the on-premises Active Directory domain, you assign User2 the Allow logon locally user right. You instruct User2 to sign in as [email protected].

Does this meet the goal?

23. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You need to ensure that all mobile devices that connect to Microsoft Exchange Online meet the following requirements:

✑ A password must be used to access the devices.

✑ Data on the devices must be encrypted.

24. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873







You need to prevent all the users in your organization from sending an out of office reply to external users.

To answer, sign in to the Microsoft 365 portal.

25. You have a Microsoft 365 subscription.

You configure a data loss prevention (DLP) policy.

You discover that users are incorrectly marking content as false positive and bypassing the DLP policy.

You need to prevent the users from bypassing the DLP policy.

What should you configure?

26. HOTSPOT

You have a new Microsoft 365 subscription.

A user named User1 has a mailbox in Microsoft Exchange Online.

You need to log any changes to the mailbox folder permissions of User1.

Which command should you run? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

27. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: oL9z0=?Nq@ox



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11098651







You recently discovered that several users in your organization have permissions on the mailbox of another user in the organization.

You need to ensure that Lee Gu receives a notification when a user is granted permissions on another user’s mailbox.

To answer the question, sign in to the Microsoft 365 portal.

28. Your network contains two on-premises Active Directory forests named contoso.com and fabrikam.com. Fabrikam.com contains one domain and five domain controllers.

Contoso.com contains the domains shown in the following table.





You need to sync all the users from both the forests to a single Azure Active Directory (Azure AD) tenant by using Azure AD Connect.

What is the minimum number of Azure AD Connect sync servers required?

29. Your company has 10 offices.

The network contains an Active Directory domain named contoso.com. The domain contains 500 client

computers. Each office is configured as a separate subnet.

You discover that one of the offices has the following:

✑ Computers that have several preinstalled applications

✑ Computers that use nonstandard computer names

✑ Computers that have Windows 10 preinstalled

✑ Computers that are in a workgroup

You must configure the computers to meet the following corporate requirements:

✑ All the computers must be joined to the domain.

✑ All the computers must have computer names that use a prefix of CONTOSO.

✑ All the computers must only have approved corporate applications installed.

You need to recommend a solution to redeploy the computers. The solution must minimize the deployment time.

30. You have a Microsoft 365 subscription.

You view the service advisories shown in the following exhibit.





You need to ensure that users who administer Microsoft SharePoint Online can view the advisories to investigate health issues.

Which role should you assign to the users?

31. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.

Users use Microsoft Outlook 2016 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.

The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.

You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.

You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.

Solution: For each branch office, you add a direct connection to the Internet.

Does this meet the goal?

32. You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named

contoso.com.

A temporary employee at your company uses an email address of [email protected].

You need to ensure that the temporary employee can sign in to contoso.com by using the [email protected] account.

What should you do?

33. HOTSPOT

You have a Microsoft 365 Enterprise E5 subscription.

You add a cloud-based app named App1 to the Microsoft Azure Active Directory (Azure AD) enterprise applications list.

You need to ensure that two-step verification is enforced for all user accounts the next time they connect to App1.

Which three settings should you configure from the policy? To answer, select the appropriate settings in the answer area.

34. You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You add an app named App1 to the enterprise applications in contoso.com.

You need to configure self-service for App1.

What should you do first?

35. You use Microsoft System Center Configuration manager (Current Branch) to manage devices.

Your company uses the following types of devices:

✑ Windows 10

✑ Windows 8.1

✑ Android

✑ iOS

Which devices can be managed by using co-management?

36. HOTSPOT

Your company has offices in several cities and 100.000 users.

The network contains an Active Directory domain contoso.com.

You purchase Microsoft 365 and plan to deploy several Microsoft 365 services.

You are evaluating the implementation of pass-through authentication and seamless SSO.

Azure AD Connect will NOT be in staging mode.

You need to identify the redundancy limits for the planned implementation.

What should you identify? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

37. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You have a user named Grady Archie. The solution must meet the following requirements:

✑ Grady Archie must be able to add payment methods to your Microsoft Office 365 tenant.

✑ The solution must minimize the number of licenses assigned to users.

✑ The solution must use the principle of least privilege.

38. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: From Azure AD Connect, you modify the filtering settings.

Does this meet the goal?

39. You have a Microsoft 365 Enterprise subscription.

You have a conditional access policy to force multi-factor authentication when accessing Microsoft SharePoint from a mobile device.

You need to view which users authenticated by using multi-factor authentication.

What should you do?

40. HOTSPOT

Your network contains an on-premises Active Directory domain named Contoso.com.

Your company purchases a Microsoft 365 subscription and establishes a hybrid deployment of Azure Directory (Azure AD) by using password hash synchronization.

You create a new user User10 on-premises and a new user named User20 in Azure AD.

You need to identify where an administrator can reset the password of each new user.

What should you identify? To answer select the appropriate option in the answer area . NOTE: Each correct selection is worth one point.

41. You have a Microsoft 365 E5 subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com.

You purchase 100 Microsoft 365 Business Voice add-on licenses.

You need to ensure that the members of a group named Voice are assigned a Microsoft 365 Business Voice add-on license automatically.

What should you do?

42. HOTSPOT

You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.

The tenant contains the Windows 10 devices shown in the following table.





All the devices are managed by using Microsoft Endpoint Manager and are members of a group named Group1.

From the Microsoft Endpoint Manager admin center, you create an app suite named App1 for Microsoft Office 365 apps.

You configure the App1 settings as shown in the exhibit. (Click the Exhibit tab.)





You assign App1 to Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. Note: Each correct selection is worth one point.

43. HOTSPOT

You have a Microsoft 365 subscription.

You need to provide an administrator named Admin1 with the ability to place holds on mailboxes, SharePoint Online sites, and OneDrive for Business locations. The solution must use the principle of least privilege.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

44. Your on-premises network contains five file servers. The file servers host shares that contain user data.

You plan to migrate the user data to a Microsoft 36S subscription.

You need to recommend a solution to import the user data into Microsoft OneDrive.

What should you include in the recommendation?

45. HOTSPOT

You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

In the subscription, an administrator adds two custom domains named sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com and the objects shown in the following table.





You plan to delete sub1.contoso.onmicrosoft.com and sub2.contoso.onmicrosoft.com.

Which objects must you delete or modify manually before you can delete the domains? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

46. HOTSPOT

You are confirming an enterprise application named Test App in Microsoft Azur as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

47. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.





You enable self-service password reset for all users. You set Number of methods required to reset to 1, and you set Methods available to users to Security questions only.

What information must be configured for each user before the user can perform a self-service password reset? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

48. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: You run idfix.exe and report the 10 user accounts.

Does this meet the goal?

49. Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

You sign up for Microsoft Store for Business.

The tenant contains the users shown in the following table.





Microsoft Store for Business has the following Shopping behavior settings:

✑ Allow users to shop is set to On.

✑ Make everyone a Basic Purchaser is set to Off.

You need to identify which users can install apps from the Microsoft for Business private store.

Which users should you identify?

50. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.





User1 is the owner of Group1, User2 is the owner of Group2.

You create an access review that contains the following configurations:

* Users to review, Member of a group

* Scope Everyone

* Group: Group1 and Group2

* Review Group owners

For each of the following statements, select Yes if the statement is true. Otherwise select No . NOTE: Each correct selection is worth one point.

51. HOTSPOT

You have a Microsoft SharePoint Online site and an on-premises file server.

The site contains the files shown in the following table.





The file server contains the files shown in the following table.





You migrate D:Folder1 and D:Folder2 to the Documents library by using the SharePoint Migration Tool as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

52. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the SharePoint admin center, you modify the sharing settings.

Does this meet the goal?

53. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You discover that some external users accessed content on a Microsoft SharePoint site. You modify the

SharePoint sharing policy to prevent sharing outside your organization.

You need to be notified if the SharePoint policy is modified in the future.

Solution: From the Security & Compliance admin center, you create a threat management policy.

Does this meet the goal?

54. Your company has a Microsoft Azure Active Directory (Azure AD) directory tenant named contoso.onmicrosoft.com.

All users have client computers that run Windows 10 Pro and are joined to Azure AD.

The company purchases a Microsoft 365 E3 subscription.

You need to upgrade all the computers to Windows 10 Enterprise. The solution must minimize administrative effort.

You assign licenses from the Microsoft 365 admin center.

What should you do next?

55. HOTSPOT

Your company has a Microsoft 365 subscription that contains the users shown in the following table.





You need to identify which users can perform the following administrative tasks:

✑ Modify the password protection policy.

✑ Create guest user accounts.

Which users should you identify for each task? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

56. HOTSPOT

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.





You need to identify which users can perform the following administrative tasks:

✑ Reset the password of User4.

✑ Modify the value for the manager attribute of User4.

Which users should you identify for each task? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

57. Your network contains an Active Directory domain. The domain contains a server named Server1 that runs Windows Server 2016. Server1 has a share named Share1.

You have a hybrid deployment of Microsoft 365.

You need to migrate the content in Share1 to Microsoft OneDrive.

What should you use?

58. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: 3&YWyjse-6-d



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10887751



You plan to provide an external user named [email protected] with access to several resources in your Microsoft 365 tenant.

You need to ensure that the external user can be added to Office 365 groups.

59. You have a Microsoft Power Platform production environment that contains a custom model-driven Microsoft Power Apps app.

How many days will system backups be retained for the environment?

60. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain.

You deploy a Microsoft Azure Active Directory (Azure AD) tenant.

Another administrator configures the domain to synchronize to Azure AD.

You discover that 10 user accounts in an organizational unit (OU) are NOT synchronized to Azure AD. All the other user accounts synchronized successfully.

You review Azure AD Connect Health and discover that all the user account synchronizations completed successfully.

You need to ensure that the 10 user accounts are synchronized to Azure AD.

Solution: From Azure AD Connect, you modify the Azure AD credentials.

Does this meet the goal?

61. HOTSPOT

You have a Microsoft 365 subscription.

You have a group named Support. Users in the Support group frequently send email messages to external users.

The manager of the Support group wants to randomly review messages that contain attachments.

You need to provide the manager with the ability to review messages that contain attachments sent from the Support group users to external users. The manager must have access to only 10 percent of the messages.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

62. You have a Microsoft 365 subscription.

Your company deploys an Active Directory Federation Services (AD FS) solution.

You need to configure the environment to audit AD FS user authentication.

Which two actions should you perform? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

63. You have a Microsoft 365 E5 subscription.

All users are assigned a license to Microsoft 365 Apps for enterprise.

The users report that they do not have the option to install Microsoft 365 apps on their device as shown in the following exhibit.





You need to ensure that the users can install Microsoft 365 apps from the Office 365 portal.

What should you do?

64. HOTSPOT

You have a Microsoft Azure Active Directory (Azure AD) tenant.

Your company implements Windows Information Protection (WIP).

You need to modify which users and applications are affected by WIP.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

65. HOTSPOT

You have a Microsoft 365 subscription that uses a default domain named litwareinc.com.

The subscription has a Microsoft SharePoint site collection named Collection1.

From the Azure Active Directory admin center, you configure the External collaboration settings as shown in the External Collaboration Settings exhibit. (Click the External Collaboration Settings tab.)





From the SharePoint admin center, you configure the sharing settings as shown in the SharePoint Sharing exhibit. (Click the SharePoint Sharing tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

66. HOTSPOT

Your network contains an on premises Active Directory domain named contoso.com. The domain contains five domain controllers.

Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You plan to establish federation authentication between on premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).

You need to establish the federation.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point

67. Your company uses email, calendar, contact, and task services in Microsoft Outlook.com.

You purchase a Microsoft 365 subscription and plan to migrate all users from Outlook.com to Microsoft 365.

You need to identify which user data can be migrated to Microsoft 365.

Which type of data should you identify?

68. Your company recently purchased a Microsoft 365 subscription.

You enable Microsft Azure Multi-Factor Authentication (MFA) for all 500 users in the Azure Active Directory (Azure tenant)

You need to generate a report that lists all the users who Azure registeration process.

What is the best approach to achieve the goal? More than one answer choice achieve the goal. Select the Best answer.

69. Your company has a Microsoft 365 subscription.

You plan to move several archived PST files to Microsoft Exchange Online mailboxes.

You need to create an import job for the PST files.

Which three actions should you perform before you create the import job? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

70. Topic 1, Contoso, Ltd



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.



The offices have the users and devices shown in the following table.





Contoso recently purchased a Microsoft 365 E5 subscription.



Existing Environment

The network contains an Active directory forest named contoso.com and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You recently configured the forest to sync to the Azure AD tenant.

You add and then verify adatum.com as an additional domain name.

All servers run Windows Server 2016.

All desktop computers and laptops run Windows 10 Enterprise and are joined to contoso.com.

All the mobile devices in the Montreal and Seattle offices run Android. All the mobile devices in the New York office run iOS.



Contoso has the users shown in the following table.







Contoso has the groups shown in the following table.







Microsoft Office 365 licenses are assigned only to Group2.

The network also contains external users from a vendor company who have Microsoft accounts that use a suffix of @outlook.com.



Requirements

Planned Changes

Contoso plans to provide email addresses for all the users in the following domains:

✑ East.adatum.com

✑ Contoso.adatum.com

✑ Humongousinsurance.com



Technical Requirements

Contoso identifies the following technical requirements:

✑ All new users must be assigned Office 365 licenses automatically.

✑ The principle of least privilege must be used whenever possible.



Security Requirements

Contoso identifies the following security requirements:

✑ Vendors must be able to authenticate by using their Microsoft account when accessing Contoso resources.

✑ User2 must be able to view reports and schedule the email delivery of security and compliance reports.

✑ The members of Group1 must be required to answer a security question before changing their password.

✑ User3 must be able to manage Office 365 connectors.

✑ User4 must be able to reset User3 password.



HOTSPOT

You need to meet the technical requirements for the user licenses.

Which two properties should you configure for each user? To answer, select the appropriate properties in the answer area . NOTE: Each correct selection is worth one point.

71. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals- Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As m result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirement.

Solution: From the Office 36S admin center, you assign User2 the Records Management role. From the Exchange 3dmm center, you assign User2 the Help Desk role.

Does that meet the goal?

72. Note This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Administrator role. From the Exchange admin center, you add User2 to the View-Only Management role.

Does this meet the goal?

73. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Reader role.

From the Exchange admin center, you assign User2 the Compliance Management role.

Does this meet the goal?

74. You need to meet the security requirement for Group1.

What should you do?

75. You need to meet the security requirement for the vendors.

What should you do?

76. You need to assign User2 the required roles to meet the security requirements and the technical requirements.

To which two roles should you assign User2? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

77. You need to Add the custom domain name* to Office 36S K> support the planned changes as quickly as possible.

What should you create to verify the domain names successfully?

78. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to assign User2 the required roles to meet the security requirements.

Solution: From the Office 365 admin center, you assign User2 the Security Reader role.

From the Exchange admin center, you assign User2 the Help Desk role.

Does this meet the goal?

79. HOTSPOT

You need to meet the security requirements for User3. The solution must meet the technical requirements.

What should you do? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

80. To which Azure AD role should you add User4 to meet the security requirement?

81. You need to meet the security requirement for the vendors.

What should you do?

82. Topic 2, Fabrikam, Inc



This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.



Overview

Fabrikam, Inc. is an electronics company that produces consumer products. Fabrikam has 10,000 employees worldwide.

Fabrikam has a main office in London and branch offices in major cities in Europe, Asia, and the United States.



Existing Environment

Active Directory Environment

The network contains an Active Directory forest named fabrikam.com. The forest contains all the identities used for user and computer authentication.



Each department is represented by a top-level organizational unit (OU) that contains several child OUs for user accounts and computer accounts.



All users authenticate to on-premises applications by signing in to their device by using a UPN format of [email protected].



Fabrikam does NOT plan to implement identity federation.



Network Infrastructure

Each office has a high-speed connection to the Internet.

Each office contains two domain controllers. All domain controllers are configured as a DNS server.

The public zone for fabrikam.com is managed by an external DNS server.

All users connect to an on-premises Microsoft Exchange Server 2016 organization. The users access their email by using Outlook Anywhere, Outlook on the web, or the Microsoft Outlook app for iOS. All the Exchange servers have the latest cumulative updates installed.

All shared company documents are stored on a Microsoft SharePoint Server farm.



Requirements

Planned Changes

Fabrikam plans to implement a Microsoft 365 Enterprise subscription and move all email and shared documents to the subscription.



Fabrikam plans to implement two pilot projects:

✑ Project1: During Project1, the mailboxes of 100 users in the sales department will be moved to Microsoft 365.

✑ Project2: After the successful completion of Project1, Microsoft Teams & Skype for Business will be enabled in Microsoft 365 for the sales department users.

Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.



Technical Requirements

Fabrikam identifies the following technical requirements:

✑ All users must be able to exchange email messages successfully during Project1 by using their current email address.

✑ Users must be able to authenticate to cloud services if Active Directory becomes unavailable.

✑ A user named User1 must be able to view all DLP reports from the Microsoft 365 admin center.

✑ Microsoft Office 365 ProPlus applications must be installed from a network share only.

✑ Disruptions to email address must be minimized.



Application Requirements

Fabrikam identifies the following application requirements:

✑ An on-premises web application named App1 must allow users to complete their expense reports online.

✑ The installation of feature updates for Office 365 ProPlus must be minimized.



Security Requirements

Fabrikam identifies the following security requirements:

✑ After the planned migration to Microsoft 365, all users must continue to authenticate to their mailbox and to SharePoint sites by using their UPN.

✑ The memberships of UserLicenses must be validated monthly. Unused user accounts must be removed from the group automatically.

✑ After the planned migration to Microsoft 365, all users must be signed in to on-premises and cloud-based applications automatically.

✑ The principle of least privilege must be used.



HOTSPOT

You create the Microsoft 365 tenant.

You implement Azure AD Connect as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

83. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest.

You deploy Microsoft 365.

You plan to implement directory synchronization.

You need to recommend a security solution for the synchronized identities.

The solution must meet the following requirements:

* Users must be able to authenticate successfully to Microsoft 365 services if Active Directory becomes unavailable.

* User passwords must be 10 characters or more.

Solution: Implement pass-through authentication and modify the password settings from the Default Domain Policy in Active Directory.

Does this meet the goal?

84. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company has a Microsoft Office 365 tenant.

You suspect that several Office 365 features were recently updated.

You need to view a list of the features that were recently updated in the tenant.

Solution: You use Monitoring and reports from the Compliance admin center.

Does this meet the goal?

85. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that uses password hash synchronization and seamless SSO. The solution contains two servers that have an Authentication Agent installed.

Does this meet the goal?

86. Which migration solution should you recommend for Project1?

87. You need to meet the application requirement for App1.

Which three actions should you perform? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

88. You need to recommend which DNS record must be created before adding a domain name for the project.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

89. You need to ensure that all the sales department users can authenticate successfully during Project1and Project2.

Which authentication strategy should you implement for the pilot projects?

90. DRAG DROP

You need to prepare the environment for Project1.

You create the Microsoft 365 tenant.

Which three actions should you perform in sequence next? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

91. You are evaluating the required processes for Project1.

You need to recommend which DNS record must be created before you begin the project.

Which DNS record should you recommend?

92. Which migration solution should you recommend for Project1?

93. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment. The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. The solution contains two servers that have an Authentication Agent installed and password hash synchronization configured.

Does this meet the goal?

94. Which role should you assign to User1?

95. HOTSPOT

You need to meet the application requirements for the Office 365 ProPlus applications.

You create an XML files that contains the following settings.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

96. HOTSPOT

You need to create the UserLicenses group. The solution must meet the security requirements.

Which group type and control method should you use? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

97. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company plans to deploy several Microsoft Office 365 services.

You need to design an authentication strategy for the planned deployment.

The solution must meet the following requirements:

* Users must be able to authenticate during business hours only.

* Authentication requests must be processed successfully if a single server fails.

* When the password for an on-premises user account expires, the new password must be enforced the next time the user signs in.

* Users who connect to Office 365 services from domain-joined devices that are connected to the internal network must be signed in automatically.

Solution: You design an authentication strategy that contains a pass-through authentication model. You install an Authentication Agent on three servers and configure seamless SSO.

Does this meet the goal?

98. Which migration solution should you recommend for Project1?

99. Topic 3, Misc. Questions



HOTSPOT

You have a Microsoft 365 subscription that uses a default named contoso.com.

Three files were created on February 1, 2019, as shown in the following table.





On March 1, 2019, you create two retention labels named Label1 and label2.

The settings for Label1 are configured as shown in the Label1 exhibit. (Click the Label1 tab.)

Label 1





The settings for Label2 are configured as shown in the Label1 exhibit. (Click the Label2 tab.)

Label 2





You apply the retention labels to Exchange email, SharePoint sites, and OneDrive accounts.

For each of the following statements, select Yes if the statement is true. Otherwise, select No . NOTE: Each correct selection is worth one point.

100. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You need to prevent users from accessing your Microsoft SharePoint Online sites unless the users are connected to your on-premises network.

Solution: From the Azure Active Directory admin center, you create a trusted location and a conditional access policy.

Does this meet the goal?

101. HOTSPOT

You have a document in Microsoft OneDrive that is encrypted by using Microsoft Azure Information Protection as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic . NOTE: Each correct selection is worth one point.

102. Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the objects shown in the following table.





You configure Azure AD Connect to sync contoso.com to Azure Active Directory.

Which objects will sync to Azure AD?

103. Your network contains an on-premises Active Directory domain named contoso.com that is synced to a

Microsoft Azure Active Directory (Azure AD) tenant.

The on-premises network contains a file server named Server1. Server1 has a share named Share1 that

contains company documents.

Your company purchases a Microsoft 365 subscription.

You plan to migrate data from Share1 to Microsoft 365. Only data that was created or modified during the last three months will be migrated.

You need to identify all the files in Share1 that were modified or created during the last 90 days.

What should you use?

104. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must

complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username: [email protected]



Microsoft 365 Password: m3t^We$Z7&xy



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 11440873





You need to create a SharePoint site named Project1. Users from your organization must be able to share content from the site to external users.

To answer, sign in to the Microsoft 365 portal.

105. You have a Microsoft 365 subscription.

You suspect that several Microsoft Office 365 applications or services were recently updated.

You need to identify which applications or services were recently updated.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

106. Your network contains an on-premises Active Directory domain.

You have a Microsoft 365 subscription.

You implement a directory synchronization solution that uses pass-through authentication.

You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.





You discover that Active Directory users can use the passwords in the custom banned passwords list.

You need to ensure that banned passwords are effective for all users.

Which three actions should you perform? Each correct answer presents part of the solution . NOTE: Each correct selection is worth one point.

107. You have an on-premises Microsoft SharePoint Server 2016 environment.

You create a Microsoft 365 tenant.

You need to migrate some of the SharePoint sites to SharePoint Online.

The solution must meet the following requirements:

✑ Microsoft OneDrive sites must redirect users to online content.

✑ Users must be able to follow both on-premises and cloud-based sites.

✑ Users must have a single SharePoint profile for both on-premises and on the cloud.

When users search for a document by using keywords, the results must include online and on-premises results.

From the SharePoint Hybrid Configuration Wizard, you select the following features:

✑ Hybrid business to business (B2B) sites

✑ Hybrid OneDrive

✑ Hybrid Search

Which two requirements are met by using the SharePoint Hybrid Configuration Wizard features? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

108. HOTSPOT

Your company has a Microsoft 365 tenant.

You plan to allow users from the engineering department to enroll their mobile device in mobile device management (MDM).

The device type restrictions are configured as shown in the following table.





The device limit restrictions are configured as shown in the following table.





What is the effective configuration for the members of the Engineering group? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

109. You have a Microsoft 365 Enterprise subscription.

You have a conditional access policy to force multi factor .mthentication when accessing Microsoft SharePoint from a mobile device

You need to view which users authenticated by using multi factor authentication.

What should you do?

110. You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites .

What should you do?

111. Your company has on-premises servers and a Microsoft Azure Active Directory (Azure AD) tenant.

Several months ago, the Azure AD Connect Health agent was installed on all the servers.

You review the health status of all the servers regularly.

Recently, you attempted to view the health status of a server named Server1 and discovered that the server is NOT listed on the Azure Active Directory Connect Servers list.

You suspect that another administrator removed Server1 from the list.

You need to ensure that you can view the health status of Server1.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution . NOTE: Each correct selection is worth one point.

112. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory domain named contoso.com that is synced to Microsoft Azure Active Directory (Azure AD).

You manage Windows 10 devices by using Microsoft System Center Configuration Manager (Current Branch).

You configure a pilot for co-management.

You add a new device named Device1 to the domain. You install the Configuration Manager client on Device1.

You need to ensure that you can manage Device1 by using Microsoft Intune and Configuration Manager.

Solution: You create a device configuration profile from the Intune admin center.

Does this meet the goal?

113. DRAG DROP

Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You purchase a domain named contoso.com from a registrar and add all the required DNS records.

You create a user account named User1. User1 is configured to sign in as [email protected].

You need to configure User1 to sign in as [email protected].

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

114. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



You plan to provide several users in your organization with the ability to join their Windows 10 device to Microsoft Azure Active Directory (Azure AD).

You need to ensure that all the users who join a device use multi-factor authentication.

115. HOTSPOT

You work at a company named Contoso, Ltd.

Contoso has a Microsoft 365 subscription that is configured to use the DNS domains shown in the following table.





Contoso purchases a company named Fabrikam, Inc.

Contoso plans to add the following domains to the Microsoft 365 subscription:

✑ fabrikam.com

✑ east.fabrikam.com

✑ west.contoso.com

You need to ensure that the devices in the new domains can register by using Autodiscover.

How many domains should you verify, and what is the minimum number of enterprise registration DNS records you should add? To answer, select the appropriate options in the answer area . NOTE: Each correct selection is worth one point.

116. Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a hybrid deployment of Microsoft 365 that contains the objects shown in the following table.





Azure AD Connect has the following settings:

✑ Password Hash Sync: Enabled

✑ Password writeback: Enabled

✑ Group writeback: Enabled

You need to add User2 to Group 2.

Solution: From Azure PowerShell, you run the Set-AzureADGroup cmdlet.

Does this meet the goal?

117. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username

below.

To enter your password, place your cursor in the Enter password box and click on the password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



Alex Wilber must be able to reset the password of each user in your organization. The solution must prevent Alex Wilber from modifying the password of global administrators.

118. CORRECT TEXT



Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.



When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.



Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.



Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.



You may now click next to proceed to the lab.

Lab information

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the

password below.



Microsoft 365 Username:

[email protected]



Microsoft 365 Password: *yfLo7Ir2&y-



If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 10811525



You need to prevent the users in your organization from establishing voice calls from Microsoft Skype for Business to external Skype users.