Exam Code 70-346 Exam Name Managing Offi PDF
Exam Code 70-346 Exam Name Managing Offi PDF
Exam Code 70-346 Exam Name Managing Offi PDF
90q
Number: 70-346
Passing Score: 800
Time Limit: 120 min
File Version: 16.5
Exam Code:70-346
QUESTION 1
An organization deploys an Office 365 tenant.
User accounts must be synchronized to Office 365 by using the Windows Azure Active Directory Sync tool.
You have the following password policies:
- Passwords for the on-premises Active Directory Domain Services (AD DS) user accounts are at least six characters long.
- Passwords for Office 365 user accounts are at least eight characters long.
You need to ensure that the user accounts will be synchronized. Which user accounts will be synchronized?
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
After deploying ADFS tenant password policies are handled by the local Active Directory Environment, and not Office 365 Azure. All users will be synchronized
and will utilize the AD DS six character long password policy.
http://howdouc.blogspot.ca/2011/04/active-directory-federation-services.html
QUESTION 2
You are the Office 365 administrator for your company. The company synchronizes the local Active Directory objects with a central identity management system.
The environment has the following characteristics:
You need to ensure that partner accounts are NOT synchronized with Office 365.
What should you do?
A. Configure OU-based filtering by using the Windows Azure Active Directory Sync tool.
B. In the Windows Azure Active Directory portal, configure OU-based filtering.
C. Configure user attribute-based filtering by using the Windows Azure Active Directory Sync tool.
D. In the Windows Azure Active Directory portal, configure user attribute-based filtering.
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/jj710171.aspx
QUESTION 3
Your company subscribes to an Office 365 Plan E3. A user named User1 installs Office Professional Plus for Office 365 on a client computer. From the Microsoft
Online Services portal, you assign User1 an Office Professional Plus license. One month after installing Office, User1 can no longer save and edit Office
documents on the client computer. User1 can open and view Office documents. You need to ensure that User1 can save and edit documents on the client
computer by using office. What should you do?
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/gg702619(v=office.15).aspx
QUESTION 4
Your company uses Office 365. You need to identify which users do NOT have a Microsoft Exchange Online license assigned to their user account. Which
Windows PowerShell cmdlet should you use?
A. Get-ManagementRoleAssignment
B. Get-User
C. Get-RoleGroupMember
D. Get-LogonStatistics
E. Get-RemovedMailbox
F. Get-MSOLContact
G. Get-Recipient
H. Get-Mailbox
I. Get-Group
J. Get-MailboxStatistics
K. Get-MSOLUser
L. Get-MailContact
Correct Answer: K
Section: (none)
Explanation
Explanation/Reference:
QUESTION 5
Your company has an Office 365 subscription. You create a new retention policy that contains several retention tags. A user named Test5 has a client computer
that runs Microsoft Office Outlook 2007. You install Microsoft Outlook 2010 on the client computer of Test5. Test5 reports that the new retention tags are
unavailable from Outlook 2010. You verify that other users can use the new retention tags. You need to ensure that the new retention tags are available to Test5
from Outlook 2010. What should you do?
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 6
You are the Office 365 administrator for your company. Users report that they have received significantly more spam messages over the past month than they
normally receive.
You need to analyze trends for the email messages received over the past 60 days. From the Office 365 admin center, what should you view?
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 7
A company deploys an Office 365 tenant in a hybrid configuration with Exchange Server 2013. Office 365 users cannot see free/busy information that is published
from the on-premises Exchange Server. In addition, Exchange Server users cannot see free/busy information that is published from Office 365.
You need to troubleshoot why users cannot access free/busy information from both Office 365 and Exchange Server 2013.
Which tool should you run?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 8
You are the Office 365 administrator for your company. Users report that they cannot sign in to Lync from their mobile devices, but they are able to send and
receive Lync messages by using their laptop computers.
You need to troubleshoot the issue.
What should you do?
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 9
An organization migrates to Office 365.
The Office 365 administrator must be notified when Office 365 maintenance activities are planned. You need to configure the administrator's computer to receive
the notifications.
What should you configure?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 10
You deploy Lync Online for a company that has offices in San Francisco and New York. The two offices both connect to the Internet. There is no private network
link between the offices. Users in the New York office report that they cannot transfer files to the users in the San Francisco office by using Lync Online.
You need to ensure that users in both offices can transfer files by using Lync Online.
What should you do?
A. Configure the firewall to open Transmission Control Protocol (TCP) ports 50060-50079.
B. Configure the firewall to open Transmission Control Protocol (TCP) ports 50040-50059.
C. Create a private network connection to share files.
D. Upgrade all of the Lync Online clients to use Lync 2013.
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
http://onlinehelp.microsoft.com/en-ca/office365-enterprises/hh416761.aspx
QUESTION 11
A company deploys an Office 365 tenant.
You must provide an administrator with the ability to manage company information in Office 365. You need to assign permissions to the administrator by following
the principle of least privilege.
Which role should you assign?
A. Global administrator
B. Service administrator
C. Billing administrator
D. User management administrator
Correct Answer: B A
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/hh852528.aspx
QUESTION 12
You are the Office 365 administrator for your company. A user named User1 from a partner organization is permitted to sign in and use the Office 365 services.
User1 reports that the password expires in ten days. You must set the password to never expire.
Changes must NOT impact any other accounts.
You need to update the password policy for the user.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolPasswordPolicy
B. Set-MsolPartnerlnformation
C. Set-MsolUser
D. Set-MsolUserPassword
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
http://onlinehelp.microsoft.com/en-ca/office365-enterprises/hh534387.aspx
QUESTION 13
You are the administrator for a company named Contoso, Ltd. The company has an Office 365 subscription. Your need to prevent users from changing their user
display name by using Outlook Web App. What should you do?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 14
A company named Fabrikam, Inc. is deploying an Office 365 tenant. You install Active Directory Federation Services (AD FS) on a server that runs Windows
Server 2012. The company's environment is described in the following table:
You must obtain a certificate from a certification authority and install it on the federation servers. You need to specify the subject name for the certificate.
Which name should you specify?
A. fs.fabnkam.com
B. serverl.fabrikam.com
C. fabrikam.com
D. server2.fabrikam.com
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 15
An organization prepares to implement Office 365.
You have the following requirements:
- Gather information about the requirements for the Office 365 implementation.
- Use a supported tool that provides the most comprehensive information about the current environment.
You need to determine the organization's readiness for the Office 365 implementation.
What should you do?
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 16
You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2.
User2 must NOT be able to change passwords for other users.
You need to assign an administrative role to User2.
Which role should you assign?
A. Service administrator
B. Global administrator
C. Delegate administrator
D. Password administrator
Correct Answer: B A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 17
Your company purchases an Office 365 plan. The company has an Active Directory Domain Services domain.
User1 must manage Office 365 delegation for the company. You need to ensure that User1 can assign administrative roles to other users.
What should you do?
A. Create an Office 365 tenant and assign User1 the password administrator role.
B. Use a password administrator account to assign the role to User1.
C. Use a user management administrator account to assign the role to User1.
D. Create an Office 365 tenant and assign User1 the global administrator role.
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 18
You are the Office 365 administrator for your company. You prepare to install Active Directory Federation Services (AD FS).
You need to open the correct port between the AD FS proxy server and the AD FS federation server.
Which port should you open?
A. TCP 80
B. TCP 135
C. TCP 389
D. TCP 443
E. TCP 636
F. TCP 1723
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 19
Your company has a hybrid deployment of Office 365. You need to create a group. The group must have the following characteristics:
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 20
Your company has a hybrid deployment of Office 365. You need to verify whether free/busy information sharing with external users is configured. Which Windows
PowerShell cmdlet should you use?
A. Test-OutlookConnectivity
B. Test-FederationTrust
C. Get-OrganizationRelationship
D. Get-MSOLDomainFederationSettings
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 21
Your company has 100 user mailboxes. The company purchases a subscription to Office 365 for professionals and small businesses. You need to enable the
Litigation Hold feature for each mailbox. What should you do first?
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 22
You are the Office 365 administrator for your company. Users report that they have received significantly more spam messages over the past month than they
normally receive. You need to analyze trends for the email messages received over the past 60 days. From the Office 365 admin center, what should you view?
Correct Answer: A B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 23
You are the Office 365 administrator for your company. The company has a single office.
You have the following requirements:
- You must configure a redundant Active Directory Federation Services (AD FS) implementation.
- You must use a Windows Internal Database to store AD FS configuration data.
- The solution must use a custom login page for external users.
- The solution must use single sign-on for internal users.
A. 2
B. 4
C. 6
D. 16
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 24
Your company has an Office 365 subscription. You need to add the label "External" to the subject line of each email message received by your organization from
an external sender. What should you do?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 25
A company uses Office 365 services. You implement the Windows Azure Active Directory Sync tool in the local environment.
An employee moves to a new department. All Office 365 services must display the new department information for the employee.
You need to update the employee's user account.
Where should you change the value of the department attribute for the employee?
A. The Active Directory management page in the Windows Azure Management Portal
B. The Users and groups page in the Office 365 admin center
C. The on-premises Active Directory
D. The Metaverse Designer
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 26
You have an Office 365 environment. Synchronization between the on-premises Active Directory and Office 365 is enabled.
You need to deactivate directory synchronization.
Which Windows PowerShell cmdlet should you run?
A. Update-MsolFederatedDomain
B. Remove-MsolDomain
C. Remove-MsolFederatedDomain
D. Set-MsolDirSyncEnabled
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 27
Your company has a hybrid deployment Office 365. You create a user in Office 365. The next day, you discover that the new user account fails to appear in the
Microsoft Exchange Server on- premises global address list (GAL). You need to ensure that the user has a mailbox and appears in the Exchange on- premises
GAL and the Office 365 GAL. What should you do?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 28
An organization plans to migrate to Office 365.
You need to estimate the post-migration network traffic.
Which tool should you use?
Correct Answer: C B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 29
Your company has an Office 365 subscription. The network contains an Active Directory domain. You configure single sign-on for all users. You need to verify that
single sign-on functions for the users who access Office 365 from the Internet. What should you run?
Correct Answer: C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 30
A company plans to deploy an Office 365 tenant. You have two servers named FS1 and FS2 that have the Federation Service Proxy role service installed. You
must deploy Active Directory Federation Services (AD FS) on Windows Server 2012. You need to configure name resolution for FS1 and FS2.
What should you do?
A. On FS1 and FS2, add the cluster DNS name and IP address of the federation server farm to the hosts file.
B. On FS1 only, add the cluster DNS name and IP address of the federation server farm to the hosts file.
C. On FS1 only, add the cluster NetBIOS name and IP address of the federation server farm to the LMHOSTS file.
D. On FS1 and FS2, add the cluster NetBIOS name and IP address of the federation server farm to the LMHOSTS file.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 31
You use a centralized identity management system as a source of authority for user account information. You export a list of new user accounts to a file on a daily
basis. Your company uses a local Active Directory for storing user accounts for on-premises solutions. You are configuring the Windows Azure Active Directory
Sync tool.
New user accounts must be created in both the local Active Directory and Office 365. You must import user account data into Office 365 daily.
You need to import the new users. What should you do?
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 32
A company plans to use Office 365 to provide email services for users. You need to ensure that a custom domain name is used.
What should you do first?
A. Add the custom domain name to Office 365 and then verify it.
B. Verify the existing domain name.
C. Create an MX record in DNS.
D. Create a CNAME record in DNS.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 33
You plan to deploy an Office 365 tenant to multiple offices around the country. You need to modify the users and groups who are authorized to administer the
Rights Management service.
Which Windows PowerShell cmdlet should you run?
A. Add-MsolGroupMember
B. Get-Add rm Role Based Administrator
C. Remove-AadrmRoleBasedAdministrator
D. Enable AadrmSuperUserFeature
Correct Answer: A C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 34
You are the Office 365 administrator for your company. The company uses Active Directory Federation Services (AD FS) to provide single sign-on to cloud-based
services. You enable multi- factor authentication.
Users must NOT be required to use multi-factor authentication when they sign in from the company's main office location. However, users must be required to
verify their identity with a password and token when they access resources from remote locations.
You need to configure the environment.
What should you do?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
QUESTION 35
A company migrates to Office 365. 2,000 active users have valid Office 365 licenses assigned. An additional 5,000 user accounts were created during the
migration and testing processes.
These users do not have any licenses assigned.
You need to remove the Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort.
Which Windows PowerShell command should you run?
Correct Answer: A C
Section: (none)
Explanation
Explanation/Reference:
QUESTION 36
You are the Office 365 administrator for your company. You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer
that runs Windows 8 to perform the management tasks. You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
Ref: http://technet.microsoft.com/en-us/magazine/hh750396.aspx
QUESTION 37
Your company has a hybrid deployment of Office 365. All mailboxes are hosted on Office 365. All users access their Office 365 mailbox by using a user account
that is hosted on-premises. You need to delete a user account and its associated mailbox. Which tool should you use?
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
When deleting accounts from Active Directory and directory synchronization runs the associated object will be deleted from Azure and also soft deleting the
mailbox.
QUESTION 38
You administer the Office 365 environment for a company that has offices around the world. All of the offices use the same Office 365 tenant.
You need to ensure that all users can access the services that are available in their regions.
Which setting or service should you update?
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 39
You are the Office 365 administrator for your company. You configure new user accounts for User1 and User2. User1 has an on-premises mailbox. User2 has an
Office 365 mailbox. Each user must be able to view the availability of the other user. You need to ascertain whether users can share their free/busy information.
What should you use?
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 40
An organization implements single sign-on (5SO) for use with Office 365 services. You install an Active Directory Federation Services (AD FS) proxy server. Users
report that they are unable to authenticate. You launch the Event Viewer and view the event information shown in the following screen shot:
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
Exam B
QUESTION 1
You implement Office 365 for an organization.
You must create the correct DNS entries needed to configure Office 365. Which DNS entries should you create?
To answer, drag the appropriate DNS record type to the correct purpose. Each DNS record type may be used once, more than once, or not at all. You may need
to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 2
A company has an Active Directory Domain Service (AD OS) domain. All servers run Windows Server 2008. You have an on-premises Exchange 2010 server.
The company plans to migrate to Office 365.
In the table below, identify the required action for each phase of the pilot. Make only one selection in each column. Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 3
Fabrikam Inc. plans to use the domain fabrikam.com for Office 365 user identities, email addresses. Session Initiation Protocol (SIP) addresses, and a public-
facing home page. Single sign-on (SSO) between Office 365 and the on-premises Active Directory is NOT required.
You need to configure the Office 365 plan.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and
arrange them in the correct order.
Correct Answer:
Section: (none)
Explanation New-MsolDomain
Get-MsolDomainVerificationDns
Explanation/Reference: Confirm-MsolDomain
Set-MsolDomain
http://technet.microsoft.com/en-us/library/jj151815.aspx
QUESTION 4
A company plans to implement an Office 365 environment to manage email. All user accounts must be configured to use only a custom domain. You need to
provision an Office 365 tenant for the company. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
My Option:
Select the Office 365 plan
Configure the global administrator account recovery information.
Configure the custom domain and DNS
onmicrosoft.com domain can't be removed
Section: (none)
Explanation
Explanation/Reference:
QUESTION 5
Fabrikam, Inc. employs 500 users and plans to migrate to Office 365. You must sign up for a trial plan from the Office 365 website. You have the following
requirements:
How should you configure the trial plan? Select the correct answer from each list in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
QUESTION 6
A company plans to use Office 365 to provide email services to employees. The company obtains a custom domain name to use with Office 365.
You need to add the domain name to Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.
Select and Place:
Correct Answer:
Section: (none)
Explanation 1. Install the Windows Azure AD module for Windows PowerShell
2. Connect to Windows Azure AD
Explanation/Reference: 3. Run the Windows PowerShell cmdlet New-MsolDomain
QUESTION 7
A company deploys an Office 365 tenant. All employees use Lync Online. You need to configure the network firewall to support Lync Online.
Which ports must you open?
To answer, drag the appropriate port number to the correct feature or features. Each port number may be used once, more than once, or not at all. You may need
to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://onlinehelp.microsoft.com/en-ca/office365-enterprises/hh416761.aspx
QUESTION 8
You are the Office 365 administrator for Contoso, Ltd.
User1 is unable to sign in.
You need to change the password for User1 and ensure that the user is prompted to reset her password the next time she signs in.
How should you complete the relevant Windows PowerShell command?
To answer, drag the appropriate Windows PowerShell segments to the correct location or locations. Each Windows PowerShell segment may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 9
A company deploys an Office 365 tenant.
All employees in the human resources (HR) department must use multi-factor authentication. They must use only the Microsoft Outlook client to access their email
messages. User1 joins the HR department.
You need to help User1 configure his account.
Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
My option:
Section: (none) Enable multi-factor authenticatin for user1
Explanation Instruct user1 to use a mobile phone to complete the registration process
Instruct the user1 to create an App password
Explanation/Reference:
QUESTION 10
An organization has over 10,000 users and uses a SQL-based Active Directory Federation Services (AD FS) server farm.
You need to change the AD FS 2.0 service account password. What should you do?
Select the correct answer from each list in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 11
Litware Inc. has an Office 365 Enterprise El plan. Employees have access to all Office 365 services. Employees in the human resources (HR) department must
continue to use the on- premises SharePoint 2013 deployment due to legal requirements.
You need to disable access to SharePoint Online for all HR department employees.
How should you complete the relevant Windows PowerShell commands?
To answer, drag the appropriate Windows PowerShell segment to the correct location or locations in the answer area. Each Windows PowerShell segment may
be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 12
You are the Office 365 administrator for your company. Your company uses Office 365 for collaboration.
You must reset the password for all of the employees in your company. You need to ensure that all employees create a new password the next time they sign in to
Office 365. How should you complete the relevant Windows PowerShell command?
To answer, drag the appropriate Windows PowerShell segment to the correct location or locations. Each Windows PowerShell segment may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 13
An organization plans to deploy an Office 365 tenant. The company has two servers named SERVER1 and SERVER2. SERVER1 is a member server of the
Active Directory forest that you are synchronizing. SERVER2 is a standalone server. Both servers run Windows Server 2012. You need to use the Windows Azure
Active Directory Sync tool to provision users. Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Section: (none) 1. From the Office 365 admin center, activate directory synchronization.
Explanation
2. Install and run th Windwos Azure AD Sync tool on SERVER1.
Explanation/Reference: 3. Activate all sync users.
QUESTION 14
You are the Office 365 administrator for your company. User1 leaves the company. You must delete the account for User1.
In the table below, identify when each type of data will be deleted. Make only one selection in each column. Each correct selection is worth one point.
Hot Area:
Correct Answer:
Section: (none)
Explanation
ONLY:
Explanation/Reference:
"User1 Exchange Online mailbox - Removed after 30-day grace period"
and
QUESTION 15 "Documents Created by user1 on Sharepoint Online" - never removed"
You are the Office 365 administrator for your company. The company has Office 365 Enterprise E3 licenses for each of its 250 employees. The company does not
allow email or Lync Online licenses to be assigned to external contractors.
User1 is an external contractor who requires access to SharePoint and Office Web Apps only.
You need to add a license for User1's account.
What should you do? To answer, drag the appropriate action to the correct location or locations. Each action may be used once, more than once, or not at all. You
may need to drag the split bar between panes or scroll to view content.
Section: (none)
Explanation
Explanation/Reference:
QUESTION 16
A company is deploying an Office 365 tenant.
You need to deploy a Windows Server 2012 R2 federation server farm. Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
My option Imoratant WS 2012 R2 = ADFS 3.0:
Install the Active Directory Federation Service server role
Section: (none) Use the AD FS Federatin server configuration wizar to configure the first federation server in the federation server farm
Explanation
Use the AD FS Federatin server configuration wizar to configure the second federation server in the federation server
Explanation/Reference: farm
http://goodworkaround.com/node/53 http://blogs.technet.com/b/rmilne/archive/2014/04/28/how-to-install-adfs-2012-r2-for-office-365.aspx
QUESTION 17
You manage a team of three administrators for an organization that uses Office 365. You must assign roles for each of the administrators as shown in the table.
You must assign the minimum permissions required to perform the assigned tasks.
Which administrative role should you configure for each user? Select the correct answer from each list in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 18
You are the Office 365 administrator for your company. You audit the Windows Azure Active Directory Rights Management configuration for the company. You
need to view a log of the recent administrative commands performed against the Microsoft Rights Management Service. Which three Windows PowerShell
cmdlets should you run in sequence?
To answer, move the appropriate cmdlets from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/jj585027.aspx
QUESTION 19
A company has 50 employees that use Office 365.
You need to enforce password complexity requirements for all accounts. How should you complete the relevant Windows PowerShell command?
To answer, drag the appropriate Windows PowerShell segment to the correct location or locations. Each Windows PowerShell segment may be used once, more
than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 20
Fabrikam has the Office 365 Enterprise E3 plan.
You must add the domain name fabrikam.com to the Office 365 tenant. You need to confirm ownership of the domain.
Which DNS record types should you use?
To answer, drag the appropriate DNS record type to the correct location or locations in the answer area. Each DNS record type may be used once, more than
once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 21
You are the Exchange Online administrator for an organization. The organization migrates all users to Exchange Online. An employee works for a partner
organization named Contoso, Ltd. The employee uses the email alias employeelontoso.com. Users report that over the past week, they have not received email
messages from employeel@contoso.com. You need to trace email messages that originate from employeel@contoso.com to users inside your organization.
In the message trace window, which two settings should you configure?
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 22
A company plans to deploy an Office 365 tenant.
You have the following requirements:
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference: http://technet.microsoft.com/en-us/library/hh852522.aspx
QUESTION 23
Contoso Ltd. plans to use Office 365 services for collaboration between departments. Contoso has one Active Directory Domain Services domain named
contoso.local. You deploy the Windows Azure Active Directory Sync tool.
You plan to implement single sign-on (SSO) for Office 365. You need to synchronize only the user accounts that have valid routable domain names and are
members of specified departments.
Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
1. Add the UNP suffix contoso.com to domain contoso.local by using the Active Directory Domains and Trust MMC snap-in. (http://
Section: (none)
Explanation technet.microsoft.com/en-us/library/cc772007.aspx)
2. use the Active Directory Users and Computers MMC snap-in to change the UNP suffix to contoso.com for all users in the specified departments.
Explanation/Reference: (http://www.netometer.com/blog-pics/Configure-Active-Directory-UPN-Suffix.png)
3. Use user attribute-based filtering to exclude all users that have contoso.local. (http://msdn.microsoft.com/en-us/library/azure/dn801051.aspx)
QUESTION 24
An organization prepares to migrate to Office 365. The organization has one domain controller named NYC-DC1 and one server named NYC-DS that is
designated as the directory synchronization computer.
The organization has the following servers:
You plan to upgrade the servers to support directory synchronization. You must upgrade each server to meet only the minimum requirements by using the least
amount of administrative effort. You need to ensure that you can use the Windows Azure Active Directory Sync tool to synchronize the local Active Directory with
Office 365.
What should you do? Select the correct action from each list in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/jj151831.aspx
QUESTION 25
A company has a Windows Server 2008 domain controller and a SharePoint 2007 farm. All servers on the network run Windows Server 2008.
You must provide single sign-on for Office 365 SharePoint sites from the company's network.
You need to install the required software.
What should you install? To answer, drag the appropriate action to the correct location. Each answer may be used once, more than once, or not at all. You may
need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/cc771145.aspx
QUESTION 26
An organization deploys an Office 365 tenant.
The Service health page displays the following information:
You need to report the status of service interruptions for Exchange Online and SharePoint Online. Use the drop-down menus to complete each statement based
on the information presented in the screen shot. Each correct selection is worth one point.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://onlinehelp.microsoft.com/en-ca/office365-smallbusinesses/hh241344.aspx
QUESTION 27
The legal department in your organization creates standardized disclaimers for all of their email messages. The disclaimers explain that any transmissions that are
received in error should be reported back to the sender. You track any confidential documents that are attached to email messages.
Your security team reports that an employee may have mistakenly sent an email message that contained confidential information.
You need to identify whether the email message included the disclaimer and whether it contained confidential information.
Which two options should you configure? To answer, select the appropriate objects in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 28
You are the SharePoint Online administrator for Contoso, Ltd. The company purchases an Office 365 Enterprise El plan.
The public-facing website must use SharePoint Online and the custom domain contoso.com.
You need to configure the DNS settings for the public-facing SharePoint site. How should you configure the DNS settings? Select the appropriate options from
each list in the answer area.
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 29
You are the Office 365 administrator for your company. You need to ensure that trusted applications can decrypt rights-protected content. Which four Windows
PowerShell cmdlets should you run in sequence?
To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Correct Answer:
My Option:
Import-Module AADRM
Connect-AadrmService
Enable-AadrmSuperUserFeature
Add-AadrmRoleBasedAdministrator
Section: (none)
Explanation
Explanation/Reference:
QUESTION 30
You are the Office 365 administrator for your company. Users report that their passwords expire too frequently, and they do not receive adequate notice of
password expiration. Account passwords must remain active for the longest duration allowed. Users must receive password expiration notifications as early as
possible. You need to configure the password expiration policy. How should you set the policy on the password page of the Office 365 admin center?
To answer, drag the appropriate duration to the correct location. Each duration may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
http://office.microsoft.com/en-ca/office365-suite-help/set-a-user-s-password-expiration-policy-HA102816546.aspx
QUESTION 31
A company has 50 employees that use Office 365.
You need to disable password expiration for all accounts. How should you complete the relevant Windows PowerShell commands?
To answer, drag the appropriate Windows PowerShell segment to the correct location in the answer area. Each Windows PowerShell segment may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Section: (none)
Explanation
Explanation/Reference:
QUESTION 32
A company deploys an Office 365 tenant.
You need to enable multi-factor authentication for Office 365. Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
1. Enabled multi-factor authentication for all user accounts. (this first because in question
said "...to enabled MFA for Office 365", look http://technet.microsoft.com/en-us/library/
dn249466.aspx - for MFA for Office 365 not need create a Multi-Factor Auth Provider.
2. Instruct users to obtain a single-use password to complete the registration process.
Section: (none) 3. Instruct users to use a mobile pohone to complete the registration process. - it's
Explanation
ADDITIONAL security verification.
Explanation/Reference:
Ref: http://technet.microsoft.com/library/dn249466.aspx
QUESTION 33
You are the Office 365 administrator for your company. The company has two administrators named User1 and User2.
Users must be able to perform the activities as shown in the following table:
You need to grant the appropriate administrative role to each user. What should you do? To answer, drag the appropriate role to the correct user. Each role may
be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 34
You are the Office 365 administrator for your company. You must configure a trust between the on-premises Active Directory domain and the Office 365
environment by using Active Directory Federation Services. You need to assign the correct certificate to the description of your on- premises server environment
below.
Which certificate types should you assign?
To answer, drag the appropriate certificate type to the correct test description. Each certificate type may be used once, more than once, or not at all. You may
need to drag the split bar between panes or scroll to view content.
Select and Place:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 35
A company deploys an Office 365 tenant.
You prepare to use the bulk add tool to add users to Office 365. You need to prepare a file to use with the bulk add tool. Which fields must you include in the file?
To answer, drag the appropriate response to each field. Each response may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.
UserName
DisplayName
https://support.office.com/client/add-them-with-a-CSV-file-1f5767ed-e717-4f24-969c-6ea9d412ca88
Hot Area:
Correct Answer:
Section: (none)
Explanation
Explanation/Reference:
QUESTION 36
A company deploys an Office 365 tenant. You install the Active Directory Federation Services (AD FS) server role on a server that runs Windows Server 2012.
You install and configure the Federation Service Proxy role service. Users sign in by using the Security Assertion Markup Language (SAML) protocol.
You need to customize the sign-in pages for Office 365. Which pages should you customize?
To answer, drag the appropriate page to the correct customization. Each page may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
Section: (none)
Explanation
Explanation/Reference:
http://msdn.microsoft.com/en-us/library/ee895359.aspx
Exam C
QUESTION 1
Contoso, Ltd. plans to use Office 365 for email services and Lync Online. Contoso has four unique domain names.
You need to migrate domain names to Office 365.
Which two domain names should you exclude from the migration? Each correct answer presents part of the solution.
A. contoso.us
B. contoso
C. contoso.local
D. contoso.co
Correct Answer: BC
Section: (none)
Explanation
Explanation/Reference:
contoso.us - valid TLD Domain
contoso.co - valid TLD Domain
QUESTION 2
You are the Office 365 administrator for your company.
The environment must support single sign-on.
You need to install the required certificates.
Which two certificates should you install? Each correct answer presents part of the solution.
Correct Answer: AC
Section: (none)
Explanation
Explanation/Reference:
QUESTION 3
A company deploys an Office 365 tenant.
You need to configure single sign-on (SSO) for all user accounts. Which two actions should you perform? Each correct answer presents part of the solution.
Correct Answer: CF
Section: (none)
Explanation
Explanation/Reference:
QUESTION 4
Your company deploys an Office 365 tenant.
You need to ensure that you can view service health and maintenance reports for the past seven days.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Kit.
B. View the service health current status page of the Office 365 admin center.
C. View the service settings page of the Office 365 admin center.
D. Subscribe to the Office 365 Service Health RSS Notifications feed.
Correct Answer: BD
Section: (none)
Explanation
Explanation/Reference:
QUESTION 5
You are the Office 365 administrator for your company. You have a server that runs Windows Server 2012. You plan to install an Active Directory Federation
Services (AD FS) proxy server. You need to install and configure all of the required roles. Which two roles should you install and
configure?
Correct Answer: AB
Section: (none)
Explanation
Explanation/Reference:
QUESTION 6
An organization plans to deploy Exchange Online.
You must support all Exchange Online features.
You need to create the required DNS entries.
Which two DNS entries should you create? Each correct answer presents part of the solution.
A. A
B. SRV
C. MX
D. CNAME
Correct Answer: CD
Section: (none)
Explanation
Explanation/Reference:
http://technet.microsoft.com/en-us/library/hh852557.aspx
QUESTION 7
A company deploys an Office 365 tenant. You assign the roles to users as shown in the following table:
User3 must be able to monitor the health of the Exchange Online service. You must use the principle of least privilege to assign permissions to User3.
You need to assign permissions to User3.
Which three actions should you perform? Each correct answer presents part of the solution.
Explanation/Reference:
QUESTION 8
An organization plans to migrate to Office 365. You use the Windows Azure Active Directory (AD) Sync tool.
Several users will not migrate to Office 365. You must exclude these users from synchronization. All users must continue to authenticate against the on-premises
Active Directory.
You need to synchronize the remaining users.
Which three actions should you perform? Each correct answer presents part of the solution.
Correct Answer: BCD 1. Populate an attrubute for each user account (in question "All users must continue to authenticate against the on-premises AD.", that's why
Section: (none) "Disable the user accounts..." is wrong).
Explanation
2. Permorm a full synchronization.
Explanation/Reference: 3. Configure the connector filter.
QUESTION 9
An organization with an Active Directory Domain Services (AD DS) domain migrates to Office 365. You need to manage Office 365 from a domain-joined Windows
Server 2012 Core server. Which three components should you install? Each answer presents part of the solution.
Explanation/Reference:
QUESTION 10
Contoso uses Office 365 for collaboration services. You implement single sign-on (SSO) with Office 365 by using Active Directory Federation Services (AD FS).
You need to implement Windows Azure multi-factor authentication. Which three actions should you perform? Each correct answer presents part of the solution.
Explanation/Reference:
QUESTION 11
Your company has a subscription to Office 365 for midsize business and enterprises. The company uses Microsoft Lync Online. You need to open ports on the
network firewall to enable all of the features of Lync Online. Which port or ports should you open? (Each correct answer presents part of the solution. Choose all
that apply.)
Explanation/Reference:
QUESTION 12
Contoso Ltd. uses Office 365 for collaboration. You are implementing Active Directory Federation Services (AD FS) for single sign-on (SSO) with Office 365
services. The environment contains an Active Directory domain and an AD FS federation server. You need to ensure that the environment is prepared for the AD
FS setup. Which two actions should you perform? Each correct answer presents part of the solution.
Correct Answer: AC
Section: (none)
Explanation
Explanation/Reference:
QUESTION 13
An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs Windows Server 2008 R2. The forest functional
level is set to Windows Server 2000. The organization must be able to synchronize user attributes from the on-premises Active Directory Domain Services
environment to Office 365.
You need to prepare to install the Windows Azure Active Directory Sync tool. Which two actions should you perform? Each correct answer presents part of the
solution.
Correct Answer: BD
Section: (none)
Explanation
Explanation/Reference:
QUESTION 14
You are the Office 365 administrator for your company. You have a workstation that runs Windows 8.
You need to install the prerequisite components so that you can view mail protection reports on the workstation.
Which two items must you install? Each correct answer presents part of the solution.
Correct Answer: DE
Section: (none)
Explanation
Explanation/Reference: