Q1. You use a centralized identity management system as a source of authority for user account information. You export a list of new user accounts to a file on a daily basis. Your company uses a local Active Directory for storing user accounts for on-premises solutions. You are configuring the Windows Azure Active Directory Sync tool.
New user accounts must be created in both the local Active Directory and Office 365. You must import user account data into Office 365 daily.
You need to import the new users. What should you do?
A. Use the Office 365 admin center to import the file.
B. Create a Windows PowerShell script to import account data from the file into Active Directory.
C. Use the Windows Azure Management Portal to import the file.
D. Create a Windows PowerShell script that uses the MSOnline module to import account data from the file.
Answer: B
Q2. You are the Office 365 administrator for your company. You have a workstation that runs Windows 8.
You need to install the prerequisite components so that you can view mail protection reports on the workstation.
Which two items must you install? Each correct answer presents part of the solution.
A. SQL Server Analysis Services
B. Microsoft Connectivity Analyzer Tool
C. Microsoft Access 2013
D. .NET Framework 4.5
E. Microsoft Excel 2013
Answer: D,E
Explanation:
Reference: http://www.microsoft.com/en-gb/download/details.aspx?id=30716
Required Software:
Microsoft Office Excel 2013
1.Microsoft .NET Framework 4.5
2.Microsoft Online Services Sign-In Assistant (for Exchange Online Protection customersonly)
3.An Office 365 subscription that contains Exchange Online or Exchange Online Protection
4.Email address you use to sign in to Office 365.
Q3. DRAG DROP
You are the Office 365 administrator for Contoso, Ltd.
User1 is unable to sign in.
You need to change the password for User1 and ensure that the user is prompted to reset her password the next time she signs in.
How should you complete the relevant Windows PowerShell command? To answer, drag the appropriate Windows PowerShell segments to the correct location or locations. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q4. A company has an Office 365 tenant that has an Enterprise E1 subscription. The company has offices in several different countries.
You need to restrict Office 365 services for existing users by location.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: A
Explanation:
The Set-MsolUser cmdlet is used to update a user object.
Example: The following command sets the location (country) of this user. The country must be a two-letter ISO code. This can be set for synced users as well as managed users. Set-MsolUser -UserPrincipalName user@contoso.com -UsageLocation "CA"
Note: Some organizations may want to create policies that limit access to Microsoft Office 365 services, depending on where the client resides. Active Directory Federation Services (AD FS) 2.0 provides a way for organizations to configure these types of policies. Office 365 customers using Single Sign-On (SSO) who require these policies can now use client access policy rules to restrict access based on the location of the computer or device that is making the request. Customers using Microsoft Online Services cloud User IDs cannot implement these restrictions at this time.
Reference: Limiting Access to Office 365 Services Based on the Location of the Client
https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx
Reference: Set-MsolUser
https://msdn.microsoft.com/en-us/library/azure/dn194136.aspx
Q5. DRAG DROP
Fabrikam Inc. plans to use the domain fabrikam.com for Office 365 user identities, email addresses. Session Initiation Protocol (SIP) addresses, and a public-facing home page.
Single sign-on (SSO) between Office 365 and the on-premises Active Directory is NOT required.
You need to configure the Office 365 plan.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q6. An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory Domain Services environment to Office 365.
You need to prepare to install the Windows Azure Active Directory Sync tool.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Upgrade the domain controller to Windows Server 2012.
B. Install Microsoft .NET Framework 3.5 SP1 and Microsoft .NET Framework 4.0.
C. Install Windows Server 2012 Standard edition.
D. Raise the forest functional level to Windows Server 2008 R2.
E. Join a workstation to an Active Directory domain.
Answer: B,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/jj151831.aspx#BKMK_ComputerRequirements
Q7. An organization migrates to Office 365.
The Office 365 administrator must be notified when Office 365 maintenance activities are planned.
You need to configure the administrator's computer to receive the notifications.
What should you configure?
A. Office 365 Management Pack for System Center Operations Manager
B. Service requests
C. Service health page
D. Office 365 Service Health RSS Notifications feed
Answer: D
Explanation:
Reference:
https://support.office.com/en-us/article/View-the-status-of-your-services-932ad3ad-533c-418a-b938-6e44e8bc33b0
Q8. DRAG DROP
A company has a Windows Server 2008 domain controller and a SharePoint 2007 farm. All servers on the network run Windows Server 2008.
You must provide single sign-on for Office 365 SharePoint sites from the company's network.
You need to install the required software.
What should you install? To answer, drag the appropriate action to the correct location. Each answer may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q9. A company has an Office 365 tenant. The company uses a third-party DNS provider that does not allow TXT records.
You need to verify domain ownership.
What should you do?
A. Create an MX record.
B. Create a CNAME record.
C. Create an A record.
D. Create an SRV record.
Answer: A
Explanation:
Add a TXT or MX record for DNS verification.
Reference: Change nameservers to set up Office 365 with any domain registrar
https://support.office.com/en-us/article/Change-nameservers-to-set-up-Office-365-with-anydomain-registrar-a8b487a9-2a45-4581-9dc4-5d28a47010a2
Q10. You have an Exchange Online tenant.
You must identify mailboxes that are no longer in use.
You need to locate the inactive mailboxes.
Which Windows PowerShell command should you run?
A. Get-StaleMailboxReport -Expression
B. Get-StaleMailboxReport -Organization
C. Get-MailboxActivityReport -Organization
D. Get-StaleMailboxReport –EndDate
Answer: D
Explanation: Use the Get-StaleMailboxReport cmdlet to view the number of mailboxes
that haven't been accessed for at least 30 days.
The.EndDate.parameter specifies the end date of the date range.
Incorrect:
Not A: The Get-StaleMailboxReport command has no –Expression parameter.
Not B: The Get-StaleMailboxReport command has no – Organization parameter
Not C: The Get-MailboxActivityReport shows you a count of the mailboxes created in your Exchange Online organisation between set dates.
Reference: Get-StaleMailboxReport
https://technet.microsoft.com/en-us/library/jj200763(v=exchg.160).aspx
Q11. DRAG DROP
Fabrikam has the Office 365 Enterprise E3 plan.
You must add the domain name fabrikam.com to the Office 365 tenant. You need to confirm ownership of the domain.
Which DNS record types should you use? To answer, drag the appropriate DNS record type to the correct location or locations in the answer area. Each DNS record type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q12. A company plans to use Office 365 to provide email services for users.
You need to ensure that a custom domain name is used.
What should you do first?
A. Add the custom domain name to Office 365 and then verify it.
B. Verify the existing domain name.
C. Create an MX record in DNS.
D. Create a CNAME record in DNS.
Answer: A
Q13. You are the Office 365 administrator for your company. The company synchronizes the local Active Directory objects with a central identity management system.
The environment has the following characteristics:
Each department has its own organizational unit (OU).
The company has OU hierarchies for partner user accounts.
All user accounts are maintained by the identity management system.
You need to ensure that partner accounts are NOT synchronized with Office 365.
What should you do?
A. Configure OU-based filtering by using the Windows Azure Active Directory Sync tool.
B. In the Windows Azure Active Directory portal, configure OU-based filtering.
C. Configure user attribute-based filtering by using the Windows Azure Active Directory Sync tool.
D. In the Windows Azure Active Directory portal, configure user attribute-based filtering.
Answer: A
Explanation:
Reference: http://technet.microsoft.com/en-us/library/jj710171.aspx
Company has OU hierarchies for partner user accounts so OU-based filtering should be fine.
Q14. Your company has a subscription to Office 365 for midsize business and enterprises. The company uses Microsoft Lync Online.
You need to open ports on the network firewall to enable all of the features of Lync Online.
Which port or ports should you open? (Each correct answer presents part of the solution. Choose all that apply.)
A. inbound TCP 443
B. outbound TCP 5061
C. outbound UDP 3478
D. outbound TCP 443
E. outbound UDP 50000 to outbound UDP 59999
F. inbound TCP 8080
Answer: A,C,D,E
Explanation:
Reference: http://ahandyblog.wordpress.com/cloud-technologies/firewall-ports-for-office-
Q15. HOTSPOT
An organization deploys an Office 365 tenant.
The Service health page displays the following information:
You need to report the status of service interruptions for Exchange Online and SharePoint Online.
Use the drop-down menus to complete each statement based on the information presented in the screen shot. Each correct selection is worth one point.
Answer:
Q16. You are the Office 365 administrator for your company.
Users report that they cannot sign in to Lync from their mobile devices, but they are able to
send and receive Lync messages by using their laptop computers.
You need to troubleshoot the issue.
What should you do?
A. From the Office 365 message center, confirm Lync settings.
B. Use the Microsoft Connectivity Analyzer tool to confirm settings.
C. Confirm Lync user licenses for the affected users.
D. From the Lync admin center, verify the external access settings.
Answer: B
Q17. A company has an Office 365 tenant that has an Enterprise E1 subscription.
You use single sign-on for all user accounts. You plan to migrate all services to Office 365.
You need to ensure that all accounts use standard authentication.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: E
Explanation:
The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type.
Reference: Convert-MsolFederatedUser
https://msdn.microsoft.com/sv-se/library/azure/dn194101.aspx
Q18. DRAG DROP
A company has 50 employees that use Office 365.
You need to disable password expiration for all accounts.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location in the answer area. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer: