Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
Q1. An organization plans to migrate to Office 365. You use the Windows Azure Active Directory (AD) Sync tool.
Several users will not migrate to Office 365. You must exclude these users from synchronization. All users must continue to authenticate against the on-premises Active Directory.
You need to synchronize the remaining users.
Which three actions should you perform to ensure users excluded from migration are not synchronized? Each correct answer presents part of the solution.
A. Populate an attribute for each user account.
B. Disable the user accounts in Active Directory.
C. Perform a full synchronization.
D. Configure the connection filter.
E. Run the Windows PowerShell command Set-MsolDirSyncEnabled -EnableDirSync $false.
Answer: A,C,D
Q2. Your company has 100 user mailboxes. The company purchases a subscription to Office 365 for professionals and small businesses. You need to enable the Litigation Hold feature for each mailbox.
What should you do first?
A. Purchase a subscription to Office 365 for midsize business and enterprises.
B. Enable audit logging for all of the mailboxes.
C. Modify the default retention policy.
D. Create a service request.
Answer: A
Q3. DRAG DROP
A company plans to use Office 365 to provide email services to employees. The company obtains a custom domain name to use with Office 365.
You need to add the domain name to Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q4. You are the Office 365 administrator for your company. You have a server that runs Windows Server 2012. You plan to install an Active Directory Federation Services (AD FS) proxy server.
You need to install and configure all of the required roles.
Which two roles should you install and configure? Each correct answer presents part of the solution.
A. Web Server (IIS)
B. AD FS
C. Application Server
D. Network Policy and Access Service
E. Active Directory Certificate Services (AD CS)
F. Remote Access
Answer: A,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/dd807096.aspx
104 DRAG DROP
You are the Office 365 administrator for your company. You audit the Windows Azure Active Directory Rights Management configuration for the company.
You need to view a log of the recent administrative commands performed against the Microsoft Rights Management Service.
Which three Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of actions to the answer area and arrange them in the correct order.
Q5. An organization prepares to implement Office 365.
You have the following requirements:
. Gather information about the requirements for the Office 365 implementation.
. Use a supported tool that provides the most comprehensive information about the current environment.
You need to determine the organization's readiness for the Office 365 implementation.
What should you do?
A. Run the Windows PowerShell cmdlet Get-MsolCompanylnformation.
B. Run the OnRamp for Office 365 tool.
C. Install the Windows Azure Active Directory Sync tool.
D. Run the Office 365 Deployment Readiness Tool.
Answer: B
Q6. DRAG DROP
Litware Inc. has an Office 365 Enterprise El plan. Employees have access to all Office 365 services.
Employees in the human resources (HR) department must continue to use the on-premises SharePoint 2013 deployment due to legal requirements.
You need to disable access to SharePoint Online for all HR department employees.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location or locations in the answer area. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q7. A company has an Office 365 tenant.
You must reset the password for an account named User1.
You need to ensure that the new password for the account meets complexity rules.
Which two passwords can you use? Each correct answer presents a complete solution.
A. Summer2015
B. May2015
C. User1User1
D. summer2015
E. May 2015
F. summer!@#$
G. M1crosoft
Answer: A,G
Explanation:
If the user is set to require a strong password, then all of the following rules must be met:
The password must contain at least one lowercase letter.
The password must contain at least one uppercase letter.
The password must contain at least one non-alphanumeric character.
The password cannot contain any spaces, tabs, or line breaks.
The length of the password must be 8-16 characters.
The user name cannot be contained in the password.
Incorrect:
Not B: too few characters
Not C: Cannot contain account name User1
Not D: no capital letter.
Not E: no spaces
Not F: Illegal characters.
Q8. Your company has a hybrid deployment of Office 365. All mailboxes are hosted on Office
365. All users access their Office 365 mailbox by using a user account that is hosted on-premises. You need to delete a user account and its associated mailbox.
Which tool should you use?
A. The Remove-MSOLUser cmdlet
B. The Remove-Mailbox cmdlet
C. The Office 365 portal
D. Active Directory Users and Computers
Answer: D
Explanation:
When deleting accounts from Active Directory and directory synchronization runs the associated object will be deleted from Azure and also soft deleting the mailbox.
Q9. An organization migrates to Office 365.
The Office 365 administrator must be notified when Office 365 maintenance activities are planned.
You need to configure the administrator's computer to receive the notifications.
What should you configure?
A. Office 365 Management Pack for System Center Operations Manager
B. Service requests
C. Service health page
D. Office 365 Service Health RSS Notifications feed
Answer: D
Explanation:
Reference:
https://support.office.com/en-us/article/View-the-status-of-your-services-932ad3ad-533c-418a-b938-6e44e8bc33b0
Q10. A company has an Office 365 tenant that has an Enterprise E1 subscription. Users currently sign in with credentials that include the contoso.com domain suffix.
The company is acquired by Fabrikam. Users must now sign in with credentials that include the fabrikam.com domain suffix.
You need to ensure that all users sign in with the new domain name.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: D
Explanation: The Set-MsolUserPrincipalName cmdlet is used to change the User Principal Name (user ID) of a user. This cmdlet can be used to move a user between a federated and standard domain, which will result in their authentication type changing to that of the target domain.
The following command renames user1@contoso.com to CCole@contoso.com.
Set-MsolUserPrincipalName -UserPrincipalName User1@contoso.com -NewUserPrincipalName CCole@contoso.com
Incorrect:
Not A: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should be used for basic properties only.
Not B: The Redo-MsolProvisionUser cmdlet can be used to retry the provisioning of a user object in Azure Active Directory when a previous attempt to create the user object resulted in a validation error.
Not C: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user.
Not E: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user.
Not F: Use the Set-MailUser cmdlet, used for on premises Exchange Server (not Office 365), to modify the mail-related attributes of an existing user in Active Directory.
Not G: Use the Set-LinkedUser cmdlet to modify the properties of an existing linked user account. The Outlook Live Directory Sync (OLSync) service account is a linked user.
Not H: The New-MsolUser cmdlet is used to create a new user in the Microsoft Azure Active Directory (Microsoft Azure AD). In
Reference: Set-MsolUserPrincipalName
https://msdn.microsoft.com/en-us/library/azure/dn194096.aspx
Q11. DRAG DROP
A company plans to implement an Office 365 environment to manage email.
All user accounts must be configured to use only a custom domain.
You need to provision an Office 365 tenant for the company.
Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
70 DRAG DROP
A company has an Office 365 tenant. You plan to use Office 365 to manage the DNS settings for a custom domain. You purchase the domain through a third-party provider.
You create a custom website. You must host the website through a third-party provider at the IP address 134.170.185.46. You need to configure the correct DNS settings.
What should you do? To answer, drag the appropriate DNS record to the correct DNS target. Each record may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Q12. You have an Office 365 environment. Synchronization between the on-premises Active Directory and Office 365 is enabled.
You need to deactivate directory synchronization.
Which Windows PowerShell cmdlet should you run?
A. Update-MsolFederatedDomain
B. Remove-MsolDomain
C. Remove-MsolFederatedDomain
D. Set-MsolDirSyncEnabled
Answer: D
Explanation:
The complete command to disable directory Sync is Set-MsolDirSyncEnabled –EnableDirSync $false
Reference: http://support.microsoft.com/kb/2619062
Q13. DRAG DROP
Contoso, Ltd. has an Office 365 tenant. The company has two servers named Server1 and Server2 that run Windows 2012 R2 Server. The servers are not joined to the contoso.com domain. Server2 is deployed to the perimeter network. You install Secure Sockets Layer (SSL) certificates on both servers.
You deploy internal and external firewalls. All firewalls allow HTTPS traffic.
You must deploy single sign-on (SSO) and Active Directory Federation Services (AD FS).
You need to install and configure all AD FS components in the environment.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q14. DRAG DROP
A company is deploying an Office 365 tenant.
You need to deploy a Windows Server 2012 R2 federation server farm.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q15. A company has an Office 365 tenant that has an Enterprise E1 subscription.
You plan to test a new deployment by using 50 tenant user accounts.
You need to ensure that the passwords for the test user accounts do not expire.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: A
Explanation: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should
be used for basic properties only.
Parameter -PasswordNeverExpires <Boolean>
Sets whether or not the user's password will expire periodically.
Reference: Set-MsolUser
https://msdn.microsoft.com/en-us/library/azure/dn194136.aspx
Q16. You are the Office 365 administrator for your company.
You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 8 to perform the management tasks.
You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
A. Microsoft Office 365 Best Practices Analyzer for Windows PowerShell
B. Windows PowerShell 4.0
C. Remote Server Administration Tools for Windows
D. Microsoft Online Services Sign-in Assistant
Answer: D
Explanation:
Reference: http://technet.microsoft.com/en-us/magazine/hh750396.aspx
Q17. A company uses Office 365 services. You implement the Windows Azure Active Directory Sync tool in the local environment.
An employee moves to a new department. All Office 365 services must display the new department information for the employee.
You need to update the employee's user account.
Where should you change the value of the department attribute for the employee?
A. The Active Directory management page in the Windows Azure Management Portal
B. The Users and groups page in the Office 365 admin center
C. The on-premises Active Directory
D. The Metaverse Designer
Answer: C
Q18. DRAG DROP
A company has a Windows Server 2008 domain controller and a SharePoint 2007 farm. All servers on the network run Windows Server 2008.
You must provide single sign-on for Office 365 SharePoint sites from the company's network.
You need to install the required software.
What should you install? To answer, drag the appropriate action to the correct location. Each answer may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer: