Q1. Your company purchases an Office 365 plan. The company has an Active Directory Domain Services domain.
User1 must manage Office 365 delegation for the company.
You need to ensure that User1 can assign administrative roles to other users.
What should you do?
A. Create an Office 365 tenant and assign User1 the password administrator role.
B. Use a password administrator account to assign the role to User1.
C. Use a user management administrator account to assign the role to User1.
D. Create an Office 365 tenant and assign User1 the global administrator role.
Answer: D
Q2. You deploy Lync Online for a company that has offices in San Francisco and New York. The two offices both connect to the Internet. There is no private network link between the offices.
Users in the New York office report that they cannot transfer files to the users in the San Francisco office by using Lync Online.
You need to ensure that users in both offices can transfer files by using Lync Online.
What should you do?
A. Configure the firewall to open Transmission Control Protocol (TCP) ports 50060-50079.
B. Configure the firewall to open Transmission Control Protocol (TCP) ports 50040-50059.
C. Create a private network connection to share files.
D. Upgrade all of the Lync Online clients to use Lync 2013.
Answer: B
Q3. A company plans to use Office 365 to provide email services for users.
You need to ensure that a custom domain name is used.
What should you do first?
A. Add the custom domain name to Office 365 and then verify it.
B. Verify the existing domain name.
C. Create an MX record in DNS.
D. Create a CNAME record in DNS.
Answer: A
Q4. HOTSPOT
You manage an Office 365 tenant. The subscription details for the tenant are displayed in the following screenshot.
Use the drop-down menus to select the answer choice that answers each question. NOTE: Each correct answer is worth one point.
Answer:
Q5. A company migrates to Office 365. 2,000 active users have valid Office 365 licenses assigned.
An additional 5,000 user accounts were created during the migration and testing processes. These users do not have any licenses assigned.
You need to remove the Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort.
Which Windows PowerShell command should you run?
A. Get-MsolUser -All -EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
B. Get-MsolUser-EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
C. Get-MsolUser -All -UnlicensedUsersOnly | Remove-MsolUser -Force
D. Get-MsolUser -UnlicensedUsersOnly | Remove-MsolUser–Force
Answer: C
Explanation:
Reference: http://technet.microsoft.com/en-us/library/dn194133.aspx
Q6. You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2.
User2 must NOT be able to change passwords for other users.
You need to assign an administrative role to User2.
Which role should you assign?
A. Service administrator
B. Global administrator
C. Delegate administrator
D. Password administrator
Answer: A
Explanation:
Reference:
https://support.office.com/en-US/Article/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504?ui=en-US&rs=en-US&ad=US#__choose_an_admin
Q7. A company has an Office 365 tenant. You implement two-factor authentication for all users. You hire an employee named User1 to track service usage and status.
User1 must be able to monitor the status of the services over a period of time by using a report. User1 does not have administrator access.
You need to provide a report for User1.
Which report solution should you choose?
A. downloadable spreadsheet
B. REST reporting web service
C. reporting Windows PowerShell cmdlets
D. Office 365 admin center
Answer: B
Explanation:
The Office 365 Reporting web service enables developers to integrate information on email and spam, antivirus activity, compliance status, and Lync Online activities into their custom service reporting applications and web portals.
All the reports available in the admin portal, within the downloadable Microsoft Excel spreadsheets, and those accessed through Windows PowerShell cmdlets, are accessible using the Reporting web service.
Reference: Office 365 Reporting web service
https://msdn.microsoft.com/en-us/library/office/jj984325.aspx
Q8. Contoso, Ltd., has an Office 365 tenant. You configure Office 365 to use the domain contoso.com, and you verify the domain. You deploy and configure Active Directory Federation Services (AD FS) and Active Directory Synchronization Services (AAD Sync) with password synchronization. You connect to Azure Active Directory by using a Remote PowerShell session.
You need to switch from using password-synced passwords to using AD FS on the Office 365 verified domain.
Which Windows PowerShell command should you run?
A. Convert-MsolDomainToFederated –DomainName contoso.com
B. Convert-MsolDomainToStandard –DomainName contoso.com
C. Convert-MsolFederatedUser
D. Set-MsolDomainAuthentication –DomainName contoso.com
Answer: A
Explanation: The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on (also known as identity federation), including configuring the relying party trust settings between the Active Directory Federation Services (AD FS) server and the Microsoft Online Services. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in; no action is required by the administrator.
Incorrect:
Not B: This is the opposite to what is required. The Convert-MsolDomainToStandard cmdlet converts the specified domain from single sign-on (also known as identity federation) to standard authentication. This process also removes the relying party trust settings in the AD FS server and online service. After the conversion, this cmdlet will convert all existing users from single sign-on to standard authentication. Not C: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user. Not D: The Set-MsolDomainAuthentication cmdlet is used to change the domain authentication between standard identity and single-sign on. This cmdlet will only update the settings in Microsoft Online Services; typically the Convert-MsolDomainToStandard or Convert-MsolDomainToFederated should be used instead.
Reference: Convert-MsolDomainToFederated
https://msdn.microsoft.com/en-us/library/azure/dn194092.aspx
Q9. Contoso, Ltd. plans to use Office 365 for email services and Lync Online. Contoso has four unique domain names.
You need to migrate domain names to Office 365.
Which two domain names should you exclude from the migration? Each correct answer presents part of the solution.
A. contoso.us
B. contoso
C. contoso.local
D. contoso.co
Answer: B,C
Explanation:
contoso.us - valid TLD Domain
contoso.co - valid TLD Domain
contoso - single labeled domain - not valid
contoso.local - internal labeled domain - not valid
Q10. A company has an Office 365 tenant.
You must retrieve mailbox diagnostic data.
You need to provide a report with this data for all users.
Which report solution should you choose?
A. Office 365 admin center
B. downloadable spreadsheet
C. reporting Windows PowerShell cmdlets
D. REST reporting web service
Answer: D
Explanation: The Office 365 Reporting web service enables developers to integrate
information on email and spam, antivirus activity, compliance status, and Lync Online
activities into their custom service reporting applications and web portals.
Incorrect:
Not A: Office 365 admin center provide predefined charts and lists reports.
Not B: Detailed, flexible analysis of historical and live service data, for example in Microsoft
Excel-based score-cards.
Not C: reporting Windows PowerShell cmdlets: Precise data for periodically generated
reports in script-based IT maintenance tools.
Reference: Office 365 Reporting web service
https://msdn.microsoft.com/en-us/library/office/jj984325.aspx
Q11. Your company has an Office 365 subscription. You create a new retention policy that contains several retention tags. A user named Test5 has a client computer that runs Microsoft Office Outlook 2007. You install Microsoft Outlook 2010 on the client computer of Test5. Test5 reports that the new retention tags are unavailable from Outlook 2010.
You verify that other users can use the new retention tags. You need to ensure that the new retention tags are available to Test5 from Outlook 2010.
What should you do?
A. Instruct Test5 to repair the Outlook profile.
B. Modify the retention policy tags.
C. Run the Set-Mailbox cmdlet.
D. Force directory synchronization.
Answer: A
Q12. An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory Domain Services environment to Office 365.
You need to prepare to install the Windows Azure Active Directory Sync tool.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Upgrade the domain controller to Windows Server 2012.
B. Install Microsoft .NET Framework 3.5 SP1 and Microsoft .NET Framework 4.0.
C. Install Windows Server 2012 Standard edition.
D. Raise the forest functional level to Windows Server 2008 R2.
E. Join a workstation to an Active Directory domain.
Answer: B,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/jj151831.aspx#BKMK_ComputerRequirements
Q13. DRAG DROP
You are the Office 365 administrator for your company.
You need to ensure that trusted applications can decrypt rights-protected content.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Q14. A company has an Office 365 tenant and uses Exchange Online and Skype for Business Online. User1 is scheduling a Skype meeting with User2. User 1 is not able to see availability information for User2.
You need to troubleshoot the issue.
What should you use?
A. Microsoft Lync Connectivity Analyzer Tool
B. OCSLogger
C. ClsController
D. Remote Connectivity Analyzer
Answer: C
Explanation:
Centralized Logging Service (CLS) is a new feature in Lync Server 2013. It provides a mechanism to enable/disable logging across all Lync servers in a deployment from a single interface and to search the resulting logs from the same interface.
You specify what should be logged based on the scenario you want to investigate. The scenarios supported are AlwaysOn, MediaConnectivity, ApplicationSharing, AudioVideoConferencingIssue, HybridVoice, IncomingAndOutgoingCall, VoiceMail, IMAndPresence, AddressBook, DeviceUpdate, LYSSAndUCS, CLS, SP, WAC, UserReplicator, HostedMigration, MonitoringAndArchiving, LILRLegacy, LILRLYSS, MeetingJoin, RGS, CPS, XMPP and CAA.
Reference: Centralized Logging Service in Skype for Business 2015
https://technet.microsoft.com/en-us/library/jj688145.aspx
Q15. A company deploys an Office 365 tenant. You assign the roles to users as shown in the following table:
User3 must be able to monitor the health of the Exchange Online service. You must use the principle of least privilege to assign permissions to User3.
You need to assign permissions to User3.
Which three actions should you perform? Each correct answer presents part of the solution.
A. Assign User3 the service administrator role in Office 365.
B. Sign in to the Office 365 portal as User1.
C. Sign in to the Office 365 portal as User2.
D. Grant User3 administrative permissions in Exchange Online.
E. Assign User3 the global administrator role in Office 365.
Answer: A,B,D
Explanation:
Only the global administrator can delegate service administrator role.
Reference: http://onlinehelp.microsoft.com/en-in/office365-enterprises/ff637584.asp
Q16. HOTSPOT
A company plans to deploy an Office 365 tenant.
You have the following requirements:
Administrators must be able to access the Office 365 admin center.
Microsoft Exchange Online must be used as a Simple Mail Transfer Protocol (SMTP) relay for a line-of-business application that sends email messages to remote domains.
All users must be able to use the audio and video capabilities in Microsoft Lync 2013.
You need to configure the ports for the firewall.
Which port should you use for each application? Select the correct answer from each list in the answer area.
Answer:
Q17. DRAG DROP
A company deploys an Office 365 tenant. All employees use Lync Online.
You need to configure the network firewall to support Lync Online.
Which ports must you open? To answer, drag the appropriate port number to the correct feature or features. Each port number may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q18. DRAG DROP
Fabrikam has the Office 365 Enterprise E3 plan.
You must add the domain name fabrikam.com to the Office 365 tenant. You need to confirm ownership of the domain.
Which DNS record types should you use? To answer, drag the appropriate DNS record type to the correct location or locations in the answer area. Each DNS record type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer: