1. You are the Office 365 administrator for your company.You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 8 to perform the management tasks. You need to ensure that the Windows 8 computer has the necessary software installed.What should you install first? Microsoft Office 365 Best Practices Analyzer for Windows PowerShell A. Windows PowerShell 4.0 B. Remote Server Administrator Tools for Windows C. Microsoft Online Services Sign-in Assistant D. 2. A company deploys an Office 365 tenant. All employees use Lync Online. You need to configure the network firewall to support Lync Online.Which port should you open for audio, video and application sharing sessions? 443 A. 3478 B. 5223 C. 80 D. 389 E. 3. You are the Office 365 administrator for your company. You need to ensure that trusted applications can decrypt rights-protected content. Which four PowerShell cmdlets should you run?NOTE: On the exam, you will have to know the correct order that these PowerShell cmdlets need to be run. Import-Module AADRM A. Connect-AadrmService B. Enable-AadrmSuperUserFeature C. Set-AadrmMigrationUrl D. Add-AadrmRoleBasedAdministrator E. Enable-Aadrm F. 4. Your company has a hybrid deployment of Office 365. You create a user in Office 365. The next day, you discover that the new user account fails to appear in the Microsoft Exchange Server on-premises global address list (GAL). You need to ensure that the user has a mailbox and appears in the Exchange on-premises GAL and the Office 365 GAL.What should you do? Assign a Microsoft Exchange Online license to the user account A. From the Microsoft Online Services Directory Synchronization tool, enable rich B. coexistence From the Office 365 portal, modify the sign-in status of the user account C. Delete the user account hosted on Office 365. From the Exchange Management D. Console, create a new remote mailbox 5. You are the Office 365 administrator for your company. Users report that they cannot sign in to Lync from their mobile devices but they are able to send and receive Lync messages by using their laptop computers. You need to troubleshoot the issue.What should you do? From the Office 365 message center, confirm Lync settings A. Use the Microsoft Connectivity Analyzer tool to confirm settings B. Confirm Lync user licenses for the affected users C. From the Lync admin center, verify the external access settings D. 6. You manage a team of three administrators for an organization that uses Office 365. You must assign roles for each of the administrators as shown in the table. You must assign the minimum permissions required to perform the assigned tasks. UserRequirements What Admin1 Reset user passwords for administrators Admin2 Perform purchasing purchasing operations Admin3 Create and manage user views administrative role should you assign to Admin2? Billing administator A. Global administrator B. User management administrator C. 7. Your company subscribes to an Office 365 Plan E3. A user named User1 installs Office Professional Plus for Office 365 on a client computer. From the Microsoft Online Services portal, you assign User1 an Office Professional Plus license. One month after installing Office, User1 can no longer save and edit Office documents on the client computer. User1 can open and view Office documents. You need to ensure that User1 can save and edit documents on the client computer by using office.What should you do? Install the Office Customization Tool A. Reinstall Office Professional Plus B. Install the Microsoft Online Services Sign-in Assistant C. Upgrade the subscription to Plan E4 D. 8. A company plans to use Office 365 to provide email services to employees. The company obtains a custom domain name to use with Office 365. You need to add the domain name to Office 365.Which three actions should you preform?NOTE: On the exam, you will also need to know the correct sequence of the three actions. Connect to Windows Azure Active Directory A. Run Remote PowerShell B. Run the Windows PowerShell cmdlet New-MsolDomain C. Run the Windows PowerShell cmdlet New-MsolFederatedDomain D. Install the Windows Azure Active Directory module for Windows PowerShell E. 9. Fabrikam has the Office 365 Enterprise E3 plan. You must add the domain name Server to the Ofdfice 365 tenant. You need to confirm ownership of the domain.Which DNS records should you use?NOTE: On the exam, you will need to know the preferred and alternate method of verification. TXT A. MX B. CNAME C. A D. SRV E. 10. You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2. User2 must NOT be able to change passwords for other users. You need to assign an administrative role to User2.Which role should you assign? Service administrator A. B. Create a multi-factor authentication provider with the Per Enabled User usage C. Inc. 15. what should you view? The mail protection reports A. 50079 B. The Office 365 Malware detections in sent mail report D. D. Users in the New York office report that they cannot transfer files to the users in the San Francisco office by using Lync Online. D. model Create a multi-factor authentication provider with the Per Authentication usage D. You plan to install an Active Directory Federation Services (AD FS) proxy server. You need to install and configure all of the required roles.Which two roles should you install and configure? Web Server (IIS) A. A company named Fabrikam. You are the Office 365 administrator for your company. Network Policy and Access Service D. You are the Office 365 administrator for your company. C. You need to enable multi-factor authentication for Office 365. Global administrator Delegate administrator Password administrator 11. 13. Remote Access F. model Instruct users to use a mobile phone to complete the registration process E. Configure the firewall to open Transmission Control Protocol (TCP) ports 5004050059 Create a private network connection to share files Upgrade all of the Lync Online clients to use Lync 2013 12.What should you do? Configure the firewall to open Transmission Control Protocol (TCP) ports 50060A. Messages on the message center page C. Users report that they have received significantly more spam messages over the past month than they normally receive. From the Office 365 admin center. Which three actions should you preform?NOTE: On the exam. AD FS B. The two offices both connect to the internet. You install Active Directory Federation Services (AD FS) on a server that runs Windows Server 2012. Active Directory Certificate Services (AD CS) E.You need to analyze trends for the email messages received over the past 60 days. Enable multi-factor authentication for all user accounts A. Instruct users to obtain a single-use password to complete the registration process B. C. You have a server that runs Windows Server 2012. Application Server C. There is no private network link between the offices. 14. The . is deploying an Office 365 tenant. You deploy Lync Online for a company that has offices in San Francisco and New York. The mailbox content search and hold report B. you will need to know the correct sequence for these actions. You need to deactivate directory synchronization.Which Windows PowerShell cmdlet should you run? Update-MsolFederatedDomain A.fabrikam. Set-MsolDirSyncEnabled D.fabrikam.fabrikam. Instruct users to obtain a single-use password to complete the registration process B. model Creat a multi-factor authentication provider with the Per Authentication usage E. Raise the forest functional level to Windows Server 2008 C.com D. Remove-MsolDomain B.com Server node in cluster server2.When doing the pilot. Prepare the on-premises Active Directory for directory synchronization B. The Office 365 portal C.com Server node in cluster server1. All users access their Office 365 mailbox by using a user account that is hosted onpremises. Create a multi-factor authentication provider with the Per Enabled User usage D. You need to specify the subject name for the certificate. A company deploys an Office 365 tenant. You need to enable multi-factor authentication for Office 365. Fabrikam. Which name should you specify? Fs.fabrikam. Which three actions should you perform?NOTE: On the exam.fabrikam. You have an on-premises Exchange 2010 server. The Remove-Mailbox cmdlet B.fabrikam.company's environment is described in the following table: DescriptionFully Qualified Domain Name You must obtain a certificate from a Cluster DNS Name fs.com C. Enable multi-factor authentication for all user accounts A. you will need need to know the correct order of these actions.com A. A company has an Active Directory Domain Service (AD DS) domain. You need to delete a user account and it's associated mailbox. Server2. model 17.com B. All mailboxes are hosted on Office 365. Instruct users to use a mobile phone to complete the registration process C. Synchronization between the on-premises Active Directory and Office 365 is enabled.com certification authority and install it on the federation servers. All servers run Windows Server 2008. Active Directory Users and Computers D. 16. 19. . Your company has a hybrid deployment of Office 365. You have an Office 365 environment. which of these tasks are in the Planning Phase? Assign licenses to users A. 18.Which tool should you use? The Remove-MSOLUser cmdlet A. Remove-MsolFederatedDomain C. The company plans to migrate to Office 365. Server1. You are the Office 365 administrator for your company. Must NOT reset passwords for other administrator accounts Reset passwords for all administrator accounts What is the correct role to assign to User1? Global administrator Delegate administrator Billing administrator Password administrator 21. Office 365 admin center B. Your company has an Office 365 subscription. You have the following requirements: 1. Upgrade the Exchange server to Exchange 2013 20.Which fields must you include in the file? . Microsoft Exchange Online must be used as a Simple Mail Transfer Protocol (SMTP) relay for a line-of-business application that sends email messages to remote domains 3. B. You need to prepare a file to use with the bulk add tool. add a MailTip A. The company has two administrators named User1 and User2. set the footer for B. From the Exchange Control Panel. D. Administrators must be able to access the Office 365 admin center 2. You prepare to use the bulk add tool to add users to Office 365. Which port should you use for each application? A. Users must be able to perform the activities as shown in the following table: AdministratorActivities User1 User2 A. A company plans to deploy an Office 365 tenant. 22. C. A company deploys an Office 365 tenant. outbound email Run the Enable-InboxRule cmdlet C. C. 23. D. Lunc outbound audio session D.What should you do? From the Exchange Control Panel. B. run the New Rule wizard D. SMTP Relay A. Reset passwords for standard user accounts Reset passwords for other members of the same role.D. From the Forefront Online Protection Administration Center. You need to add the label "external" to the subject line of each email message received by your organization from an external sender. Lync outbound video session C. All users must be able to use the audio and video capabilities in Microsoft Lync 2013 You need to configure the ports for the firewall. C. $false 25. Which three actions should you perform?NOTE: On the exam.exe to add the second federation server to the federation server farm C. You manage a team of three administrators for an organization that uses Office 365. All users must continue to authenticate against the onpremises Active Directory. Use Adfssetup.A. D. Set-MsolUserPassword D. A user named User1 from a partner organization is permitted to sign in and use the Office 365 services.exe to add the first federation server to the federation server farm A. Configure the connection filter D. You use the Windows Azure Active Directory (AD) Sync tool. Run the Windows PowerShell command Set-MsolDirSyncEnabled -EnableDirSync E. You are the Office 365 administrator for your company. 27. UserRequirements What Admin1 Reset user passwords for administrators Admin2 Perform purchasing purchasing operations Admin3 Create and manage user views administrative role should you assign to Admin1? Billing administrator A. E. You need to update the password policy for the user. Disable the user accounts in Active Directory B. Set-MsolUser C. You must assign roles for each of the administrators as shown in the table. You need to synchronize the remaining users. Which Windows PowerShell cmdlet should you run? Set-MsolPasswordPolicy A. B. User Name Display Name First Name Last Name Job Title 24. Global administrator B. Set-MsolPartnerInformation B. An organization plans to migrate to Office 365.Changes must NOT impact any other accounts. 26. you will need to list the three actions in the correct sequence. You must set the password to never expire. Several users will not migrate to Office 365.Which three actions should you preform? Populate an attribute for each user acount A. You must exclude these users from synchronization. User1 reports that the password expires in ten days. A company is deploying an Office 365 tenant. User management administrator C. Perform a full synchronization C. Install the Active Directory Federation Service server role B. . You need to deploy a Windows Server 2012 R2 federation server farm. Run the Windows PowerShell cmdlet Enable-ADFSEndpoint D. You must assign the minimum permissions required to perform the assigned tasks. Use AdfsSetup. Modify the default role assignment policy D. Office 365 Enterprise E4 . Your need to prevent users from changing their user display name by using Outlook Web App. What should you do? Run the Set-MsolCompanyContactInformation cmdlet A. You must sign up for a trial plan from the Office 365 website. Create a CNAME record in DNS D. Get-MsolUser F. Modify the default email address policy B. Fabrikam. 32. you will need to know the correct sequence of these commands Import-Module AADRM A. Your company has an Office 365 subscription. You install Microsoft Outlook 2010 on the client computer of Test5. You create a new retention policy that contains several retention tags. Run the Set-MsolUserPrincipalName cmdlet C. A user named Test5 has a client computer that runs Microsoft Office Outlook 2007. Test5 reports that the new retention tags are unavailable from Outlook . You are the administrator for a company named Contoso. Connect-AadrmService B. A company plans to use Office 365 to provide email services for users. You need to ensure that a custom domain name is used. Get-AadrmSuperUser E. Get-AadrmRoleBasedAdministrator D. 29. 31.10 Users B. You have the following requirements: Create the maximum number of trial users allowed Convert the trial plan to a paid plan at the end of the trial that supports all of Fabrikam's users You need to create an Office 365 trial plan. Which plan gives you the maximum amount of trail users? Office 365 Midsize Business . Get-AadrmAdminLog C. Verify the Existing domain name B.25 Users C. You audit the Windows Azure Active Directory Rights Management configuration for the company. Office 365 Enterprise E1 . Ltd. The company has an Office 365 subscription. Office 365 Enterprise E3 .250 users D. Inc employs 500 users and plans to migrate to Office 365. You need to view a log of the recent administrative commands performed against the Microsoft Rights Management Service.100 Users A. Create an MX record in DNS C. Which three Windows PowerShell cmdlets should you run?NOTE: On the exam. 30.What should you do first? Add the custom domain name to Office 365 and then verify it A. F.Use the AD FS Federation Server Configuration Wizard to configure the first federation server in the federation server farm Use the AD FS Federation Server Configuration Wizard to add the second federation server to the federation server farm E. 28. Token signing C.local E. principal name (UPN) suffix to contoso. Microsoft Remote Connectivity Analyzer D. 80 D.Which port should you open for Lync Mobile push notifications? 443 A. 36. You need to synchronize only the user accounts that have valid routable domain names and are members of specified departments. You deploy the Windows Azure Active Directory Sync tool. You verify that other users can use the new retention tags. Contoso has one Active Directory Domain Services domain named contoso.You need to ensure that the new retention tags are available to Test5 from Outlook 2010. userPrincipalName attribute Use the Active Directory Users and Computer MMC snap-in to change the user D. Personal D. You need to install the required certificates. Software publisher E.You plan to implement single sign-on for Office 365. Microsoft Network Monitor B. The environment must support single sign-on.com to the domain contoso. Contoso Ltd plans to use Office 365 services for collaboration between departments. 33.Which tool should you use? Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Kit A. you will need to know the correct sequence of these commands. Privacy-enhanced mail (PEM) B. Run the Set-Mailbox cmdlet C. Force directory synchronization D. 3478 B. A company deploys an Office 365 tenant. Modify the retention policy tags B. 35. All employees use Lync Online. Add the user principal name (UPN) suffix contoso.com for all Contoso users. Use domain-based filtering to exclude all users in the domain contoso. What should you do? Instruct Test5 to repair the Outlook profile A. . Lync 2013 Bandwidth Calculator C.com for all users in the specified departments Use user attribute-based filtering to exclude all users that have contoso.Which two certificates should you install? Each correct answer presents part of the solution. principal name (UPN) suffix to conotoso. You need to configure the network firewall to support Lync Online. 5223 C. You are the Office 365 administrator for your company. 34.local A.local. Secure Sockets Layer (SSL) A. Which three actions should you preform?NOTE: On the exam. 389 E. by using the Active Directory Domains and Trusts MMC snap-in Use the Active Directory Users and COmputers MMC snap-in to change the user B. An organization plans to migrate to Office 365.2010. You need to estimate the post-migration network traffic.local in the C. You are the Office 365 administrator for your company. Disable the AD FS proxy C.You need to configure the environment. Configure an IP blacklist for the main office location B. Outbound UDP 50000-59999 E. You need to add the domain name to Office 365. Run Remote PowerShell B.Where should you change the value of the department attribute for the employee? The Active Directory management page in the Windows Azure Management Portal A. You need to update the employee's user account. All Office 365 services must display the new department information for the employee. Inbound TCP 8080 F. You need to open ports on the network firewall to enable all of the features of Lync Online.NET Framework 3. Run the Windows PowerShell cmdlet New-MsolDomain D. You implement the Windows Azure Active Directory Sync tool in the local environment. What should you do? Disable AD FS multi-factor authentication A. 41. 40.Which port ot ports should you open? Choose all that apply. Outbound TCP 443 D. The company uses Active Directory Federation Services (AD FS) to provide single sign-on to cloud-based services. Which three components should you install? Windows Azure Active Directory module for Windows PowerShell A.37. users must be required to verify their identity with a password and token when they access resources from remote locations. A company uses Office 365 services. Outbound UDP 3478 C. you will need to know the correct sequence of these actions Connect to Windows Azure Active Directory A. Users must NOT be required to use multi-factor authentication when they sign in from the company's main office location. An employee moves to a new department. 39. Inbound TCP 443 A. Run the Windows PowerShell cmdlet New-MsolFederatedDomain E. 38. Install the Windows Azure Active Directory module for Windows PowerShell F. The on-premises Active Directory C. However. Enable user access for Remote PowerShell in Exchange Online C. You enable multi-factor authentication. The Users and groups page in the Office 365 admin center B.Which three actions should you perform?NOTE: On the exam.5 B. The Metaverse Designer D. An organization with an Active Directory Domain Services (AD DS) domain migrates to Office 365. Configure an IP whitelist for the main office location D. You need to manage Office 365 from a domain-joined Windows Server 2012 Core server. The company uses Microsoft Lync Online. Outbound TCP 5061 B. The company obtains a custom domain name to use with Office 365. Microsoft . Your company has a subscription to Office 365 for midsize business and enterprises. Microsoft Office 365 Integration Module for Windows Small Business Server 2011 C. . Your company has a hybrid deployment of Office 365. 72 D. Account passwords must remain active for the longest duration allowed. Create a dynamic distribution group B. Sign in to the Office 365 portal as User2 C. The group must have the following characteristics: Group properties are synchronized automatically Group members have the ability to control which users can send email messages to the group What should you do? Create a distribution group and configure the Mail Flow Settings A. 43. 30 C. Create a distribution group and configure the Membership Approval settings D. 44. Grant User3 administrative permissions in Exchange Online D. You need to configure the password expiration policy. You need to assign permissions to User3.Which three actions should you perform? Assign User3 the service administrator role in Office 365 A. 42. 730 F. You assign the roles to users as shown in the following table: UserRole Assigned User1 User2 User3 global administrator user management administrator no roles are assigned User3 must be able to monitor the health of the Exchange Online Service. Sign in to the Office 365 portal as User1 B. Create a new role group C.NET Framework 4.Microsoft . .What is the earliest amount of time you can set or users to be notified of an upcoming password change? 1 A. Users report that their passwords expire too frequently. E. Assign User3 the global administrator role in Office 365 E. A company deploys an Office 365 tenant. 1095 G.0 Microsoft Online Services Sign-in Assistant Rights Management module for Windows PowerShell D. You are the Office 365 administrator for your company. 13 B. Users must receive password expiration notifications as early as possible. and they do not receive adequate notice of password expiration. F. 1460 H. 365 E. You need to create a group. You must use the principle of least privlege to assign permissions to User3. Your . 49. You need to verify that single sign-on functions for the users who access Office 365 from the internet. You configure single sign-on for all users. Service requests B. Users must receive password expiration notifications as early as possible. The Office 365 administrator must be notified when Office 365 maintenance activities are planned. You need to provision an Office 365 tenant for the company.com D. 47. Your company has an Office 365 subscription. You need to configure the password expiration policy. Create a service request D. 30 C. 72 D. All user accounts must be configured to use only a custom domain. 730 F. You need to enable the Litigation Hold feature for each mailbox. You need to configure the administrator's computer to receive the notifications.What should you configure? Office 365 Management Pack for System Center Operations Manager A. Your company has 100 user mailboxes. 1095 G. Users report that their passwords expire too frequently. Modify the default retention policy C. An organization migrates to Office 365. Select the Office 365 plan A. The Microsoft Remote Connectivity Analyzer C. You export a list of new user accounts to a file on a daily basis. 50. The network contains an Active Directory domain.45. Office 365 Service Health RSS Notifications feed D. Account passwords must remain active for the longest duration allowed. The Microsoft Exchange Server Deployment Assistant D. 48.What is the maximum amount of days you can set before a password change is forced? 1 A. 13 B. Which three actions should you preform?NOTE: On the exam. 365 E. 46. The company purchases a subscription to Office 365 for professionals and small businesses. Configure the global administrator account recovery information B. Configure the custom domain and DNS C. The Test-OrganizationRelationship cmdlet B. you will need to know the correct sequence for the actions.What should you run? The get-MSOLFederationProperty cmdlet A. You are the Office 365 administrator for your company. Enable audit logging for all of the mailboxes B. Remove the domain name onmicrosoft. You use a centralized identity management system as a source of authority for user account information. Service health page C. 1460 H. What should you do first? Purchase a subscription to Office 365 for midsize business and enterprises A. and they do not receive adequate notice of password expiration. Set-AadrmMigrationUrl D. You must import user account data into Office 365 daily. Active Directory Use the Windows Azure Management Portal to import the file C. Microsoft Remote Connectivity Analyzer Tool B. All of the offices use the same Office 365 tenant.Which setting or service should you update? User location settings A. 52. Service usage address C. You need to ascertain whether users can share their free/busy information. You need to import the new users. User2 has an Office 365 mailbox. Connect-AadrmService B.What should you use? Transport Reliability IP Probe (TRIPP Tool) A. Install Windows Server 2008 R2 Standard edition B. You need to ensure that trusted applications can decrypt rights-protected content. . Install Windows Server 2008 R2 Datacenter edition C. An organization prepares to migrate to Office 365. Rights management D. Each user must be able to view the availability of the other user.New user accounts must be created in both the local Active Directory and Office 365. User1 has an on-premises mailbox. You configure new user accounts for User1 and User2. you will be required to know the correct sequence of these cmdlets. What should you do? Use the Office 365 admin center to import the file A. Which four PowerShell cmdlets should you run?NOTE: On the exam. Enable-Aadrm F. Windows Azure Active Directory Rights Management D. Enable-AadrmSuperUserFeature C. You administer the Office 365 environment for a company that has offices around the world. Add-AadrmRoleBasedAdministrator E. You need to ensure that all users can access the services that are available in their regions. Business Connectivity Services C. 54. What is the minimum you must do to the server to allow Directory Synchronization to function? Install the 64-bit version of Windows Server 2008 Standard edition A. 53.NYC-DS is running Windows Server 2003. Create a Windows PowerShell script to import account data from the file into B. account data from the file 51. You are the Office 365 adminstrator for your company. Import-Module AADRM A. Install Windows Server 2012 D. Create a Windows PowerShell script that uses the MSOnline module to import D.company uses a local Active Directory for storing user accounts for on-premises solutions. The organization has one domain controller named NYC-DC1 and one server named NYC-DS that is designated as the directory synchronization computer. You are configuring the Windows Azure Active Directory Sync tool. User licenses B. 59. UserRequirements What Admin1 Reset user passwords for administrators Admin2 Perform purchasing purchasing operations Admin3 Create and manage user views administrative role should you assign to Admin3? Billing administrator A. You need to assign permissions to the administrator by following the principle of least privilege. Your organization has over 10. 57. Global administrator B. C. Log on to each A. Choose the correct action or utility for each step. You have the follow responsibilities: 1. A company deploys an Office 365 tenant. Use a supported tool that provides the most comprehensive information about the current environment You need to determine the organization's readiness for the Office 365 implementation.0 service account password. Service administrator B.Which role should you assign? Global administrator A. What should you do? Run the Windows PowerShell cmdlet Get-MsolCompanyInformation A. 56. You manage a team of three administrators for an organization that uses Office 365. Which Windows PowerShell cmdlet should you use? . Gather information about the requirements for the Office 365 implementation 2. Modify the application pool identity by using the B. Your company has a hybrid deployment of Office 365. Install the Windows Azure Active Directory Sync tool C. Modify the AD FS 2.55. 58. You must provide an administrator with the ability to manage company information in Office 365. You need to change the AD FS 2. User management administrator D.000 users and uses a SQL-based Active Directory Federation Services (AD FS) server farm. You must assign the minimum permissions required to perform the assigned tasks. User management administrator C. A. You must assign roles for each of the administrators as shown in the table. An organization prepares to implement Office 365. You need to verify whether free/busy information sharing with external users is configured. Billing administrator C.0 Windows Service Properties by using the C. Run the Office 365 Deployment Readiness Tool D. B. Run the OnRamp for Office 365 tool B. 62.0 B. You are the Office 365 administrator for your company. D. B. Run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support A.What should you do? Create an Office 365 tenant and assign User1 the password administrator role. You are the Office 365 administrator for your company. You have a domain controller that runs Windows Server 2008 R2.A.000 user accounts. when will the Exchange Online mailbox be removed? Never removed A. D. .NET Framework 3. You need to ensure that you can view service health and maintenance reports for the past seven days. 64. Domain B. You must delete the account for User1. You need to assign the correct certificate to the description of your on-premises server environment below. The organization must be able to synchronize user attributes from the on-premises Active Directory Domain Services environment to Office 365.When you delete the account. Use a user management administrator account to assign the role to User1. Use a password administrator account to assign the role to User1. SSL D. An organization purchases an Office 365 plan for 10. Install Microsoft . Removed after a 90-day grace period D. Removed immediately B. C. 61.5 SP1 and Microsoft . Subscribe to the Office 365 Service Health RSS Notifications feed D.What are two possible ways to achieve this goal? Each correct answer presents a complete solution. B. Create an Office 365 tenant and assign User1 the global administrator role. C. User1 leaves the company. Your company deploys an Office 365 tenant. Test-OutlookConnectivity Test-FederationTrust Get-OrganizationRelationship Get-MSOLDomainFederationSettings 60. A. View the service settings page of the Office 365 admin center C.NET Framework 4. Which two actions should you preform? Upgrade the domain controller to Windows Server 2012 A. Client A. X.509 C. Removed after a 30-day grace period C. The company has an Active Directory Domain Services domain. The forest functional level is set to Windows Server 2000. Your company purchases an Office 365 plan.You need to prepare to install the Windows Azure Active Directory Sync tool. Kit View the service health current status page of the Office 365 admin center B. You need to ensure that User1 can assign administrative roles to other users. 63.Which certificate securely signs all tokens that the federation server issues for the cloud-based services. User1 must manage Office 365 delegation for the company. You must configure a trust between the on-premises Active Directory domain and the Office 365 envionment by using Active Directory Federation Services. sharepoint. run PhoneFactor AgentSetup.What are the first three things you should install?NOTE: You will need to know the appropriate order for these installations on the exam.com Record: CNAME .exe B. 68. Get-User B.contoso.0 C.Points To Address: contosoD. public.com . run WindowsAzureSDK-x64.Points To Address: contosoB. Your company uses Office 365.Points To Address: contosoC.com . You need to install the required software. You implement single sign-on (SSO) with Office 365 by using Active Directory Federation Services (AD FS). Get-RemovedMailbox E. Get-Recipient G. public.0 B.com .Which PowerShell cmdlet should you use? Get-ManagementRoleAssignment A.sharepoint.Hostname: www.Hostname: www. The public-facing website must use SharePoint Online and the custom domain contoso. Install Rollup 3 for AD FS 2. You need to identify which users do NOT have a Microsoft Exchange Online license assigned to their user account. Get-MSOLCOntact F. E. Install Windows Server 2012 Standard Edition Raise the forest functional level to Windows Server 2008 R2 Join a workstation to an Active Directory domain 65. A company has a Windows Server 2008 domain controller and a SharePoint 2007 farm. Get-Group I.Hostname: www.contoso.NET Framework 3. D. All servers on the network run Windows Server 2008. Get-RoleGroupMember C. J. The company purchases an Office 365 Enterprise E1 plan. Install AD FS 2. 67. public.C. You need to implement Windows Azure multi-factor authentication.com 66. Install .com .Hostname: contoso-public.onmicrosoft.com Record: A . public. . Get-Mailbox H.comYou need to configure the DNS settings for the publicfacing SharePoint site.5 with Service Pack 1 A.exe A. You are the SharePoint Online administrator for Contoso. How should you configure the DNS settings? Record: A . Install SharePoint Server 2013 D.Points To Address: contosoA.com Record: CNAME .Which three actions should you perform? On the AD FS federation server.office. Get-LogonStatistics D. Install SharePoint Server 2010 with Service Pack 1 E. Ltd. Contoso uses Office 365 for collaboration services.contoso. You must provide single sign-on for Office 365 SharePoint sites from the company's network. Get-MailContact L.sharepoint. Get-MailboxStatistics Get-MSOLUser K. On the AD FS Federation server. clients. You are the Office 365 administrator for your company. TCP 135 B. The company synchronizes the local Active Directory objects with a central identity management system. You must configure a trust between the on-premises Active Directory domain and the Office 365 envionment by using Active Directory Federation Services.000 active users have valid Office 365 licenses assigned. Directory Sync tool In the Windows Azure Active Directory portal.000 user accounts were created during the migration and testing processes. An additional 5. What should you do? Configure OU-based filtering by using the Windows Azure Active Directory Sync A. TCP 443 D. run FsConfigWizard. TCP 1723 F. TCP 389 C. You need to remove the . configure user attribute-based D.The additional users do not have any licenses assigned. SSL D. Configure user attribute-based filtering by using the Windows Azure Active C. run the Windows PowerShell cmdlet RegisterAdfsAuthenticationProvider On the AD FS Federation server. TCP 636 E. configure OU-based filtering B. You need to open the correct port between the AD FS proxy server and the AD FS federation server. 70. E.Which port should you open? TCP 80 A. tool In the Windows Azure Active Directory portal. A company migrates to Office 365. The environment has the following characteristics: Each deployment has its own organizational unit (OU) The company has OU hierarchies for partner user accounts All user accounts are maintained by the identity management system You need to ensure that partner accounts are NOT synchronized with Office 365. 71. 69. You need to assign the correct certificate to the description of your on-premises server environment below. filtering 72. D.509 C. Domain B. You are the Office 365 administrator for your company. You are the Office 365 administrator for your company. and federation server proxy computers? Client A.On the AD FS Federation server. 2. You prepare to install Active Directory Federation Services (AD FS). F. X.Which certificate secures the communication between federation servers. Register Windows Azure Multi-Factor Authentication Server as an additional authentication provider Run the Windows Azure Multi-Factor Authentication Server Authentication Configuration Wizard C.exe Run the Active Directory Domains and Trusts MMC snap-in. . Microsoft Excel 2013 E.Force D. you will need to know the correct sequence of these commands. You have a workstation that runs Windows 8. Get-MsolUser-EnabledFilter "DisabledOnly" | Remove MsolUser -Force B.Which two items must you install? Each correct answer presents part of the solution.com for Office 365 user identities. Microsoft Access 2013 C. . 75. Microsoft Connectivity Analyzer Tool B. You are the Office 365 administrator for your company.Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort. Update-MsolFederatedDomain E. Get-MsolDomainFederationSettings F. Set-MsolDomain D. SQL Server Analysis Services A. Get-MsolDomainVerificationDns B.5 D. 73. You need to configure the Office 365 plan. November 30 C. 74. November 21 B.NET Framework 4. New-MsolDomain A. Fabrikam. Get-MsolUser -All -UnlicensedUsersOnly | Remove-MsolUser -Force C. Confirm-MsolDomain C.Which four PowerShell cmdlets should you run?NOTE: On the exam. Get-MsolUser -UnlicensedUsersOnly | Remove-MsolUser . email addresses. Inc plans to use the domain fabrikam. Which Windows PowerShell command should you run? Get-MsolUser -All EnabledFilter "DisabledOnly" | Remove-MsolUser -Force A. The Service Health page displays the following information:What is the earliest date that a post-incident review will be available for SharePointOnline? November 13 A. New-MsolFederatedDomain G. December 1 D. An organization deploys an Office 365 tenant. SIP addresses and a public-facing home page. You need to install the prerequisite components so that you can view mail protection reports on the workstation. Single Sign-on between Office 365 and the on-premises Active Directory is NOT required. Which two actions should you preform? Run the Windows PowerShell cmdlet Convert-MsolDomainToStandard A. 16 D. User1 of Contoso. The company has a single office. Get-MsolUserRole | Set-MsolUser -StrongPasswordRequired $true D. Get-Add rm Role Based Administrator B.What is the correct Windows PowerShell command to accomplish the task? Set-MsolUserPassword -UserPrincipalName User1@contoso. 6 C. You need to modify the users and groups who are authorized to administer the Rights Management service. Run the Windows PowerShell cmdlet New-ADFSOrganization E. How many servers should you deploy.Which Windows PowerShell cmdlet should you run? Add-MsolGroupMember A. You plan to deploy an Office 365 tenant to multiple office around the country.com A. Deploy a federation server farm F. Set-MsolUserPassword -NewPassword User1@contoso. Set-MsolUserPassword -UserPrincipalName contoso\User1 C. Run the Windows PowerShell cmdlet Convert-MsolDomainToFederated C. Enable AadrmSuperUserFeature D. Set-MsolUserPassword User1@contoso. Remove-AadrmRoleBasedAdministrator C. Ltd is unable to sign in. 4 B. A company deploys an Office 365 tenant. Get-MsolUserRole | Set-MsolUserPassword -StrongPasswordRequired $true C. .com B. 80. You have the following requirements: You must configure a redundant Active Directory Federation Services (AD FS) implementation You must use a Windows Internal Database to store AD FS configuration data The solution must use a custom login page for external users The solution must use a single sign-on for internal users You need to deploy the minimum number of servers. You need to configure single sign-on (SSO) for all user accounts.What is the correct Windows PowerShell command? Get-MsolUser | Set-MsolUser -StrongPasswordRequired $true A. 78.76. 79. 2 A. You need to enforce password complexity requirements for all accounts. Get-MsolUserPassword | Set-MsolUserPassword -StrongPasswordRequired $true B. 77. Deploy a federation server proxy D. You need to change the password for User1 and ensure that the user is prompted to reset her password the next time she signs in. You are the Office 365 administrator for your company.com -NewPassword D. Run the Windows PowerShell cmdlet Enable-ADFSEndpoint B. The company has two administrators named User1 and User2. Reset passwords for standard user accounts Reset passwords for other members of the same role. What should you do? Re-enter the credentials used to establish the trust. D. Both servers are running Windows Server 2012. C. You launch the Event Viewer and view the event information shown in the following screen shot:You need to ensure that users can authenticate to Office 365. Users report that they are unable to authenticate. You install an Active Directory Federation Services (AD FS) proxy server. Must NOT reset passwords for other administrator accounts Reset passwords for all administrator accounts What is the correct role to assign to User2? Global administrator Delegate administrator Billing administrator Password administrator 82. B. server. Users must be able to perform the activities as shown in the following table: AdministratorActivities User1 User2 A. SERVER2 is a standalone server.81. 83. A. An organization implements single sign-on (SSO) for use with Office 365 services. You are the Office 365 administrator for your company. The company has two servers named SERVER1 and SERVER2. C. B.You need to use the Windows Azure Active Directory . An organization plans to deploy an Office 365 tenant. SERVER1 is a member server of the Active Directory forest that you are synchronizing. Re-install the Secure Sockets Layer certificate for the federation service. Verify the federation server proxy is trusted by the federation service. Verify network connectivity between the Federation Service Proxy and federation D. The Office 365 Malware detections in sent mail report C. C. Install and run the Windows Azure Active Directory Sync tool on SERVER1 B. server farm to the LMHOSTS file 85. Install and run the Windows Azure Active Directory Sync tool on SERVER2 C. Install Active Directory Domain Services (AD DS) on the member server E. SRV B.NYC-DC1 is running Windows Server 2008 R2 and has a Forest Functional Level of Windows 2000.From the Office 365 admin center. Activate all synchronized users D.What should you do? On FS1 and FS2. The Mailbox content search and hold report D.Sync tool to provision users. 86. ad dthe cluster NetBIOS name and IP address of the federation D. Which three actions should you perform?NOTE: On the exam. You need to configure name resolution for FS1 and FS2. You must deploy Active Directory Federation Services (AD FS) on Windows Server 2012. CNAME D. MX C. Users report that they have received significantly more spam messages over the past month than they normally receive. D. farm to the hosts file On FS1 only. 84. 87. A company plans to deploy an Office 365 tenant. farm to the LMHOSTS file On FS1 and FS2. add the cluster DNS name and IP address of the federation server B. The organization has one domain controller named NYC-DC1 and one server named NYC-DS that is designated as the directory synchronization computer. You must support all Exchange Online features. Install Windows Server 2012. From the Office 365 admin center. You need to create the required DNS entries. add the cluster NetBIOS name and IP address of the federation server C. farm to the hosts file On FS1 only. What is the minimum you must do to the server to allow Directory Synchronization to function? Raise the forest functional level to Windows Server 2003. An organization prepares to migrate to Office 365. what should you view? Messages on the Service health page A. You need to analyze trends for theemail messages received over the past 60 days. you will need to know the correct sequence for these three actions. activate directory synchronization A.Which two DNS entries should you create? A A. add the cluster DNS name and IP address of the federation server A. B. The Received mail report B. Raise the forest functional level to Windows Server 2008 R2. An organization plans to deploy Exchange Online. Raise the forest functional level to Windows Server 2008. A. You are the Office 365 administrator for your company. . You have two servers named FS1 and FS2 that have the Federation Service Proxy role service installed. Issues with the Exchange Online subscription are B. SharePoint Online is available. You have the following password policies: Passwords for the on-premises Active Directory DOmain Services (AD DS) user accounts are at least six characters long Passwords for Office 365 user accounts are at least eight characters long. User accounts must be synchronized to Office 365 by using the Windows Azure Active Directory Sync Tool. In addition.What is the correct Windows PowerShell command to use? Get-MsolUser -All | Set-MsolUser -NewPassword Pass#123# A. Which tool should you run? The Hybrid Configuration wizard A. The Exchange Online subscription C. You need to ensure that all employees create a new password the next time the sign in to Office 365. . The Service Health page displays the following information:What is the current status of Exchange Online and SharePoint Online? SharePoint Online is available.You need to troubleshoot why users cannot access free/busy information from both Office 365 and Exchange Server 2013. Exchange Server users cannot see free/busy information that is published from Office 365. 91. service are under investigation. An organization deploys an Office 365 tenant. under investiagtion The SharePoint Online subscription is expired. Get-MsolUser -All | Set-MsolUserPassword -NewPassword Pass#123# D. You must reset the password for all of the employees in your company. The Microsoft Connectivity Analyzer Tool C. A company deploys an Office 365 tenant in a hybrid configuration with Exchange Server 2013. 90. Get-MsolUser -All | Set-MsolUser -StrongPasswordRequired C. Get-MsolUser -All | Set-MsolUserPassword -ForceChangePassword $true B. 89. The Remote Connectivity Analyzer with the Exchange Server tab selected B. An organization deploys an Office 365 tenant. The SharePoint Online subscription is expired.88. will expire soon. Issues with the Exchange Online D. Office 365 users cannot see the free/busy information that is published from the onpremises Exchange Server. Exchange Online is available but service is degraded A. The Remote Connectivity Analyzer with the Office 365 tab selected D. You . 94. The company has Office 365 Enterprise E3 licenses for each of its 250 employees. D. uses Office 365 for collaboration. You need to migrate domain names to Office 365. 92. User1 joins the HR department. The company does not allow email or Lync Online licenses to be assigned to external contractors.us A.local C.Choose the correct actions to fill in the blanks StepAction 1 Sign in to the Office 365 admin center 2 3 Add an Office Web App with Sharepoint (Plan 1) plan 4 5 Assign licenses to User1 A. No user accounts B. Which user accounts will be synchronized? All user accounts A. Ltd. Select the purchase services option Select the users and groups option Select the licensing option Enable External Users in SharePoint Add an Office 365 Enterprise E3 license for User1 93. Instruct User1 to create an app password B. Contoso B. You are implementing Active Directory Federation Services (AD FS) for single sign-on (SSO) with Office 365 services. User accounts with a password length of at least 8 characters C. User accounts with a password length of at least 14 characters D. C. Contoso has four unique domain names.Which two domain names should you exclude from the migration? Contoso. B. User1 is an external contractor who requires access to SharePoint and Office Web apps only. E.You need to ensure that the user accounts will be synchronized. Contoso. Instruct User1 to use an app password to complete the registration process C. Contoso. plans to use Office 365 for email services and Lync Online. You need to help User1 configure his account. Instruct User1 to use a mobile phone to complete the registration process E. Contoso Ltd. Instruct User1 to use a one-time password to complete the registration process D. They must use only the Microsoft Outlook client to access their email messages. You need to add a license for User1's account. 95. The environment contains an Active Directory domain and an AD FS federation server. Contoso.Which three actions should you preform?NOTE: On the exam you will need to know the correct sequence of these actions Enable multi-factor authentication for User1 A.co D. All employees in the Human Resources department must use multi-factor authentication. DLP rule matches for received mail E. The disclaimers explain that any transmissions that are received in error should be reported back to the sender. Create a server authentication certificate for the federation server by using C. You track any confidential documents that are attached to email messages.contoso. fs. .Which two options should you configure? Rule matches for received mail A. DLP rule matches for sent mail D.com A. Configure Active Directory to use the domain contoso. fs. Your security team reports that an employee may have mistakenly sent an email message that contained confidential information.need to ensure that the environment is prepared for the AD FS setup. 96. You need to identify whether the email message included the disclaimer and whether it contained confidential information. Rule matches for sent mail B.contoso.com as the subject name and subject alternative name. Create a server authentication certificate for the federation server by using D.Which two actions should you preform? Each correct answer presents part of the solution.local B. The legal department in your organization creates standardized disclaimers for all of their email messages. DLP policy matches for sent mail C.local as the subject name and subject alternative name. Configure Active Directory to use the domain contoso.