NEW QUESTION 1
You have a Microsoft 365 tenant that contains Microsoft Exchange Online.
You plan to enable calendar sharing with a partner organization named adatum.com. The partner organization also has a Microsoft 365 tenant.
You need to ensure that the calendar of every user is available to the users in adatum.com immediately. What should you do?

• A. From the Exchange admin center, create a sharing policy.
• B. From the Exchange admin center, create a new organization relationship
• C. From the Microsoft 365 admin center, modify the Organization profile settings.
• D. From the Microsoft 365 admin center, configure external site sharing.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/exchange/sharing/organization-relationships/create-an-organization-relationshi

NEW QUESTION 2
Your company has a Microsoft 365 subscription that has multi-factor authentication configured for all users. Users on the network report that they are prompted for multi-factor authentication multiple times a day.
You need to reduce the number of times the users are prompted for multi-factor authentication on their
company-owned devices. What should you do?

• A. Enable the multi-factor authentication trusted IPs setting, and then verify each device as a trusted device.
• B. Enable the remember multi-factor authentication setting, and then verify each device as a trusted device.
• C. Enable the multi-factor authentication trusted IPs setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).
• D. Enable the remember multi-factor authentication setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

NEW QUESTION 3
Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
An external vendor has a Microsoft account that has a username of user1@outlook.com. You plan to provide user1@outlook.com with access to several resources in the subscription.
You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that the external vendor can authenticate by using user1@outlook.com.
What should you do?

• A. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify –UserPrincipalName user1@outlook.com.
• B. From the Microsoft 365 admin center, add a contact, and then specify user1@outlook.com as the email address.
• C. From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.
• D. From the Azure portal, add a custom domain name, and then create a new Azure AD user and use user1@outlook.com as the username.

Answer: C

NEW QUESTION 4
You have a Microsoft 365 subscription that contains a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. The tenant includes a user named User1
You enable Azure AD Identity Protection.
You need to ensure that User1 can review the list in Azure AD Identity Protection of users nagged for risk. The solution must use the principle of least privilege.
To which role should you add User1?

• A. Security reader
• B. Compliance administrator
• C. Reports reader
• D. Global administrator

Answer: A

NEW QUESTION 5
You need to ensure that all the sales department users can authenticate successfully during Project1and Project2.
Which authentication strategy should you implement for the pilot projects?

• A. password hash synchronization and seamless SSO
• B. pass-through authentication
• C. password hash synchronization
• D. pass-through authentication and seamless SSO

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/azure/security/azure-ad-choose-authn

NEW QUESTION 6
Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan’s account from Microsoft 365 and notice that his username is set to Allan@contoso.onmicrosoft.com.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.
Users use Microsoft Outlook 2021 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
Solution: For each branch office, you add a direct connection to the Internet. Does this meet the goal?

• A. Yes
• B. NO

Answer: A

NEW QUESTION 8
You have a Microsoft 365 Enterprise subscription.
You have a conditional access policy to force multi factor .mthentication when accessing Microsoft SharePoint from a mobile device
You need to view which users authenticated by using multi factor authentication. What should you do?

• A. From the Microsoft 36S admin center, view the Security Compliance reports.
• B. From the Azure Active Directory admin center, view the user sign-ins.
• C. From the Microsoft 365 admin center, view the Usage reports.
• D. From the Azure Active Directory admin center, view the audit logs.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting

NEW QUESTION 9
Your company has a Microsoft 365 subscription.
You plan to move several archived PST files to Microsoft Exchange Online mailboxes. You need to create an import job for the PST files.
Which three actions should you perform before you create the import job? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Create a Microsoft Azure Storage account.
• B. From Security & Compliance, retrieve the SAS key.
• C. Run azcopy.exe to copy the PST files to Microsoft Azure Storage
• D. Use Microsoft Azure Storage Explorer to copy the PST files to Azure Storage.
• E. Create a PST import mapping file.

Answer: BCE

Explanation: References:
https://docs.microsoft.com/en-us/office365/securitycompliance/use-network-upload-to-import-pst-files

NEW QUESTION 10
You have a Microsoft 365 subscription.
A new corporate security policy states that you must automatically send DLP incident reports to the users in the legal department.
You need to schedule the email delivery of the reports. The solution must ensure that the reports are sent as frequently as possible.
How frequently can you share the reports?

• A. hourly
• B. monthly
• C. weekly
• D. daily

Answer: C

NEW QUESTION 11
Your company has a Microsoft 365 subscription that contains the users shown in the following table.

You need to identify which users can perform the following administrative tasks:
Modify the password protection policy.
Create guest user accounts.
Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 12
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

Group2 is a member of Group1.
You assign a Microsoft Office 365 Enterprise E3 license to Group1. You need to identity how many Office 365 E3 licenses are assigned. What should you identify?

• A. 1
• B. 2
• C. 3
• D. 4

Answer: C

NEW QUESTION 13
You have a Microsoft 365 subscription.
You use the Microsoft Office Deployment tool to install Office 365 ProPlus. You create a configuration file that contains the following settings.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2021-deployment-tool

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to assign User2 the required roles to meet the security requirements. Solution: From the Office 365 admin center, you assign User2 the Security Reader role. From the Exchange admin center, you assign User2 the Help Desk role.
Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 15
Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription.
You implement a directory synchronization solution that uses pass-through authentication.
You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.

You discover that Active Directory users can use the passwords in the custom banned passwords list. You need to ensure that banned passwords are effective for all users.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From a domain controller, install the Azure AD Password Protection Proxy.
• B. From a domain controller, install the Microsoft AAD Application Proxy connector.
• C. From Custom banned passwords, modify the Enforce custom list setting.
• D. From Password protection for Windows Server Active Directory, modify the Mode setting.
• E. From all the domain controllers, install the Azure AD Password Protection DC Agent.
• F. From Active Directory, modify the Default Domain Policy.

Answer: ACE

NEW QUESTION 16
Your network contains an Active Directory domain named contoso.com. All users authenticate by using a third-party authentication solution.
You purchase Microsoft 365 and plan to implement several Microsoft 365 services. You need to recommend an identity strategy that meets the following requirements:
Provides seamless SSO
Minimizes the number of additional servers required to support the solution
Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)
Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account You are evaluating the implementation of federation.
Which two requirements are met by using federation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A. minimizes the number of additional servers required to support the solution
• B. provides seamless SSO
• C. stores the passwords of all the users in Azure AD
• D. ensures that all the users authenticate to Microsoft 365 by using their on-premises user account.

Answer: BD

NEW QUESTION 17
You need to Add the custom domain name* to Office 36S K> support the planned changes as quickly as possible.
What should you create to verify the domain names successfully?

• A. three alias (CNAME) record
• B. one text (TXT) record
• C. one alias (CNAME) record
• D. three text (TXT) record

Answer: D