NEW QUESTION 1
Your company has a Microsoft 365 subscription.
You upload several archive PST files to Microsoft 365 by using the Security & Compliance admin center. A month later, you attempt to run an import job for the PST files.
You discover that the PST files were deleted from Microsoft 365.
What is the most likely cause of the files being deleted? More than one answer choice may achieve the goal. Select the BEST answer.

• A. The PST files were corrupted and deleted by Microsoft 365 security features.
• B. PST files are deleted automatically from Microsoft 365 after 30 days.
• C. The size of the PST files exceeded a storage quota and caused the files to be deleted.
• D. Another administrator deleted the PST files.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/office365/securitycompliance/faqimporting-pst-files-to-office-365

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Office 365 tenant.
You suspect that several Office 365 features were recently updated.
You need to view a list of the features that were recently updated in the tenant.
Solution: You review the Security & Compliance report in the Microsoft 365 admin center. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 3
You have a Microsoft 36S subscription that contains several Microsoft SharePoint Online sites. You discover that users from your company can invite external users to access files on the SharePoint sites. You need to ensure that the company users can invite only authenticated guest users to the sites. What should you do?

• A. From the Microsoft 365 admin center, configure a partner relationship.
• B. From SharePoint Online Management Shell, run the set-SPOSite cmdlet.
• C. From the Azure Active Directory adman center, configure a conditional access policy.
• D. From the SharePoint admin center, configure the sharing settings.

Answer: D

NEW QUESTION 4
Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.
You implement directory synchronization for all 10.000 users in the organization. You automate the creation of 100 new user accounts.
You need to ensure that the new user accounts synchronize to Azure AD as quickly as possible Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct select ion is worth one point.

Answer:

Explanation:

NEW QUESTION 5
Your company has a Microsoft 365 subscription.
You need to identify all the users in the subscription who are licensed for Microsoft Office 365 through a group membership. The solution must include the name of the group used to assign the license.
What should you use?

• A. the Licenses blade in the Azure portal
• B. Reports in the Microsoft 365 admin center
• C. Active users in the Microsoft 365 admin center
• D. Report in Security & Compliance

Answer: A

NEW QUESTION 6
You are evaluating the required processes for Project1.
You need to recommend which DNS record must be created before you begin the project. Which DNS record should you recommend?

• A. mail exchanger (MX)
• B. alias (CNAME)
• C. host (A)
• D. host (AAA)

Answer: A

NEW QUESTION 7
Your network contains an Active Directory domain named .Ki.ituin.com that is synced to Microsoft Azure Active Directory (Azure AD).
The domain contains 10O user accounts.
The city attribute for all the users is set to the city where the user resides.
You need to modify the value of the city attribute to the three letter airport code of each city. What should you do?

• A. from Active Directory Administrative Center, select the Active Directory users, and then modify the Property settings.B From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
• B. From Azure Cloud Shell, run the Get-AzureADUsers, and then use the Bulk actions option.
• C. From Azure Cloud Shell, run the Get-AzureADUser and set-AzureADUser cmdlets.
• D. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.

Answer: A

NEW QUESTION 8
You have a Microsoft 365 subscription. All users have client computers that run Windows 10 and have Microsoft Office 365 ProPlus installed.
Some users in the research department work for extended periods of time without an Internet connection. How many days can the research department users remain offline before they are prevented from editing Office documents?

• A. 10
• B. 30
• C. 90
• D. 120

Answer: B

NEW QUESTION 9
Your network contains an Active Directory domain named contoso.com. The domain contains five domain controllers.
You purchase Microsoft 365 and plan to implement several Microsoft 365 services.
You need to identify an authentication strategy for the planned Microsoft 365 deployment. The solution must meet the following requirements:
Ensure that users can access Microsoft 365 by using their on-premises credentials.
Use the existing server infrastructure only.
Store all user passwords on-premises only.
Be highly available.
Which authentication strategy should you identify?

• A. pass-through authentication and seamless SSO
• B. pass-through authentication and seamless SSO with password hash synchronization
• C. password hash synchronization and seamless SSO
• D. federation

Answer: A

NEW QUESTION 10
Your network contains three Active Directory forests.
You create a Microsoft Azure Active Directory (Azure AD) tenant. You plan to sync the on premises Active Directory (Azure AD).
You need to recommend a synchronization solution. The solution must ensure that the synchronization can complete successfully and as quickly as possible if a single server fails.
What should you include in the recommendation?

• A. Three Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode
• B. One Azure AD Connect sync servers one Azure AD Connect sync servers in staging mode
• C. Three Azure AD Connect sync servers and one Azure AD Connect sync servers in staging mode
• D. six Azure AD Connect sync servers and three Azure AD Connect sync servers in staging mode

Answer: B

NEW QUESTION 11
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

You need to identify which users can perform the following administrative tasks:
Reset the password of User4.
Modify the value for the manager attribute of User4.
Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

NEW QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to assign User2 the required roles to meet the security requirements.
Solution: From the Office 365 admin center, you assign User2 the Security Reader role. From the Exchange admin center, you assign User2 the Compliance Management role.
Does this meet the goal?

• A. Yes
• B. NO

Answer: A

NEW QUESTION 13
Your network contains an on premises Active Directory domain named contoso.com. The domain contains five domain controllers.
Your company purchases Microsoft 365 and creates a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You plan to establish federation authentication between on premises Active Directory and the Azure AD tenant by using Active Directory Federation Services (AD FS).
You need to establish the federation.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

Answer:

Explanation:

NEW QUESTION 14
You have an on premises web application that is published by using a URL of https://app.contoso.local. You purchase a Microsoft 36S subscription.
Several external users must be able to connect to the web application
You need to recommend a solution for external access to the application. The solution must support multi-factor authentication.
Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From an on-premises server, install a connector, and then publish the app.
• B. From the Azure Active Directory admin center, enable an Application Proxy.
• C. From the Azure Active Directory admin center, treate a conditional access policy.
• D. From an on premises server, install an Authentication Agent.
• E. Republish the web-application by using http//app.contoso.com

Answer: AB

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/application-proxy-add-on-premises-applic

NEW QUESTION 15
You have a Microsoft 365 Enterprise E5 subscription.
You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.
What should you do?

• A. Create on activity policy.
• B. Create a Sign- in risk policy.
• C. Create a session policy.
• D. Create an app permission policy.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy

NEW QUESTION 16
Your company has a Microsoft Office 365 subscription that contains the groups shown in the following table.

You have the licenses shown in the following table.

Another administrator removes User1 from Group1 and adds Group2 to Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: The users are assigned SharePoint licenses directly. Their group memberships have no effect on licenses directly assigned to the user accounts.

NEW QUESTION 17
Your company has a hybrid deployment of Microsoft 36S.
Users authenticate by using pass-through authentication. Several Microsoft A/wt AD Connect Authentication Agents are deployed.
You need to verify whether all the Authentication Agents are used for authentication.
What should you do?

• A. From the Azure portal, use the Troubleshoot option on the Pass-through authentication page.
• B. From Performance Monitor, use the #PTA authentications counter.
• C. From the Azure portal use the Diagnostics settings on the Monitor blade.
• D. From Performance Monitor, use the Kerberos authentications counter.

Answer: A