NEW QUESTION 1
Your network contains a single Active Directory domain and two Microsoft Azure Active Directory (Azure AD) tenants.
You plan to implement directory synchronization for both Azure AD tenants. Each tenant will contain some of the Active Directory users.
You need to recommend a solution for the planned directory synchronization. What should you include in the recommendation?

• A. Deploy two servers that run Azure AD Connect, and then filter the users for each tenant by using organizational unit (OU)-based filtering.
• B. Deploy one server that runs Azure AD Connect, and then specify two sync groups.
• C. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by usingorganizational unit (OU)-based filtering.
• D. Deploy one server that runs Azure AD Connect, and then filter the users for each tenant by using domainbased filtering.

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-azure-adtenant

NEW QUESTION 2
Note: This question it part of a series of questions that present the same scenario. Cacti question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Office 36S tenant.
You suspect that several Office 365 features were recently updated.
You need to view a last of the features that were recently updated in the tenant. Solution: You use the View service requests option in the Microsoft 365 admin center. Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 3
Your network contains an Active Directory forest named local.
You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that will use password hash synchronization.
From the Microsoft 365 admin center, you verify the contoso.com domain name. You need to prepare the environment foe the planned directory synchronization solution.
What should you do first?

• A. From the public DNS zone of contoso.com, add a new mail exchanger (MX) record.
• B. From Active Directory Domains and Trusts, add contoso.com as a UPN suffix
• C. From the Microsoft 365 admin center, verify the contoso.com domain name.
• D. From Active Directory Users and Computers, modify the UPN suffix for all users.

Answer: B

NEW QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.
Users use Microsoft Outlook 2021 to connect to 4 Microsoft Exchange Server mailbox hosted in the main
office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
Solution: For each device, you configure an additional Outlook profile that uses IMAP. Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 5
You need to meet the security requirement for Group1. What should you do?

• A. Configure all users to sign in by using multi-factor authentication.
• B. Modify the properties of Group1.
• C. Assign Group1 a management role.
• D. Modify the Password reset properties of the Azure AD tenant.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks

NEW QUESTION 6
You have a Microsoft 365 subscription.
You view the service advisories shown in the following exhibit.

You need to ensure that users who administer Microsoft SharePoint Online can view the advisories to investigate health issues.
Which role should you assign to the users?

• A. SharePoint administrator
• B. Message Center reader
• C. Reports reader
• D. Service administrator

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/office365/admin/add-users/about-admin-roles?view=o365-worldwide

NEW QUESTION 7
You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. Contoso.com contains the users shown in the following table.

Contoso.com is configured as shown in the following exhibit.

You need to ensure that guest users can be created in the tenant. Which setting should you modify?

• A. Guests can invite.
• B. Guest users permissions are limited.
• C. Members can invite.
• D. Admins and users in the guest inviter role can invite.
• E. Deny invitations to the specified domains

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/users-default-permissions

NEW QUESTION 8
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. An external user has a Microsoft account that uses an email address of user1@outlook.com.
An administrator named Admin1 attempts to create a user account for the external user and receives the error message shown in the following exhibit.

You need to ensure that Admin1 can add the user.
What should you do from the Azure Active Directory admin center?

• A. Add a custom domain name named outlook.com.
• B. Modify the Authentication methods.
• C. Modify the External collaboration settings.
• D. Assign Admin1 the Security administrator role.

Answer: C

NEW QUESTION 9
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that includes the users shown in the following table.

Group2 is a member of Group1.
You assign a Microsoft Office 365 Enterprise E3 license to User2 as shown in the following exhibit.

You assign Office 365 Enterprise E3 licenses to Group1 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: Group-based licensing currently does not support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied.
References:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-group-advanced

NEW QUESTION 10
Your company has a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. You purchase a domain named contoso.com from a registrar and add all the required DNS records.
You create a user account named User1. User1 is configured to sign in as user1@contoso.onmicrosoft.com. You need to configure User1 to sign in as user1@contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 11
You have a Microsoft 365 subscription.
Your company deploys an Active Directory Federation Services (AD FS) solution. You need to configure the environment to audit AD FS user authentication.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From all the AD FS servers, run audltpol.exe.
• B. From all the domain controllers, run the set-AdminAuditLogConfig cmdlet and specify the –LogiLevel parameter.
• C. On a domain controller install Azure AD Connect Health for AD DS.
• D. From the Azure AO Connect server, run the Register-AzureADCConnectHealthSyncAgent cmdlet.
• E. On an server, install Azure AD Connect Health (or AD FS.

Answer: DE

NEW QUESTION 12
You have an on-premises Microsoft SharePoint Server 2021 environment. You create a Microsoft 365 tenant.
You need to migrate some of the SharePoint sites to SharePoint Online. The solution must meet the following requirements:
Microsoft OneDrive sites must redirect users to online content.
Users must be able to follow both on-premises and cloud-based sites.
Users must have a single SharePoint profile for both on-premises and on the cloud.
When users search for a document by using keywords, the results must include online and on-premises results. From the SharePoint Hybrid Configuration Wizard, you select the following features:
Hybrid business to business (B2B) sites
Hybrid OneDrive
Hybrid Search
Which two requirements are met by using the SharePoint Hybrid Configuration Wizard features? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. Users must have a single SharePoint profile for both on-premises and on the cloud.
• B. OneDrive sites must redirect users to online content.
• C. Users must be able to follow both on-premises and cloud-based sites.
• D. When users search for a document by using keywords, the results must include online and on-premises results.

Answer: BD

NEW QUESTION 13
Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following two exhibits.


You create a user named User1 in Active Directory as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
Your company has a main office and three branch offices. All the branch offices connect to the main office by using a WAN link. The main office has a high-speed Internet connection. All the branch offices connect to the Internet by using the main office connection.
Users use Microsoft Outlook 2021 to connect to 4 Microsoft Exchange Server mailbox hosted in the main office.
The users report that when the WAN link in their office becomes unavailable, they cannot access their mailbox.
You create a Microsoft 365 subscription, and then migrate all the user data to Microsoft 365.
You need to ensure that all the users can continue to use Outlook to receive email messages if a WAN link fails.
Solution: You deploy a site-to-site VPN from each branch office to Microsoft Azure. Does this meet the goal?

• A. Yes
• B. NO

Answer: B

NEW QUESTION 15
Your company has a Microsoft 365 subscription.
Your plan to add 100 newly hired temporary users to the subscription next week. You create the user accounts for the new users.
You need to assign licenses to the new users. Which command should you run?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

Explanation: Topic 2, Contoso, Ltd
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answer and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. When you are ready to answer a question, click the Question button to return to the question.
Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
The offices have the users and devices shown in the following table.

Contoso recently purchased a Microsoft 365 E5 subscription.
Existing Environment
The network contains an Active directory forest named contoso.com and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You recently configured the forest to sync to the Azure AD tenant. You add and then verify adatum.com as an additional domain name. All servers run Windows Server 2021.
All desktop computers and laptops run Windows 10 Enterprise and are joined to contoso.com.
All the mobile devices in the Montreal and Seattle offices run Android. All the mobile devices in the New York office run iOS.
Contoso has the users shown in the following table.

Contoso has the groups shown in the following table.

Microsoft Office 365 licenses are assigned only to Group2.
The network also contains external users from a vendor company who have Microsoft accounts that use a suffix of @outlook.com.
Requirements Planned Changes
Contoso plans to provide email addresses for all the users in the following domains:
East.adatum.com
Contoso.adatum.com
Humongousinsurance.com
Technical Requirements
Contoso identifies the following technical requirements:
All new users must be assigned Office 365 licenses automatically.
The principle of least privilege must be used whenever possible.
Security Requirements
Contoso identifies the following security requirements:
Vendors must be able to authenticate by using their Microsoft account when accessing Contoso resources.
The members of Group1 must be required to answer a security question before changing their password.
User3 must be able to manage Office 365 connectors.
User4 must be able to reset User3 password.

NEW QUESTION 16
You create a Microsoft 365 subscription.
You plan to deploy Microsoft Office 365 ProPlus applications to all the client computers at your company. You prepare the following XML file for the planned deployment.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/deployoffice/configuration-options-for-the-office-2021-deployment-tool#updat https://docs.microsoft.com/en-us/deployoffice/overview-of-update-channels-for-office-365-proplus

NEW QUESTION 17
Your company has three main offices and one branch office. The branch office is used for research. The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.
You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.
What should you include in the recommendation?

• A. Microsoft Azure Active Directory (Azure AD) conditional access.
• B. Microsoft Azure Active Directory (Azure AD) password protection.
• C. a device compliance policy
• D. a Microsoft Intune device configuration profile

Answer: A