NEW QUESTION 1
You recently migrated your on-premises email solution to Microsoft Exchange Online and are evaluating which licenses to purchase.
You want the members of two groups named IT and Managers to be able to use the features shown in the following table.

The IT group contains 50 users. The Managers group contains 200 users.
You need to recommend which licenses must be purchased for the planned solution. The solution must minimize licensing costs.
Which licenses should you recommend?

• A. 250 Microsoft 365 E3 only
• B. 50 Microsoft 365 E 3 and 200 Microsoft 365 E5
• C. 250 Microsoft 365 E5 only
• D. 200 Microsoft 365 E3 and 50 Microsoft 365 E5

Answer: D

NEW QUESTION 2
Your network contains an Active Directory domain named contoso.com. All users authenticate by using a third-party authentication solution.
You purchase Microsoft 365 and plan to implement several Microsoft 365 services. You need to recommend an identity strategy that meets the following requirements:
Provides seamless SSO
Minimizes the number of additional servers required to support the solution
Stores the passwords of all the users in Microsoft Azure Active Directory (Azure AD)
Ensures that all the users authenticate to Microsoft 365 by using their on-premises user account You are evaluating the implementation of federation.
Which two requirements are met by using federation? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A. minimizes the number of additional servers required to support the solution
• B. provides seamless SSO
• C. stores the passwords of all the users in Azure AD
• D. ensures that all the users authenticate to Microsoft 365 by using their on-premises user account.

Answer: BD

NEW QUESTION 3
Your company has a Microsoft 365 subscription that has multi-factor authentication configured for all users. Users on the network report that they are prompted for multi-factor authentication multiple times a day.
You need to reduce the number of times the users are prompted for multi-factor authentication on their
company-owned devices. What should you do?

• A. Enable the multi-factor authentication trusted IPs setting, and then verify each device as a trusted device.
• B. Enable the remember multi-factor authentication setting, and then verify each device as a trusted device.
• C. Enable the multi-factor authentication trusted IPs setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).
• D. Enable the remember multi-factor authentication setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

NEW QUESTION 4
Your network contains an Active Directory forest named local.
You have a Microsoft 365 subscription. You plan to implement a directory synchronization solution that will use password hash synchronization.
From the Microsoft 365 admin center, you verify the contoso.com domain name. You need to prepare the environment foe the planned directory synchronization solution.
What should you do first?

• A. From the public DNS zone of contoso.com, add a new mail exchanger (MX) record.
• B. From Active Directory Domains and Trusts, add contoso.com as a UPN suffix
• C. From the Microsoft 365 admin center, verify the contoso.com domain name.
• D. From Active Directory Users and Computers, modify the UPN suffix for all users.

Answer: B

NEW QUESTION 5
Your company has a Microsoft 365 subscription.
You upload several archive PST files to Microsoft 365 by using the Security & Compliance admin center. A month later, you attempt to run an import job for the PST files.
You discover that the PST files were deleted from Microsoft 365.
What is the most likely cause of the files being deleted? More than one answer choice may achieve the goal. Select the BEST answer.

• A. The PST files were corrupted and deleted by Microsoft 365 security features.
• B. PST files are deleted automatically from Microsoft 365 after 30 days.
• C. The size of the PST files exceeded a storage quota and caused the files to be deleted.
• D. Another administrator deleted the PST files.

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/office365/securitycompliance/faqimporting-pst-files-to-office-365

NEW QUESTION 6
Your company uses Gmail as a corporate email solution.
You purchase a Microsoft 365 subscription and plan to move all email data to Microsoft Exchange Online. You plan to perform the migration by using the Exchange admin center.
You need to recommend which type of migration to use and which type of data to migrate. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/exchange/mailbox-migration/migrating-imap-mailboxes/migrate-g-suite-mailb

NEW QUESTION 7
You have a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. Contoso.com contains the users shown in the following table.

Contoso.com is configured as shown in the following exhibit.

You need to ensure that guest users can be created in the tenant. Which setting should you modify?

• A. Guests can invite.
• B. Guest users permissions are limited.
• C. Members can invite.
• D. Admins and users in the guest inviter role can invite.
• E. Deny invitations to the specified domains

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/users-default-permissions

NEW QUESTION 8
Your network contains an Active Directory domain named .Ki.ituin.com that is synced to Microsoft Azure Active Directory (Azure AD).
The domain contains 10O user accounts.
The city attribute for all the users is set to the city where the user resides.
You need to modify the value of the city attribute to the three letter airport code of each city. What should you do?

• A. from Active Directory Administrative Center, select the Active Directory users, and then modify the Property settings.B From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
• B. From Azure Cloud Shell, run the Get-AzureADUsers, and then use the Bulk actions option.
• C. From Azure Cloud Shell, run the Get-AzureADUser and set-AzureADUser cmdlets.
• D. From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.

Answer: A

NEW QUESTION 9
Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan’s account from Microsoft 365 and notice that his username is set to Allan@contoso.onmicrosoft.com.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 10
You create a Microsoft 365 Enterprise subscription. You assign licenses for all products to all users.
You need to ensure that all Microsoft Office 365 ProPlus installations occur from a network share. The solution must prevent the users from installing Office 365 ProPlus from the Internet.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. From your computer, run setup.exe /download downloadconfig.xml.
• B. Create an XML download file.
• C. From the Microsoft 365 admin center, deactivate the Office 365 licenses for all the users.
• D. From each client computer, run setup.exe /configure installconfig.xml.
• E. From the Microsoft 365 admin center, configure the Software download settings.

Answer: BDE

Explanation: References:
https://docs.microsoft.com/en-us/deployoffice/overview-of-the-office-2021-deployment-tool#download-the-inst

NEW QUESTION 11
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. An external user has a Microsoft account that uses an email address of user1@outlook.com.
An administrator named Admin1 attempts to create a user account for the external user and receives the error message shown in the following exhibit.

You need to ensure that Admin1 can add the user.
What should you do from the Azure Active Directory admin center?

• A. Add a custom domain name named outlook.com.
• B. Modify the Authentication methods.
• C. Modify the External collaboration settings.
• D. Assign Admin1 the Security administrator role.

Answer: C

NEW QUESTION 12
You need to meet the security requirement for Group1. What should you do?

• A. Configure all users to sign in by using multi-factor authentication.
• B. Modify the properties of Group1.
• C. Assign Group1 a management role.
• D. Modify the Password reset properties of the Azure AD tenant.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks

NEW QUESTION 13
You need to create the UserLicenses group. The solution must meet the security requirements.
Which group type and control method should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 14
Your on-premises network contains five file servers. The file servers host shares that contain user data. You plan to migrate the user data to a Microsoft 36S subscription.
You need to recommend a solution to import the user data into Microsoft OneDrive. What should you include in the recommendation?

• A. Configure the Migrate of the OneDrive client on your Windows 10 dew
• B. Configure the Sync settings in the OneDrive admin center.
• C. Run the SharePoint Hybrid Configuration Wizard.
• D. Run the SharePoint Migration Tool.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/sharepointmigration/introducing-the-sharepoint-migration-tool

NEW QUESTION 15
You have a Microsoft 365 Enterprise subscription.
You create a password policy as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad

NEW QUESTION 16
To which Azure AD role should you add User4 to meet the security requirement?

• A. Password administrator
• B. Global administrator
• C. Security administrator
• D. Privileged role administrator

Answer: B

NEW QUESTION 17
Your company has a Microsoft Office 365 subscription that contains the groups shown in the following table.

You have the licenses shown in the following table.

Another administrator removes User1 from Group1 and adds Group2 to Group1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: The users are assigned SharePoint licenses directly. Their group memberships have no effect on licenses directly assigned to the user accounts.

NEW QUESTION 18
You company has a Microsoft Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
The tenant includes a security group named Admin1. Admin1 will be used to manage administrative accounts. You need to identify which users can perform the following administrative tasks:
Create guest user accounts.
Add User3 to Admin1.
Which users should you identify for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles