Microsoft Managing Office 365 Identities and Requirements (70-346) Free Practice Test
Question 1
A company plans to implement an Office 365 environment to manage email.
All user accounts must be configured to use only a custom domain.
You need to provision an Office 365 tenant for the company.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
All user accounts must be configured to use only a custom domain.
You need to provision an Office 365 tenant for the company.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Box 1:
Box 2:
Configure the global administrator account recovery information
Box 3:
The tenant is your Office 365 account, including hosted Exchange, Skype for Business, SharePoint, and your Office 365 Active Directory. The first account that you create when you first purchase Office 365 is the
"owner" of your tenant. This account should be an admin account, not a person. This account does not normally require an Office 365 license. Relating to SharePoint, all of your site collections are within your tenant. You can have any number of domains within your tenant (with e-mail accounts), but you will have only one root SharePoint URL:https://xxxx.sharepoint.com.
The Global Administrator account is similar to the Company administrator. Users in this role have access to everything or the permission to add them to a dedicated role where they do not have permission (such as discovery management and assigning administrative roles to other users).
When setting up Office 365 the first step is to purchase your subscription which includes choosing the plan.
Step 2 involves the selection of the sign-on method and this is where the global administrator account is of consequence. Step 3 involves the collecting of information such as domain names and DNS, locations, etc...
Step4 is the actual migration plan and schedule, step 5 - the Microsoft account and organizational account, step 6 - the SkyDrive and SkyDrive Pro, and step 7 - the Windows Intune section.
Thus you should perform step 1 through 3 to ensure that all user accounts to make use of a custom domain for their e-mail.
References:
Katzer, Matthew and Don Crawford, Office 365 Migrating and Managing your Business in the Cloud, Apress Media, New York, 2013, pp 87- 93, 373
http://office.microsoft.com/en-gb/office365-suite-help/add-your-domain-to-office-365-HA102818660.aspx
Question 2
You plan to use Office 365 FastTrack to deploy an Office 365 tenant.
Which action should you perform for each phase? To answer, drag the appropriate actions to the correct phases. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Which action should you perform for each phase? To answer, drag the appropriate actions to the correct phases. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation
Explanaton:
References: https://fasttrack.microsoft.com/about
Question 3
Your company has an Office 365 tenant. You use Microsoft Azure Directory (Azure AD) Connect to synchronize the on-premises users to your Office 365 environment. You enable password synchronization.
You must implement a single-sign-on (SSO) solution. You deploy Active Directory Federation Services (AD FS). You are connected to the AD FS primary server.
You need to ensure that users can log on with their corporate credentials when they access Office 365 resources.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You must implement a single-sign-on (SSO) solution. You deploy Active Directory Federation Services (AD FS). You are connected to the AD FS primary server.
You need to ensure that users can log on with their corporate credentials when they access Office 365 resources.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Question 4
A company plans to use Office 365 to provide email services to employees. The company obtains a custom domain name to use with Office 365.
You need to add the domain name to Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You need to add the domain name to Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Box 1:
Box 2:
Box3:
Manage Azure AD using Windows PowerShell
You can use the Azure Active Directory Module for Windows PowerShell cmdlets for Azure AD administrative tasks such as user management, domain management and for configuring single sign-on.
Step 1: Install the Azure AD Module
Step 2: Connect to Azure AD
Click the Microsoft Azure Active Directory Module for Windows PowerShell shortcut to open a Windows PowerShell workspace that has the cmdlets. Alternatively, you can load the cmdlets manually by typing import-module MSOnline at the Windows PowerShell command prompt.
Step 3: The New-MsolDomain cmdlet is used to create a new domain object. This cmdlet can be used to create a domain with managed or federated identities
Question 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single Active Directory forest. The forest contains a domain controller and Active Directory Federation Services (AD FS) servers that are deployed to virtual machines. The virtual machines run either on-premises or on Microsoft Azure.
You have Azure AD Connect deployed on-premises. The Azure AD Connect database is installed on an on-premises instance of Microsoft SQL Server 2014.
Last month, an Azure AD Connect server experienced a hardware failure that caused an Azure AD Connect server to go offline for several days.
You need to recommend a solution to reduce the outage window when hardware failure occurs on the Azure AD Connect server.
Solution: You deploy a new on-premises Azure AD Connect server that uses the same SQL Server instance.
You start Azure AD Connect sync.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single Active Directory forest. The forest contains a domain controller and Active Directory Federation Services (AD FS) servers that are deployed to virtual machines. The virtual machines run either on-premises or on Microsoft Azure.
You have Azure AD Connect deployed on-premises. The Azure AD Connect database is installed on an on-premises instance of Microsoft SQL Server 2014.
Last month, an Azure AD Connect server experienced a hardware failure that caused an Azure AD Connect server to go offline for several days.
You need to recommend a solution to reduce the outage window when hardware failure occurs on the Azure AD Connect server.
Solution: You deploy a new on-premises Azure AD Connect server that uses the same SQL Server instance.
You start Azure AD Connect sync.
Does this meet the goal?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 6
The legal department in your organization creates standardized disclaimers for all of their email messages. The disclaimers explain that any transmissions that are received in error should be reported back to the sender. You track any confidential documents that are attached to email messages.
Your security team reports that an employee may have mistakenly sent an email message that contained confidential information.
You need to identify whether the email message included the disclaimer and whether it contained confidential information.
Which two options should you configure? To answer, select the appropriate objects in the answer area.
Your security team reports that an employee may have mistakenly sent an email message that contained confidential information.
You need to identify whether the email message included the disclaimer and whether it contained confidential information.
Which two options should you configure? To answer, select the appropriate objects in the answer area.
Correct Answer:
Explanation
DLP stands for DataLossPrevention. A DLP policy is used to define exactly what constitutes a confidential email. For example: any email that has a credit card number of bank account number would be deemed to be confidential.
The DLP policy matches for sent mail report is used to display which emails contained content that matched a condition defined in a DLP policy. The DLP policy matches for sent mail report can be downloaded as a table that lists every single email that matched a DLP policy. This would identify in this question if the email did actually contain confidential information.
To identify whether the email message included the disclaimer, we need to view the "rule matches for sent mail" report. The disclaimer is added to an email by a transport rule. The rule defines which emails should have the disclaimer appended. A common example of this is all email sent to recipients outside the organization. By viewing the rule matches for sent mail, we can verify if the email in this question did match a rule and therefore did have the disclaimer appended.
Question 7
You are the Office 365 administrator for your company.
You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 8 to perform the management tasks.
You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 8 to perform the management tasks.
You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 8
You are the Office 365 administrator for a company. You have an on-premises Active Directory Domain Services (AD DS) environment.
You configure Active Directory Federation Services (AD FS) and directory synchronization. You use Windows Server 2016 for AD FS. You deploy the Web Application Proxy (WAP) role.
You need to deploy a custom web theme for the WAP server.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
You configure Active Directory Federation Services (AD FS) and directory synchronization. You use Windows Server 2016 for AD FS. You deploy the Web Application Proxy (WAP) role.
You need to deploy a custom web theme for the WAP server.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:
Explanation
Box1
Run the New-AdfsWebTheme cmdlet.
Box2
Customiize the theme files.
Box3
Run the Export-AdfsWebTheme cmdlet.
Box4
Run the Set-AdfsWebTheme cmdlet.
Box5
Run the Set-AdfsRelyingPartyWebTheme cmdlet.
The New-AdfsWebTheme cmdlet creates a custom web theme.
You can modify the .css file and configure the new web theme by using the new .css file.
The Export-AdfsWebTheme cmdlet exports the web theme to the required directory.
The Set-AdfsWebTheme cmdlet applies the .css file to the new theme.
The Set-AdfsRelyingPartyWebTheme cmdlet applies a web theme to a relying party.
References:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/custom-web-themes-in-ad-fs
https://docs.microsoft.com/en-us/powershell/module/adfs/set-adfsrelyingpartywebtheme?view=win10-ps
Question 9
Your company has a hybrid deployment of Office 365. You need to verify whether free/busy information sharing with external users is configured.
Which Windows PowerShell cmdlet should you use?
Which Windows PowerShell cmdlet should you use?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 10
An organization deploys an Office 365 tenant.
The Service health page displays the following information:
You need to report the status of service interruptions for Exchange Online and SharePoint Online.
Use the drop-down menus to complete each statement based on the information presented in the screen shot.
Each correct selection is worth one point.
The Service health page displays the following information:
You need to report the status of service interruptions for Exchange Online and SharePoint Online.
Use the drop-down menus to complete each statement based on the information presented in the screen shot.
Each correct selection is worth one point.
Correct Answer:
Explanation
You can log in to Office 365 as an Office 365 Administrator and view the Service Health Page to view the status of your Office 365 services. You can use the Service Health Page to view information on the status of your services for the current day or you can select the last 6 days or 30 days for a historical view.
The following icons are used in the Service Health Page:
Microsoft says that they will publish a post-incident review within five business days. Therefore, it is possible that a post-incident review could be issued today.
References:
http://office.microsoft.com/en-in/office365-suite-help/view-the-status-of-your-services-HA102817837.aspx#_Sta
http://technet.microsoft.com/en-us/library/office-365-service-continuity.aspx
Question 11
A company deploys an Office 365 tenant.
You need to configure single sign-on (SSO) for all user accounts. External users are not allowed to connect directly to internal servers.
Which three actions should you perform? Each correct answer presents part of the solution.
You need to configure single sign-on (SSO) for all user accounts. External users are not allowed to connect directly to internal servers.
Which three actions should you perform? Each correct answer presents part of the solution.
Correct Answer: A,B,D