Q1. You are the Office 365 administrator for your company. You have a server that runs Windows Server 2012. You plan to install an Active Directory Federation Services (AD FS) proxy server.
You need to install and configure all of the required roles.
Which two roles should you install and configure? Each correct answer presents part of the solution.
A. Web Server (IIS)
B. AD FS
C. Application Server
D. Network Policy and Access Service
E. Active Directory Certificate Services (AD CS)
F. Remote Access
Answer: A,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/dd807096.aspx
104 DRAG DROP
You are the Office 365 administrator for your company. You audit the Windows Azure Active Directory Rights Management configuration for the company.
You need to view a log of the recent administrative commands performed against the Microsoft Rights Management Service.
Which three Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of actions to the answer area and arrange them in the correct order.
Q2. A company has an Office 365 tenant. The company uses a third-party DNS provider that does not allow TXT records.
You need to verify domain ownership.
What should you do?
A. Create an MX record.
B. Create a CNAME record.
C. Create an A record.
D. Create an SRV record.
Answer: A
Explanation:
Add a TXT or MX record for DNS verification.
Reference: Change nameservers to set up Office 365 with any domain registrar
https://support.office.com/en-us/article/Change-nameservers-to-set-up-Office-365-with-anydomain-registrar-a8b487a9-2a45-4581-9dc4-5d28a47010a2
Q3. A company deploys an Office 365 tenant.
You must provide an administrator with the ability to manage company information in Office
365.
You need to assign permissions to the administrator by following the principle of least privilege.
Which role should you assign?
A. Global administrator
B. Service administrator
C. Billing administrator
D. User management administrator
Answer: A
Explanation:
Reference: http://onlinehelp.microsoft.com/en-in/office365-enterprises/gg243432.aspx#bkmk_EditProfile
Q4. HOTSPOT
An organization deploys an Office 365 tenant.
The Service health page displays the following information:
You need to report the status of service interruptions for Exchange Online and SharePoint Online.
Use the drop-down menus to complete each statement based on the information presented in the screen shot. Each correct selection is worth one point.
Answer:
Q5. You administer the Office 365 environment for a company that has offices around the world. All of the offices use the same Office 365tenant.
You need to ensure that all users can access the services that are available in their regions.
Which setting or service should you update?
A. User location settings
B. User licenses
C. Service usage address
D. Rights management
Answer: A
Q6. Your company has a hybrid deployment of Office 365. You need to verify whether free/busy information sharing with external users is configured.
Which Windows PowerShell cmdlet should you use?
A. Test-OutlookConnectivity
B. Test-FederationTrust
C. Get-OrganizationRelationship
D. Get-MSOLDomainFederationSettings
Answer: C
Q7. You have an Office 365 tenant that uses an Enterprise E3 subscription. You activate Azure
Rights Management for the tenant.
You must test the service with the Development security group before you deploy Azure
Rights Management for all users.
You need to enable Azure Rights Management for only the Development security group. Which Windows PowerShell cmdlet should you run?
A. Enable-Aadrm
B. New-AadrmRightsDefinition
C. Enable-AadrmSuperUserFeature
D. Add-AadrmSuperUser
E. Set-AadrmOnboardingControlPolicy
Answer: E
Explanation:
The Set-AadrmOnboardingControlPolicy cmdlet sets the policy that controls user on-boarding for Azure Rights Management. This cmdlet supports a gradual deployment by controlling which users in your organization can protect content by using Azure Rights Management.
Example:
Restrict Azure RMS to users who are members of a specified group This command allows only users that are members of the security group with the specified object ID to protect content by using Azure Rights Management. The command applies to Windows clients and mobile devices.
Windows PowerShell
PS C:\> Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -SecurityGroupObjectId "f
Reference: Set-AadrmOnboardingControlPolicy
https://msdn.microsoft.com/en-us/library/dn857521.aspx
Q8. DRAG DROP
Contoso, Ltd., uses SharePoint Online and plans a new single sign-on (SSO) implementation that uses Active Directory Federation Services (AD FS).
Your environment contains the following configurations:
two servers named Server1 and Server2
a partner collaboration website for the domain contoso.com that points to a SharePoint Online team site
a hardware load balancer to use with Server1 and Server2
You need to install AD FS to support the environment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q9. You use a centralized identity management system as a source of authority for user account information. You export a list of new user accounts to a file on a daily basis. Your company uses a local Active Directory for storing user accounts for on-premises solutions. You are configuring the Windows Azure Active Directory Sync tool.
New user accounts must be created in both the local Active Directory and Office 365. You must import user account data into Office 365 daily.
You need to import the new users. What should you do?
A. Use the Office 365 admin center to import the file.
B. Create a Windows PowerShell script to import account data from the file into Active Directory.
C. Use the Windows Azure Management Portal to import the file.
D. Create a Windows PowerShell script that uses the MSOnline module to import account data from the file.
Answer: B
Q10. DRAG DROP
Fabrikam Inc. plans to use the domain fabrikam.com for Office 365 user identities, email addresses. Session Initiation Protocol (SIP) addresses, and a public-facing home page.
Single sign-on (SSO) between Office 365 and the on-premises Active Directory is NOT required.
You need to configure the Office 365 plan.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer: