NEW QUESTION NO: 9
HOTSPOT
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Background
Contoso, Ltd. is a global manufacturing company with headquarters in Dallas. All sales users are located at the headquarters. Currently all Contoso, Ltd. users use the following on-premises services:
Microsoft Exchange Server 2016

Microsoft Skype for Business Server 2015

Active Directory Domain Services (AD DS) domain for contoso.com

Many temporary workers are hired and terminated on a regular basis at the Dallas location, Contoso, Ltd.
purchases two other manufacturing companies, Fabrikam, Inc. and A.
Datum Corporation. Fabrikam, Inc.
is based in London. Fabrikam, Inc. has an on-premises third-party email system that uses @fabrikam.com for all email addresses. Fabrikam, Inc. does not have an Active Directory domain.
ADatum Corporation is based in Paris. The company is in the process of migrating users to Exchange Online. They plan to migrate users to Microsoft OneDrive for Business for file storage and sharing. All A.
Datum Corporation account identities will be cloud based.
You deploy Microsoft Office 2016 client apps to all corporate devices.
In preparation for the deployment of Office 365 services, you set up the latest version of Azure Active Directory (Azure AD) Connect for the contoso.com domain. The application runs on Server1.contoso.com and uses a Microsoft SQL Server database instance that runs on Server2.contoso.com. The sync schedule is configured to synchronize every two hours.
You purchase the following four servers for future needs: Server3, Server4, Server5, and Server6. All new servers for the contoso.com domain must run Windows Server 2012 R2.
Business Requirements
Contoso, Ltd. users must be able to store and share personal documents that are accessible from any web browser or mobile device. Fabrikam, Inc. users must be able to send individual instant messages as well as use group chat workspaces.
Office 365
New services should be implemented in Office 365 when possible. There is also a strong push to move existing services to Office 365, but there is currently no money in the budget for data migration. The least expensive Office 365 plan must be used whenever possible.
Password policies
You must implement the following password policies for ADatum Corporation users.

Contoso Sync
You receive reports that new users are not granted access to Office 365 resources fast enough. You must ensure that new accounts are provisioned as quickly as possible.
You observe that the accounts for many temporary workers have not been deprovisioned correctly. You need to ensure terminated users have their access and accounts removed. You must ensure that up to
1,000 accounts can be deleted correctly during each Azure AD Connect sync cycle. You must ensure that deletions of over 1,000 accounts at a time cannot occur.
Single Sign-On
Contoso.com users need to start using sign-on (SSO) for Office 365 resources so they can authenticate against the on-premises Active Directory. Any solution needs to be redundant. Any Internet-facing servers need to reside in the perimeter network.
Problem Statements
Authentication Fallback
Sales users report that they were not able to access any Office 365 resources. Contoso.com users must be able to access Office 365 resources if the on-premises authentication resources are down or unavailable. You also need to quickly resume SSO authentication when on-premises servers are available again.
ADatum Corporation users report issues sending and receiving emails. Some business partners report that emails from ADatum Corporation are rejected because the receiving server cannot validate that emails come from an authorized messaging server.
You need to create a DNS record to resolve the email issues for A.
Datum Corporation users.
How should you configure the DNS record? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer: 


NEW QUESTION NO: 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your network contains a single Active Directory forest. The forest contains a domain controller and Active Directory Federation Services (AD FS) servers that are deployed to virtual machines. The virtual machines run either on-premises or on Microsoft Azure.
You have Azure AD Connect deployed on-premises. The Azure AD Connect database is installed on an on-premises instance of Microsoft SQL Server 2014.
Last month, an Azure AD Connect server experienced a hardware failure that caused an Azure AD Connect server to go offline for several days.
You need to recommend a solution to reduce the outage window when hardware failure occurs on the Azure AD Connect server.
Solution: You deploy a new Azure AD Connect server to an Azure virtual machine that uses a new SQL Server instance. You set the Azure AD Connect server to staging mode.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation/Reference:
Explanation:
Azure AD Connect sync Staging mode can be used for several scenarios, including:
* High availability.
* Test and deploy new configuration changes.
* Introduce a new server and decommission the old.
If you have a more complex environment, then having one or more standby servers is recommended.
During installation, you can enable a server to be in staging mode.
* Use virtual machines
A common and supported method is to run the sync engine in a virtual machine. In case the host has an issue, the image with the sync engine server can be migrated to another server.
References: https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnectsync- operations/

NEW QUESTION NO: 11
You have an Office 365 tenant that uses an Enterprise E3 subscription. You have two servers in a perimeter network that have the Active Directory Federation Services (AD FS) proxy role service installed.
A federation server farm is located behind a firewall.
You need to ensure that the AD FS proxies can communicate with the federation server farm.
Which two name resolution strategies can you use? Each correct answer presents a complete solution.
A. HOSTS file on the proxy servers
B. DNS server in the perimeter network
C. LMHOSTS file on the proxy servers
D. LMHOSTS file on the federation servers
E. HOSTS file on the federation servers
Answer: A,B
Explanation/Reference:
Explanation:
Configure Name Resolution for a Federation Server Proxy in a DNS Zone That Serves Only the PerimeterNetwork So that name resolution can work successfully for a federation server in an Active Directory Federation Services (AD FS) scenario in which one or more Domain Name System (DNS) zones serve only the perimeter network, the following tasks must be completed:
The hosts file on the federation server proxy must be updated to add the IP address of a federation

server.
DNS in the perimeter network must be configured to resolve all client requests for the AD FS host name

to the federation server proxy. To do this, you add a host (A) resource record to perimeter DNS for the federation server proxy.
References:
https://technet.microsoft.com/en-us/library/dd807045.aspx

NEW QUESTION NO: 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Office 365 subscription.
Several users report that they fail to connect to Microsoft Skype for Business Online by using the Skype for Business 2016 client.
You verify that you can connect to Skype for Business Online successfully from your computer.
You need to identify what prevents the users from connecting to Skype for Business Online.
Solution: You use the Microsoft Connectivity Analyzer Tool.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation/Reference:
Explanation:
References: https://www.sherweb.com/blog/microsoft-connectivity-analyzer/

NEW QUESTION NO: 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are the administrator for a company. You plan to use Office 365 for email and file sharing. You plan to implement a hybrid deployment with your current on-premises Active Directory Domain Services (AD DS) environment and Microsoft Azure Active Directory (Azure AD) Connect.
You must deploy Microsoft Exchange Online and OneDrive for Business for all employees. You have the following security requirements:
All employees must use complex passwords.

Passwords must be changed every six months.

Employees must use multi-factor authentication (MFA) when possible.

You need to implement MFA verification options to use with the employee's password.
Solution: Have the employee receive a phone call.
Does the solution meet the goal?
A. Yes
B. No
Answer: A
Explanation/Reference:
Explanation:
MFA for Office 365 requires users to acknowledge a phone call, text message, or app notification on their smart phones after correctly entering their passwords.
References: https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-
8f0454b2-f51a-4d9c-bcde-2c48e41621c6

NEW QUESTION NO: 14
HOTSPOT
You are the Exchange Online administrator for an organization. The organization migrates all users to Exchange Online. An employee works for a partner organization named Contoso, Ltd. The employee uses the email alias [email protected].
Users report that over the past week, they have not received email messages from [email protected].
You need to trace email messages that originate from [email protected] to users inside your organization.
In the message trace window, which two settings should you configure? To answer, select the appropriate objects in the answer area.
Hot Area:

Answer: 

Explanation/Reference:
Explanation:
As we want to trace the emails originated from [email protected] we must specify him as the sender.
We also know that email messages from this user has not been received for the last 7 days. We should therefore change the start date and put it back 7 days.
References:
https://support.office.com/en-au/article/Troubleshoot-email-delivery-using-the-Exchange-Online-message- trace-tool-e7758b99-1896-41db-bf39-51e2dba21de6

NEW QUESTION NO: 15
Case Study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
General Overview
Fabrikam, Inc. is a financial services organization.
Fabrikam recently purchased another financial services organization named Contoso, Ltd.
Fabrikam has 2,000 users. Contoso has 500 users.
Windows 10 and Office 2016 are deployed to all computers.
Physical Locations
Fabrikam has an office in the United States. Contoso has an office in the United Kingdom.
The offices connect to each other by using a WAN link. Each office also connects directly to the Internet.
Existing Environment
Active Directory
The network of Fabrikam contains an Active Directory forest.
The Active Directory Environment of Contoso was migrated to the Active Directory forest of Fabrikam. The forest contains three domains named fabrikam.com, contractor.fabrikam.com, and contoso.com.
All domain controllers run Windows Server 2008 R2.
All contractors outsourced by Fabrikam use the user principal name (UPN) suffix of contractor.fabrikam.com. If Fabrikam hires the contractor as a permanent employee, the UPN suffix changes to fabrikam.com.
Network
The network has the following configurations:
External IP address for the Unites States office: 192.168.1.100

External IP address for the United Kingdom office: 192.168.2.100

Internal IP address range for the Unites States office: 10.0.1.0/24

Internal IP address range for the United Kingdom office: 10.0.2.0/24

Active Directory Federation Services (AD FS)
AD FS and Web Application Proxies are deployed to support an app for the sales department. The app is accessed from the Microsoft Azure portal.
Office 365 Tenant
You have an Office 365 subscription that has the following configurations:
Organization name: Fabrikam Financial Services

Vanity domain: Fabrikamfinancialservices.onmicrosoft.com

Microsoft SharePoint domain: Fabrikamfinancialservices.sharepoint.com

Additional domains added to the subscription: Contoso.com and fabrikam.com

Requirements
Planned Changes
Fabrikam plans to implement the following changes:
Deploy Azure AD Connect.

Move mailboxes from Microsoft Exchange 2016 to Exchange Online.

Deploy Azure multi-factor authentication for devices that connect from untrusted networks only.

Deploy the Azure Authenticator app and the Company Portal app to all mobile devices.

Customize the AD FS sign-in webpage to include the Fabrikam logo, a helpdesk phone number, and a

sign-in description.
Once all of the Fabrikam users are replicated to Azure Active Directory (Azure AD), assign an E3

license to all of the users in the United States office.
Technical Requirements
Contoso identifies the following technical requirements:
When a device connects from an untrusted network to https://outlook.office.com, ensure that users

must type a verification code generated from a mobile app.
Ensure that all users can access Office 365 services from a web browser by using either a UPN or their

primary SMTP email address.
After Azure AD Connect is deployed, change the UPN suffix of all the users in the Contoso sales

department to fabrikam.com.
Ensure that administrators are notified when the health information of Exchange Online changes.

Use Office 365 reports to review previous tasks performed in Office 365.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this sections, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Office 365 subscription to ensure that Active Directory users can connect to Office 365 resources by using single sign-on (SSO).
Solution: You run Convert-MsolDomainToFederated for the fabrikam.com domain and the contoso.com domain.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation/Reference:
Explanation:
The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on. This includes configuring the relying party trust settings between the Active Directory Federation Services 2.0 server and Microsoft Online. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in. No action is required by the administrator.
References: https://docs.microsoft.com/en-us/powershell/module/msonline/convert- msoldomaintofederated?view=azureadps-1.0

NEW QUESTION NO: 16
A company has an Office 365 tenant that has an Enterprise E1 subscription. You configure the policies required for self-service password reset.
You need to ensure that all existing users can perform self-service password resets.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: C
Explanation/Reference:
Explanation:
Self-service password reset with on-premises write-back is a Premium-only feature.
Example:
The following command adds the Office 365 for enterprises license to the user.
Set-MsolUserLicense -UserPrincipalName [email protected] -AddLicenses
"Contoso:ENTERPRISEPACK"
Note: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0

NEW QUESTION NO: 17
You have an Office 365 subscription that has several thousand mailboxes.
The users in the Office 365 organization are located in different regions.
You need to view the path of the email messages sent from a user to an external recipient.
Which cmdlet should you use?
A. Get-MailDetailTransportRuleReport
B. Get-MailTrafficReport
C. Get-MailboxActivityReport
D. Get-ServiceDeliveryReport
Answer: D
Explanation/Reference:
Explanation:
Use the Get-ServiceDeliveryReport cmdlet to view information about the message delivery path for a specified recipient.
Example:
This example shows the delivery path information for the recipient [email protected].
Get-ServiceDeliveryReport [email protected]

NEW QUESTION NO: 18
A company has offices in New York and London. The current on-premises Exchange 2013 organization has servers in both sites. Mailboxes for users located in New York are on an Exchange server in the New York office. Mailboxes for users located in London are on an Exchange server in the London office.
You must migrate all mailboxes to Exchange Online. You create an Office 365 tenant and specify the company's New York address.
You need to determine where the user's mailboxes will be created.
Where are the mailboxes created in Exchange Online?
A. Mailboxes for users in London are created in European datacenters. Mailboxes for users in New York are created in North American datacenters.
B. All user mailboxes are created in North American datacenters.
C. All user mailboxes are created in a random datacenter anywhere in the world.
D. During the migration process, an administrator must specify the region where each mailbox is created.
Answer: B
Explanation/Reference:
Explanation:

NEW QUESTION NO: 19
DRAG DROP
You plan to use Office 365 FastTrack to deploy an Office 365 tenant.
Which action should you perform for each phase? To answer, drag the appropriate actions to the correct phases. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Answer: 

Explanation/Reference:
Explanation:
References: https://fasttrack.microsoft.com/about