Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

M1CR0$0FT FUND4M3NT4L$

Total questions: 210

Worksheet time: 3hrs 38mins

Name
Class
Date
1.

Your company plans to migrate from on-premises to a hybrid cloud deployment.

You are required to make sure that the Microsoft platform used for the migration offers hybrid abilities.

Which of the following options meet the requirement?

a)

Microsoft Office Delve

b)

Microsoft SharePoint

c)

Microsoft Yammer

d)

Microsoft Skype for Business

e)

Microsoft Teams

2.

All applications will remain in a hybrid environment after migrating to Microsoft Azure

a)

No adjustment required.

b)

Applications that manage sensitive information

c)

Applications where access requires a USB-token device

d)

All legacy applications

3.

Establish if the solution satisfies the requirements.

Your company plans to move their Server environment to the cloud.

You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and

application maintenance.

You need to make sure that the requirements are met.

Solution: You recommend the Platform as a service (PaaS) model.

Does the solution meet the goal?

a)

Yes

b)

No

4.

Establish if the solution satisfies the requirements.

Your company plans to move their Server environment to the cloud.

You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and

application maintenance.

You need to make sure that the requirements are met.

Solution: You recommend the Infrastructure as a service (IaaS) model..

Does the solution meet the goal?

a)

Yes

b)

No

5.

Establish if the solution satisfies the requirements.

Your company plans to move their Server environment to the cloud.

You have been tasked with identifying a cloud model that allows for the current email environment to be upgraded, while also reducing server and

application maintenance.

You need to make sure that the requirements are met.

Solution: You recommend the Software as a service (SaaS) model.

Does the solution meet the goal?

a)

Yes

b)

No

6.

Your company makes use of Platform as a Service (PaaS) for their Azure solution.

Which of the following options are components that your IT employees are responsible for?

a)

Networks

b)

Databases

c)

Applications

d)

Servers

7.

Your company makes use of Platform as a Service (PaaS) for their Azure solution.

Which of the following options are components that Microsoft are responsible for? (Choose all that apply).

a)

Storage

b)

Databases

c)

Applications

d)

Operating System

8.

Your company is planning to migrate to Microsoft Azure and Microsoft 365.

You are required to identify a cloud service that allows for website hosting.

Which of the following is the model you should choose?

a)

Software as a Service (SaaS)

b)

Platform as a Service (PaaS)

c)

Infrastructure as a Service (IaaS)

d)

Container as a Service (CaaS)

9.

Your company is planning to migrate to Microsoft Azure and Microsoft 365.

You are required to identify a cloud service that allows for the deployment of a Linux virtual machine.

Which of the following is the model you should choose?

a)

Software as a Service (SaaS)

b)

Platform as a Service (PaaS)

c)

Infrastructure as a Service (IaaS)

d)

Container as a Service (CaaS)

10.

Your company has a Microsoft 365 subscription.

You have been tasked making sure that the IT department users can obtain Office 365 preview features prior to it being deployed to the rest of the

company's users.

Which of the following are the two actions that would meet your goal?

a)

Instruct all users to sign up for Office Insider

b)

Instruct IT users to sign up for Office Insider

c)

Set the update preference to Targeted release for selected users in the organization profile

d)

Set the update preference to Targeted release for everyone in the organization profile

e)

Set the update preference to Standard in the organizational profile

11.

To ensure that when a new Microsoft Word feature is available for worker to install as soon as it becomes available, you should subscribe to the

Targeted release channel.

a)

No adjustment required

b)

Standard release

c)

Semi-annual

d)

Annual

12.

You are employed as a Microsoft 365 administrator. Your company plans to make use of MyAnalytics.

You need to identify the different features of MyAnalytics and Workspace Analytics.

Which of the following are features of MyAnalytics? (Choose all that apply.)

a)

It can only be acquired as an added reference-on license.

b)

It provides team work and collaboration metrics.

c)

It is included in the Office 365 ProPlus license.

d)

It provides employee work and collaboration metrics

13.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you are educating users on which component to use to register their personal home device with the

company.

Which of the following is the component that should be used?

a)

Microsoft Azure AD Identity Protection

b)

Enterprise Mobility + Security

c)

Microsoft Teams

d)

Microsoft Yammer

14.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you are educating new users on which component to use for audio and visual communications with

colleagues.

Which of the following is the component that should be used?

a)

Microsoft Exchange Online

b)

Enterprise Mobility + Security

c)

Microsoft Teams

d)

Microsoft SharePoint Online

15.

Your company plans to acquire a Microsoft 365 subscription.

One of the services included in the subscription is described as a cloud service that allows you to do the following:

✑ Store and protect files.

✑ Share files.

✑ Make use of an app or web-browser to access files from anywhere.

✑ Restore files to an earlier date and time.

Which of the following is the service being described above?

a)

Office 365 Pro Plus

b)

Microsoft Yammer

c)

Microsoft Office Delve

d)

Microsoft OneDrive for Business

16.

Your company plans to acquire a Microsoft 365 subscription.

One of the services included in the subscription is described as a private social network that can be used to effectively sort out support problems.

It can also be used to collect feedback on projects and documents.

Which of the following is the service being described above?

a)

Microsoft Teams

b)

Microsoft Yammer

c)

Microsoft Office Delve

d)

Microsoft SharePoint Online

17.

Your company intends to deploy a number of Microsoft Surface devices that run Windows 10, using Windows AutoPilot.

You have been tasked with preparing the devices for the deployment by importing a CSV file via the Microsoft 365 Device Management portal.

Which of the following combinations of blades will help you achieve your goal?

a)

The Dashboard and Device Configuration blades.

b)

The Device Enrollment and Devices blades.

c)

The Device Enrollment and Devices Compliance blades.

d)

The Device Compliance and Device Configuration blades.

18.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with recommending a solution that will allow users to make use of unsuited

applications on their

Windows 10 devices.

Which of the following should you recommend?

a)

Azure AD Connect.

b)

Configuration Manager.

c)

Windows AutoPilot.

d)

Windows Virtual Desktop.

19.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with recommending a solution that forces cloud-based applications to use the

same credentials as on-premises applications.

Which of the following should you recommend?

a)

Azure AD Connect.

b)

Configuration Manager.

c)

Windows AutoPilot.

d)

Azure AD Application Proxy.

20.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with recommending a solution that prohibits users from copying corporate

information from managed applications installed on unmanaged devices.

Which of the following should you recommend?

a)

Windows Virtual Desktop

b)

Microsoft Intune

c)

Windows AutoPilot

d)

Azure AD Application Proxy

21.

Establish if the solution satisfies the requirements.

You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company ג€™s environment.

You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations.

Solution: You enable Microsoft Azure AD multi-factor authentication for the users.

Does the solution meet the goal?

a)

Yes

b)

No

22.

Establish if the solution satisfies the requirements.

You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company ג€™s environment.

You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations.

Solution: You enroll the devices in Microsoft Intune.

Does the solution meet the goal?

a)

Yes

b)

No

23.

Establish if the solution satisfies the requirements.

You have recently made use of Windows Autopilot to deploy Windows 10 devices in your company ג€™s environment.

You have been asked to make sure that data that stored in OneDrive for Business is available to users from remote locations.

Solution: You inform users that they should use their Microsoft Azure AD credentials to sign in to their devices.

Does the solution meet the goal?

a)

Yes

b)

No

24.

Your company makes use of Microsoft 365 in their environment.

You have been tasked with making sure that admin roles are protected. The feature you use should achieve this by requiring approvals.

Which of the following is a feature you should use?

a)

Mobile application protection policy.

b)

Microsoft Azure AD Identity Protection.

c)

Microsoft Azure AD Privilege Identity Protection.

d)

Microsoft Azure AD Conditional Access.

25.

Your company makes use of Microsoft 365 in their environment.

You have been tasked with making sure that members of the Global Administrators group are protected. The feature you use should achieve this

by making use of dynamic risk profiles.

Which of the following is a feature you should use?

a)

Mobile application protection policy.

b)

Device configuration policy.

c)

Microsoft Azure AD Privilege Identity Protection.

d)

Microsoft Azure AD Conditional Access.

26.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft 365 for your company in a hybrid configuration.

You want to make sure that a smart card can be used by staff for authentication purposes.

Solution: You configure the use of password hash synchronization with single-on as the hybrid identity solution.

Does the solution meet the goal?

a)

Yes

b)

No

27.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft 365 for your company in a hybrid configuration.

You want to make sure that a smart card can be used by staff for authentication purposes.

Solution: You configure the use of pass-through authentication and single sign-on as the hybrid identity solution.

Does the solution meet the goal?

a)

Yes

b)

No

28.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft 365 for your company in a hybrid configuration.

You want to make sure that a smart card can be used by staff for authentication purposes.

Solution: You configure the use of Active Directory Federation Services (AD FS) as the hybrid identity solution.

Does the solution meet the goal?

a)

Yes

b)

No

29.

To retrieve data for employees who request personal data under General Data Protection Regulation (GDPR) guidelines, you have to create a GDPR

assessment.

a)

No adjustment required

b)

mobile application protection policy

c)

device configuration policy

d)

data subject request case

30.

You are a Microsoft 365 administrator for a company whose employees are allowed to access corporate information located in the cloud via their

personal devices.

You have been tasked with making sure that employees are prohibited from copying this information to their personal OneDrive folders.

You should make use of Intune App Protection.

a)

No adjustment required

b)

Information Rights Management

c)

Microsoft Azure AD Privilege Identity Protection

d)

Microsoft Azure AD Identity Protection

31.

Your company has a Microsoft Office 365 ProPlus subscription.

You are required to make use of Microsoft Azure Information Protection for document classification and protection.

Which of the following options should you use to achieve your goal?

a)

Add an Azure subscription to your Microsoft 365 tenant

b)

Enable the default Microsoft Azure AD Privilege Identity Protection policy

c)

Install the Azure information Protection client

d)

Create a custom Azure Protection Policy with the Confidential label

e)

Enable the default Azure Information Protection policy

32.

Your company has a Microsoft Office 365 subscription.

You have been tasked with removing customer information in compliance with General Data Protection Regulation (GDPR), after the customer

generated data subject request (DSR). You want to make sure that legal holds are placed on relevant information if the opportunity arises.

You want to start searching for the client ג€™s information by using Content Search eDiscovery.

Which of the following applications can be searched with this method? (Choose two.)

a)

Microsoft PowerApps

b)

Microsoft Outlook

c)

Microsoft Access

d)

Microsoft SharePoint Online

33.

You have been tasked with configuring a data governance strategy that allows for data classification. It should also allow for these classifications

to be enforced.

Which of the following should form part of your strategy? (Choose two.)

a)

Apply Microsoft SharePoint permissions.

b)

Publish labels.

c)

Configure Microsoft Outlook Mail Tips.

d)

Apply supervision policies.

e)

Apply retention policies.

34.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you are required to configure the use of a cloud security feature that allows for emails and documents to

be classified and labeled.

Which of the following is the feature you should use?

a)

Microsoft Azure Information Protection.

b)

Microsoft Azure AD Identity Protection.

c)

Microsoft Azure AD Privilege Identity Protection.

d)

Intune App Protection.

35.

After acquiring a Microsoft 365 E5 subscription, you are tasked with applying security features.

You are currently configuring a security feature that allows you to control how a Microsoft support engineer accesses information during a help

session.

Which of the following is the feature you are configuring?

a)

Customer Lockbox.

b)

Data Governance.

c)

Data Loss Prevention.

d)

Microsoft Office 365 Advanced Threat Protection.

36.

After acquiring a Microsoft 365 E5 subscription, you are tasked with applying security features.

You are currently configuring a security feature that allows you to protect against unidentified malware, viruses, and malicious URLs.

Which of the following is the feature you are configuring?

a)

Microsoft Azure AD Identity Protection.

b)

Data Governance.

c)

Microsoft Azure AD Conditional Access.

d)

Microsoft Office 365 Advanced Threat Protection.

37.

Your company is changing their existing IT environment to Microsoft 365.

Which of the following are benefits of the change?

a)

Predictable Microsoft licensing costs

b)

Decreased service scalability

c)

Increased service availability

d)

Decreased on-premises infrastructure maintenance

38.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with acquiring added licenses. You do, however, need to be assigned the

necessary admin role.

Which of the following are admin roles that could achieve your goal?

a)

Billing Admin role

b)

User Admin role

c)

Global Admin role

d)

Helpdesk Admin role

39.

You have been tasked with acquiring Microsoft 365 Enterprise licenses for your organization.

You should contact a Cloud Solution Provider (CSP) or subscribe to a Microsoft Enterprise Agreement (EA).

a)

No adjustment required

b)

contact a Cloud Solution Provider (CSP) or use a company credit card via the Microsoft website

c)

subscribe to a Microsoft Enterprise Agreement (EA) or visit a Microsoft retail store

d)

use a company credit card via the Microsoft website or visit a Microsoft retail store subscription from

40.

Your company has a Microsoft 365 subscription.

After a Microsoft 365 outage, the Service Health Dashboard indicates no issues with the service.

You check the Service Health Dashboard and observe that the service is healthy.

You then access the Post-Incident Review (PIR).

Which of the following is the maximum time, after an incident has been resolved, that you have to wait for a preliminary Post-Incident Review (PIR)

to be delivered via your Service Health Dashboard?

a)

12 hours

b)

24 hours

c)

48 hours

d)

5 business days

41.

A retail company is planning to upgrade their Windows 7 point-of-sale terminals to Windows 10.

You have been informed that the terminals should only be upgraded again after a minimum of five years. Your solution has to allow for the

scheduling of upgrades and updates to be executed consistently for al devices, while also keeping costs to a minimum.

Which of the following is the version of windows you should upgrade to?

a)

Windows 10 Home

b)

Windows 10 Pro

c)

Windows 10 Enterprise

d)

Windows 10 Enterprise LTSC

42.

A retail company is planning to upgrade their Windows 7 point-of-sale terminals to Windows 10.

You have been informed that the terminals should only be upgraded again after a minimum of five years. Your solution has to allow for the

scheduling of upgrades and updates to be executed consistently for al devices, while also keeping costs to a minimum.

Which of the following is the servicing tool that you should use?

a)

Windows Autopilot

b)

Windows Server Update Services

c)

Microsoft Intune

d)

Azure AD Connect

43.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you want to check what the repercussions are if the availability terms of the Microsoft Office 365

services are not satisfied.

You analyze the Service Level agreement.

a)

No adjustment required.

b)

analyze the Microsoft Cloud agreement

c)

access Data Governance

d)

analyze the Microsoft Enterprise agreement

44.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft Office to company using a subscription-based licensing model.

The version of Office you deploy should allow for Office application settings to be enforced via group policy.

Solution: You deploy Office Professional Plus 2016.

Does the solution meet the goal?

a)

Yes

b)

No

45.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft Office to company using a subscription-based licensing model.

The version of Office you deploy should allow for Office application settings to be enforced via group policy.

Solution: You deploy Office Home and Business 2016.

Does the solution meet the goal?

a)

Yes

b)

No

46.

Establish if the solution satisfies the requirements.

You have been tasked with deploying Microsoft Office to company using a subscription-based licensing model.

The version of Office you deploy should allow for Office application settings to be enforced via group policy.

Solution: You deploy Office 365 ProPlus.

Does the solution meet the goal?

a)

Yes

b)

No

47.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with assigning Microsoft 365 licenses to users in a department where audioconferencing

is not required. The department does, however, require office desktop products to complete tasks.

Which of the following is the license that would help you achieve this?

a)

Office 365 ProPlus

b)

Microsoft 365 E1

c)

Office 365 E3

d)

Office 365 E5

48.

Your company has a Microsoft Office 365 subscription.

As an administrator for this subscription, you have been tasked with assigning Microsoft 365 licenses for a department where users need to

collaborate with other users and also check their job schedules on a weekly basis. The department does not, however, require office desktop

products to complete tasks.

Which of the following is the license that would help you achieve this?

a)

Office 365 F1

b)

Microsoft 365 E1

c)

Office 365 E3

d)

Office 365 E5

49.

You need to identify which Microsoft platforms provide hybrid capabilities for migrating from an on-premises deployment.

Which two platforms provide hybrid capabilities for migration?

a)

Microsoft Skype for Business

b)

Microsoft Yammer

c)

Microsoft Exchange

d)

Microsoft Teams

50.

A company is moving to Microsoft Azure. Some applications cannot be moved.

You need to identify which applications will remain in a hybrid environment after the migration.

Which applications will remain in a hybrid environment?

a)

applications that manage sensitive information

b)

applications that use a USB-token device to control access

c)

legacy applications that use a message-based interface

d)

a new server that runs several line-of-business applications

51.

Microsoft cloud services offer significant energy savings for Microsoft and its customers

a)

Yes

b)

No

52.

Lower costs, no hardware maintenance, near-unlimited scalability, and high reliability are all advantages of a private cloud

a)

Yes

b)

No

53.

Microsoft cloud services offer security options and have the ability to provision resources quickly

a)

Yes

b)

No

54.

You are the Microsoft 365 administrator for a company.

The company runs SharePoint Server and Exchange Server in an on-premises datacenter. The site collection for the finance department is

currently encrypted using third-party software.

You need to move as many services to Microsoft 365 as possible.

What should you do?

a)

Migrate all SharePoint data and Exchange mailboxes to Microsoft 365.

b)

Leave SharePoint data for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft

365.

c)

Leave mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365.

d)

Leave SharePoint data and mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes

to Microsoft 365.

55.

A company has an Exchange Server environment. The company plans to migrate to the cloud.

You need to recommend a cloud model that meets the following requirements:

✑ Upgrade the existing email environment

✑ Minimize server and application maintenance

Which model should you recommend?

a)

Platform as a service (PaaS)

b)

Windows as a service (WaaS)

c)

Software as a service (SaaS)

d)

Infrastructure as a service (IaaS)

56.

It is possible to connect cloud services to on-premises server resources

a)

Yes

b)

No

57.

Scaling cloud-hosted infrastructure components includes expanding Azure server resources and networking components

a)

Yes

b)

No

58.

Adopting cloud applications reduces the number of on-premises servers and services to manage

a)

Yes

b)

No

59.

For remote users, accessing applications stored in the cloud is easier than accessing applications stored on a company network

a)

Yes

b)

No

60.

A loss of internet connectivity will not significantly impact functionality for users accessing applications and services in the cloud

a)

Yes

b)

No

61.

Microsoft 365 is a Platform as a service (PaaS).

a)

Infrastructure as a service (IaaS)

b)

Windows as a service (WaaS)

c)

Software as a service (Saas)

d)

No change is needed

62.

You can secure web apps that are published through Azure AD Application Proxy by using Multi-Factor Authentication (MFA) in the cloud

a)

Yes

b)

No

63.

You can secure web apps that are published through Azure AD Application Proxy by using MFA Server on-premises

a)

Yes

b)

No

64.

Using OneDrive for Business as a target for backups is an example of platform as a service (PaaS)

a)

Yes

b)

No

65.

Using OneDrive for Business in Office 365 Excel Online to open Excel files is an example of software as a service (SaaS)

a)

Yes

b)

No

66.

You need to deploy an application to Microsoft Infrastructure as a Service (IaaS).

Which three features are part of IaaS?

a)

business analytics

b)

real-time monitoring

c)

operating system

d)

servers and storage

e)

firewall and network security

67.

Which type of cloud model provides access to Microsoft Office apps?

a)

platform as a service (PaaS)

b)

infrastructure as a service (IaaS)

c)

software as a service (SaaS)

68.

Companies that have recently invested in hardware and software can use a hybrid cloud model

a)

Yes

b)

No

69.

Companies that have few on-premises resources can use a hybrid cloud model

a)

Yes

b)

No

70.

You can purchase additional storage capacity on demand

a)

Yes

b)

No

71.

Cloud services are guaranteed to be available 100 percent of the time

a)

Yes

b)

No

72.

Cloud services use less energy than an enterprise on-premises datacenter

a)

Yes

b)

No

73.

A company has an on-premises application server.

The company wants to use some of the services in Microsoft 365 with the on-premises application server.

You need to choose a cloud deployment model that meets the requirement.

What should you choose?

a)

Private

b)

Hybrid

c)

Public

74.

Platform as a Service (PaaS) services include Office 365, Microsoft Intune, and Dynamics 365

a)

Yes

b)

No

75.

Infrastructure as a Service (IaaS) enables users to build server-based IT workloads in the cloud

a)

Yes

b)

No

76.

Software as a Service (SaaS) consists of IT workloads that run on customer virtual machines

a)

Yes

b)

No

77.

A company plans to migrate on-premises infrastructure to the cloud.

What are three benefits of migrating to the cloud?

a)

Reduce configuration requirements on desktop computers.

b)

Reduce on-site network latency.

c)

Automate data backup and disaster recovery.

d)

Scale and extend applications.

e)

Eliminate the cost of buying server hardware.

78.

Microsoft MyAnalytics supports Microsoft PowerBI templates

a)

Yes

b)

No

79.

Microsoft MyAnalytics supports Microsoft Outlook add-ins

a)

Yes

b)

No

80.

Microsoft Workplace Analytics supports weekly email digests

a)

Yes

b)

No

81.

You plan to deploy the Report Message add-in to Microsoft Outlook.

How can you deploy the add-in?


Use the Services & add-ins menu in the Microsoft 365 admin center to deploy the add-in

a)

Yes

b)

No

82.

You plan to deploy the Report Message add-in to Microsoft Outlook.

How can you deploy the add-in?


Create a Microsoft Intune application policy to deploy the add-in

a)

Yes

b)

No

83.

You plan to deploy the Report Message add-in to Microsoft Outlook.

How can you deploy the add-in?


Use Configuration Manager to deploy the add-in

a)

Yes

b)

No

84.

You need to reduce the amount of time that the IT team spends on user support.

What are three possible ways to achieve this goal?

a)

Enable Microsoft Office 365 Customer Lockbox

b)

Upgrade all client devices to Windows 10

c)

Use Windows AutoPilot to deploy devices

d)

Deploy Microsoft MyAnalytics to devices

e)

Deploy Microsoft Office 365 Professional Plus to all client devices

85.

Intune supports management of apps from third-party stores

a)

Yes

b)

No

86.

Intune supports volume licensing of iOS and Android store apps

a)

Yes

b)

No

87.

Intune supports the management of line-of-business and public-facing apps

a)

Yes

b)

No

88.

You are the Microsoft 365 administrator for a company.

You install Microsoft Office 365 ProPlus on five devices. You deactivate the Microsoft Office 365 ProPlus license on one device.

Which task can you perform on the deactivated device?

a)

Edit a column

b)

Create a document

c)

Co-author a document

d)

View a document

89.

Get updates on the latest news and announcements from an intranet site hosted on an internal web server

a)

SharePoint Online

b)

Microsoft Stream

c)

OneDrive for Business

d)

Microsoft Delve

90.

View videos hosted on an internal web server

a)

Microsoft Planner

b)

Microsoft Flow

c)

Microsoft Stream

d)

PowerApps

91.

Store and retrieve shared documents on a local file server

a)

Microsoft Flow

b)

Power BI

c)

Microsoft Stream

d)

SharePoint Online

92.

Store documents in a personalized folder on a local file server

a)

OneDrive for Business

b)

Microsoft To-Do

c)

MyAnalytics

d)

Microsoft Stream

93.

Chat with other employees by using an on-premises Skype for Business server

a)

Microsoft Bookings

b)

Microsoft People

c)

Microsoft Teams

d)

Sway

94.

Your company has a Microsoft Office 365 subscription.

You need to co-author files with other users.

Which tool should you use?

a)

Microsoft SharePoint Online

b)

Microsoft Skype for Business Online

c)

Microsoft Office Delve

d)

Microsoft Exchange Online

95.

You are the Microsoft 365 administrator for a company.

You install Microsoft Office 365 ProPlus on five devices. You deactivate one device.

Which task can you perform on the deactivated device?

a)

Print a document.

b)

Leave a comment in a document.

c)

Start a new document from a template.

d)

Set properties on a document.

96.

You are the Microsoft 365 administrator for a company.

Users in the IT department must receive new Office 365 preview features before the features are deployed to other users in the company.

You need to ensure only the users in the IT department receive preview features.

Which two actions should you perform?

a)

Instruct users to navigate to http://insider.office.com and sign up for Office Insider.

b)

Instruct users to update Office ProPlus.

c)

In the organizational profile, set the update preference to Targeted release for selected users.

d)

Instruct users to uninstall Office ProPlus and then reinstall the software.

e)

In the organizational profile, set the update preference to Standard release.

97.

A company has a Microsoft 365 subscription. You deploy Windows 10 devices by using Windows Autopilot.

You need to ensure that team members can access data that is stored in OneDrive for Business when team members are at remote sites.

What should you do?

a)

Enroll team members in Microsoft Azure AD multi-factor authentication.

b)

Add the devices to Microsoft 365 using the Devices tile.

c)

Enroll devices in Microsoft Intune.

d)

Direct team members to sign in to their devices using their Microsoft Azure AD credentials.

98.

You are a Microsoft 365 administrator for a company.

Microsoft plans to release a new feature for Microsoft Excel.

You need to ensure that the feature becomes available for employees to install as soon as possible.

To which release channel should you subscribe?

a)

Microsoft release

b)

Standard release

c)

Office 365 team release

d)

Targeted release

99.

Your company is evaluating the differences between deployments of Office 365 ProPlus and Office 2016.

You need to determine the installation features of each deployment.

Which installation feature is unique to Office 365 ProPlus?

a)

Installation can be completed by using Click-to-Run.

b)

Installation can be completed by using System Center Configuration Manager.

c)

Installation is available in both 32-bit and 64-bit versions.

d)

Installation is on the user's local computer.

100.

You use Microsoft 365 Usage Analytics.

You need to know the number of users who are active today and were also active last month.

Which adoption metric should you use?

a)

MoMReturningUsers

b)

EnabledUsers

c)

ActiveUsers

d)

CumulativeActiveUsers

101.

You are a Microsoft 365 administrator for a company. You use products that are in private preview, public preview, or general availability (GA).

You need to determine at which phases you can receive support from the Microsoft 365 admin center.

For which product phase or phases can you receive support?

a)

GA, private preview, and public preview

b)

GA and private preview only

c)

GA only

d)

GA and public preview only

e)

public preview and private preview only

102.

You need to ensure that all users in your tenant have access to the earliest release of updates in Microsoft 365.

Which organizational release option should you use?

a)

Targeted release for entire organization

b)

Standard release

c)

Targeted release for select users

d)

First release

103.

You are the desktop administrator for an organization.

You need to ensure that Office 365 ProPlus is installed on all employee computers.

Which three tools can you use to deploy Office 365 ProPlus?

a)

Microsoft Intune

b)

System Center Operations Manager

c)

Windows Installer (MSI) package

d)

System Center Configuration Manager

e)

Office Deployment Tool

104.

A company has offices in multiple regions. The company has a Microsoft 365 subscription.

The company is developing a line-of-business (LOB) app. The app must meet the following requirements.

✑ Ensure availability regardless of an employee ג€™s location.

✑ Track the devices on which the app is installed by using Microsoft cloud services.

✑ Minimize costs.

What should you do?

a)

Copy the app to Microsoft OneDrive. Allow employees to download and install the app from One Drive.

b)

Deploy the app to all devices by using Microsoft Intune.

c)

Copy the app to local servers. Allow employees to download and install the app from the servers.

d)

Deploy the app to all devices by using group policy.

105.

You need to determine the lifecycle of products and features in Microsoft 365.

What should you use?

a)

support.microsoft.com

b)

Microsoft Lifecycle Services

c)

docs.microsoft.com

d)

Microsoft 365 Roadmap

106.

A company plans to migrate to Microsoft 365. Corporate devices run Windows 7 or Windows 10.

You must upgrade all devices to use Office 365 ProPlus and minimize costs.

You need to standardize corporate device deployments.

Which three actions should you perform?

a)

Implement Windows AutoPilot

b)

Deploy policies by using Configuration Manager

c)

Upgrade all devices to Windows 10

d)

Deploy policies by using Microsoft Intune

e)

Instruct users to download and install a Windows Installer package for Office 365 ProPlus

107.

Users must be able to use incompatible applications on a Windows 10 device

a)

Windows Virtual Desktop

b)

Azure AD Application Proxy

c)

Azure AD Connect

d)

Microsoft Intune

108.

Cloud-based applications must use the same credentials as on-premises applications

a)

Windows Virtual Desktop

b)

Azure AD Application Proxy

c)

Azure AD Connect

d)

Microsoft Intune

109.

Users must be prevented from copying company data from managed applications installed on unmanaged devices

a)

Windows Virtual Desktop

b)

Azure AD Application Proxy

c)

Azure AD Connect

d)

Microsoft Intune

110.

Microsoft 365 global administrators use Microsoft workplace Analytics to examine network traffic patterns for troubleshooting purposes

a)

Yes

b)

No

111.

Microsoft Workplace Analytics can be helpful in understanding the collaboration patterns and usage of various Microsoft 365 sevices

a)

Yes

b)

No

112.

Microsoft Workplace Analytics helps employees work more efficiently so that they become more productive

a)

Yes

b)

No

113.

A company assigns a Microsoft 365 license to each employee.

You need to install Microsoft Office 365 ProPlus on each employee laptop computer.

Which three methods can you use?

a)

Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from a local distribution source.

b)

Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from an Office Windows Installer (MSI) package.

c)

Download the Office 365 ProPlus Windows Installer (MSI) package. Install Office 365 ProPlus from a local distribution source.

d)

Use the Office Deployment Tool (ODT) to download installation files to a local distribution source. Install Office 365 ProPlus by using the

downloaded files.

e)

Enable users to download and install Office 365 ProPlus from the Office 365 portal.

114.

A company plans to deploy automated workflows for managers to approve.

You need to determine which Microsoft 365 products allow access to personal workflows.

Which two products should the managers use?

a)

Power Automate

b)

Microsoft Excel

c)

Yammer

d)

Microsoft Teams

115.

A company deploys Windows 10 to all devices.

Feature updates to Windows as a service must be installed as frequently as possible.

Which Windows 10 service channel installs updates most frequently?

a)

Windows Insider Program Servicing channel

b)

Long-term Servicing channel

c)

Semi-Annual Servicing channel

116.

A company uses Microsoft 365.

The company wants to provide workflows of business tasks that connect to Microsoft Outlook and Microsoft Teams.

You need to choose a solution that meets the requirement.

Which solution should you choose?

a)

Power Automate

b)

Microsoft Bookings

c)

Microsoft Planner

d)

Power BI

117.

Analyze collective insights into the effectiveness of meetings that team members attend

a)

Workplace Analytics

b)

MyAnalytics

118.

Automatically recommend actions to individuals within Microsoft Outlook that can potentially increase productivity

a)

Workplace Analytics

b)

MyAnalytics

119.

You are the Microsoft 365 administrator for a company. You deploy Windows 10 to all devices by using Windows Autopilot.

You need to ensure that employees can install Microsoft Office 365 ProPlus on their devices.

What are two possible ways to achieve this goal?

a)

Use the self-install option on the Office 365 dashboard

b)

Download and install the Office ProPlus Windows Installer (MSI) package

c)

Enable auto-deployment of Office 365 apps for all devices

d)

Update the Windows AutoPilot deployment profile to include the Office 365 apps

120.

A company plans to deploy a customer relationship management (CRM) solution.

The solution must provide enterprise resource planning (ERP) integration as well as artificial intelligence (AI) tools.

You need to choose a solution that meets the requirements. What should you choose?

a)

SharePoint Online

b)

Microsoft 365

c)

Power Platform

d)

Dynamics 365

121.

A company uses Microsoft 365.

You need to assign licenses to users.

Which two portals can you use?

a)

Azure Active Directory admin center

b)

Microsoft Compliance Manager

c)

Microsoft 365 admin center

d)

Security & Compliance Center

122.

A company uses Microsoft 365.

Employees frequently work from home. They must be able to access custom applications that are not installed on their personal laptops.

You need to identify a solution that meets the requirement.

Which solution should you choose?

a)

Microsoft Access

b)

Power Virtual Agent

c)

Microsoft Remote Assist

d)

Windows Virtual Desktop

e)

Microsoft Teams

123.

Provides the newest features as soon as they are ready

a)

Current

b)

Monthly Enterprise

c)

Semi-Annual Enterprise

124.

Provides the newest feature updates on a schedule

a)

Current

b)

Monthly Enterprise

c)

Semi-Annual Enterprise

125.

Provides the most amount of time to test feature updates

a)

Current

b)

Monthly Enterprise

c)

Semi-Annual Enterprise

126.

A company uses Microsoft 365.

The company is considering using MyAnalytics.

You need to identify the features of MyAnalytics.

What are two features of MyAnalytics?

a)

suggestions in Microsoft Outlook to review outstanding tasks

b)

suggestions in Microsoft Teams to delay delivery of chat messages

c)

suggestions in Microsoft Outlook to delay delivery of emails

127.

A company uses Microsoft 365.

The company wants to create a chat bot for integration with Microsoft Teams.

You need to identify a solution to create the chat bot.

Which solution should you choose?

a)

Remote Assist

b)

Dynamics 365 Customer Service

c)

Power Virtual Agent

d)

Dynamics 365 Guides

128.

You are the Microsoft 365 administrator for a company.

You need to customize a usage report for Microsoft Yammer.

Which two tools can you use?

a)

Microsoft SQL Server Analysis Services

b)

Microsoft SQL Server Reporting Services

c)

Microsoft Power BI in a browser

d)

Microsoft Power BI Desktop

e)

Microsoft Visual Studio

129.

Early builds that are released to the public during the feature-development phase

a)

Windows Insider previews

b)

Servicing channels

c)

Deployment rings

130.

A method for controlling the frequency at which organizations deploy Windows 10 features

a)

Windows Insider previews

b)

Servicing channels

c)

Deployment rings

131.

A method of gradually deploying Windows 10 features by using multiple sets of targeted devices

a)

Windows Insider previews

b)

Servicing channels

c)

Deployment rings

132.

A company uses Microsoft 365.

The company needs information about the collaboration patterns that impact employee productivity.

You need to identify the solution that meets the requirement.

Which solution should you choose?

a)

MyAnalytics

b)

Workplace Analytics

c)

Microsoft 365 admin center

d)

Azure Analytics

133.

A company uses Microsoft cloud services.

You need to change the update channels for the Microsoft 365 Apps for enterprise by using a Microsoft supported method.

Which two methods can you use?

a)

Windows 10 Update Assistant

b)

Group Policy

c)

Client app

d)

Office Deployment Tool

e)

Readiness Toolkit

134.

A group of employees and users outside the company must be able to collaborate on a project in real time by using a whiteboard.

In the Microsoft 365 admin portal, which Office 365 product should you configure?

a)

Microsoft Yammer

b)

Microsoft Office Delve

c)

Microsoft SharePoint Online

d)

Microsoft Teams

135.

A company uses Microsoft 365.

You need to identify new Microsoft 365 features that have released to General Availability in the last month.

Which tool should you choose?

a)

SharePoint Online landing page

b)

Azure portal

c)

Security & Compliance Center

d)

Microsoft 365 Roadmap

136.

You can use co-management if you use Configuration Manager to deploy apps and need to deploy Conditional Access policies

a)

Yes

b)

No

137.

You can use Windows Autopilot to manage Microsoft Office, Microsoft Edge, and Windows settings by using administrative templates

a)

Yes

b)

No

138.

You can use Desktop Analytics if you user Configuration Manager and need to identify application compatibility issues with Windows 10 feature updates

a)

Yes

b)

No

139.

Create online surveys and pools and track the responses in real time

a)

Microsoft Forms

b)

Microsoft Planner

c)

Azure AD Premium P2

d)

Microsoft Delve

140.

Create, assign, and track tasks and work items

a)

Microsoft Forms

b)

Microsoft Planner

c)

Azure AD Premium P2

d)

Microsoft Delve

141.

A company implements Microsoft 365.

The company needs to deploy Microsoft 365 Apps for enterprise to their client computers from the cloud.

You need to identify the solution that meets the requirement.

Which solution should you select?

a)

Office Deployment Tool

b)

Windows Update

c)

Microsoft Remote Connectivity Analyzer

d)

Microsoft FastTrack

142.

Your organization plans to deploy Microsoft 365 in a hybrid scenario.

You need to ensure that employees can use a smart card for authentication.

Which hybrid identity solution should you implement?

a)

password hash synchronization with single sign-on

b)

Active Directory Federation Services (AD FS)

c)

PingFederate and federation integration

d)

pass-through authentication and single sign-on

143.

You need to ensure that the process by which users sign in to Microsoft 365 confirms the identity of the user.

Which feature should you use?

a)

mobile application management (MAM)

b)

Microsoft Defender for Office 365

c)

Multi-Factor Authentication (MFA)

d)

data loss prevention (DLP) policies

144.

You are a Microsoft 365 administrator for a company.

You need to ensure that company documents are marked as confidential. You must prevent employees from sharing documents with people

outside the company.

What are two possible ways to achieve the goal?

a)

Validate outbound emails by using DomainKeys Identified Mail (DKIM)

b)

Create sensitive information types

c)

Configure Secure/Multipurpose Internet Mail Extensions (S/MIME) settings for Outlook

d)

Create a data-loss prevention policy

e)

Apply sensitivity labels to documents

145.

Enable a federation option for authentication in a hybrid environment

a)

Active Directory Federation Services (AD FS)

b)

PingFederate and federation integration

c)

Password hash synchronization with single sign-on

d)

Pass-through authentication and single sign-on

146.

Allow administrators to reset user passwords in Microsoft Azure AD

a)

Active Directory Federation Services (AD FS)

b)

PingFederate and federation integration

c)

Password hash synchronization with single sign-on

d)

Pass-through authentication and single sign-on

147.

Support non-federated users who authenticate with on-premises AD, and support multi-factor authentication

a)

Active Directory Federation Services (AD FS)

b)

PingFederate and federation integration

c)

Password hash synchronization with single sign-on

d)

Pass-through authentication and single sign-on

148.

Intune app protection policies can protect access to Exchange Server on-premises mailboxes

a)

Yes

b)

No

149.

Intune app protection policies support apps that connect to on-premises Microsoft SharePoint Server

a)

Yes

b)

No

150.

Intune app protection policies require a mobile-device management (MDM) solution

a)

Yes

b)

No

151.

A company has a Microsoft 365 subscription. Employees use personal devices to access company data in the cloud.

You need to restrict employees from copying data to personal OneDrive folders.

What should you use?

a)

Information Rights Management

b)

Microsoft Azure Security Center

c)

Office 365 Advanced Threat Protection

d)

Microsoft Endpoint Manager

152.

Microsoft Endpoint Manager

a)

Customer Lockbox for Office 365

b)

Azure Security Center

c)

Windows Hello for Business

d)

Microsoft Authenticator

153.

You need to move videos to a Microsoft 365 tenant and ensure that the contents are automatically transcribed.

Which Microsoft 365 service should you use?

a)

Yammer

b)

Stream

c)

Flow

154.

An organization uses Microsoft 365 Business to secure their data.

Many users install the organization ג€™s data on their personal tablets and phones.

You need to protect the organization's data stored on users' devices.

Which three features support device security?

a)

Remotely wiping company data

b)

Enabling Advanced Threat Protection for users

c)

Disabling the device remotely

d)

Automatically deleting files after 90 days of inactivity

e)

Requiring users to have a PIN on their device

155.

You use Microsoft Intune for device management. You must determine how many devices run each operating system.

You must launch Intune and navigate to the Mobile Apps blade.

a)

Device configuration

b)

Device compliance

c)

No change is needed

d)

Devices

156.

You are the Microsoft 365 administrator for a company.

You need to ensure that users receive a warning message if they select links in emails that might be unsafe.

What should you do?

a)

Use Windows PowerShell to install the latest antimalware engine updates

b)

Enable Microsoft Office 365 Advanced Threat Protection

c)

Use the Microsoft Exchange Admin Center to configure a new spam-filter policy

d)

Use the Microsoft Exchange Admin Center to create a new antimalware policy

157.

A business acquaintance from another company sends you a document that is encrypted by Azure Information Protection (AIP).

You are unable to open the document because the user account cannot be authenticated by the company ג€™s Azure Active Directory.

You need to access the document.

What should you do?

a)

Implement Azure Rights Management (RMS) for individuals for the user account.

b)

Implement Information Rights Management (IRM) for the Office application.

c)

Upgrade your account to include AIP for Office 365.

158.

A company deploys Microsoft Azure AD. You enable multi-factor authentication.

You need to inform users about the multi-factor authentication methods that they can use.

Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

a)

Receive an automated call on the desk phone that includes a verification code

b)

Insert a small card in to a desktop computer and provide a PIN code when prompted

c)

Receive a call on a mobile phone and select the pound sign (#) when prompted

d)

Receive an SMS text message that includes a verification code

159.

Use artificial intelligence to detect anomalies and suspicious incidents

a)

Office 365 Threat Intelligence

b)

Azure Active Directory Identity Protection

c)

Microsoft Exchange Online Protection

d)

Azure Advanced Threat Protection

160.

Identify and detect malicious insider actions to make it more difficult to compromise user credentials

a)

Office 365 Threat Intelligence

b)

Azure Active Directory Identity Protection

c)

Microsoft Exchange Online Protection

d)

Azure Advanced Threat Protection

161.

Protect against spam and help prevent messaging policy violations

a)

Office 365 Threat Intelligence

b)

Azure Active Directory Identity Protection

c)

Microsoft Exchange Online Protection

d)

Azure Advanced Threat Protection

162.

Scan emails and URLs to identify impersonation and malicious files

a)

Office 365 Threat Intelligence

b)

Azure Active Directory Identity Protection

c)

Microsoft Exchange Online Protection

d)

Azure Advanced Threat Protection

163.

You are a Microsoft 365 administrator for a company.

Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicious code.

You need to remove the message from inboxes and disable the PDF threat if an affected document is opened.

Which feature should you implement?

a)

Microsoft Exchange Admin Center block lists

b)

Sender Policy Framework

c)

Advanced Threat Protection anti-phishing

d)

zero-hour auto purge

e)

DKIM signed messages with mail flow rules

164.

You are the Microsoft 365 administrator for a company.

All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the

application.

You need to implement a Microsoft Intune policy to enforce the security requirements.

Which policy should you use?

a)

device compliance

b)

device configuration

c)

app protection

d)

app configuration

165.

Classify and label emails and documents in the organization

a)

Microsoft Azure Information Protection

b)

Microsoft Azure AD Conditional Access

c)

Cloud Discovery dashboard

d)

Microsoft Azure Security Center

166.

Block users from accessing cloud apps from certain devices

a)

Microsoft Azure Information Protection

b)

Microsoft Azure AD Conditional Access

c)

Cloud Discovery dashboard

d)

Microsoft Azure Security Center

167.

Provide insight into which apps are being used in the organization and the risk levels for the apps

a)

Microsoft Azure Information Protection

b)

Microsoft Azure AD Conditional Access

c)

Cloud Discovery dashboard

d)

Microsoft Azure Security Center

168.

Manage security policies, monitor attacks against virtual machines, and provide remediation for vulnerabilities

a)

Microsoft Azure Information Protection

b)

Microsoft Azure AD Conditional Access

c)

Cloud Discovery dashboard

d)

Microsoft Azure Security Center

169.

A company deploys Exchange Online and SharePoint Online.

You must audit and assessment reports for the Microsoft 365 cloud services that the company uses.

You need to provide the required documents.

Which Microsoft site should you use to obtain this information?

a)

Compliance Manager

b)

Service Trust Portal

c)

Office 365 Security and Compliance Center

d)

Azure portal

170.

You can assign apps to devices that are not enrolled with Microsoft Intune

a)

Yes

b)

No

171.

You can assign wrapped apps, or apps that incorporate the Intune SDK, only if the device is enrolled with Intune

a)

Yes

b)

No

172.

You can install available apps from the web-based Company Portal app regardless of whether the device if enrolled with Intune

a)

Yes

b)

No

173.

A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs.

What should the company implement?

a)

Azure Information Protection P1

b)

Azure Information Protection P2

c)

Microsoft 365 E3

174.

A company is planning to use Microsoft 365 Defender.

The company needs to protect Windows 10 client computers from malicious viruses. The company also needs to identify unauthorized cloud apps

that are used by end users.

You need to identify the Microsoft 365 Defender solutions that meet the requirements.

Which two solutions should you choose?

a)

Microsoft Defender for Identity

b)

Microsoft Defender for Endpoint

c)

Microsoft Defender for Office 365

d)

Microsoft Cloud App Security

175.

A company has Microsoft 365.

The company needs to secure their environment. They start by identifying the highest risks to security according to Microsoft.

You need to identify the security changes that are recommended by Microsoft 365.

Which tool should you choose?

a)

Microsoft Intune

b)

Microsoft Secure Score

c)

Azure Information Protection scanner

d)

Advanced Threat Analytics

e)

Microsoft 365 compliance center

176.

Provides policies to automatically apply retention labels to documents in an organization

a)

Records management

b)

Insider risk management

c)

Advanced eDiscovery

177.

Provides policies to discover and act on malicious and inadvertent risk activities in an organization

a)

Records management

b)

Insider risk management

c)

Advanced eDiscovery

178.

Provides a workflow to preserve, collect, and manage content for an organization's internal and external investigations

a)

Records management

b)

Insider risk management

c)

Advanced eDiscovery

179.

Detect sensitive content when files are uploaded to cloud storage devices

a)

Azure Information Protection Scanner

b)

Windows Information Protection

180.

Detect sensitive data across third-party software a a service (SaaS) apps

a)

Azure Information Protection Scanner

b)

Windows Information Protection

181.

A company uses Microsoft 365.

The company wants users to be prompted for additional verification when they access a federated third-party application. However, users must

not be prompted for additional verification when they access Microsoft Outlook.

You need to identify a solution that meets the requirements.

Which solution should you choose?

a)

Conditional Access

b)

Multi-factor authentication (MFA)

c)

Active Directory Federation Services (AD FS)

d)

Self-service password reset (SSPR)

182.

A company plans to migrate to Microsoft 365.

You need to advise the company about how Microsoft provides protection in a multitenancy environment.

What are three ways that Microsoft provides protection?

a)

Customer content at rest is encrypted on the server by using BitLocker.

b)

Microsoft Azure AD provides authorization and role-based access control at the tenant layer.

c)

Microsoft Azure AD provides authorization and role-based access control at the transport layer.

d)

Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant.

e)

Mailbox databases in Microsoft Exchange Online contain mailboxes from multiple tenants.

183.

You are the Microsoft 365 administrator for a company.

Your company plans to open a new office in the United Kingdom.

You need to provide penetration test and security assessment reports for the new office.

Where can you locate the required reports?

a)

Data Governance page of the Security and Compliance portal

b)

Compliance Manager page of the Services Trust portal

c)

Data Loss Prevention page of the Security and Compliance portal

d)

Regional Compliance page of the Services Trust portal

184.

Your company purchases Microsoft 365 E3 and Azure AD P2 licenses.

You need to provide identity protection against login attempts by unauthorized users.

What should you implement?

a)

Azure AD Identity Protection

b)

Azure AD Privileged Identity Management

c)

Azure Information Protection

d)

Azure Identity and Access Management

185.

You can manage Azure AD-joined machines by using group policy

a)

Yes

b)

No

186.

Azure AD required integration with Active Directory Domain Services by using secure Lightweight Directory Access Protocol (LDAP)

a)

Yes

b)

No

187.

Azure AD supports Azure AD Authentication Library (ADAL) authentication

a)

Yes

b)

No

188.

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items.

Which three security items on the report have the most impact on the score?

a)

Enable policy to block legacy authentication.

b)

Enable user risk policy.

c)

Require multi-factor authentication for all users.

d)

Delete/block accounts not used in last 30 days.

e)

Do not expire passwords.

189.

You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees.

Employees must not be able to share documents or forward emails that contain sensitive information outside the company.

You need to enforce the file sharing restrictions.

What should you do?

a)

Use Microsoft Azure Information Protection to define a label. Associate the label with an Azure Rights Management template that prevents the sharing of files or emails that are marked with the label.

b)

Create a Microsoft SharePoint Online content type named Sensitivity. Apply the content type to other content types in Microsoft 365. Create a Microsoft Azure Rights Management template that prevents the sharing of any content where the Sensitivity column value is set to Sensitive.

c)

Use Microsoft Azure Information Rights Protection to define a label. Associate the label with an Active Directory Rights Management template that prevents the sharing of files or emails that are marked with the label.

d)

Create a label named Sensitive. Apply a Data Layer Protection policy that notifies users when their document contains personally identifiable information (PII).

190.

A company deploys Microsoft 365.

The company needs to deploy a solution that meets the following requirements:

✑ allows access to Microsoft 365 only from corporate networks

✑ allows access to Microsoft 365 only from corporate-owned devices

✑ requires additional verification during authentication

You need to identify a solution that meets the requirements.

What should you select?

a)

Multi-factor authentication

b)

Conditional Access

c)

Azure Active Directory hybrid identity

d)

Self-service password reset

191.

After experiencing security breaches with on-premises servers, a company is considering migrating to Microsoft 365 for their security solutions.

What are three security-related benefits of moving to Microsoft 365?

a)

Microsoft employs a full-time team of penetration testers to identify vulnerabilities.

b)

Microsoft 365 prevents all attackers from gaining access to company data.

c)

Microsoft simplifies infrastructure management to help detect and respond to threats.

d)

Microsoft 365 monitors all customers for threats to prevent attacks.

e)

Microsoft 365 can troubleshoot security issues by accessing customer data without explicit permission from the customer.

192.

A company uses Microsoft 365.

The company wants to improve their compliance score based on Microsoft recommendations.

You need to identify the task that has the largest impact to the compliance score.

Which task should you choose?

a)

Detective discretionary

b)

Preventative mandatory

c)

Corrective discretionary

d)

Corrective mandatory

193.

You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users.

You need to implement self-service password reset. You want to achieve this goal while minimizing costs.

Which two actions should you perform?

a)

Upgrade your subscription to Azure AD Premium P2.

b)

Deploy Azure AD Connect.

c)

Deploy Azure Information Protection.

d)

Upgrade your subscription to Azure AD Premium P1.

194.

You are a Microsoft 365 administrator for a company.

What are two ways that you can ensure data security?

a)

service-level encryption using customer-provided key

b)

tenant-dedicated Microsoft Azure AD encryption using customer-provided key

c)

single-tenant infrastructure partitions for sensitive data

d)

data transfer using transport-layer security (TLS)

195.

A company uses Azure Active Directory.

The company requires that authentication requests from client applications that do not support modern authentication are blocked.

You need to identify the policy that meets the requirement.

Which policy should you select?

a)

Conditional Access

b)

Multi-factor authentication registration

c)

Sign-in risk

d)

User risk

196.

You are a Microsoft 365 administrator for a company.

You need to identify security vulnerabilities by using the Office 365 Attack Simulator.

Which three attack simulations are available?

a)

Brute-force password

b)

Cross-site scripting

c)

Password-spray

d)

Denial-of-service

e)

Display name spear-phishing

197.

A company plans to implement an insider risk solution in Microsoft 365.

The company needs to implement a solution that meets the following requirements:

✑ Uses machine learning to identify email risks.

✑ Provides workflows to remediate email risks.

✑ Provides a dashboard to display email risks, actions, and trends.

You need to identify a solution that meets the requirements.

Which solution should you select?

a)

Communication compliance policies

b)

Core eDiscovery cases

c)

Advanced eDiscovery cases

d)

Sensitivity labels

198.

A company plans to migrate to Microsoft 365.

Firstline employees need to be able to collaborate by using Microsoft Yammer, SharePoint Online, and Teams. You must minimize costs.

Which subscription type should you use?

a)

E3

b)

ProPlus

c)

F3

d)

Personal

199.

You are the Microsoft 365 administrator for a company.

You need to track scheduled maintenance events in Microsoft 365 admin center.

Where can you track these events?

a)

Reports

b)

Support

c)

Service Health

d)

Message Center

200.

You are the Office 365 administrator for a company.

You encounter a problem in your tenant. You launch the Microsoft 365 admin center and select Create a new service request.

You need to get help resolving your problem through the admin center.

Which three actions can you perform from the admin center?

a)

Receive a Microsoft technical support phone number to speak with a Microsoft support technician.

b)

Request a Microsoft service technician to contact you by using email.

c)

Use the query text box to type information about your problem and receive links to help documentation.

d)

Schedule a time for a Microsoft service technician to call you.

e)

Chat with a live Microsoft service engineer.

201.

A company plans to purchase Microsoft 365 Enterprise licenses.

Which two options can you use?

a)

through a Cloud Solution Provider (CSP)

b)

from the Microsoft website using a corporate credit card

c)

from the Microsoft retail store

d)

with an Enterprise Agreement (EA) subscription from Microsoft

202.

Users require a mailbox and will use Office web and mobile apps to access the mailbox

a)

Microsoft 365 F3

b)

Microsoft 365 Business Premium

c)

Microsoft 365 E3

d)

Microsoft 365 E5

203.

Users require a mailbox and will use Outlook and mobile apps to access the mailbox

a)

Microsoft 365 F3

b)

Microsoft 365 Business Premium

c)

Microsoft 365 E3

d)

Microsoft 365 E5

204.

Users require a Windows 10 Enterprise license and a mailbox. They will use Outlook to access the mailbox

a)

Microsoft 365 F3

b)

Microsoft 365 Business Premium

c)

Microsoft 365 E3

d)

Microsoft 365 E5

205.

Users require a Windows 10 Enterprise license, a phone system license, and a mailbox. They will use Outlook to access the mailbox

a)

Microsoft 365 F3

b)

Microsoft 365 Business Premium

c)

Microsoft 365 E3

d)

Microsoft 365 E5

206.

A company deploys Microsoft 365.

You must implement conditional access to restrict access to administrative accounts when users authenticate from specific locations.

You need to select the lowest cost license that meets the requirement.

Which license should you choose?

a)

Azure Active Directory Premium P1

b)

Azure Active Directory Premium P2

c)

Azure Active Directory Free

d)

Azure Active Directory B2B

207.

A company experiences a Microsoft 365 outage that affects an entire region.

You check the Service Health Dashboard and observe that the service is healthy.

After the incident is resolved, you need to find information in Service Health Dashboard that describes what happened during the outage.

What should you use?

a)

Message Center

b)

incident closure summary

c)

Post-Incident Review (PIR)

d)

service request

208.

A company is a Microsoft 365 reseller. The company does not provide managed services or direct customer support.

You need to provide licenses for customers and earn commissions for each license sold.

What should you do?

a)

Buy licenses for customers by using the Microsoft admin portal.

b)

Sign up as a Cloud Solution Provider direct reseller.

c)

Sign up as a Cloud Solution Provider indirect reseller.

d)

Buy licenses for customers from a Microsoft Authorized distributor.

209.

A company has a Microsoft 365 subscription and a Microsoft Azure support plan.

You need to implement only Azure services for which Microsoft provides technical support.

Which two types of services and features can you implement?

a)

general availability

b)

targeted release

c)

public preview

d)

private preview

210.

A small advertising company has 250 employees.

You need to migrate all users to Microsoft 365 and meet the following requirements:

✑ Provide a user-centric licensing solution for all users.

✑ Manage devices from a single location.

✑ Minimize licensing costs.

Which licensing model should you use?

a)

Microsoft 365 Business

b)

Microsoft 365 Education

c)

Microsoft 365 Enterprise E3

d)

Microsoft 365 Enterprise E5