Microsoft Managing Office 365 Identities and Requirements - 070-346 Exam Practice Test

Contoso Ltd. plans to use Office 365 services for collaboration between departments. Contoso has one Active Directory Domain Services domain named contoso.local. You deploy Azure AD Connect.
You plan to implement single sign-on (SSO) for Office 365.
You need to synchronize only the user accounts that have valid routable domain names and are members of specified departments.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Correct Answer:

Explanation

The domain we want to federate must be registered as a public internet domain with a domain registrar or within our own public DNS servers. We cannot use contoso.local as it is not routable outside of the intranet.
We can then use Active Directory Domains and Trusts to add user principal name (UPN) suffixes to the domain. The default UPN suffix is the Domain Name System (DNS) domain name of the contoso.local domain that contains the user account. We can add contoso.com as an alternative UPN suffixes for logon processes.
We should then use Active Directory Users and Computers to change the UPN of user accounts in the specified departments to contoso.com.
Finally, we can use user attribute-based filtering to exclude all have non-routable domain names, i.e., those that have a contoso.local as their UPN suffix.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Office 365 subscription to ensure that Active Directory users can connect to Office
365 resources by using single sign-on (SSO).
Solution: You run Convert-MsolDomainToFederated for the fabrikam.com domain and the contoso.com domain.
Does this meet the goal?
Correct Answer: B Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
An organization plans to deploy Exchange Online.
You must support all Exchange Online features.
You need to create the required DNS entries.
Which two DNS entries should you create? Each correct answer presents part of the solution.
Correct Answer: A,D Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Office 365 subscription.
Several users report that they fail to connect to Microsoft Skype for Business Online by using the Skype for Business 2016 client.
You verify that you can connect to Skype for Business Online successfully from your computer.
You need to identify what prevents the users from connecting to Skype for Business Online.
Solution: You use the Microsoft Skype for Business Connectivity Analyzer.
Does this meet the goal?
Correct Answer: B Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
A company uses Exchange Online. You plan to use the email domain contoso.com for all employees.
You must configure Exchange Online to support Outlook 2016 client connectivity.
You need to configure the appropriate DNS entries.
Which record should you create? To answer, select the appropriate entries from each list in the answer area.
Correct Answer:

Explanation

Box 1: Autodiscover.contoso.com
You can define an alias in one domain to point to a target server in a completely different domain.
Box 2: CNAME
The cloud-based service uses a CNAME record to implement the Autodiscover service for Outlook clients.
Box 3: Autodiscover.outlook.com
The Autodiscover CNAME record must contain the following information:
Alias autodiscover
Target autodiscover.outlook.com
References:https://msdn.microsoft.com/en-us/library/cc950655(v=exchsrvcs.149).aspx
You are the SharePoint Online administrator for Contoso, Ltd. The company purchases an Office 365 Enterprise El plan.
The public-facing website must use SharePoint Online and the custom domain contoso.com.
You need to configure the DNS settings for the public-facing SharePoint site.
How should you configure the DNS settings? Select the appropriate options from each list in the answer area.

Correct Answer:

Explanation

The CNAME record is used to redirect one domain to another in the DNS system. When a name server looks up a domain and finds that it has a CNAME record, the server replaces thefirst domain name with the CNAME, and then looks up the new name.
A company plans to synchronize users in an existing Active Directory organizational unit with Office 365.
You must configure the Azure Active Directory Connect with password sync You need to ensure that the service account has the minimum level of permissions required.
Which two permission levels should you assign to the account for each task? To answer, select the appropriate permission level from each list in the answer area.

Correct Answer:

Explanation

Password Write-Back
For each forest you have configured in Azure AD Sync, the account you have specified for a forest in the wizard must be given the "Reset-Password" and "Change Password" extended rights on the root object of each domain in the forest.
Permissions for password synchronization
If you want to enable password synchronization between your on-premises AD DS and your Azure Active Directory for your users, you need to grant the following permissions to the account that is used by Azure AD Sync to connect to your AD DS:
You are the administrator for Contoso Ltd. The company uses Office 365 and has an on-premises Active Directory Domain Services (AD DS) domain that uses the namespace contoso.com.
You plan to implement Workplace Join. You must implement Active Directory Federation Services (AD FS) and Web Application Proxy (WAP). You take the following actions:
* Install the WAP role on a server.
* Allocate fs.conroso.com for the AD FS namespace.
* Define the server FQDN as server1.contoso.com.
You need to install and configure certificate for the WAP server.
Correct Answer: D Vote an answer
A company plans to use Office 365 to provide email services for users.
You need to ensure that a custom domain name is used.
What should you do first?
Correct Answer: C Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Your company purchases an Office 365 plan. The company has an Active Directory Domain Services domain.
User1 must be able to manage Office 365 delegation for the company.
You need to ensure that User1 can assign administrative roles to other users.
What should you do?
Correct Answer: C Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2.
User2 must NOT be able to change passwords for other users.
You need to assign an administrative role to User2.
Which role should you assign?
Correct Answer: A Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
A company deploys an Office 365 tenant. All employees use Skype for Business Online.
You need to configure the network firewall to support Skype for Business Online.
Which ports must you open? To answer, drag the appropriate port number to the correct feature or features.
Each port number may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Correct Answer:

Explanation

Transport Control Protocol (TCP), User Datagram Protocol (UDP) ports, and Protocol Numbers are important to TCP/IP networking, intranets, and the Internet. Ports and protocol numbers provide access to a host computer. However, they also create a security hazard by allowing uninvited access. Therefore, knowing which port to allow or disable increases a network's security. If the wrong ports or protocol numbers are disabled on a firewall, router, or proxy server as a security measure, essential services might become unavailable.
Port 443 is used for Audio, video and application sharing sessions as well as data sharing sessions - For HTTPS.
Port 5223 is used for mobile push notifications - Extensible Messaging and Presence Protocol (XMPP) client connection over SSL.
You are the administrator for a company. You plan to use Office 365 for email and file sharing. You plan to implement a hybrid deployment with your current on-premises Active Directory Domain Services (AD DS) environment and Microsoft Azure Active Directory (Azure AD) Connect.
You must deploy Microsoft Exchange Online and OneDrive for Business for all employees. You have the following security requirements:
All employees must use complex passwords.
Passwords must be changed every six months.
Employees must use multi-factor authentication (MFA) when possible.
You need to implement MFA verification options to use with the employee's password.
Solution: Have the employee use a physical smart card.
Does the solution meet the goal?
Correct Answer: A Vote an answer
You need to troubleshoot the issues for user Alex.Simmons. What should you run?
Correct Answer: B Vote an answer
You subscribe to Office 365.
You plan to implement single sign-on.
You need to deploy Active Directory Federation Services (AD FS) to a server for the planned implementation.
Which deployment methods should you use? (Each correct answer presents a complete solution.
(Choose all that apply.)
Correct Answer: B,D Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).