70-346 | Certified 70-346 Braindumps 2021

NEW QUESTION 1
Your company has an Office 365 subscription that is configured for single sign-on (SSO) to an on-premises deployment of Active Directory.
Office 2021 is deployed to all workstations. Microsoft OneDrive for Business is used to replicate My Documents to OneDrive for Business.
You need to ensure that when clients connect to Office 365 from an untrusted network, they can access Office 365 resources by using a web browser.
Which two actions should you perform? Each correct answer presents part of the solution.

• A. Modify the Sharing settings for SharePoint Online.
• B. Disable modern authentication.
• C. Add a claims provider trust.
• D. Add a relying party trust.
• E. Add a new rule.

Answer: BC

Explanation: B: In Skype for Business Server 2015, Modern Authentication is used between on-premises clients and on-premises servers in order to give users a proper level of authorization to resources.
C: A Claims Provider trust is one where ADFS gets claims from the Claim Provider, which could be the local AD as Claims Provider or an external Claims Provider.

NEW QUESTION 2
You have an Office 365 subscription.
You plan to create a report about Microsoft OneDrive for Business usage that will be given to a third party. You need to ensure that the OneDrive for Business report shows anonymous identifiers instead of user names. What should you configure from Settings in the Office 365 admin center?

• A. Organization Profile
• B. Services & add-ins
• C. Security & privacy
• D. Domains

Answer: B

Explanation: If your organization's policies prevent you from viewing reports where user information is identifiable, you can change the privacy setting for all these reports.
If you want to hide user level information when you're generating your reports, you can quickly make that
change in the Office 365 admin center.
Go to the Office 365 admin center > Services & add-ins
Select Reports
Set the toggle to On and Save.

References:
https://support.office.com/en-us/article/Activity-Reports-in-the-Office-365-admin-center-0d6dfb17-8582-4172-a

NEW QUESTION 3
You need to request a certificate for AD FS.
Which two options should you use? Each correct answer presents part of tt>e solution. NOTE: Each correct selection is worth one point

• A. Subject Alternate Names of fs.devfabrikam.com and enterpriseregistration.devfabrikam.com
• B. Subject name of fs.fabrikam.com
• C. Subject Alternate Names of fs.windows.net and enterpriseregistration.windows.net
• D. Subject name of fs.devfabrikam.com
• E. Subject Alternate Names of fs.fabnkam.com and enterpriseregistration.fabrikam.com

Answer: DE

NEW QUESTION 4
You are a system administrator for a company that is using Office 365.
You receive a report that a user is having sign in issues with the Outlook 2021 desktop app. You log into the Azure Active Directory (Azure AD) portal and observe the following log data:

You need to determine the issue with the user account. How should you resolve the issue?

• A. Disable multi-factor authentication (MFA).
• B. Ask the user to enter the correct password.
• C. Ask the user to define an alternate email address.
• D. Ask the user to enter the correct user name.

Answer: C

NEW QUESTION 5
A company uses Office 365 services. You implement Azure AD Connect in the local environment. An employee moves to a new department. All Office 365 services must display the new department
information for the employee.
You need to update the employee's user account.
Where should you change the value of the department attribute for the employee?

• A. the Active Directory management page in the Azure Management Portal
• B. the on-premises Active Directory
• C. the Users and groups page in the office 365 admin center
• D. the Metaverse Designer

Answer: B

NEW QUESTION 6
You are the office 365 administrator for a company. You deploy Microsoft SharePoint Online. Many users report that they cannot discover useful content via searches.
You need to run the appropriate SharePoint Online report to help identify the issue. Which report should you run?

• A. SharePoint Site Usage
• B. SharePoint Activity
• C. Query Rule Usage by Day
• D. Abandoned Queues by Day

Answer: D

Explanation: References:
https://support.office.com/en-us/article/view-search-usage-reports-2cd8f257-c29b-423d-8265-d44e6214d095

NEW QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Office 365 subscription to ensure that Active Directory users can connect to Office 365 resources by using single sign-on (SSO).
Solution: You run Convert-MsolDomainToStandard for the fabrikam.com domain and the contoso.com domain.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 8
You deploy an Office 365 tenant for your company. The tenant contains the domain names contoso.onmicrosoft.com and contoso.com. You have an on-premises Active Directory Domain Services (AD DS) domain named contoso.com.
You have the following requirements:
Use active Directory Federation Services (AD FS) for authentication when users sign in to the Office 365 environment.
Use Web Application Proxy (WAP) servers that run Windows Server 2012 R2.
Ensure that Workplace Join is available for all users.
You need to request a certificate for the WAP servers. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 9
You are the system administrator for a company. You plan to move users email to Office 365. You add a custom domain for the company to Office 365.
You need to configure the new Office 365 tenant and move ownership of the on-premises DNS zone to Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

NEW QUESTION 10
A company deploys an Office 365 tenant. All employees use Skype for Business Online. You need to configure the network firewall to support Skype for Business Online.
Which ports must you open? To answer, drag the appropriate port number to the correct feature or features. Each port number may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Transport Control Protocol (TCP), User Datagram Protocol (UDP) ports, and Protocol Numbers are important to TCP/IP networking, intranets, and the Internet. Ports and protocol numbers provide access to a host computer. However, they also create a security hazard by allowing uninvited access. Therefore, knowing which port to allow or disable increases a network's security. If the wrong ports or protocol numbers are disabled on a firewall, router, or proxy server as a security measure, essential services might become unavailable.
Port 443 is used for Audio, video and application sharing sessions as well as data sharing sessions - For HTTPS.
Port 5223 is used for mobile push notifications - Extensible Messaging and Presence Protocol (XMPP) client connection over SSL.

NEW QUESTION 11
You are the Office 365 administrator for your company.
Users report that they have received significantly more spam messages over the past month than they normally receive.
You need to analyze trends for the email messages received over the past 60 days. From the Office 365 admin center, what should you view?

• A. The Mail protection reports
• B. The Mailbox content search and hold report
• C. Messages on the Message center page
• D. The Office 365 Malware detections in sent mail report

Answer: A

Explanation: An Office 365administrator can use the Mail Protection Reports in Office 365 to view data about malware, spam, and rule detections for up to the last 90 days.
The reports can be viewed as a graph to display trends for email messages over a period of time; in this question, for the last 60 days. The graph view will tell you if the amount of good mail, malware and spam detected has increased or decreased over the time period of the report.
References:
https://technet.microsoft.com/en-us/library/dn500744(v=exchg.150).aspx

Topic 7, Fabrikam, Inc (Case B)
Fabrikam is a manufacturing company. You manage an on-premises Microsoft Exchange Server environment as well as an Exchange Online environment that is se: up as a hybrid environment for the Fabnkam.com and devfabrikamxom domains. The company recently merged with lailSpin Toys. They have also bought another company named Contoso Ltd. There are no plans to merge with Contoso Ltd. as that company s resources will remain separate from Fabrikam. Inc.
Domains
Fabrikam, Inc. has two separate Active Directory Domain Services (AD DS) domains. The domain named fabrikam.com is used for production. The domain named devfabfikam.com is used for development only. TailSpin Toys has an AD DS domain named tdilspmtoys.com. Contoso Ltd. has an AD DS domain twined contoso.com.
The development environment is used to deploy new features that are being tested for implementation in the production environment. No features can be deployed into production until they ha<je been fully tested in the development environment. There is a "hird-party multi-factor authentication MFA) solution that is currently deployed for on premises sign ins in the dovfabfikam.com domain. You are investigating different single sign on(SSO) options including Active Directory Federations Services (AD FS) for the devfabrikam.com domain.
Fabrikara Inc. is completing its merger with TailSpin Toys and is decommissioning the Iailspintoys.com namespace and moving those users lo fabnkam.com.
Fabrikam has Microsoft Azure Active Directory (Azure AD) Connect configured and has integrated both the fabnkam.com and devfabrikam.com domains with Office 365. SSO is configured for both the fabrikam.com and devtabrikam.com domains.
Office 365
The Office 365 environment must meet the following requirements:
• SSO most be used for all Office 365 authentication in production and development environments for all domains.
• Sign in time restrictions must be enabled for all contoso.com users in the Office 365 environment.
• Exchange Online must be used for all production employee mailboxes.
• The on premises contoso.com domain must be integrated with Office 365.
• Contoso.com must be used for the primary namespace in Office 365 for Contoso Ltd. employees.
Infrastructure
The server infrastructure must meet the following requirements: Production environment
• All now applications that require relational database support must use Microsoft SQL Server ?016.
• All new projects must minimize the number of servers required.
• All new projects must minimize the complexity of the design and topology of the server infrastructure.
• All externally facing servers must be deployed in a perimeter network-
• All new server deployments should be redundant when possible. Development environment
• The development environment must support workplace join.
• On premises MFA must be used for all development accounts.
Issues
Users report that they receive many unwanted emails. You need to a create a list of the users that receive the most unwanted emails, and a list of the senders of these emails. This report information needs to be automatically collected daily. Users also report the following issues:
• The mailbox named Test.Userl@tievfabrikam.com is hosted in the on-premises Exchange Servers. This user is not able to view free/busy for Test.User2@cievfabrikam.com. Test User1 has issues viewing free/busy from both Microsoft Outlook 2021 on a desktop computer as well as the Outlook app on a mobile device.
• The Test.User2@devfabnkam.com account has a mailbox that is hosted in the Exchange Online environment
• The AlexSimmons^fabnkam.com is hosted in Exchange Online. Alex reports Outlook 2021 issues. The client application starts up and connects to his mailbox, but it will then crash after a few minutes.
• The mailbox named Lola.Jacobsen@fabrikam.com is hosted in Exchange Online. An Exchange Online mailbox database issue affected Lola and some other users in the human resources department. You need to troubleshoot client connectivity issues with Lola s mailbox
• The mailbox named Sarah.Jones@fabrikam com account is hosted in Exchange Online. Sarah reports that emails that she sends are not being received. You must inspect emails that Sarah has sent recently to investigate the issue.

NEW QUESTION 12
You manage an Office 365 tenant. The subscription details for the tenant are displayed in the following screenshot.

Use the drop-down menus to select the answer choice that answers each question. NOTE: Each correct answer is worth one point.

Answer:

Explanation: Box1:
Skype for Business is included in Office 365 Business Essentials. SharePoint is not included in Office 365 Business Essentials.
Box 2: Office 365 Business Essentials user maximum is 300 users.
References: https://products.office.com/en/business/compare-office-365-for-business-plans

NEW QUESTION 13
A company migrates to Office 365. 2,000 active users have valid Office 365 licenses assigned.
An additional 5,000 user accounts were created during the migration and testing processes. These users do not have any licenses assigned.
You need to remove the Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort.
Which Windows PowerShell command should you run?

• A. Get-MsolUser -All-EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
• B. Get-MsolUser-EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
• C. Get-MsolUser -All -UnlicensedUsersOnly | Remove-MsolUser -Force
• D. Get-MsolUser -UnlicensedUsersOnly | Remove-MsolUser–Force

Answer: C

Explanation: Step 1: Get all unlicensed users:
The Get-MsolUser cmdlet can be used to retrieve an individual user, or list of users. We must use both the
–All and the –UnlicensedUsersOnlyparameters to retrieve all unlicensed users.
Parameters include:
All [<SwitchParameter>] If present, then all results will be returned.
UnlicensedUsersOnly [<SwitchParameter>] The filter for only users who are not assigned a license. Step 2: Remove these users through the Remove-MsolUser –Force command.

NEW QUESTION 14
Your company uses Office 365. You need to identify which users do NOT have a Microsoft Exchange Online license assigned to their user account.
Which Windows PowerShell cmdlet should you use?

• A. Get-ManagementRoleAssignment
• B. Get-User
• C. Get-RoleGroupMember
• D. Get-LogonStatistics
• E. Get-RemovedMailbox
• F. Get-MSOLContact
• G. Get-Recipient
• H. Get-Mailbox
• I. Get-Group
• J. Get-MailboxStatistics
• K. Get-MSOLUser
• L. Get-MailContact

Answer: K

Explanation: We use the Get-MsolUser –UnlicensedUsersOnly command to retrieve all users which do not have a Microsoft Exchange Online license.
The Get-MsolUser cmdlet can be used to retrieve an individual user, or list of users.
The -UnlicensedUsersOnly [<SwitchParameter>] parameter filters for only users who are not assigned a license.

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Office 365 subscription to ensure that Active Directory users can connect to Office 365 resources by using single sign-on (SSO).
Solution: You run Convert-MsolFederatedUser for all users. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: The Convert-MsolFederatedUser cmdlet updates a user in a domain that was recently converted from single sign-on to standard authentication type. This option will not meet the objective of the question.
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/convert-msolfederateduser?view=azureadps-1.0

NEW QUESTION 16
You are deploying a new Office 365 tenant for a company. You plan to use the default domain Fabricam.onmicrosoft.com. Employees currently use Fabricam.com for their email address in the on-premises email system.
You have the following requirements:
All users need to be migrated to Microsoft Exchange Online.
Fabricam.com must be used for the email domain and Office 365 user principal name.
You need to start the new domain process and generate a CSV import file for your on-premises DNS servers. How should you complete the Windows PowerShell commands? To answer, configure the appropriate options
in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: Box1
Fabricam.onmicrosoft.com Box2
New-MsolDomain Box3
Get-MsolDomainVerificationDns
The questions states: “You plan to use the default domain Fabricam.onmicrosoft.com.” The New-MsolDomain cmdlet adds a domain to Azure Active Directory.
The Get-MsolDomainVerificationDns cmdlet retrieves the necessary DNS records to verify a domain. References:
https://docs.microsoft.com/en-us/powershell/module/msonline/new-msoldomain?view=azureadps-1.0 https://docs.microsoft.com/en-us/powershell/module/msonline/get-msoldomainverificationdns?view=azureadps-

NEW QUESTION 17
A company deploys an Office 365 tenant.
You need to enable multi-factor authentication for Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: Box 1: Create a multi-factor authentication provider with the Per Enabled User usage model. Box 2: Enable multi-factor authentication for all user accounts.
Box 3: Instruct users to use a mobile phone to complete the registration process. Adding Multi-Factor Authentication to Azure Active Directory (for Office 365 users) Step 1: First we create the usage model of the MFA provider.
We should use PerEnabled User which is used for Office 365. Note:
Per Authentication – purchasing model that charges per authentication. Typically used for scenarios that use the Azure Multi-Factor Authentication in an application.
Per Enabled User – purchasing model that charges per enabled user. Typically used for scenarios such as Office 365.
Step 2: Enable Multi-Factor Authentication for all your user accounts. You need to enable multi-factor authentication on your Office 365 users. Step 3: Have a user sign-in and complete the registration process.
The users can use their mobile phones to complete the auto-enrollment process.
Details: After being enrolled for multi-factor authentication, the next time a user signs in, they see a message asking them to set up their second authentication factor. Using the enrollment process the users will be able to specify your preferred method of verification.
The following methods exist: Mobile Phone Call, Mobile Phone Text Message, Office Phone Call, or Mobile App.
References:
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/multi-factor-authentication/multi-factor-authe

NEW QUESTION 18
You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2.
User2 must be able to assign administrative roles to other users. You need to assign an administrative role to User2.
Which role should you assign?

• A. service administrator
• B. global administrator
• C. password administrator
• D. delegate administrator

Answer: B