70-346 | Microsoft 70-346 Exam Dumps 2021

NEW QUESTION 1
Contoso uses Office 365 for collaboration services. You implement single sign-on (SSO) with Office 365 by using Active Directory Federation Services (AD FS).
You need to implement Windows Azure multi-factor authentication.
Which three actions should you perform? Each correct answer presents part of the solution.

• A. On the AD FS federation server, run PhoneFactorAgentSetup.exe.
• B. On the AD FS Federation server, run WindowsAzureSDK-x64.exe.
• C. On the AD FS Federation server, run the Windows PowerShell cmdlet Register-AdfsAuthenticationProvider.
• D. On the AD FS Federation server, run FsConfigWizard.exe.
• E. Run the Active Directory Domains and Trusts MMC snap-i
• F. Register Windows Azure Multi-Factor Authentication Server as an additional authentication provider.
• G. Run the Windows Azure Multi-Factor Authentication Server Authentication Configuration Wizard.

Answer: BCF

Explanation: To implement Windows Azure multi-factor authentication in AD FS, we must install the Windows Azure Multi-Factor Authentication Server, register it in AD FS and configure multi-factor authentication.
B: The Windows Azure Multi-Factor Authentication Server can be installed by running WindowsAzureSDK-x64.exe.
C: The Register-AdfsAuthenticationProvider cmdlet registers an external authentication provider in Active Directory Federation Services (AD FS).
F: Run the Windows Azure Multi-Factor Authentication Server Authentication Configuration Wizard to configure multi-factor authentication.

Topic 6, Monitor and troubleshoot Office 365 availability and usage

NEW QUESTION 2
Contoso, Ltd. has an Office 365 tenant. The company has two servers named Server1 and Server2 that run Windows 2012 R2 Server. The servers are not joined to the contoso.com domain. Server2 is deployed to the perimeter network.
You install Secure Sockets Layer (SSL) certificates on both servers.
You deploy internal and external firewalls. All firewalls allow HTTPS traffic.
You must deploy single sign-on (SSO) and Active Directory Federation Services (AD FS). You need to install and configure all AD FS components in the environment.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: All AD FS servers must be domain joined.
References: https://technet.microsoft.com/en-us/library/dn554247(v=ws.11).aspx#BKMK_4

NEW QUESTION 3
A company has an Active Directory Domain Service (AD DS) domain. All servers run Windows Server 2008. You have an on-premises Exchange 2010 server.
The company plans to migrate to Office 365.
In the table below, identify the required action for each phase of the pilot. Make only one selection in each column. Each correct selection is worth one point.

Answer:

Explanation: During migration which first step is to have the domain validated, the step that follows is to add users and assign licenses. Microsoft found that it is better to complete the domain configuration (with the exception of changing the MX records) and add users after the domain has been defined when migrating to Office 365.
Planning for the migration involves preparation to synchronize the Active Directory. References:
https://msdn.microsoft.com/library/azure/jj151831.aspx

NEW QUESTION 4
A company has an Office 365 tenant and uses Exchange Online and Skype for Business Online.
User1 is scheduling a Skype meeting with User2. User 1 is not able to see availability information for User2. You need to troubleshoot the issue.
What should you use?

• A. Microsoft Skype for Business Connectivity Analyzer Tool
• B. OCSLogger
• C. ClsController
• D. Remote Connectivity Analyzer

Answer: C

Explanation: Centralized Logging Service (CLS) is a new feature in Lync Server 2013. It provides a mechanism to enable/disable logging across all Skype for Business servers in a deployment from a single interface and to search the resulting logs from the same interface.
You specify what should be logged based on the scenario you want to investigate. The scenarios supported are AlwaysOn, MediaConnectivity, ApplicationSharing, AudioVideoConferencingIssue, HybridVoice, IncomingAndOutgoingCall, VoiceMail, IMAndPresence, AddressBook,DeviceUpdate, LYSSAndUCS, CLS, SP, WAC, UserReplicator, HostedMigration, MonitoringAndArchiving, LILRLegacy, LILRLYSS, MeetingJoin, RGS, CPS, XMPP and CAA.

NEW QUESTION 5
Your company uses Office 365.
You need to retrieve a list of all the mail-enabled objects in Office 365. Which Windows PowerShell cmdlet should you use?

• A. Get-MSOLUser
• B. Get-MSOLContact
• C. Get-RoleGroupMember
• D. Get-Group
• E. Get-Recipient
• F. Get-LogonStatistics
• G. Get-MailContact
• H. Get-RemovedMailbox
• I. Get-Mailbox
• J. Get-ManagementRoleAssignment
• K. Get-MailboxStatistics
• L. Get-User

Answer: E

Explanation: References: https://technet.microsoft.com/en-us/library/aa996921(v=exchg.160).aspx

NEW QUESTION 6
You are an administrator for a company. You are planning an Office 365 pilot. The deployment must provide the following features:
• Chat-centered workspaces for collaboration
• A method for users to share files with colleagues
• The ability for users to share their calendars with other users in the organization You need to implement the pilot.
Which Office 365 services should you implement? To answer, select the appropriate options in the answer area.
NOTE; Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 7
Your company has a hybrid deployment Office 365.
You create a user in Office 365. The next day, you discover that the new user account fails to appear in the Microsoft Exchange Server on-premises global address list (GAL).
You need to ensure that the user has a mailbox and appears in the Exchange on-premises GAL and the Office 365 GAL.
What should you do?

• A. Assign a Microsoft Exchange Online license to the user account.
• B. From the Microsoft Online Services Directory Synchronization tool, enable rich coexistence.
• C. From the Office 365 portal, modify the sign-in status of the user account.
• D. Delete the user account hosted on Office 365.From the Exchange Management Console, create a new remote mailbox.

Answer: D

NEW QUESTION 8
You need to create a DNS record to resolve the email issues for ADatum Corporation users.
How should you configure the DNS record? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: MX (mail exchanger) records offer an simple way for mail servers to know where to send email. If you want Office 365 to receive all email addressed to anyone@contoso.com, the MX record for contoso.com should point to Office 365, and it will look like the following example:
Hostname: contoso-com.mail.protection.outlook.com Priority: 0
TTL: 1 hour References:
https://support.office.com/en-us/article/Create-DNS-records-at-Register365-for-Office-365-004030b4-10ad-402 https://technet.microsoft.com/en-us/library/jj937232(v=exchg.150).aspx

Topic 10, Contoso, Ltd (Case Study B)
Background
You are the system administrator for a manufacturing company named Contoso, Ltd. The company has offices in Chicago, Seattle, and Dallas.
Contoso’s sales department is located in Chicago. The U department is located in Seattle. The sales and IT departments use Microsoft Exchange Online, SharePoint Online, and OneDrive for Business. All employees in the sales department are in a group named Sales-Users. Employee user accounts are added and removed manually to this group as needed.
Your Active Directory Domain Services (AD DS) domain is named conto50.com. The domain is synchronized with Contoso s Office 365 tenant using Microsoft Azure Active Directory (Azure AD) Connect.
Contoso purchases a toy manufacturer named Tailspin Toys. All employees are located in Dallas.
Tailspin Toys has an on-premises Exchange Server 2021 for all email in the tailspintoys.com domain. There are plans to migrate the users to Exchange Online.
Business Requirements
Email Security: You need to ensure email security meets the following requirements
• Sales users can easily Identify email messages as internal only.
• Sensitive emails can not be forwarded externally.
• Sensitive emails can not be sent to external recipients
Licenses: You need to be able to identify which Tailspin Toys users are licensed.
Support Contracts: Your company does not currently have any Microsoft support contracts.
Skype for Business pilot: You have recently purchased Skype for Business Online licenses and you plan to pilot the service with IT users. You also want to start utilizing dynamic groups for licensing You have a dynamic group called FS-Users that contains all users in The FT department.
Technical Requirements:
Single Sign-On (SSO): You have the following requirements tor SSO:
• Ensure that users receive a phone call or text message as a second form of authentication when accessing Office 365 or on-premises resources.
• "he domain for federation must be fs.contoso.com.
• "he solution must support extranet users.
• "he solution must use Windows Integrated Authentication. » The solution must support device registration.
• The solution must be highly availability.
• The solution must be secured as much as possible.
Servers: Vou deploy Active Directory Federation Services (AD FS) and Web Application Proxy (WAP) services using Windows Server 2021. You deploy System Center Configuration Manager (SCCM) and System Center
Operations Manager (SCOM) in the contoso.com domain.
Monitoring: You need to be able to monitor and identify issues in the Office 365 environment.
Pilot: You plan to use a group of 25 Tailspin Toys users to test the functionality of Exchange Online. If the pilot is successful, you must migrate all other users to Exchange Online.
Tailspin Toys users must meet the following requirements:
• Must not exist in an on-premises Active Directory.
• The usernames must be unique.
• Display names can be unique.
• The tenants for tailspintoys.com and contoso.com must be separate.
• Passwords must expire after 365 days.
• Must receive a notification 14 days before passwords expire.
Issues: User1 is one of the pilot users for Tailspin toys. User1 reports that Outlook prompts them to enter credentials. You confirm that the employee is using the correct password. You run the Microsoft Support and Recovery Assistant for Office 365. The tool does not identify any issues.

NEW QUESTION 9
A company is deploying an Office 365 tenant.
You need to deploy a Windows Server 2012 R2 federation server farm.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation: To deploy a Windows Server 2012 R2 federation server farm we need to install AD FS on the computers that will become federation servers; configure AD FS to create the first federation server in a new farm; and add the additional servers to the farm.

NEW QUESTION 10
You have an Office 365 tenant that has an Enterprise E3 subscription. You enable Azure Rights Management for users in the tenant.
You need to define the methods that you can implement to encrypt and decrypt email messages.
What should you do? To answer, drag the appropriate method to the correct action. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: As an Office 365 global administrator, you can create mail flow rules, also known as transport rules, to help protect email messages you send and receive. You can set up rules to encrypt any outgoing email messages and remove encryption from encrypted messages coming from inside your organization or from replies to encrypted messages sent from your organization.
To view encrypted messages, recipients can either get a one-time password, sign in with a Microsoft account, or sign in with a work or school account associated with Office 365. Recipients can also send encrypted replies. They don’t need an Office 365 subscription to view encrypted messages or send encrypted replies.
References:
https://technet.microsoft.com/en-us/library/dn569289.aspx https://technet.microsoft.com/en-us/library/dn569287.aspx

NEW QUESTION 11
A company has an Office 365 tenant.
You need to monitor active Directory synchronization. Which tool should you run?

• A. ldFix
• B. Office 365 Health, Readiness, and Connectivity Check
• C. Microsoft Remote Connectivity Analyzer Tool
• D. Synchronization Service (MIISClient)

Answer: D

Explanation: One of the first steps you should take before installing DirSync is to look at the directory that you have on-premises and make sure it’s healthy and ready to synchronize to Azure Active Directory.
You need to check Active Directory remediation.
DirSync has certain requirements on attributes in the directory, and aligning the attribute values with the DirSync requirements is commonly known as Active Directory remediation. To help with Active Directory remediation, you should use the IdFix tool, which reviews the directory and performs interactive Active Directory remediation. This tool checks for and helps you correct any invalid data and duplicate data in directory attributes, including user PrincipalName (UPN), mailNickName, proxyAddress, sAMAccountName, targetAddress, and others. The IDFix tool also provides assistance for migrating from a non-routable UPN (such as “domain.local,” for example) to an Internet routable domain name, because using an Internet-routable domain is one of the requirements for Azure Active Directory. Be sure to run the IdFix tool from within your network, so that it has access to the domain controllers.
References: https://blogs.office.com/2014/04/15/synchronizing-your-directory-with-office-365-is-easy/

NEW QUESTION 12
You are the SharePoint Online administrator for Contoso, Ltd. The company purchases an Office 365 Enterprise El plan.
The public-facing website must use SharePoint Online and the custom domain contoso.com. You need to configure the DNS settings for the public-facing SharePoint site.
How should you configure the DNS settings? Select the appropriate options from each list in the answer area.

Answer:

Explanation: The CNAME record is used to redirect one domain to another in the DNS system. When a name server looks up a domain and finds that it has a CNAME record, the server replaces thefirst domain name with the CNAME, and then looks up the new name.

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to It. As a result, these questions will not appear in the review screen.
You have an on-premises Active Directory forest.
You deploy Active Directory Federation Services (AD FS) and purchase an Office 365 subscription. You need to create a trust between the AD FS servers and the Office 365 subscription.
Solution: You run the netdom.com command. Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Each domain that you want to federate must either be added as a single sign-on domain or converted to be a single sign-on domain from a standard domain. Adding or converting a domain sets up a trust between AD FS and Microsoft Azure Active Directory (Microsoft Azure AD).
References: https://msdn.microsoft.com/en-us/library/azure/jj205461.aspx

NEW QUESTION 14
You have an Office 365 subscription that contains 500 user accounts. None of the Office 365 users are forced to use a strong password. You need to force all of the users to use a strong password.
Which cmdlet should you use?

• A. Set-ADUser
• B. Set-MsolUser
• C. Set-MsolUserPassword
• D. Set-MsolPasswordPolicy

Answer: B

Explanation: Force the users to use a strong password with the Set-MSOlUser cmdlet. References:https://blogs.technet.microsoft.com/heyscriptingguy/2014/08/05/use-powershell-to-force-office-365-

NEW QUESTION 15
You have an Office 365 tenant that uses an Enterprise E1 subscription.
You need to convert the users in the tenant to an Enterprise E3 subscription. Which Windows PowerShell cmdlet should you run?

• A. Set-MsolUser
• B. Redo-MsolProvisionUser
• C. Set-MsolUserLicense
• D. Set-MsolUserPrincipalName
• E. Convert-MsolFederatedUser
• F. Set-MailUser
• G. Set-LinkedUser
• H. New-MsolUser

Answer: C

Explanation: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
Note: Switching plans manually means that you’re completing the following separate procedures instead of using the switch plans wizard. The procedures are:
Buy licenses for the subscription you’re switching users to.
Verify the subscription is ready to switch users to.
Reassign user licenses
Remove unneeded licenses from the subscription you’re switching from.
Cancel the original subscription (if switching all users).
Switching only some users isn’t supported by the switch
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluserlicense?view=azureadps-1.0

NEW QUESTION 16
Your company has a hybrid deployment of Office 365. All mailboxes are hosted on Office 365. All users access their Office 365 mailbox by using a user account that is hosted on-premises. You need to delete a user account and its associated mailbox.
Which tool should you use?

• A. The Remove-MSOLUser cmdlet
• B. The Remove-Mailbox cmdlet
• C. The Office 365 portal
• D. Active Directory Users and Computers

Answer: D

Explanation: With directory synchronization enabled, the on premise Active Directory becomes the master for all changes to the synchronized mail-enabled objects in Microsoft Azure Active Directory. You should thus delete accounts from Active Directory and when directory synchronization runs the associated object will be deleted from Azure and the associated mailbox will be soft-deleted.
Topic 5, Implement and manage federated identities (single sign-on [SSO])

NEW QUESTION 17
A graphic design agency has an Office 365 tenant. The agency uses only computers that run the Apple Macintosh operating system. Some users have Microsoft Entourage 2008 for Mac, and some have Microsoft Outlook for Mac.
All users report that they cannot access Exchange Online to check their email.
You need to run test connectivity for all users to identify the problem. You need to use the Microsoft Remote Connectivity Analyzer and the credentials of the users.
What should you do? To answer, drag the appropriate test to run to the correct email client. Each test may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 18
You administer the Office 365 environment for a company that has offices around the world. All of the offices use the same Office 365 tenant.
You need to ensure that all users can access the services that are available in their regions. Which setting or service should you update?

• A. User location settings
• B. User licenses
• C. Service usage address
• D. Rights management

Answer: A

Explanation: The User Location settings will allow you to set sign-in status and user locations for all the users that are on your network notwithstanding the physical location where they find themselves.
References:
http://blogs.perficient.com/microsoft/2014/11/office-365-assign-licensing-user-location-via-active-directory/