Microsoft 70-346 Braindumps 2021

NEW QUESTION 1
You have a legacy application that needs to send email to employees. The legacy application runs on a client computer.
The legacy application must send email by using IMAP through Exchange Online. You need to identify the correct host name and port information.
Which settings should you use?

• A. Imap.office365.com and port 993
• B. Imap.office365.com and port 143
• C. Outlook.office365.com and port 993
• D. Outlook.office365.com and port 143

Answer: C

Explanation: For Office 365for business, use the following settings.
IMAP4
outlook.office365.com
993 implicit

NEW QUESTION 2
Your company purchases an Office 365 plan. The company has an Active Directory Domain Services domain. User1 must to manage Office 365 delegation for the company.
You need to ensure that User1 can assign administrative roles to other users. What should you do?

• A. Create an Office 365 tenant and assign User1 the password administrator role.
• B. Use a password administrator account to assign the role to User1.
• C. Use a user management administrator account to assign the role to User1.
• D. Create an Office 365 tenant and assign User1 the global administrator role.

Answer: D

Explanation: The Global Administrator account is similar to the Company administrator. Users in this role have access to everything or the permission to add them to a dedicated role where they do not have permission (such as discovery management and assigning administrative roles to other users).
References:
https://support.office.com/client/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504

NEW QUESTION 3
You are the administrator for a company named Contoso, Ltd. The company has an Office 365 subscription.
You need to prevent users from changing their user display name by using Outlook Web App. What should you do?

• A. Run the Set-MsolCompanyContactInformation cmdlet.
• B. Modify the default email address policy.
• C. Run the Set-MsolUserPrincipalName cmdlet.
• D. Modify the default role assignment policy.

Answer: D

Explanation: References:
http://help.outlook.com/en-us/140/ff852817.aspx

NEW QUESTION 4
Your company plans to use Office 365 and Microsoft SharePoint Online. Another employee provisions the company's Office 365 tenant.
You discover that the employee can create and manage SharePoint site collections. You need to prevent the employee from creating or managing site collections. From which role should you remove the employee?

• A. Service administrator
• B. SharePoint Online administrator
• C. Global administrator
• D. Site collection administrator

Answer: C

Explanation: The person who provisions the company Office 365 tenant is the first global administrator who in turn is a SharePoint Online Administrator. As long as this person is a global administrator they will be able to create SharePoint sites. Now once the site collection is provisioned you can prevent them from managing the site itself by removing them from the Site Collection Administrator role.
By doing this if they went directly to the site they wouldn't be able to manage it, but they could always add themselves back to that role The way the question is stated you would need to be a global administrator yourself and then remove the person who created the tenant as a global administrator.
"Add an administrator to the Site Collection Administrators list If you are a Global Administrator or a SharePoint Online Administrator in SharePoint Online in Office 365 plans other than Office 365 Small Business, you must add your user name account to the Site Collection Administrator list on the SharePoint admin center page before you can add other site collection administrators via the Team Site. If you are a Global Administrator or SharePoint Online Administrator and you add yourself as a site collection administrator, performing this action is known as taking ownership of a site."
References: https://support.office.com/en-
au/article/Manage-administrators-for-a-site-collection9a7e46f9-3fc4-4297-955a-82cb292a5be0
https:// blogs.office.com/2015/06/11/more-control-overdata-access-with-workload-specific-admin-roles/

NEW QUESTION 5
You need to troubleshoot the issues for user Alex.Simmons. What should you run?

• A. hybrid environment free/busy troubleshooter
• B. Microsoft Office Outlook Connectivity Tests
• C. Microsoft Office Configuration Analyzer Tool
• D. Microsoft Office 365 Client Performance Analyzer

Answer: C

NEW QUESTION 6
You implement Office 365 for an organization.
You must create the correct DNS entries needed to configure Exchange Online.
Which DNS entries should you create? To answer, drag the appropriate DNS record type to the correct purpose. Each DNS record type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: TXT record is used for verification. When you have added the record at your domain registrar's site, you'll go back to Office 365 and request Office 365 to look for the record. When Office 365 finds the correct TXT record, your domain is verified.
MX (mail exchanger) record points to where your email should be sent. It also has a priority field so that you can send mail to different servers in a priority order.
CNAME (alias or canonical) record redirects one domain to another in the DNS system. When a name server looks up a domain and finds that it has a CNAME record, the server replaces the first domain name with the CNAME, and then looks up the new name.

NEW QUESTION 7
Yen are the Office 365 administrator for your company.
You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 10 to perform the management tasks.
You need to ensure that the Windows 10 computer has the necessary software installed. What should you install first?

• A. Windows PowerShell 4.0
• B. Azure Active Directory Rights Management Service
• C. Microsoft Online Services Sign-in Assistant
• D. Azure Identity Service

Answer: A

NEW QUESTION 8
You are the Office 365 administrator for your company. The company has a single office. You have the following requirements:
You must configure a redundant Active Directory Federation Services (AD FS) implementation.
You must use a Windows Internal Database to store AD FS configuration data.
The solution must use a custom login page for external users.
The solution must use single sign-on for internal users.
You need to deploy the minimum number of servers. How many servers should you deploy?

• A. 2
• B. 4
• C. 6
• D. 16

Answer: B

Explanation: To provide redundancy, we would need to create AD FS farms with at least two servers. This can be used to allow internal users to use single sign-on (SSO).
As we are using Windows Internal Database (WIM) to store AD FS configuration data, we do not need any additional servers for the database as WIM is included in Windows Server 2008 and later versions. Redundancy for WIM is possible when an AD FS farm is set up.
To support external users, we would need to set up an AD FS proxy server. In order to provide redundancy we would need to set up an AD FS proxy farm. This would require a minimum of 2 more servers.
The custom login page for external users can be created on the AD FS proxy server, which the external users would access. There is thus no need for additional servers.
Thus the minimum number of server we would require is four: two for the AD FS farm and two for the AD FS proxy farm.
References:
https://technet.microsoft.com/en-us/library/gg982488.aspx
http://blogs.technet.com/b/askpfeplat/archive/2013/07/22/faq-on-adfs-part-1.aspx

NEW QUESTION 9
Fabrikam Inc plans to use the domain fabrikam.com for Office 36b user identities email addresses, and Session Initiation Protocol [SIP) addresses.
Single sign-on (SSO) between Office 365 and the on-premises Active Directory is NOT required. You need to configure the Office 365 plan.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and a range them in the correct order.

Answer:

Explanation:

NEW QUESTION 10
Your company has an Office 365 subscription. You create a new retention policy that contains several retention tags. A user named Test5 has a client computer that runs Microsoft Office Outlook 2007. You install Microsoft Outlook 2010 on the client computer of Test5. Test5 reports that the new retention tags are unavailable from Outlook 2010.
You verify that other users can use the new retention tags. You need to ensure that the new retention tags are available to Test5 from Outlook 2010.
What should you do?

• A. Instruct Test5 to repair the Outlook profile.
• B. Modify the retention policy tags.
• C. Run the Set-Mailbox cmdlet.
• D. Force directory synchronization.

Answer: A

Explanation: When deploying retention policies it is part of the procedure to create the tags and add it to the retention policies prior to the deployment. Also part of the procedure is to determine which Microsoft Outlook client versions are in use. In this case the Test5version has been changed and Test5 will then have to repair his/her Outlook profile accordingly.

NEW QUESTION 11
You are the Office 365 administrator for your company. The company has two administrators named User1 and User2.
Users must be able to perform the activities as shown in the following table:

You need to grant the appropriate administrative role to each user.
What should you do? To answer, drag the appropriate role to the correct user. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: User1 has to be the Password administrator which will allow for User1 to reset passwords, manage service requests, and monitor service health. Password admins are limited to resetting passwords for users and other password admins.
User2 has to be the global administrator to have access to all administrative features. Global admins are the only admins who can assign other admin roles. This will enable User2 the ability to reset passwords for all administrator accounts.

NEW QUESTION 12
A company plans to synchronize users in an existing Active Directory organizational unit with Office 365. You must configure the Azure Active Directory Connect with password sync
You need to ensure that the service account has the minimum level of permissions required.
Which two permission levels should you assign to the account for each task? To answer, select the appropriate permission level from each list in the answer area.

Answer:

Explanation: Password Write-Back
For each forest you have configured in Azure AD Sync, the account you have specified for a forest in the wizard must be given the “Reset-Password” and “Change Password” extended rights on the root object of each domain in the forest.
Permissions for password synchronization
If you want to enable password synchronization between your on-premises AD DS and your Azure Active Directory for your users, you need to grant the following permissions to the account that is used by Azure AD Sync to connect to your AD DS:

NEW QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an on-premises Active Directory forest.
You deploy Active Directory Federation Services (AD FS) and purchase an Office 365 subscription.
You need to create a trust between the AD FS servers and the Office 365 subscription. Solution: You run the New-MsolDomain cmdlet.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: The New-MsolDomain cmdlet adds a domain to Azure Active Directory. The New-MsolFederatedDomain command should be used instead.
Note: The New-MsolFederatedDomain cmdlet adds a new single sign-on domain to Microsoft Online Services and configures the relying party trust settings between the on-premises Active Directory Federation Services
2.1 server and Microsoft Online.
References:https://docs.microsoft.com/en-us/powershell/msonline/v1/new-msolfederateddomain

NEW QUESTION 14
You are the Office 365 administrator for your company.
Users report that they cannot sign in to Skype for Business from their mobile devices, but they are able to send and receive Skype for Business messages by using their laptop computers.
You need to troubleshoot the issue. What should you do?

• A. From the Office 365 message center, confirm Skype for Business settings.
• B. Use the Microsoft Connectivity Analyzer tool to confirm settings.
• C. Confirm Skype for Business user licenses for the affected users.
• D. From the Skype for Business admin center, verify the external access settings.

Answer: B

Explanation: The Microsoft Connectivity Analyzer (MCA) tool is a companion to the Microsoft Remote Connectivity Analyzer web site. The MCA tool provides administrators and end users with the ability to run connectivity diagnostics for five common connectivity symptoms directly from their local computer.
One of the five symptoms that can be tested using MCA is:
“I can’t log on to Skype for Business on my mobile device or the Skype for Business Windows Store App” – This test checks for the Domain Name Server (DNS) records for your on-premise domain to ensure they are configured correctly for supporting Mobile Skype for Business clients. Also it connects to the Autodiscover web service and makes sure that the authentication, certificate, web service for Mobility is correctly set up.

NEW QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Office 365 subscription.
Several users report that they fail to connect to Microsoft Skype for Business Online by using the Skype for Business 2021 client.
You verify that you can connect to Skype for Business Online successfully from your computer. You need to identify what prevents the users from connecting to Skype for Business Online. Solution: You use the Microsoft Support and Recovery Assistant for Office 365.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: Use the Microsoft Skype for Business Connectivity Analyzer instead.

NEW QUESTION 16
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in the question apply only to that question.
A company has an Office 365 tenant that has an Enterprise E1 subscription. You synchronize disabled user accounts from an Active Directory Domain Services environment.
You need to enable the user accounts in Office 365. Which Windows PowerShell cmdlet should you run?

• A. Set-MsolUser
• B. Redo-MsolProvisionUser
• C. Set-MsolUserLicense
• D. Set-MsolUserPrincipalName
• E. Convert-MsolFederatedUser
• F. Set-MailUser
• G. Set-LinkedUser
• H. New-MsolUser

Answer: A

Explanation: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should be used for basic properties only. Example: The following command sets the multi-factor authentication on this user.
Enable a user:
$st = New-Object -TypeNameMicrosoft.Online.Administration.StrongAuthenticationRequirement
$st.RelyingParty = "*"
$st.State = “Enabled”
$sta = @($st)
Set-MsolUser -UserPrincipalName user@contoso.com -StrongAuthenticationRequirements $sta