Enabling Office 365 Services v16.0
Question 1
You are the Office 365 administrator for your company. The companys environment includes only Office 2013 and Windows 8.
Users are not allowed to install applications on client computers.
You need to enable Office Telemetry logging.
What should you do?
- A. In Group Policy, enable logging in the User Configuration\Administrative Templates\Microsoft Office 2013\Telemetry Dashboard node.
- B. Create a .reg file that sets the registry values under the HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\15.0\OSM key to enable the Telemetry Agent to collect and upload data. Run the .reg file with standard privileges.
- C. In Group Policy, enable logging in the User Configuration\Administrative Templates\Microsoft Office 2013\Telemetry logging node.
- D. Create a .reg file that sets the registry values under the HKEY_LOCAL_MACHINE\Software\Microsoft\Office\15.0 key to enable Telemetry Agent to collect and upload data. Run the .reg file with standard privileges.
Answer : A
Explanation:
The Telemetry Agent must be enabled using Group Policy or the registry. For production environments that contain hundreds or thousands of client computers, you can use Group
Policy administrative templates.
You can use Group Policy to enable and configure Telemetry Agents. Download the Group
Policy administrative template files from the Microsoft Download Center. The policy settings are available in the path User Configuration\Administrative Templates\Microsoft Office
2013\Telemetry Dashboard.
Question 2
Your company has an Exchange Server 2010 Service Pack (SP1) organization and a hybrid deployment of Office 365. You have two federation servers named Server1 and
Server2. You manage Server1 and Server2 by using a user account that is a member of the Domain Admins group. You need to set the authentication method of the federation servers to forms-based authentication. What should you do?
- A. Modify the Web.config file in the %systemroot%\inetpub\adfs\Is directory.
- B. Modify the Global.asax file in the %systemroot%\inetpub\adfs\Is directory.
- C. From the AD FS 2.0 Management console, add a claims provider trust.
- D. From the AD FS 2.0 Management console, add a relaying party trust.
Answer : A
Explanation:
To configure a non-default local authentication type, navigate to inetpub\adfs\ls located in the root folder, Select web.config and Edit in Notepad. The use Ctrl+F to find
<localAuthenticationTypes>, Cut your preferred local authentication type (the entire line), and Paste it to the top of the list before saving and closing the web.config file.
References: https://blogs.technet.microsoft.com/educloud/2012/10/03/fba-customization- with-office-365-and-adfs/
Question 3
Your company has an Office 365 subscription. A user named Test5 has a mailbox. You need to ensure that all of the email messages sent and received by Test5 are accessible to members of the audit department for 60 days, even if Test5 permanently deletes the messages. What should you do?
- A. Run the Set-User cmdlet.
- B. Run the Set-Mailbox cmdlet.
- C. Run the Set-RetentionPolicyTag cmdlet.
- D. Run the Set-MailboxDatabase cmdlet.
- E. Run the Set-RetentionPolicy cmdlet.
Answer : B
Explanation:
The AuditLogAgeLimit parameter of the Set-Mailbox cmdlet allows you to stipulate how long audit logs for a mailbox are retained. Logs older than the specified period are removed. The default value is 90 days.
To meet the requirements in this question, we need to configure a litigation hold on the mailbox.
Place a mailbox on Litigation Hold to preserve all mailbox content, including deleted items and original versions of modified items. When you place a user' mailbox on Litigation Hold, content in the user's archive mailbox (if it's enabled) is also placed on hold. Deleted and modified items are preserved for a specified period, or until you remove the mailbox from
Litigation Hold.
To place a mailbox on litigation hold, we use the Set-Mailbox cmdlet. For example:
Set-Mailbox [email protected] -LitigationHoldEnabled $true -LitigationHoldDuration 60
References: https://technet.microsoft.com/en-
IN/library/bb123981(v=exchg.150)?f=255&MSPPError=-2147217396
Question 4
HOTSPOT -
Contoso, Ltd., has an Office 365 tenant. All employees have Exchange Online mailboxes.
You have an existing ActiveSync mailbox policy named Contoso-ActiveSync-Policy that applies to all sales users.
You must prevent Sales users from copying their Exchange contacts to the native address book of their mobile devices while they are using OWA for Devices.
You need to ensure that all sales users comply with the new policy.
How should you complete the relevant Windows PowerShell command? To answer, select the appropriate Windows PowerShell segment from each list in the answer area.
Answer : 
Explanation:
* Box 1: Get-Mailbox
Collect the Exchange Online Users.
This cmdlet is available in on-premises Exchange Server 2016 and in the cloud-based service. Some parameters and settings may be exclusive to one environment or the other.
Use the Get-Mailbox cmdlet to view mailbox objects and attributes, populate property pages, or supply mailbox information to other tasks.
* Box 2: New-OwaMailBoxPolicy
Create a new web mailbox policy.
This cmdlet is available in on-premises Exchange Server 2016 and in the cloud-based service. Some parameters and settings may be exclusive to one environment or the other.
Use the New-OwaMailboxPolicy cmdlet to create Outlook on the web mailbox policies.
* Box 3: Set-OwaMailboxPolicy
Use the Set-OwaMailboxPolicy cmdlet to configure the new policy that was created with
New-OwaMailBoxPolicy.
Parameters include AllowCopyContactsToDeviceAddressBook.
Box 4-Box 5: Set-Mailbox -OwaMailboxPolicy
Apply the OwaMailBoxPolicy to the Exchange Online users.
The Set-Mailbox cmdlet is available in on-premises Exchange Server 2016 and in the cloud-based service. Some parameters and settings may be exclusive to one environment or the other.
Use the Set-Mailbox cmdlet to modify the settings of existing mailboxes.
Question 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You have an Office 365 subscription. All user mailboxes have an archive mailbox.
A new compliance policy has the following requirements:
You create two default policy tags and one retention policy.
You need to implement the compliance policy.
Solution: You run the Set-Mailbox cmdlet and specify the RetentionUrl parameter.
Does this meet the goal?
- A. Yes
- B. No
Answer : B
Explanation:
The Set-Mailbox RetentionUrl parameter specifies the URL or an external web page with additional details about the organization's messaging retention policies.
This URL can be used to expose details regarding retention policies in general, which is usually a customized legal or IT website for the company.
References: https://technet.microsoft.com/en-us/library/bb123981(v=exchg.160).aspx
Question 6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
Your company has an Office 365 subscription.
Users at the company use Microsoft Skype for Business to send instant messages to internal users, external partners, and users on the consumer version of Skype.
You discover that the Skype for Business users fail to communicate with users on Google
Hangout.
You need to ensure that the Skype for Business users can send instant messages to the
Google Hangout users.
Solution: You run the Set-CSExternalAccessPolicy-identity FederationAndPICDefault-
EnableXmppAccess $true command.
Does this meet the goal?
- A. Yse
- B. No
Answer : B
Explanation:
The EnableXmppAccess parameter indicates whether the user is allowed to communicate with users who have SIP accounts with a federated XMPP (Extensible Messaging and
Presence Protocol ) partner. The default value is False.
Google hangout uses a proprietary protocol instead of the XMPP open standard protocol.
References: https://technet.microsoft.com/en-us/library/gg398916.aspx
Question 7
DRAG DROP -
You are deploying Office 365 for your organization.
You are preparing to delegate permissions by using the built-in Microsoft Exchange Online role groups. You must assign teams to the roles that give them the least permissions while still allowing them to perform the following tasks:
You need to delegate permissions to the teams.
To which role group should you assign each team? To answer, drag the appropriate role group to the correct team. Each role group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer : 
Explanation:
Discovery Management: Administrators or users who are members of the Discovery
Management role group can perform searches of mailboxes in the Exchange organization for data that meets specific criteria and can also configure litigation holds on mailboxes.
Records Management: Users who are members of the Records Management role group can configure compliance features, such as retention policy tags, message classifications, transport rules, and more.
Recipient Management: Administrators who are members of the Recipient Management role group have administrative access to create or modify Exchange 2013 recipients within the Exchange 2013 organization.
Help Desk: Users who are members of the Help Desk role group can perform limited recipient management of Exchange 2013 recipients. The Help Desk role group, by default, enables members to view and modify the Outlook Web App options of any user in the organization. These options might include modifying the user's display name, address, phone number, and so on. They don't include options that aren't available in Outlook Web
App options, such as modifying the size of a mailbox or configuring the mailbox database on which a mailbox is located.
Organization Management: Administrators who are members of the Organization
Management role group have administrative access to the entire Exchange 2013 organization and can perform almost any task against any Exchange 2013 object, with some exceptions. Of the groups listed, the Organization Management group is the only that can create and manage security groups.
References:
https://technet.microsoft.com/en-us/library/dd638105(v=exchg.150).aspx
Question 8
Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company's Office 365 tenant. You discover that the employee can create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which role should you remove the employee?
- A. Service administrator
- B. SharePoint Online administrator
- C. Global administrator
- D. Site collection administrator
Answer : C
Explanation:
The question states that Another employee provisions the company's Office 365 tenant.
The person who provisions an Office 365 tenant will automatically be assigned to the
Global administrator role. In Office 365, a Global administrator is also a SharePoint Online administrator.
We could prevent the employee from creating or managing site collections by removing the employee from the SharePoint Online administrator role. However, as a Global
Administrator, the employee could add himself/herself back to the SharePoint Online administrator role. Therefore, we should remove the employee from the Global
Administrator role.
References: https://support.office.com/en-us/article/Assigning-admin-roles-in-Office-365- eac4d046-1afd-4f1a-85fc-8219c79e1504?ui=en-US&rs=en-US&ad=US
Reply -
Question 9
You are the Office 365 administrator for your company. Any communication to the Internet using a port other than 80 requires a unique firewall rule to be configured.
You successfully deploy Office 365 ProPlus to all users by using Click-to-Run for Office
365. Users install and activate Office 365 ProPlus.
Thirty days after activation, users report that they are unable to edit files by using any
Office applications.
You need to ensure that users can edit files.
For which site should you configure a firewall exception?
- A. https://activation.sls.microsoft.com
- B. https://ols.officeapps.live.com/olsc
- C. http://ols.officeapps.live.com/olsc
- D. http://officecdn.microsoft.com
Answer : A
Explanation:
The activation.sls.microsoft.com url is needed to renew the product key approximately every 30 days for Office 365 ProPlus users.
Question 10
You are the Office 365 administrator for your company. The company allows external communications through Microsoft Lync Online for all domains.
The call center manager reports that call center personnel are spending too much time chatting with friends and not enough time taking calls. She requests that the call center personnel be blocked from chatting with anyone external to the company by using Lync
Online. They still must be able to communicate with internal users.
You need to prevent all call center personnel from communicating with external contacts by using Lync Online, while still allowing other employees to communicate with external contacts.
What should you do?
- A. In the Lync admin center, select all users, edit their external communications settings, and clear the Lync Users check box.
- B. On the External Communications page of the Lync admin center, turn off external access.
- C. In the Lync admin center, remove the Lync Online license from each of the call center personnel.
- D. In the Lync admin center, select all call center personnel, edit their external communications settings, and clear the People on Public IM Networks check box.
Answer : D
Explanation:
The question states that You need to prevent all call center personnel from communicating with external contacts by using Lync Online, while still allowing other employees to communicate with external contacts. Therefore, we need to apply the restriction to the call center personnel only.
The question also states that They still must be able to communicate with internal users.
You can turn off external messaging for a single user by clearing the People on Public IM
Networks check box. This will override the company setting of allowing external access.
The image below shows the People on Public IM Networks check box.
To ensure that the call center personnel can continue to be able to communicate with internal users, we need to leave the Lync users checkbox ticked.
Question 11
DRAG DROP -
Your company uses Microsoft SharePoint Online. You create a subsite in an existing site collection. The subsite will serve as a document repository from which anyone can download documents. External sharing is turned off globally.
You plan to share documents with users by emailing document links. Users must not be required to sign in to the subsite to download the documents.
You need to configure the environment to allow document sharing with external users.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer : 
Explanation:
Box 1:
Box 2:
Box 3:
Step 1. To be able to share documents, we first need to enable sharing at the top level, the
Tenant.
The question states: You plan to share documents with users by emailing document links.
Users must not be required to sign in to the subsite to download the documents.
To do this, we need to select the following sharing option:
Allow both external users who accept sharing invitations and guest links.
Step 2. The second step is to allow sharing at the Site Collection level.
Again, we need to configure the following sharing option:
Allow both external users who accept sharing invitations and guest links.
Step 3. The final step after sharing has been enabled is to share the required documents.
References:
https://support.office.com/en-in/article/Manage-external-sharing-for-your-SharePoint-
Online-environment-c8a462eb-0723-4b0b-8d0a-70feafe4be85
Question 12
You are the Office 365 administrator for your company. The company is running Microsoft
Exchange Server 2007 with Service Pack 3 on-premises and has 500 mailboxes.
Management requests that you migrate all mailboxes to Office 365. You are researching the available migration types.
You need to generate a custom step-by-step checklist for multiple migration types.
Which tool should you use?
- A. Exchange Server Deployment Assistant
- B. Exchange Best Practices Analyzer
- C. Exchange 2013 Server Role Requirements Calculator
- D. Microsoft Remote Connectivity Analyzer
Answer : A
Explanation:
The Exchange Server Deployment Assistant is used to help you configure an Exchange
Server deployment. It is a web-based tool that asks you questions about your current environment and then generates a custom step-by-step checklist that will help you deploy
Exchange Server for different types of scenarios.
The Exchange Server Deployment Assistant asks you questions about your current environment, how many mailboxes youd like to migrate and which method of migration youd like to use. You can run the wizard multiple times selecting different options to generate checklists for different migration scenarios.
References: https://technet.microsoft.com/en-us/office/dn756393.aspx
Question 13
An organization has an Office 365 tenant and uses an Enterprise E3 subscription. You enable licenses for 1,000 users.
You must implement a file sync service for users that meets the following requirements:
You need to recommend a solution.
Which solution should you recommend?
- A. Microsoft Storage Spaces
- B. SharePoint document libraries
- C. Windows offline files
- D. Distributed File System Replication
Answer : B
Explanation:
You can work offline and sync within a SharePoint document library.
The document library permissions can be managed by the organization.
Question 14
You manage an Office 365 tenant that uses an Enterprise E1 subscription.
You need to ensure that Skype for Business Online audio and video communication is disabled for all accounts.
Which Windows PowerShell cmdlet should you run?
- A. Enable-JournalRule
- B. New-RetentionPolicyTag
- C. Start-ManagedFolderAssistant
- D. Set-CsUser
- E. Set-CsPrivacyConfiguration
- F. Set-HostedContentFilterPolicy
- G. Set-MalwareFilterPolicy
- H. Set-MailboxJunkEmailConfiguration
Answer : D
Explanation:
The Set-CsUser cmdlet enables you to modify the Skype for Business Server 2015-related user account attributes that are stored in Active Directory Domain Services. For example, you can disable or re-enable a user for Skype for Business Server 2015; enable or disable a user for audio/video (A/V) communications; or modify a users private line and line URI numbers.
The AudioVideoDisabled indicates whether the user is allowed to make audio/visual (A/V) calls by using Skype for Business. If set to True, the user will largely be restricted to sending and receiving instant messages.
References:
https://technet.microsoft.com/en-us/library/gg398510.aspx
Question 15
DRAG DROP -
You are the Office 365 administrator for a company. Employees are allowed to purchase a desktop computer of their choosing. The companys owner has one desktop computer, two laptop computers, one Surface RT device, and 2 Surface Pro 2 devices. You plan to deploy
Office ProPlus. You provide each user with an Office 365 ProPlus license.
You need to deploy Office 365 ProPlus to the unlicensed devices using the fewest number of licenses possible.
What should you do? To answer, move the appropriate license to the correct device. Each license may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer : 
Explanation:
Each Office 365 ProPlus license allows a user to install Office on up to five computers.
If the user decides to install Office 365 ProPlus on a sixth computer, she will need to deactivate one of the first five.
References:
https://technet.microsoft.com/en-us/library/gg982959.aspx