Microsoft MS-203 ACTUAL EXAM QUESTIONS

Question # 1

You have a Microsoft Exchange Server 2019 organization. You create a retention policy. You need to ensure that all email older than one year is moved to an archive mailbox. What should you use?

A. a data loss prevention (DLP) policy
 B. a retention policy tag 
C. a default policy tag 
D. a personal tag

Show Answer

Question # 2

You have hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. The deployment uses Azure AD Connect. All incoming email is delivered to Exchange Online. You have 10 mail-enabled public folders hosted on an on-premises Mailbox server. Customers receive an error when an email message is sent to a public folder. You need to ensure that all the mail-enabled public folders can receive email messages from the internet. The solution must ensure that messages can be delivered only to valid recipients. Solution: From Azure AD Connect, select Exchange Mail Public Folders. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 3

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 server. Users report that the email they send to external recipients is marked as spam. You need to validate the Reverse DNS and Sender ID data for the on-premises server. What should you use in the Microsoft Remote Connectivity Analyzer?

A. Inbound SMTP Email
 B. Outbound SMTP Email 
C. Message Analyzer 
D. Exchange Online Custom Domains DNS Connectivity Test 

Show Answer

Question # 4

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. The deployment contains an Exchange Server 2019 server named Server1. Server1 has a public certificate named Cert1 that is bound to the SMTP protocol. Cert1 will expire soon. you replace Cert1 with a new certificate named Cert2 from a different public certification authority (CA) After you replace the certificate, you discover that email delivery between Server1 and the Exchange Online tenant fails. You need to ensure that messages can be delivered successfully What should you do on Server1?

A. Return the Hybrid Configuration wizard
 B. Restart the MSExchangeTransport service.
C. Recreate the certificate and include an exportable private key. 
D. Bind a self-signed certificate to the SMTP protocol. 

Show Answer

Question # 5

You have a hybrid deployment between a Microsoft Exchange Online tenant and an Exchange Server 2019 organization. You need to enable journaling for outbound email. Where can you store the journal reports?

A. a mail-enabled public folder 
B. an Exchange Server 2019 mailbox 
C. a Microsoft SharePoint Online document library 
D. an Exchange Online mailbox 

Show Answer

Question # 6

You have a Microsoft Exchange Online tenant that contains an email domain named contoso.com. You have a partner organization that uses an email domain named fabrikam.com. You plan to add a connector to secure the email messages sent from fabrikam.com to contoso.com. You need to ensure that only fabrikam.com can use the connector. What should you do? 

A. Configure the connector to verify the contoso.com domain with a certificate. 
B. Configure the connector to verify the fabrikam.com domain with a certificate. 
C. Add fabrikam.com as a remote domain. 
D. Add fabrikam.com as an accepted domain.

Show Answer

Question # 7

You have a Microsoft Exchange Online tenant that contains a custom role group named RGI. You need to prevent users assigned to RGI from running a specific cmdlet. Which cmdlet should you run to modify RG1?

A. Remove Entry 
B. Remove -ManagementRoleAssignment
 C. Set-ManagementScope 
D. Disable -Cmd1etExtensionAgent 

Show Answer

Question # 8

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. Users report that emails sent from Exchange Online mailboxes to the on-premises Exchange Server mailboxes are undelivered. You need to review the non-delivery report (NDR) for each undelivered email. What should you use?

A. message trace in the Exchange admin center 
B. auditing in the Exchange admin center 
C. the SMTP protocol logs in Exchange Server 
D. the transport logs in Exchange Server 

Show Answer

Question # 9

You have a Microsoft Exchange Online tenant. Users report that legitimate email messages are delivered to their Junk Email folder. You plan to use the Microsoft Remote Connectivity Analyzer to identify the cause of the issue. Which test should you run?

A. Outlook Connectivity 
B. Inbound SMTP Email 
C. Outbound SMTP Email 
D. Message Analyzer

Show Answer

Question # 10

You have a Microsoft Exchange Online tenant. You plan to place a hold on all email messages stored in the mailbox of a user named User1. What should you create first?

A. an eDiscovery case 
B. sensitive info type 
C. a data loss prevention (DLP) policy 
D. an information barrier segment 

Show Answer

Question # 11

You have a Microsoft Exchange Online tenant that uses Microsoft Defender for Office 365. You need to create a new Safe Attachments policy named Policy1 that meets the following requirements: Immediately delivers email messages that contain attachments and replaces the attachments with placeholders Reattaches the attachments after scanning is complete Quarantines malicious attachments Which action should you select for Policy1?

A. Monitor 
B. Block 
C. Dynamic Delivery
 D. Replace 

Show Answer

Question # 12

You have a Microsoft Exchange Online tenant that uses an email domain named contoso.corn. An in-caning email messages route through an third-party filtering service named Filter1 to connector named Connector'. You discover that incoming messages contain headers that specify the source IP address as Filter1. You to ensure that incoming email messages contain headers that specify source IP address of the original sender. The solution must prevent any charges to the service. What should you do?

A. From Microsoft 365 Defender portal configure enhanced filtering for Connector1. 
B. Configure Connector' to authenticate messages by using the IP address of Filter' service. 
C. Configure the MX Of contoso.com to point to contoso-can.mailgotection.outbok.com. 
D. From the Exchange admin center. create a transport rule to rewrite header for incoming messages. 

Show Answer

Question # 13

You have hybrid deployment between a Microsoft Exchange Onlne tenant and an onpremises Exchange Server 2019 organization. The deployment uses Azure AD Connect. All incoming email is delivered to Exchange Online. You have 10 mail-enabled publich folders hosted on an on-premises Mailbox server. Customers receive an error when an email message is sent to a public folder. You need to ensure that all the mail-enabled public folders can receive email messages from the internet. The solution must ensure that messages can be delivered only to valid recipients. Solution: From Exchange Online, Create a mail contact for each mail-enabled public folder. Does this meet the goal?

A. Yes 
B. No

Show Answer

Question # 14

You have a Microsoft Exchange Online tenant that contains a group named Group1. The members of Group1 need to create user mailboxes. The solution must use the principle of least privilege. To which role group should you add Group1?

A. Recipient Management 
B. Security Operator
 C. Help Desk
D. Organization Management 

Show Answer

Question # 15

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. Users report that email messages between the Exchange Server organization and the Exchange Online tenant are undelivered. You install and enable a new certificate from a different trusted certification authority (CA). You need to ensure that mail flow between Exchange Server and Exchange Online is restored. Which two PowerShell cmdlets should you run? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Set-SendConnector 
B. Set-IntraOrganirationConnector 
C. Update-Hybridconfiguration 
D. Set-ReceiveConnector 

Show Answer

Question # 16

You have a Microsoft Exchange Online tenant that contains a public folder named CustomerSupport. You need to access CustomerSupport by using Outlook on the web. Which section in Outlook on the web should you add CustomerSupport? 

A. Favorites 
B. Folders 
C. Groups

Show Answer

Question # 17

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes. All the users in the sales department at your company are in a group named Sales. The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You create a mail flow rule. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 18

You have a Microsoft Exchange Online subscription for an email domain named contoso.com. A partner company has an Exchange Online subscription for an email domain named fabrikam.com. You need to prevent out-of-office messages sent by users in contoso.com from being sent to users in fabrikam.com. What is the best way to achieve the goal from the Exchange admin center? More than one answer choice may achieve the goal. (Choose the best answer.) 

A. Create a connector
B. Create a mail flow rule 
C. Create a remote domain 
D. Create an accepted domain 

Show Answer

Question # 19

You have a hybrid deployment between a Microsoft Exchange Online tenant and onpremises Exchange Server 2019 organization. The on-premises organization contains several Exchange Server 2019 servers. You discover that delivery fails for all email messages sent from the on-premises organization to Microsoft 365. You discover that the certificate for an on-premises Exchange server expired. You need to resolve the issue as quickly possible. The solution must minimize administrative effort. What should you do on the on-premises Exchange server? 

A. Create a new self-signed certificate. 
B. Generate a certificate renewal request. 
C. Generate a certificate request. 
D. Add the certificate for a new root certification authority (CA). 

Show Answer

Question # 20

You have a Microsoft Exchange Online tenant. You need to perform an In-Place eDiscovery search. The solution must meet the following requirements: Minimize administrative effort. Search both public folders and mailboxes. Use an In-Place Hold to place the search results on hold. What should you do in the Microsoft 365 compliance center? 

A. Search the public folders and the mailboxes in a single search, and then place the results on In-Place Hold. 
B. Search the public folders first, and then place the results on In-Place Hold. Search the mailboxes second, and then place the results on In-Place Hold. 
C. Search the public folders and the mailboxes in a single search. Once the search completes, place only the mailboxes that contain results and the public folders on In-Place Hold. 

Show Answer

Question # 21

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft 365 subscription. Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages. Users in the marketing department of the company report that they must be able to access all the links embedded in email messages. You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users. Solution: You create a new safe attachments policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 22

You have a Microsoft Exchange Server 2019 hybrid deployment. You are migrating public folder data to Exchange Online by using a migration batch of the PublicFolder type. You need to identify the sync status of each move request in the batch. Which cmdlet should you run? 

A. Gec-PublicFolderMailboxMigracionRequest 
B. Get-PublicFolderMigrationRequesc
 C. Gec-PublicFolderMoveRequesc 
D. Gee-MoveRequest 

Show Answer

Question # 23

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com. You need to prevent all users from performing the following tasks: Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com. The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet. Solution: You create two sharing policies. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 24

Your company has a Microsoft Exchange Server 2019 server. The company has five departments. The server contains one mailbox database for each department. Each mailbox database contains all the users in its respective department. The databases contain 1,000 users. You create an address book policy for each department. You need to assign the address book policies to the users. Which cmdlet should you run? 

A. Set-Mailbox 
B. Set-AddressList 
C. Set-MailboxDatabase 
D. Sec-AddressBookPolicy 

Show Answer

Question # 25

You have a Microsoft Exchange Server 2019 hybrid deployment. You need to change the free/busy data access sharing level between the on-premises organization and Exchange Online. What should you do? 

A. Run the Hybrid Configuration wizard. 
B. Modify the organization relationship. 
C. Create an organization sharing policy. 
D. Create an individual sharing policy. 

Show Answer

Question # 26

You have a Microsoft Exchange Online tenant named contoso.com. The Exchange configuration contains the following public folder hierarchy: - Support - Messages - Calendar You create a distribution list named [email protected]. You need to add the Messages public folder to the HelpDesk distribution list. What should you do first? 

A. Mail-enable the Support public folder
 B. Create a new public folder mailbox 
C. Mail-enable the Messages public folder 
D. Upgrade HelpDesk to a Microsoft 365 group 

Show Answer

Question # 27

You recently migrated all the on-premises mailboxes from Microsoft Exchange Server 2019 to Exchange Online. You decommission the on-premises Exchange Server 2019 servers. The finance department at your company reports that email delivery from several printers fails after Exchange Server 2019 is decommissioned. You need to ensure that the printers can deliver email successfully to the users in the finance department. What should you do? 

A. Create a resource mailbox for each printer. 
B. Create an Inbound connector that has certificate validation disabled. 
C. Create an Inbound connector that is configured to allow SMTP relay. 
D. Create an Office 365 group for each printer. 

Show Answer

Question # 28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft 365 subscription. Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages. Users in the marketing department of the company report that they must be able to access all the links embedded in email messages. You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users. Solution: You modify the content filtering settings. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 29

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 organization that contains 200 mailboxes. You need to add a second email address to each mailbox. The address must have a syntax that uses the first letter of each user’s last name, followed by the user’s first name, and then @fabrikam.com. Solution: You convert all the mailboxes to shared mailboxes, and then you run the SetMailbox cmdlet and specify the –EmailAddressPolicyEnabled $false parameter. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 30

You have a Microsoft 365 subscription for a company named Fabrikam,Inc. The company uses an Exchange Online tenant that has an email domain named fabirkam.com. Fabrikam works with a partner company Contoso, Ltd. that uses an email domain named contoso.com. A new security policy at Contoso states that any email sent from partners to Contoso employees must use TLS encryption. You need to ensure that email sent from Fabrikam to Contoso uses TLS. What should you create in the tenant? 

A. a new connector that specifies the contoso.com SMTP domain 
B. a remote domain named contoso.com 
C. a new connector that specifies the fabrikam.com SMTP domain 
D. a remote domain named fabrikam.com 

Show Answer

Question # 31

You have a hybrid deployment that contains a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 server named Server1. All users use an email address suffix of @contoso.com. You migrate 200 mailboxes from Server1 to Exchange Online by using Exchange PowerShell cmdlets. Users hosted on Server1 can send email messages to the migrated mailboxes. In Microsoft 365, you create a new mailbox that uses an email address of [email protected]. When email is sent from the mailboxes hosted on Server1 to [email protected], the senders receive a non-delivery report (NDR) that contains the following text: "550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipient not found by SMTP address lookup." You verify that Microsoft 365 mailboxes can send email to [email protected] successfully. You delete the user account and mailbox of User1. You need to ensure that when new mailboxes are created, all the users at your company can exchange email successfully Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. From Azure AD Connect, modify the synchronization settings 
B. From Server1, run the New-RemoteMailbox cmdlet 
C. From Server1, run the Enable-Mailbox cmdlet 
D. From the on-premises network, create new mailboxes, and then migrate the mailboxes to Microsoft 365 
E. From the Exchange admin center, modify the properties of the Outbound connector 

Show Answer

Question # 32

You have a Microsoft Exchange Online tenant that has Office 365 Advanced Threat Protection (ATP) enabled. The tenant contains a user named Ben Smith who has a UPN of [email protected]. Ben Smith is protected by using an ATP anti-phishing policy. Ben Smith reports that emails sent from his personal account of [email protected] are not delivered to his work email account. You need to ensure that personal emails are delivered to the [email protected] What should you do? 

A. Create a transport rule to assign the MS-Exchange-Organization-PhishThresholdLevel header a value of 2 for the message received from [email protected]
 B. Add [email protected] as a trusted sender to the ATP anti-phishing policy. 
C. Add [email protected] as a trusted sender to the ATP anti phishing. 
D. Add relecloud.com to the ATP anti-phishing list of misted domains. 

Show Answer

Question # 33

You have a Microsoft Exchange Server 2019 organization. You add 100 new users and create a mailbox for each user. The new users have the City attribute in Active Directory set to Seattle. You need to create a separate global address list (GAL) that contains only users who have the City attribute set to Seattle. The solution must ensure that any new users who have the City attribute of Seattle are added automatically to the new GAL. What should you do? L. 

A. From the Azure Active Directory admin center, create an Office 365 group that uses a dynamic membership rule.
 B. From the Exchange admin center, create a new GA
C. Run the New-EmailAddressPolicy cmdlet to create a new email address policy that uses a recipient filter. 
D. Run the New-GlobalAddressList cmdlet to create a new address list. 

Show Answer

Question # 34

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com. You need to prevent all users from performing the following tasks: Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com. The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet. Solution: You create two new remote domains. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 35

Your company has a Microsoft Exchange Server 2019 organization that contains two servers in a database availability group (DAG). The customer service department at the company uses public folders to receive customer communications. Only users in the customer service department can read items in the folders. For a new customer, you create a mail-enabled public folder that has the default settings. The customer reports that when she sends an email message to the email address of the public folder, she receives a non-delivery report (NDR). You need to ensure that the public folder can receive email. Which public permissions should you configure in Microsoft Outlook?

A. Grant the Author permission to the Default group 
B. Grant the Author permission to the Anonymous group 
C. Grant the Create items permission to the Anonymous group 
D. Grant the Create items permission to the Default group 

Show Answer

Question # 36

You have a Microsoft Exchange Server 2019 organization that uses an Edge Server. You plan to implement a hybrid deployment between Exchange Online and Exchange Server. You need to ensure that all the email between Exchange Online and Exchange Server 2019 is sent by using the Edge Server. Which two hybrid configuration topologies could you deploy to meet the requirements? Each correct answer presents a complete solution. 

A. Modern Minimal 
B. Classic Minimal 
C. Classic Full 
D. Classic Express 
E. Modern Full 

Show Answer

Question # 37

Your on-premises network contains a proxy server and a firewall. The proxy server is configured to inspect the contents of HTTP and HTTPS sessions to identify disallowed content. Only the proxy server can connect to the internet through the firewall. You implement Microsoft Exchange Online. Users report that they receive an error message when they attempt to connect to their mailbox by using Microsoft Outlook. From the internal network, you connect to https://outlookoffice.com/mail and discover a certificate error. You discover that the certificate error contains information about a certificate issued by your company's internal certification authority (CA). You need to ensure that all the users can connect successfully to their mailbox. What should you do? 

A. Install a new root CA certificate on the client computer of each user. 
B. Configure client computers to bypass the proxy server when they access https://*.microsoft.com. 
C. Disable HTTPS content inspection on the proxy server. 
D. Install a new root CA certificate on the proxy server. 

Show Answer

Question # 38

You have a hybrid deployment that contains a Microsoft exchange Online tenant and anon premises Exchange Server 2019 server named Server1. Alt users use an email address suffix of @contoso.com. On Server1, you create a new mailbox that uses an email address of [email protected] Users hosted in Exchange Online report that they receive a non-delivery report (NDR) When they attempt to send email messages to [email protected]. The NDR contains the following text: "User1 wasn't found at contoso.com." You verify that the Exchange Online users can send email successfully to the other mailboxes hosted on Server1. Users hosted on Server1 can send email to [email protected] successfully. You need to identify what causes the email delivery to fail. What should you use? 

A. the Azure Active Directory admin center 
B. the Exchange admin center 
C. Azure AD Connect Health 
D. the on-premises Exchange admin center 

Show Answer

Question # 39

You have 1,000 user accounts that are each licensed for Microsoft 365. Each user account has a Microsoft Exchange Online mailbox. Ten of the user accounts are configured as service accounts for applications. The applications send event notifications to the mailboxes of the service accounts by using SMTP. The developers of each application have delegated access to the mailbox of their respective application. You need to ensure that all the event notifications sent by the applications are retained in the service account mailboxes so that new developers can review older notifications. The developers must be able to view only the notifications for their respective application. What should you do?

A. Replace the service account mailboxes with a single user mailbox that contains a folder for each application. 
B. Replace the service account mailboxes with a single user mailbox that contains Power Automate rules. 
C. Convert the service account mailboxes into shared mailboxes. 
D. Convert the service account mailboxes into mail-enabled users. 

Show Answer

Question # 40

You have a Microsoft 365 subscription. A safe attachments policy that uses Dynamic Delivery is applied to all recipients who match your SMTP domains. You need to prevent attachments form being scanned when internal users send email to one another. What should you do? 

A. From the Security & and Compliance admin center, modify the safe attachments policy. 
B. From the Security & and Compliance admin center, modify the Service assurance settings. 
C. From the Exchange admin center, create a transport rule. 
D. From the Exchange admin center, modify the malware filter. 

Show Answer

Question # 41

You have a Microsoft Exchange Online tenant. Remote users report that they receive an error message when they attempt to add their email account to Microsoft Outlook. You need to confirm that the DNS records resolve correctly for the users. Which two DNS records should you test? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. autodiscover.outlook.com 
B. smtp.office365.com 
C. outlook.office365.com 
D. security.microsoft365.com 
E. portal.office.com 

Show Answer

Question # 42

Your company named Contoso, Ltd. has a Microsoft Exchange Online subscription. You have several transport rules. The rules automatically apply a disclaimer to email messages that contain certain keywords in the subject and are sent to recipients in an email domain named fabrikam.com. You receive a report that some messages are delivered without the disclaimer. You need to view which transport rules were applied to messages sent to the fabrikam.com recipients. What should you use? 

A. the SMTP protocol logs 
B. a URL trace 
C. the transport server logs 
D. a message trace 

Show Answer

Question # 43

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft 365 subscription. Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages. Users in the marketing department of the company report that they must be able to access all the links embedded in email messages. You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users. Solution: You modify the Global settings Safe Links policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 44

You have a Microsoft Exchange Online subscription. You need to prevent all Android devices from using Exchange ActiveSync to sync email. Other devices must be allowed to sync email by using Exchange ActiveSync. What should you use? 

A. data loss prevention (DLP) policies 
B. Exchange ActiveSync access settings 
C. device access rules 
D. mobile device mailbox policies 

Show Answer

Question # 45

Your company has a Microsoft Exchange Server 2019 hybrid deployment. The company has a finance department. You need to move all the on-premises mailboxes of the finance department to Exchange Online. The bulk of the move operation must occur during a weekend when the company’s Internet traffic is lowest. The move must then be finalized the following Monday. The solution must minimize disruption to end users. What should you do first?

A. Schedule a task that runs the New-MoveRequest cmdlet and specifies the Remote parameter. 
B. Run the New-MigrationBatch cmdlet and specify the MoveOptions parameter. 
C. Run the New-MigrationBatch cmdlet and specify the CompleteAfter parameter.
 D. Create a script that moves most of the mailboxes on Friday at 22:00 and the remaining mailboxes on Monday at 09:00. 

Show Answer

Question # 46

You manage an Exchange Online tenant. You plan to migrate on-premises Microsoft Exchange Server mailboxes by using a cutover migration. You need to grant the required permissions to the migration administrator account to complete the migration. The solution must use the principle of least privilege. Which three permissions should you grant? Each correct answer presents a complete solution NOTE: Each correct selection is worth one point. 

A. the FullAccess permission on each on-premises mailbox and the WriteProperty permission to modify the TargetAddress property of the on-premises user account 
B. the Receive As permission on the on-premises mailbox database that stores the user mailboxes and the WriteProperty permission to modify the TargetAddress property of the on-premises user account 
C. Domain Admins group member in Active Directory Domain Services (AD DS) of the onpremises Exchange organization 
D. the FullAccess permission on each on-premises mailbox
 E. the Receive As permission on the on-premises mailbox database that stores the user mailboxes 

Show Answer

Question # 47

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 users. A user named User1 receives a non-delivery report (NDR) when attempting to send an email message to an internal group named [email protected]. The NDR contains the following text: “5.7.1 Delivery not authorized.” You need to ensure that User1 can send email to [email protected] successfully. Solution: You modify the properties of User1.

A. Yes 
B. No 

Show Answer

Question # 48

You have a Microsoft 365 environment that contains 1,000 mailboxes. You need to ensure that only an administrator named Admin1 can use the Exchange Management Shell to manage What should you do? 

A. Create a conditional access policy and apply the policy to all users. 
B. For all users, run the set-user cmdlet and specify the -RemotePowershellEnabled parameter. 
C. Create a conditional access policy and apply the policy to Admin1. 
D. For Admin1, run the set-user cmdlet and specify the -RemotePowerShellEnabled parameter. 

Show Answer

Question # 49

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. Several users hosted in Microsoft 365 report that when they send email messages to mailboxes hosted in Exchange Server 2019, the messages fail to be delivered. You need to examine the non-delivery reports (NDRs) sent to the Microsoft 365 mailboxes. Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. From an on-premises Exchange server, use the transport logs. 
B. From an on-premises Exchange server, use the SMTP logs. 
C. From the on-premises Exchange admin center, use a message trace. 
D. From the Exchange admin center, use a message trace. 
E. From the Exchange Management Shell, run the Get-Queue cmdlet. 

Show Answer

Question # 50

You have a Microsoft Exchange Server 2019 organization. You need to configure the organization to use Exchange Online Protection (EOP) for the message hygiene of all inbound and outbound email. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Install an Exchange hybrid server. 
B. For the organization, configure an MX record that points to Microsoft Office 365. 
C. Create a hybrid organization relationship. 
D. From the on-premises organization, create a connector to relay outbound email to Microsoft Office 365. 
E. Create a Microsoft Office 365 Connector to the on-premises organization. 
F. Create on-premises transport rules to control the outbound message flow. 

Show Answer

Question # 51

You have a Microsoft Exchange Online tenant that uses a third-party email gateway device. You discover that inbound email messages are delayed. The gateway device receives the following error message when sending email to the tenant. 4.7.500 Server busy, please try again later. You need to prevent inbound email delays. What should you configure?

A. Organization Sharing 
B. an MX record for the domain 
C. a transport rule 
D. a connector 

Show Answer

Question # 52

You have a Microsoft 365 subscription that uses a default domain named contoso.com. Users report that email messages from a domain named fabrikam.com are identified as spam even though the messages are legitimate. You need to prevent messages from fabrikam.com from being identified as spam. What should you do?

A. Enable the Zero-hour auto purge (ZAP) email protection feature.
 B. Enable the safe list on a connection filter. 
C. Edit the default mail flow rule to bypass the spam filter. 
D. Modify the IP Allow list of a connection filter policy. 

Show Answer

Question # 53

You have a Microsoft Exchange Server 2019 organization. You need to ensure that all email is retained for one year, and then moved to an archive mailbox. What should you use? 

A. a default policy tag 
B. a data loss prevention (DLP) policy 
C. a personal tag
D. a retention policy tag 

Show Answer

Question # 54

Your company has an Exchange Server 2019 organization that has servers deployed in two Active Directory forests named adatum.com and contoso.com The organization contains five Mailbox servers and two Edge Transport servers. You deploy Microsoft 365 and configure Exchange Online. You plan to configure hybrid mail transport. You need to identify the number of third-party CA certificates that must be used in the deployment. What is the minimum number of certificates?

A. 1 
B. 2 
C. 4 
D. 5 

Show Answer

Question # 55

You manage a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are located both on-premises and in the cloud. You need to configure the deployment so that the on-premises mailboxes can access the public folders. Which three commands should you run? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Sync-MailPublicFolders.ps1 
B. Set-OrganizationConfig –PublicFoldersEnabled Remote 
C. Import-PublicFolderMailboxes.ps1 
D. Sync-MailPublicFoldersCloudToOnprem.ps1 
E. Set-OrganizationConfig –PublicFoldersEnabled Local –RemotePublicFolderMailboxes PFMailbox1 

Show Answer

Question # 56

You have a hybrid deployment of Microsoft Exchange Server 2019. Users in your company's sales department have on-premises mailboxes and PST files. You need to migrate the PST files to archive mailboxes. The archive mailboxes must reside in Exchange Online. What should you do first? 

A. From Exchange Management Shell, run the Enable-Mailbox cmdlet and specify the -Archive parameter. 
B. From Exchange Management Shell, run the New-MoveRequest cmdlet. 
C. From Exchange Online PowerShell, run the Set-Mailbox cmdlet and specify the -ArchiveStatus parameter. 
D. From Exchange Online PowerShell, run the New-Mailbox cmdlet and specify the -Archive parameter. 

Show Answer

Question # 57

You have a Microsoft Exchange Online tenant named contoso.com. Several users report that email messages sent to the users at another company named fabrikam.com contain a Winmail.dat attachment. You need to prevent the fabrikam.com users from receiving Winmail.dat attachments. What should you do?

A. Configure a remote domain that has the TNEFEnabled parameter set to $False. 
B. Create an Outbound connector that has the validationRecipients parameter set to contoso.com. 
C. Create an Outbound connector that has the validationRecipients parameter set to fabrikam.com. 
D. Configure a remote domain that has the TrustedMailoutboundEnabled parameter set to $False. 

Show Answer

Question # 58

You have a Microsoft Exchange Online tenant that contains a user named User1. You need to grant User1 the Send on Behalf permission for 20 mailboxes. Which PowerShell cmdlet should you use? 

A. Add-MailboxPermission 
B. Add-MailboxFolderPermission 
C. Set-Mailbox 
D. Add-RecipientPermission 

Show Answer

Question # 59

You have an Exchange Online tenant. You need to ensure that the users in your company’s finance department can select email messages that will be deleted automatically one year later. The solution must apply only to the finance department users. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Publish a label to the finance department. 
B. Create a data loss prevention (DLP) policy that uses the sensitive information type. 
C. For each mailbox in the finance department, configure the retention policy settings. 
D. Create a label that has a retention setting of one year. 
E. For each mailbox in the finance department, configure Message Delivery Restrictions. 

Show Answer

Question # 60

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization. A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email. You need to configure the deployment to meet the security policy requirement. Solution: From the Exchange organization, you modify the properties of the Send connectors. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 61

You have a Microsoft 365 E5 subscription. A user attempts to send an email message to an external recipient and receives the following error message: “Your message couldn’t be delivered because you weren’t recognized as a valid sender. The most common reason for this is that your email address is suspected of sending spam and it’s no longer allowed to send messages outside of your organization. Contact your mail admin for assistance. Remote Server returned ‘550 5.1.8 Access denied, bad outbound sender’.” You need to ensure that the user send email to external recipients. What should you do?

A. compliance management in the Exchange admin center 
B. Data loss prevention in the Security & Compliance admin center 
C. Threat management in the Security & Compliance admin center
D. action center in the Exchange admin center 

Show Answer

Question # 62

You have a Microsoft Exchange Server 2019 organization. You implement hybrid connectivity to Microsoft 365. You need to ensure that users can use the Microsoft Outlook mobile app on their device to access their onpremises mailbox. What should you do? 

A. Run Azure AD Connect. 
B. Run Set-CASMailbox -OutlookMobileEnabled for each user. 
C. Enable Hybrid Modern Authentication (HMA). 
D. Configure Active Directory Federation Services (AD FS). 

Show Answer

Question # 63

You have a Microsoft Exchange Server 2019 organization. You purchase a Microsoft Office 365 E5 subscription. You plan to implement Exchange Modern Hybrid and free/busy sharing. Which two components should you configure for the planned implementations? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. a sharing policy 
B. a federation trust 
C. a relying party trust 
D. Active Directory Lightweight Directory Services (AD LDS)
 E. an organization relationship 

Show Answer

Question # 64

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains the following email domains:  Adatum.com Contoso.com Fabrikam.com When external recipients receive email messages from the users in the tenant, all the messages are delivered by using the @contoso.com email domain. You need to ensure that the users send email by using the @fabrikam.com email domain. Solution: You create an email address policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 65

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 users. A user named User1 receives a non-delivery report (NDR) when attempting to send an email message to an internal group named [email protected]. The NDR contains the following text: “5.7.1 Delivery not authorized.” You need to ensure that User1 can send email to [email protected] successfully. Solution: You modify the properties of a mail flow rul

A. Yes 
B. No 

Show Answer

Question # 66

You have a Microsoft Exchange Online tenant that contains 1,000 user mailboxes and 10 main enabled users. The mail-enabled users have email addresses in two SMTP domains named fabrikam.com and contoso.com. You need to convert the mail-enabled users into user mailboxes. What should you do first? 

A. Add the users to an Office 365 group. 
B. Assign a license to each user. 
C. Remove the remote domains of fabrikam.com and contoso.com 
D. Modify the email forwarding settings of each user. 

Show Answer

Question # 67

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains the following email domains: Adatum.com Contoso.com Fabrikam.com When external recipients receive email messages from the users in the tenant, all the messages are delivered by using the @contoso.com email domain. You need to ensure that the users send email by using the @fabrikam.com email domain. Solution: From the Exchange Management Shell, you run Set-Mailbox cmdlet. Does this meet the goal?  

A. Yes 
B. No 

Show Answer

Question # 68

You have a Microsoft 365 subscription. Several users report today that they cannot access email from their mobile device. They successfully accessed their email from the same device yesterday. You need to identify which mobile device access rule applies to the devices. Which cmdlet should you run? 

A. Get-MsolDevice 
B. Get-DeviceTenantRule
C. Get-MobileDevice 
D. Get- ActiveSyncMailboxPolicy 

Show Answer

Question # 69

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center. Solution: You assign the Reports reader role to User1. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 70

You have a Microsoft Exchange Server 2019 organization that contains 5,000 mailboxes. You need to migrate 1,000 users to Exchange Online. The migrated users must support Hybrid Modern Authentication (HMA). Which migration method should you use? 

A. cutover migration 
B. full hybrid migration 
C. minimal hybrid migration 
D. express hybrid migration 

Show Answer

Question # 71

Your company has a Microsoft Exchange Server 2019 organization. You are auditing the Litigation Hold on the mailboxes of the company’s research and development department. You discover that the mailbox of a user named User1 has a Litigation Hold enabled. You need to discover who placed the Litigation Hold on the mailbox of User1, and when the Litigation Hold was enabled. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. From the Exchange admin center, run an In-place eDiscovery and Hold report.
 B. From PowerShell, run the Get-Mailbox cmdlet. 
C. From the Exchange admin center. run a per-mailbox Litigation Hold report. 
D. From PowerShell, run the Get-MailboxStatistics cmdlet. 

Show Answer

Question # 72

You have a Microsoft Exchange Server 2019 organization. You need to provide a user named User1 with the ability to create and manage transport rules. To which management role group should you add User1? 

A. Compliance Management
 B. Server Management 
C. Records Management 
D. Hygiene Management 

Show Answer

Question # 73

You plan to use the Microsoft Office 365 Import service to import PST files. You need to create a new user account to perform the import. The solution must use the principle of least privilege. Which two roles should you assign to the user account? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. the Recipient Management role in Office 365 
B. the Organization Management role in Office 365 
C. the Mailbox Import Export role in Office 365 
D. the Global reader role in Azure Active Directory (Azure AD) 
E. the Global administrator role in Office 365 

Show Answer

Question # 74

You have a Microsoft Exchange Online tenant. The mail exchanger (MX) record of your company points to a third-party message hygiene provider that forwards email messages to the tenant. You need to ensure that Exchange Online can filter the email by using the original IP address of the sender's company. What should you do? 

A. Modify the Inbound connector to use the -EFSkipIPs parameter. 
B. Modify the Receive connector to use the -EFSkipIPs parameter. 
C. Enable DMARC. 
D. Create a remote domain. 

Show Answer

Question # 75

You have a Microsoft Exchange Server 2019 organization. Users access their email by using Microsoft Outlook 2019. The users report that when a mailbox is provisioned for a new user, there is a delay of many hours before the new user appears in the global address list (GAL). From Outlook on the web, the users can see the new user in the GAL immediately. You need to reduce the amount of time it takes for new users to appear in the GAL in Outlook 2019. What should you do? 

A. Modify the default email address policy. 
B. Create as address book policy (ABP). 
C. Create a scheduled task that runs the Update-GlobalAddressList cmdlet. 
D. Modify the offline address (OAB) schedule. 

Show Answer

Question # 76

Your company has a Microsoft Exchange Server 2019 hybrid deployment. The company has a finance department. You need to move all the on-premises mailboxes of the finance department to Exchange Online. The bulk of the move operation must occur during a weekend when the company’s Internet traffic is lowest. The move must then be finalized the following Monday. The solution must minimize disruption to end users. What should you do first? 

A. Schedule a task that runs the New-MoveRequest cmdlet and specifies the Remote parameter 
B. Create a batch migration and clear the Automatically complete the migration batch check box 
C. Run the New-MigrationBatch cmdlet and specify the MoveOptions parameter 
D. Create a batch migration and select the Automatically complete the migration batch check box 

Show Answer

Question # 77

You use an IMAP-based email system. You purchase a Microsoft 365 subscription. In Exchange Online, you create mailboxes for all users. You need to migrate all the email accounts of all the users to Exchange Online. Which three components should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.  

A. a migration batch 
B. a CSV migration file 
C. an inbound connector 
D. an accepted domain
 E. a remote domain 
F. a migration endpoint 

Show Answer

Question # 78

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes. All the users in the sales department at your company are in a group named Sales. The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You modify the Exchange Online Protection (EOP) settings. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 79

You have a Microsoft Exchange Online tenant. All users are assigned only an Office 365 Enterprise E3 license. You need to ensure that the users can use only Microsoft Outlook to connect to their Microsoft 365 mailbox when they connect from an Android device. What should you create? 

A. an Outlook Web App policy in Exchange Online 
B. a connection filter policy in Exchange Online Protection (EOP) 
C. an Exchange ActiveSync device access rule 
D. an app protection policy in Microsoft Endpoint Manager 

Show Answer

Question # 80

You have a Microsoft Exchange Server 2019 organization. You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential. What should you do? 

A. Add User1 to the Discovery Management management role group. 
B. Assign the Legal Hold and Mailbox Import Export management roles to User1. 
C. Add User1 to the Records Management management role group. 
D. Add User1 to the Compliance Management management role group. 

Show Answer

Question # 81

You have a Microsoft 365 environment that contains 1,000 mobile devices. You need to recommend a solution to prevent all the mobile devices that use the Exchange ActiveSync protocol from authenticating by using Basic authentication. Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Configure the CAS mailbox settings for each mailbox.
 B. Implement Azure Multi-Factor Authentication (MFA). 
C. Create an authentication policy. 
D. Create a conditional access policy. 
E. Create a device access rule. 

Show Answer

Question # 82

Your company has a Microsoft Exchange Server 2019 hybrid deployment. You are migrating mailboxes to Exchange Online by using remote mailbox move requests. A recent security breach at the company required that the passwords of all privileged accounts be changed. Since the password change, mailbox move requests are failing. You need to ensure that the mailbox migration can resume. What should you do first?

A. From Exchange on-premises, run Set-MigrationEndpoint. 
B. From Exchange on-premises, run Set-MigrationConfig. 
C. From Exchange Online, run Set-MigrationConfig. 
D. From Exchange Online, run Set-MigrationEndpoint. 
E. Run iisreset /noforce on all the Exchange servers that have MRSProxy enabled. 

Show Answer

Question # 83

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. The tenant uses an email domain named @contoso.com. You recently purchased an email domain named fabrikam.com. You need to ensure that all the users in the tenant can receive email messages by using the @fabrikam.com email domain. The solution must ensure that the users can continue to receive email by using the @contoso.com email domain. Which three actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point. 

A. From Azure AD Connect add a domain for fabrikam.com. 
B. From the on-premises Exchange admin center, add an accepted domain for fabrikam.com.
C. From the Exchange Management Shell, create a script that runs the 
D. From the Microsoft 365 admin center, verify the fabrikam.com email domain 
E. From the on-premises Exchange admin center, modify the email address policy 
F. From the Microsoft 365 admin center, add the fabrikam.com email domain. 

Show Answer

Question # 84

You have a Microsoft Exchange Online tenant. All users use an email address suffix of @contoso.com. You need to ensure that all the email messages sent to users who use an email address suffix of @fabrikam.com are encrypted automatically. The solution must ensure that the messages can be inspected for data loss prevention (DLP) rules before they are encrypted. What should you create?

A. an Outbound connector 
B. a safe attachments policy 
C. a remote domain 
D. a mail flow rule 

Show Answer

Question # 85

You have a Microsoft Exchange Server 2019 hybrid deployment. You migrate public folders from on-premises to Exchange Online by using the batch migration process. After the batch migration completes, additional public folders are created on-premises. You need to migrate the new on-premises public folders to Exchange Online. What should you do? 

A. Export the contents of the folders to a PST file, and then import the PST files by using Outlook PST export. 
B. Create a new public folder migration batch that contains only the new folders. 
C. Repeat the original batch migration process and add the new folders to the migration batch.

Show Answer

Question # 86

You manage a hybrid deployment between Microsoft Exchange Online and on-premises Exchange Server 2019. The deployment contains a primary SMTP domain named contoso.com. Users have email addresses that use a syntax of [email protected]. A user named Ben Smith receives a new client computer. You configure the computer1 taccess Ben Smith's mailbox. Ben Smith reports that he cannot connect to his mailbox from the new computer. You verify that other users can connect successfully to their mailbox and that new users can discover their mailboxes by using Autodiscover. You need to ensure that Ben Smith can connect to his mailbox from the new computer. What should you do?

A. Modify the primarySmtpAddress property for the mailbox of Ben Smith. 
B. Modify the email address of Ben Smith to use a syntax of [email protected] 
C. Modify the RemoteRoutingAddress parameter for the mailbox of Ben Smith.
 D. Modify the email address of Ben Smith to use a syntax of [email protected] 

Show Answer

Question # 87

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 organization that contains 200 mailboxes. You need to add a second email address to each mailbox. The address must have a syntax that uses the first letter of each user’s last name, followed by the user’s first name, and then @fabrikam.com. Solution: You create an email address policy that uses the %1s%[email protected] email address format. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 88

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization. A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email. You need to configure the deployment to meet the security policy requirement. Solution: From Microsoft 365, you create a supervision policy. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 89

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes. A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You create a connection filter. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 90

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes. All the users in the sales department at your company are in a group named Sales. The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You configure a mailbox quota. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 91

You have 1,000 user accounts that are each licensed for Microsoft 365. Each user account has a Microsoft Exchange Online mailbox. Ten of the user accounts are configured as service accounts for applications. The applications send event notifications to the mailboxes of the service accounts by using SMTP. The developers of each application have delegated access to the mailbox of their respective application. The solution must minimize licensing costs. What should you do?

A. Replace the service account mailboxes with a Microsoft 365 group
 B. Convert the service account mailboxes into mail-enabled contacts
 C. Replace the service account mailboxes with a single user mailbox 
D. Replace the service account mailboxes with a single user mailbox that contains a folder for each application. 

Show Answer

Question # 92

You have a Microsoft Exchange Online subscription. You need to generate a CSV file containing all the email messages that failed to send from the [email protected] email address during the last 30 days. What are two possible ways to achieve the goal? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. From Exchange Online PowerShell, run the Get-MessageTrace cmdlet. 
B. From the Exchange admin center, run a message trace. 
C. From the Security & Compliance admin center, export the mailbox audit logs. 
D. From Exchange Online PowerShell, run the Get-MessagetraceDetail cmdlet. 
E. From the Security & Compliance admin center, run a message trace.  

Show Answer

Question # 93

You have a Microsoft Exchange Online tenant that contains 1,000 users. You need to prevent 100 users in the finance department at your company from using Direct file access when using Outlook on the web. The solution must ensure that all the other users in the company can continue to use Direct file access when using Outlook on the web. What should you do?

 A. Modify the default sharing policy. 
B. Create and assign an Outlook Web App policy. 
C. Create and assign a sharing policy. 
D. Modify the default Outlook Web App policy. 

Show Answer

Question # 94

You have a Microsoft Exchange Server 2019 hybrid deployment. You need to remove the email addresses of your company's executives from the global address list (GAL). What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. 

A. Run the Set-Mailbox cmdlet to modify the properties of each executive's mailbox.
B. From the Exchange admin center, modify the properties of the GAL. 
C. From the Exchange admin center, modify the properties of each executive's mailbox. 
D. Run the Set-GlobalAddressList cmdlet to modify the properties of the GAL. 

Show Answer

Question # 95

All the users in your company have Microsoft 365 mailboxes. Each user connects to Microsoft Exchange Online and OneDrive for Business from a personal computer that runs Windows 10. You need to ensure that the users can save attachments to OneDrive for Business only when they connect to their mailbox from Outlook on the web. What should you create?

 A. an app protection policy in Microsoft Endpoint Manager 
B. a device compliance policy in Microsoft Endpoint Manager 
C. an Outlook Web App policy in Exchange Online 
D. an Exchange ActiveSync device access rule 

Show Answer

Question # 96

You have an Exchange Online tenant that contains several hundred mailboxes. Several users report that email messages from an SMTP domain named @fabrikam.com often fail to be delivered to their mailbox. You need to increase the likelihood that the email messages from the @fabrikam.com are delivered successfully to the users in the tenant. 

A. From the Security & Compliance admin center, modify the anti-spam policy settings. 
B. From the Security & Compliance admin center, modify the DKIM settings. 
C. From your public DNS zones, create a Sender Policy Framework (SPF) TXT record. 
D. From the Security & Compliance admin center, create a new ATP anti-phishing policy. 

Show Answer

Question # 97

You have a Microsoft Exchange Server 2019 organization. You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential. What should you do? 

A. Add User1 to the Organization Management management role group. 
B. Add User1 to the Records Management management role group. 
C. Assign the mailbox Search and Mailbox Import Export 
D. Assign the Mailbox Search and Legal Hold management roles to User1. 

Show Answer

Question # 98

You have a Microsoft Exchange Online tenant. You discover that a virus has infected the mailboxes of several users. The users are currently spreading the virus by emailing attachments that contain the virus. You need to temporarily prevent all users from emailing attachments while you remove the virus from all the mailboxes. What should you configure? 

A. a connection filter
 B. a mail flow rule 
 C. a connector 
D. a spam fitter

Show Answer

Question # 99

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription. You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center. Solution: You assign the Security Reader role to User1. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 100

You have a Microsoft 365 tenant that contains a user named User1. User1 reports that she cannot configure a mail profile in Microsoft Outlook for Windows. User1 receives the following error message: "Encrypted connection to your mail server is not available." You verify that User1 is assigned a Microsoft Office 365 Enterprise F3 license and can send email messages from her account by using Outlook on the web. You need to ensure that User1 can connect to Outlook successfully. What should you do?

A. Run the Microsoft Support and Recovery Assistant for Office 365. 
B. Activate the installation of Office 365 ProPlus. 
C. Modify the license assigned to User1.
 D. Install a new certificate on the computer of User1. 

Show Answer

Question # 101

You have a Microsoft Exchange Online tenant that contains two SMTP domains named contoso.com and litwareinc.com. You need to ensure that users who have a contoso.com email address are prevented from seeing users who have a litwareinc.com email address in the global address list (GAL). The litwareinc.com users must be able to see the contoso.com users in the GAL. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Modify the Default Address book policy to exclude the litwareinc.com users 
B. Create an offline address book (OAB) that contains the contoso.com users 
C. Create a separate GAL that contains the contoso.com users 
D. Modify the default GAL to exclude the litwareinc.com users 
E. Create a new email address policy for the contoso.com users 
F. Create a new address book policy (ABP) and assign the ABP to the contoso.com mailboxes 

Show Answer

Question # 102

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has a Microsoft 365 subscription. Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages. Users in the marketing department of the company report that they must be able to access all the links embedded in email messages. You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users. Solution: You create a new safe links policy and apply the policy to finance department users. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 103

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com. You need to prevent all users from performing the following tasks: Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com. The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet. Solution: You create one mail flow rule. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 104

Your company has a Microsoft Exchange Server 2019 hybrid deployment. Users in the advertising department and the editorial department of the company have mailboxes in Exchange Online. A company policy requires that the advertising department users and the editorial department users be segmented based on the following requirements: The advertising department users must not see the editorial department users in the global address list (GAL). The editorial department users must not see the advertising department users in the GAL. The editorial department users must be treated as external recipients of the advertising department users. The advertising department users must be treated as external recipients of the editorial department users. You need to recommend a solution that meets the requirements and minimize costs and effort. What should you recommend?

A. In the Exchange Online tenant, create separate address book policies (ABPs) for the advertising and editorial departments. 
B. Migrate all the mailboxes of the advertising department to the on-premises organization, and then enable address book policy (ABP) routing. 
C. Purchase an additional Microsoft 365 subscription, and then migrate all the mailboxes of the advertising department to the new subscription. 
D. Create two address book policies (ABPs) in Exchange Online, and then enable ABP routing for the Exchange Online tenant. 

Show Answer

Question # 105

You have a Microsoft Exchange Online tenant that contains a user named User1. User1 has a mobile device. You need to enable Exchange ActiveSync logging for User1 and retrieve the log files. Which two Exchange Online PowerShell cmdlets should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Get-ActiveSyncDevice 
B. Set-ActiveSyncMailboxPolicy 
C. Set-ClientAccessRule 
D. Get-MobileDeviceStatistics 
E. Set-CASMailbox 

Show Answer

Question # 106

You have a Microsoft Exchange Server 2019 organization that contains several thousand users. Most users connect to their mailbox by using a mobile device. A new corporate security policy requires that when connecting from a mobile device, all users on devices that run iOS must use the Outlook mobile app only. You need to modify the organization to meet the security requirement. What should you do? 

A. From the Exchange Management Shell, run the New-DeviceConditionalAccessPolicy cmdlet. 
B. From the Exchange admin center, create a mobile device access rule. 
C. From the Exchange Management Shell, run the New-DeviceConfigurationRule cmdlet. 
D. From the Exchange admin center, modify the default mobile device mailbox policy. 

Show Answer

Question # 107

You have a Microsoft Exchange Online tenant named contoso.com. You create a partnership with two other companies named fabhkam.com and wingtiptoys.com. All the mailboxes of fabnkam.com are hosted in Microsoft 365. All the mailboxes of wingtiptoys.com are hosted in an on-premises Exchange Server 2019 organization. You need to ensure that all the email messages sent from contoso.com to fabrikam.com and wingtiptoys.com is encrypted by using TLS. What should you do? 

A. Configure one connector. 
B. Create an organizational relationship. 
C. Create two remote domains. 
D. Run the Office 365 Exchange Hybrid Configuration wizard.
 E. Configure two mail flow rules. 

Show Answer

Question # 108

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains the following email domains: Adatum.com Contoso.com Fabrikam.com When external recipients receive email messages from the users in the tenant, all the messages are delivered by using the @contoso.com email domain. You need to ensure that the users send email by using the @fabrikam.com email domain. Solution: You modify the properties of the fabrikam.com accepted domain. Does this meet the goal?

A. Yes
 B. No 

Show Answer

Question # 109

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization. A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email. You need to configure the deployment to meet the security policy requirement. Solution: From the Exchange organization, you create a data loss prevention (DLP) policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 110

You have a hybrid deployment between a Microsoft Exchange Online tenant and an onpremises Exchange Server 2019 organization. Users report that emails sent from Exchange Online mailboxes to the on-premises Exchange Server mailboxes are undelivered. You need to review the non-delivery report (NDR) for each undelivered email. What should you use? 

A. message trace in the Exchange admin center 
B. auditing in the Exchange admin center 
C. the SMTP protocol logs in Exchange Server 
D. the transport logs in Exchange Server 

Show Answer

Question # 111

You have an on-premises Microsoft Exchange Server 2019 organization. You plan to configure the environment to support a hybrid deployment. You need to ensure that you can migrate mailboxes from the on-premises organization to Exchange Online. Which two ports should be open between Exchange Online and the on-premises organization? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. 25
B. 80 
C. 143
 D. 389 
E. 443 
F. 993

Show Answer

Question # 112

Your network contains an Active Directory domain named corp.contoso.com. The domain contains client computers that have Microsoft Office 36S Apps installed. You have a hybrid deployment that contains a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 server named Server1. All recipients use an email address suffix of Contoso.com. You migrate all the Exchange Server recipients to Exchange Online, and then decommission Server1. Users connected to the internal network report that they receive an Autodiscover error when they open Microsoft Outlook. You need to ensure that all users can connect successfully to their mailbox by using Outlook. Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. From the corp.contoso.com DNS zone, modify the Autodiscover host (A) record. 
B. Add an accepted domain. 
C. From the contoso.com DNS zone, modify the Autodiscover alias (CNAME) record 
D. Modify the name of the TLS certificate. 
E. From the domain, modify the Autodiscover service connection point (SCP). 

Show Answer

Question # 113

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated

A. Yes 
B. No 

Show Answer

Question # 114

You have a Microsoft Exchange Online tenant that uses a third-party email hygiene system named Service1. Service1 blocks all encrypted email. All external email is routed through Service1 by using a connector. Users classify email by using sensitivity labels. Emails classified as Secret are encrypted automatically. You need to ensure that the users can send emails classified as Secret to external recipients. Which two items should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. a remote domain 
B. a connector 
C. a data loss prevention (DLP) policy 
D. a mail flow rule 
E. a label policy 

Show Answer

Question # 115

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes. All the users in the sales department at your company are in a group named Sales. The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You modify the permissions granted to the Sales group. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 116

You deploy a Microsoft Exchange Server 2019 organization. You need to ensure that users of all new mailboxes are prevented from editing their personal information. What should you do? 

A. From the Exchange admin center, create a new role assignment policy. 
B. From PowerShell, run the New-Ro1eAssignmentPolicy cmdlet and specify the -isDefault parameter. 
C. From the Exchange admin center, create a new role group and assign the role group to Domain Users. 
D. From PowerShell, run the New-RoleGroup cmdlet and specify the -CustomRecipientWriteScope parameter. 

Show Answer

Question # 117

Your company has a Microsoft Exchange Online tenant named contoso.com. The company acquires a company named ADatum Corporation that uses a third-party IMAP email service named adatum.com. You plan to migrate the mailbox content of adatum.com to contoso.com. You need to connect Microsoft 365 to the IMAP email service. What should you create first?

A. a new organization relationship 
B. a new migration endpoint 
C. a new remote domain 
D. a new staged migration batch 

Show Answer

Question # 118

All the users in your company are licensed for Microsoft 365 and connect to their mailbox from client computers that run Windows 10. The users connect to Outlook on the web by using the following browsers: Google Chrome Microsoft Edge Firefox You apply restrictions for Outlook on the web sessions by using app protection policies in Microsoft Endpoint Manager, and then you deploy several Outlook Web App policies. You need to ensure that the users can continue to connect successfully to their mailbox by using Outlook on the web. What should you do?

A. Enroll all the computers in Microsoft Intune 
B. Instruct all the users to connect by using Microsoft Edge only 
C. From Microsoft Cloud App Security, configure a sanctioned application 

Show Answer

Question # 119

You have a Microsoft Exchange Online tenant that contains 1,000 users. A user recently sent an email message that was never received by a recipient on the internet. From the Exchange admin center, you successfully run a message trace but cannot see the message in the trace. What is the most likely reason why the message fails to appear in the message trace? 

A. The user addressed the message to multiple internal and external receipts 
B. The user encrypted the email message. 
C. Your administrative user account requires additional rights. 
D. The message is in the user's Outbox folder. 

Show Answer

Question # 120

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com. You need to prevent all users from performing the following tasks: Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com. The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet. Solution: You modify the default remote domain. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 121

You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com. Your company has a partnership with another company named fabrikam.com. You need to ensure that all email messages sent to and received by the users at fabrikam.com are encrypted by using TLS. What should you create in the Exchange admin center?

A. one connector and one remote domain 
B. one remote domain and one accepted domain 
C. one connector and one accepted domain 
D. two connectors 

Show Answer

Question # 122

You have a Microsoft Exchange Server 2019 organization. You plan to implement a hybrid deployment between Exchange Online and Exchange Server. The deployment must meet the following requirements: Support Outlook for iOS and Android. Support 500 on-premises mailboxes. Support Modern Authentication. Which hybrid configuration topology should you recommend? 

A. Classic Full
 B. Modern Minimal 
C. Modern Full 
D. Classic Minimal 

Show Answer

Question # 123

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains the following email domains: Adatum.com Contoso.com Fabrikam.com When external recipients receive email messages from the users in the tenant, all the messages are delivered by using the @contoso.com email domain. You need to ensure that the users send email by using the @fabrikam.com email domain. Solution: From the Microsoft 365 portal, you set fabrikam.com as the default domain. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 124

You have a Microsoft Exchange Online tenant. All users have Exchange Online mailboxes. Your company has 10 projectors that are used by 30 managers. You need to recommend a solution to manage the availability and scheduling of the projectors. The solution must NOT require additional Microsoft 365 licenses. What Exchange Online object should you recommend creating for each projector? 

A. a public folder 
B. a distribution list 
C. a user mailbox 
D. a resource mailbox 

Show Answer

Question # 125

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 users. A user named User1 receives a non-delivery report (NDR) when attempting to send an email message to an internal group named [email protected]. The NDR contains the following text: “5.7.1 Delivery not authorized.” You need to ensure that User1 can send email to [email protected] successfully. Solution: You modify the properties of the [email protected] group.

A. Yes 
B. No

Show Answer

Question # 126

You have a Microsoft Exchange Server 2016 hybrid deployment. You plan to migrate mailboxes from the on-premises Exchange organization to Exchange Online. You have the appropriate permissions to perform the mailbox migrations. You need to prepare the environment for the planned migration. What should you do? 

A. Disable Microsoft Outlook for the web. 
B. Install the Hybrid Agent.
 C. Run Get-MigrationBatch -Identity "MyMigrationBatch". 
D. Enable the MRSProxy service on an on-premises Exchange server. 

Show Answer

Question # 127

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes. A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You create a spam filter policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 128

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 organization that contains 200 mailboxes. You need to add a second email address to each mailbox. The address must have a syntax that uses the first letter of each user’s last name, followed by the user’s first name, and then @fabrikam.com. Solution: You create an email address policy that uses the %1g%[email protected] email address format. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 129

You have a hybrid deployment that contains a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 server named Server1. Server1 uses a certificate from a third-party certification authority (CA). The certificate is enabled for the SMTP service. You replace the certificate with a new certificate. You discover that delivery fails for all email messages sent from Server1 to your Microsoft 365 tenant. You receive the following error message for all the queued email messages: “450 4.4.101 Proxy session setup failed on Frontend with 451 4.4.0 Primary target IP address responded with 451 5.7.3 STARTTLS is required to send mail.” You need to ensure that the messages are delivered successfully from Server1 to the Microsoft 365 tenant. What should you do? 

A. From the Exchange admin center, update the certificate thumbprint in the properties of a connector 
B. From Server1, regenerate the certificate and select Make private keys exportable 
C. From the firewall, disable SMTP content inspection 
D. From Server1, enable the new certificate for the IMAP4 service 

Show Answer

Question # 130

Your network contains an Active Directory domain named fabrikam.com. You have a Microsoft Exchange Server 2019 organization that contains two Mailbox servers. The servers are members of a database availability group (DAG). You plan to implement an Exchange hybrid deployment. You are evaluating the use of the Exchange Modern Hybrid connection option during the hybrid deployment. What are two benefits of using Exchange Modern Hybrid instead of Exchange Classic Hybrid? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. allows the use of Microsoft Azure Multi-Factor Authentication (MFA) for on-premises users 
B. eliminates the need to purchase publicly trusted certificates for communication between the on-premises organization and Exchange Online 
C. preserves mailbox quotas when mailboxes are moved between the on-premises organization and Exchange Online 
D. uses Organization Configuration Transfer to configure Exchange Online 
E. allows federated sharing between the on-premises organization and Exchange Online 

Show Answer

Question # 131

You have a Microsoft Exchange Server hybrid deployment that contains Exchange 2013, Exchange 2016, and Exchange 2019 servers. All the servers have the latest Cumulative Updates (CUs) applied. You need to implement Hybrid Modern Authentication (HMA). The solution must minimize costs. What should you do first? 

A. Upgrade the Exchange 2013 servers to Exchange 2016 CU7. 
B. Add the on-premises web service URLs as Azure Active Directory (Azure AD) service principal names (SPNs). 
C. Upgrade all the servers to Exchange 2019. 
D. Create an Azure Active Directory (Azure AD) conditional access policy for Exchange Online.

Show Answer

Question # 132

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization. A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email. You need to configure the deployment to meet the security policy requirement. Solution: From Microsoft 365, you create a data loss prevention (DLP) policy. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 133

You manage a Microsoft Exchange Server 2019 organization that contains several thousand users. All the users connect to their mailbox by using a mobile device and Exchange ActiveSync. You need to prevent the users from syncing email messages that are older than 14 days to the mobile devices. What should you use? 

A. an Outlook Web App mailbox policy
 B. a mobile device mailbox policy 
C. an ActiveSync device access rule
 D. a conditional access policy 

Show Answer

Question # 134

Your company has a Microsoft Exchange Server 2019 organization. The company has 10,000 mailboxes. Each department at the company has 1,000 mailboxes. You need to ensure that when users query the global address list (GAL), they can view only the list of the users in their department. What should you create? 

A. One GAL, 10 offline address books (OABs), 10 address lists, 10 address policies (ABPs), and one email address policy 
B. 10 GALs, 10 offline address books (OABs), 10 address lists, 10 room lists, and 10 address book policies (ABPs) 
C. One GAL, 10 offline address books (OABs), 10 address lists, 10 room lists, and one address book policy (ABP) 
D. 10 GALs, 10 offline address books (OABs), 10 address lists, and 10 email address policies 

Show Answer

Question # 135

You have a Microsoft Exchange Server 2019 organization. You need to import an Edge Subscription on a Mailbox server. Which cmdlet should you run?

A. New-EdgeSubscription 
B. Start-EdgeSynchronization 
C. Set-EdgeSubscription 
D. Set-TransportAgent 

Show Answer

Question # 136

You have a Microsoft Exchange Server 2019 organization. You plan to migrate all mailboxes to Exchange Online. You need to provide a user with the ability to perform the mailbox migrations. The solution must use the principle of least privilege. Which role should you assign to the user? 

A. Recipient Management 
B. Server Management 
C. Help Desk 
D. Organization Management 

Show Answer

Question # 137

You have a Microsoft Exchange Online tenant that uses an email domain named @contoso.com. You recently purchased an email domain named fabrikam.com. You need to ensure that all the users in the tenant can receive email messages by using the @fabrikam.com email domain. The solution must ensure that the users can continue to receive email by using the @contoso.com email domain. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. From the Microsoft 365 admin center, add the fabrikam.com email domain. 
B. From the Exchange admin center, add an accepted domain for fabrikam.com. 
C. From the Microsoft 365 admin center, modify the organization profile. 
D. From the Exchange admin center, add a remote domain for fabrikam.com. 
E. From the Exchange Management Shell, create a script that runs the Set-Mailbox cmdlet. 

Show Answer

Question # 138

Your company has a partnership with another company named contoso.com. You need to ensure that all email messages containing the word sensitive and sent to the users at contoso.com are encrypted automatically. You enable Azure Information Protection. What should you do next? 

A. Create a data loss prevention (DLP) policy. 
B. Create a mail flow rule. 
C. Configure a remote domain. 
D. Configure an Outbound connector. 

Show Answer

Question # 139

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Server 2019 organization that contains 200 mailboxes. You need to add a second email address to each mailbox. The address must have a syntax that uses the first letter of each user’s last name, followed by the user’s first name, and then @fabrikam.com. Solution: You convert all the mailboxes to shared mailboxes, and then you run the SetMailbox cmdlet and specify the –EmailAddressPolicyEnabled $true parameter. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 140

Your network contains an Active Directory domain named fabrikam.com. You have a Microsoft Exchange Server 2019 organization that contains two Mailbox servers in a database availability group (DAG). You plan to implement a hybrid deployment by using the Exchange Modern Hybrid connection option. Which three configurations will be transferred automatically from the on-premises organization to Exchange Online? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. the device access rules 
B. the address book policies (ABPs) 
C. the Messaging Records Management (MRM) settings
 D. the mail flow rules 
E. the address lists 

Show Answer

Question # 141

You have a Microsoft Exchange Online tenant. All users are assigned only an Office 365 Enterprise E3 license. You need to ensure that the users can use only Microsoft Outlook to connect to their Microsoft 365 mailbox when they connect from an Android device. What should you create? 

A. a conditional access policy in Azure Active Directory (Azure AD) 
B. a connection filter policy in Exchange Online Protection (EOP) 
C. an Outlook Web App policy in Exchange Online 
D. an app protection policy in Microsoft Endpoint Manager 

Show Answer

Question # 142

You have a Microsoft Exchange Server 2019 organization. You plan to migrate to Exchange Online incrementally during a 12-month period. You need to ensure that during the migration, the following features continue to work for all users: Free/Busy synchronization Microsoft Teams calendar integration The Microsoft Outlook mobile app for Android Which hybrid configuration should you implement? 

A. Modern Hybrid Configuration 
B. Minimal Hybrid Configuration 
C. Classic Hybrid 

Show Answer

Question # 143

You have a Microsoft Exchange Server 2019 organization. You run the following commands. New-Management-Scope –Name "VIP Mailboxes" –RecipientRoot "Contoso.com/ Executives" –RecipientRestrictionFilter (RecepientType –eq "UserMailbox") New-ManagementRoleAssignment –SecurityGroup "VIP Admins" –Role "Mail Recipients" –CustomRecipientWriteScope "VIP Mailboxes" You have a user named Admin1. You need to ensure that Admin1 can manage the mailboxes of users in the Executives organizational unit (OU) only. What should you do?

A. Modify the membership of VIP Admins.
 B. Create a custom role group. 
C. Add Admin1 to the Recipient Management management role group. 
D. Move Admin1 to the Executives OU. 

Show Answer

Question # 144

You have a Microsoft Exchange Server 2019 organization. You purchase a Microsoft 365 subscription and configure Active Directory synchronization. You use a smart host for all email communication between the organization and the Internet. The smart host performs email hygiene and alerts message headers. You plan to run the Hybrid Configuration wizard to create an Exchange hybrid deployment and change the MX record to point to Exchange Online. You need to decommission the smart host from the organization. What should you do first? 

A. Create a Receive connector that allows anonymous authentication. 
B. Modify the InternalSmtpServer value by running the Set-TransportConfig cmdlet. 
C. Modify the Send connector to use DNS delivery. 
D. Modify the TLSReceiveDomainSecureList value by running the Set-TransportConfig cmdlet. 

Show Answer

Question # 145

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes. A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You enable a DKIM signature. Does this meet the goal? 

A. Yes 
B. No 

Show Answer

Question # 146

You have a Microsoft Exchange Server 2019 organization. A compliance manager plans to create retention policies for the mailboxes of executive users. The policies will move specific emails to an archive mailbox. You need to create an archive mailbox for each executive user. What should you do? 

A. Run the New-Mailbox cmdlet
B. Enable mailbox journaling. 
C. Enable In-Place Archiving for each mailbox. 
D. Run the set-Mailbox cmdlet. 

Show Answer

Question # 147

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes. A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You create a remote domain. Does this meet the goal?

A. Yes 
B. No 

Show Answer

Question # 148

Allan Deyoung must perform a message trace of the email messages sent by Isaiah Langer and provide a report that contains all the messages sent during the last 30 days. You need to ensure that Allan Deyoung can perform the message trace. What should you do? 

A. Add Allan Deyoung to the Organization Management role group 
B. Add Allan Deyoung to the Security Administrator role group 
C. For Allan Deyoung. set ElcProcessingDisabled to true 
D. For Isaiah Langer. set ElcProcessingDisabled to true 

Show Answer

Question # 149

Lynne Robbins and the users in the sales department plan to collaborate on a project with a partner company named Contoso, Ltd. that has an email domain named contoso.com. You need to ensure that only the sales department users can share all their calendar free/busy information with the users in contoso.com. How should you configure the organization relationship?

A. Select Calendar free/busy information with time only and enter Group1 B Select Calendar free/busy information with time, subject, and location and enter Groups C Select Calendar free/busy information with time, subject, and location and enter Group3 
B. Select Calendar free/busy information with time only and enter Group3 
C. Select Calendar free/busy information with time only and enter Group2 

Show Answer

Question # 150

Joni Sherman reports that the Microsoft Outlook client on her Windows 10 device fails to start. You need to troubleshoot the issue. From the device, you start the Microsoft Remote Connectivity Analyzer. What should you run next? 

A. the Exchange ActiveSync test 
B. the Outlook Connectivity test 
C. the Service Account Access test 
D. the Microsoft Support and Recovery Assistant for Office 365 client 

Show Answer

Question # 151

You need to email a list of configuration changes to the Exchange Online environment that were recently performed by Allan Deyoung. What should you do? 

A. Run the admin audit log report 
B. Run the external admin audit log report 
C. Export the admin audit log 
D. Run an administrator role group report 
E. Export the mailbox audit logs 

Show Answer

Question # 152

You discover that email messages sent to contoso.com are NOT delivered through Contoso Connector. You need to ensure that all email sent to contoso.com is delivered through Contoso Connector. Which connector setting should you modify? 

A. Routing 
B. Security restrictions 
C. Use of connector 
D. Status 

Show Answer

Question # 153

Which contacts can sign in to and access resources in the adatum.com tenant? 

A. Contact1 only 
B. Contact2 only 
C. Contact1 and Contact3 only 
D. Contact2 and Contact3 only 
E. Contact1, Contact2. and Contact3 

Show Answer

Question # 154

You need to ensure that Alex Wilber can recover deleted items when using Outlook on the web. Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. 

A. Assign Sales Policy to Alex Wilbur. 
B. Modify Marketing Policy. 
C. Remove Alex Wilbur from all groups.
 D. Assign Policy2 to Alex Wilbur. 
E. Modify Policy1 

Show Answer

Question # 155

You need to ensure that Allan Deyoung can create a new public folder for the sales department. Which two actions should you perform first? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

A. Add Allan Deyoung to the Organization Management role group 
B. Create a new public folder mailbox 
C. Add Allan Deyoung to the Recipient Management role group 
D. Create a new shared mailbox 
E. Modify Sales Policy 

Show Answer

Question # 156

You need to identify the contents of the FabrikamProject public folder to meet the technical requirements. Which PowerShell cmdlet should you run? 

A. Get-PublicFolderScaciscics 
B. Get-PublicFolderltemStatistics 
C. Get-PublicFolderMailboxDiagnoscics 
D. Get-PublicFolder 

Show Answer

Question # 157

User3 leaves the company. You need to ensure that Admin1 and Admin2 can access the mailbox of User3. The solution must meet the technical requirements. What should you do? 

A. Migrate the mailbox of User3 to a distribution group. 
B. Migrate the mailbox of User3 to a Microsoft 365 group. 
C. Convert the mailbox of User3 into a resource mailbox. 
D. Convert the mailbox of User3 into a shared mailbox.

Show Answer

Question # 158

You need to encrypt email between Fabrikam and Litware to support the planned changes. What should you configure in the Exchange admin center? 

A. a connector 
B. an organization relationship
C. a sharing policy 
D. a remote domain 

Show Answer