70-346 | Certified 70-346 Dumps Questions 2021

NEW QUESTION 1
You are the Office 365 administrator for your company.
You must configure a trust between the on-premises Active Directory domain and the Office 365 environment by using Active Directory Federation Services.
You need to assign the correct certificate to the description of your on-premises server environment below. Which certificate types should you assign? To answer, drag the appropriate certificate type to the correct test
description. Each certificate type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: Certificates are used to secure communications between federation servers, Web Application Proxies, federation server proxies, the cloud service, and web clients.
A Secure Sockets Layer (SSL) certificate is used to secure communications between federation servers, clients, Web Application Proxy, and federation server proxy computers.
A Token-signing certificate is a standard X.509 certificate that is used to securely sign all tokens that the federation server issues and that the cloud service will accept and validate.
References:
https://technet.microsoft.com/en-us/library/dn151311.aspx
http://blogs.technet.com/b/adfs/archive/2007/07/23/adfs-certificates-ssl-token-signing-and-client-authentication-

NEW QUESTION 2
You are the administrator for a company. You plan to use Office 365 for email and file sharing. You plan to implement a hybrid deployment with your current on-premises Active Directory Domain Services (AD DS) environment and Microsoft Azure Active Directory (Azure AD) Connect.
You must deploy Microsoft Exchange Online and OneDrive for Business for all employees. You have the following security requirements:
All employees must use complex passwords. Passwords must be changed every six months.
Employees must use multi-factor authentication (MFA) when possible.
You need to implement MFA verification options to use with the employee's password. Solution: Have the employee use a physical smart card.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 3
An organization plans to migrate to Office 365.
You need to estimate the post-migration network traffic.
Which two tools will achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A. Exchange Client Network Bandwidth Calculator
• B. Microsoft Remote Connectivity Analyzer
• C. Skype for Business Bandwidth Calculator
• D. Windows Assessment and Deployment Kit (ADK)
• E. Process Monitor

Answer: AC

Explanation: There are calculators available to assist you with estimating network bandwidth requirements. These calculators work for on-premises as well as Office 365 deployments. You can use the Exchange client network bandwidth calculator to estimate the bandwidth required for a specific set of Outlook, Outlook Web App, and mobile device users in your Office 365 deployment. With the Skype for Business bandwidth calculator, you enter information about users and the Skype for Business features you want to deploy, and the calculator helps you determine bandwidth requirements.
Skype for Business Bandwidth Calculator - A Microsoft Excel spreadsheet that calculates WAN bandwidth requirements for a Skype for Business Server deployment based on administrator-specified user profiles and network information.

NEW QUESTION 4
You manage Active Directory Domain Services (AD DS) for a company. You assign Office 365 licenses to all users. You implement Microsoft Azure Active Directory (Azure AD) Connect.
Your company terminates an employee.
You need to ensure that the terminated employee can no longer access any Office 365 rescues. Which Windows PowerShell cmdlet should you run?

• A. Set-AdUser
• B. Remove-MsolServicePrincipalCredential
• C. Set-MsolUser
• D. Remove-MsolServicePrincipal

Answer: C

Explanation: If your organization synchronizes user accounts to Office 365 from a local Active Directory environment, you must delete those user accounts in your local Active Directory service. You can’t delete or restore them in Office 365. Therefore, you have to make use of the Set-AdUser cmdlet.
References:
https://support.office.com/en-us/article/remove-a-former-employee-from-office-365-44d96212-4d90-4027-9aa9
https://docs.microsoft.com/en-us/powershell/module/addsadministration/set-aduser?view=win10-ps

NEW QUESTION 5
You manage a team of three administrators for an organization that uses Office 365.
You must assign roles for each of the administrators as shown in the table. You must assign the minimum permissions required to perform the assigned tasks.

You need to assign the correct role to each administrator.
Which administrative role should you configure for each user? Select the correct answer from each list in the answer area.

Answer:

Explanation: Admin1 must be the global admin that will grant him/her access to all administrative features. Global admins are the only admins who can assign other admin roles. You can have more than one global admin in your organization. The person who signs up to purchase Office 365 becomes a global admin.
Admin2 must be the billing admin to enable him/her to make purchases, manage subscriptions, and monitor service health.
Admin 3 must be the User Management admin to allow him/her to reset passwords, monitor service health, and manage user accounts, user groups, and service requests. The user management admin can’t delete a global admin, create other admin roles, or reset passwords for billing, global, and service admins.
References:
https://support.office.com/en-IN/article/assigning-admin-roles-d58b8089-cbfd-41ec-b64c-9cfcbef495ac
http://onlinehelp.microsoft.com/en-in/office365-enterprises/gg243432.aspx#bkmk_EditProfile

Topic 3, Manage cloud identities

NEW QUESTION 6
You are the Office 365 administrator for your company. The company has Office 365 Enterprise E3 licenses for each of its 250 employees. The company does not allow email or Skype for Business Online licenses to be assigned to external contractors.
User1 is an external contractor who requires access to SharePoint and Office Web Apps only. You need to add a license for User1's account.
What should you do? To answer, drag the appropriate action to the correct location or locations. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation:

NEW QUESTION 7
You deploy Skype for Business Online for a company that has offices in San Francisco and New York. The two offices both connect to the Internet. There is no private network link between the offices.
Users in the New York office report that they cannot transfer files to the users in the San Francisco office by using Skype for Business Online.
You need to ensure that users in both offices can transfer files by using Skype for Business Online. What should you do?

• A. Configure the firewall to open Transmission Control Protocol (TCP) ports 50060-50079.
• B. Configure the firewall to open Transmission Control Protocol (TCP) ports 50040-50059.
• C. Create a private network connection to share files.
• D. Upgrade all of the Skype for Business Online clients to use Skype for Business client application.

Answer: B

Explanation: Skype for Business Online will allow for file sharing if the firewall is configured accordingly since it is mentioned that Skype for Business Online is already deployed. And there is connectivity by both offices to the Internet. If the TCP port number 50040-50059 is configured open on the firewall you will be able to share Audio, Video and application as well as Desktop sharing content and files.
References:
http://onlinehelp.microsoft.com/en-ca/office365-enterprises/hh416761.aspx

NEW QUESTION 8
Contoso, Ltd., has an Office 365 tenant. You configure Office 365 to use the domain contoso.com, and you verify the domain. You deploy and configure Active Directory Federation Services (AD FS) and Azure Active Directory Connect with password synchronization. You connect to Azure Active Directory by using a Remote PowerShell session.
You need to switch from using password-synced passwords to using AD FS on the Office 365 verified domain.
Which Windows PowerShell command should you run?

• A. Convert-MsolDomainToFederated –DomainName contoso.com
• B. Convert-MsolDomainToStandard –DomainName contoso.com
• C. Convert-MsolFederatedUser
• D. Set-MsolDomainAuthentication –DomainName contoso.com

Answer: A

Explanation: The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on (also known as identity federation), including configuring the relying party trust settings between the Active Directory Federation Services (AD FS) server and the Microsoft Online Services. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in; no action is required by the administrator.
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/convert-msoldomaintofederated?view=azureadps

NEW QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are the administrator for a company. You plan to use Office 365 for email and file sharing. You plan to implement a hybrid deployment with your current on-premises Active Directory Domain Services (AD DS) environment and Microsoft Azure Active Directory (Azure AD) Connect.
You must deploy Microsoft Exchange Online and OneDrive for Business for all employees. You have the following security requirements:
All employees must use complex passwords.
Passwords must be changed every six months.
Employees must use multi-factor authentication (MFA) when possible.
You need to implement MFA verification options to use with the employee's password. Solution: Have the employee use a virtual smart card.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: MFA for Office 365 requires users to acknowledge a phone call, text message, or app notification on their smart phones after correctly entering their passwords. Virtual smartcards are not required.
References:
https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-8f0454b2-f51a-

NEW QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy Office 365 for all company users. You use Microsoft Exchange Online for company email. You must develop a process to assign licenses to new users in your company.
You need to implement the licensing process.
Solution: Run the Set-Mailbox Windows PowerShell cmdlet.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

Explanation: The Set-MsolUserLicense cmdlet must be used, not the Set-Mailbox cmdlet. References:
https://docs.microsoft.com/en-us/office365/enterprise/powershell/assign-licenses-to-user-accounts-with-office-3

NEW QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to recommend a solution to meet the technical requirement for monitoring the heath information. What should you recommend?

• A. Use the Office 365 Admin app to receive push notifications.
• B. From the Office 365 admin center, modify the Services and &add-ins settings.
• C. From the Office 365 admin center, modify the Organization Profile settings.
• D. Use the Company Portal app to receive push notifications.

Answer: A

Explanation: You can use the Office 365 Admin app on your mobile device to view Service health, which is a great way to stay current with push notifications.
References:
https://support.office.com/en-gb/article/How-to-check-Office-365-service-health-932ad3ad-533c-418a-b938-6e4

NEW QUESTION 12
You need to deploy and configure the components required to implement the user training requirements. Which products or settings should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 13
You need to monitor the tailspintoys.com user accounts. What should you do?

• A. Access the Seivice health dashboard on the Office 365 admin center.
• B. Access the SCOM console.
• C. Run the following Windows PowerShell cmdlet; Get-ServiceDeliveryReport
• D. Access the RSS feed for Office 365 service health.
• E. Run the following Windows PowerShell cmdlet:Get-HistoricalSearch

Answer: C

NEW QUESTION 14
Your company deploys an Office 365 tenant.
You need to ensure that you can view service health and maintenance reports for the past seven days. What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

• A. Subscribe to the Office 365 Service Health RSS Notifications feed.
• B. View the service settings page of the Office 365 admin center.
• C. Run the Microsoft Fast Track Tool.
• D. View the service health current status page of the Office 365 admin center.

Answer: AD

Explanation: D: See the status of all your services and their components in the Office 365 admin center
Sign in to Office 365 with your work or school account.
Go to the Office 365 admin center.
Go to Health > Service health.
On the Service health page, view the current status of your services.
Do any of the following:
a) For details, select a service.
b) To see status history, select View history, and then select a day on the calendar.
A: In the top right corner of the Service Health page, there is an RSS icon. You can click on the RSS icon to sign up for the service health RSSfeed, which will email you when a new event is added or an existing event is updated.
References:
https://support.office.com/en-us/article/View-the-status-of-your-services-932ad3ad-533c-418a-b938-6e44e8bc3

NEW QUESTION 15
You plan to deploy an Office 365 tenant to multiple offices around the country.
You need to modify the users and groups who are authorized to administer the Rights Management service. Which Windows PowerShell cmdlet should you run?

• A. Add-MsolGroupMember
• B. Get-Add rm Role Based Administrator
• C. Remove-AadrmRoleBasedAdministrator
• D. Enable AadrmSuperUserFeature

Answer: D

Explanation: The Enable-AadrmSuperUserFeature cmdlet enables the super user feature. With this feature enabled, you can add or remove super users for Azure Rights Management. By default, the super users feature is not enabled, and no users are assigned to this feature. By enabling this feature we can modify the users and groups that are able to administer the Rights Management service.
References:
https://docs.microsoft.com/en-us/powershell/module/aadrm/enable-aadrmsuperuserfeature?view=azureipps

NEW QUESTION 16
A company has an Office 365 tenant that has an Enterprise E1 subscription.
You use single sign-on for all user accounts. You plan to migrate all services to Office 365. You need to ensure that all accounts use standard authentication.
Which Windows PowerShell cmdlet should you run?

• A. Set-MsolUser
• B. Redo-MsolProvisionUser
• C. Set-MsolUserLicense
• D. Set-MsolUserPrincipalName
• E. Convert-MsolFederatedUser
• F. Set-MailUser
• G. Set-LinkedUser
• H. New-MsolUser

Answer: E

Explanation: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type.

NEW QUESTION 17
Your company has a hybrid deployment of Office 365. You need to create a group. The group must have the following characteristics:
Group properties are synchronized automatically.
Group members have the ability to control which users can send email messages to the group. What should you do?

• A. Create a distribution group and configure the Mail Flow Settings.
• B. Create a dynamic distribution group.
• C. Create a new role group.
• D. Create a distribution group and configure the Membership Approval settings.

Answer: C

Explanation: The member of the role group can all do administrative tasks. When you create a role group you can select between the following three roles:
Application Impersonation
Distribution Groups
Mail Recipients. References:
https://blogs.perficient.com/microsoft/2015/04/office-365-allowing-users-to-edit-exchange-groups-they-manage

NEW QUESTION 18
You are the Office 365 administrator for your company. The company has two administrators named User1 and User2.
Users must be able to perform the activities as shown in the following table:

You need to grant the appropriate administrative role to each user.
What should you do? To answer, drag the appropriate role to the correct user. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Answer:

Explanation: User1 has to be the Password administrator which will allow for User1 to reset passwords, manage service requests, and monitor service health. Password admins are limited to resetting passwords for users and other password admins.
User2 has to be the global administrator to have access to all administrative features. Global admins are the only admins who can assign other admin roles. This will enable User2 the ability to reset passwords for all administrator accounts.