What are the best online course and practice tests set to prepare for Microsoft 365 Certification (MS-100 exam, MS-200 exam, MS-201 exam, MS-500 exam)? (First: Exam practice test, Second: Lead4pass Microsoft expert.) You can get free Microsoft exam practice test questions here. Or choose: https://www.leads4pass.com/role-based.html Study hard to pass the exam easily!
Table of Contents:
- Latest Microsoft MS-100 List
- Latest Microsoft MS-200 List
- Latest Microsoft MS-201 List
- Latest Microsoft MS-500 List
- Lead4Pass Year-round Discount Code
- What are the advantages of Lead4pass?
Latest Microsoft 365 Exam questions
Latest Microsoft MS-100 List
Microsoft MS-100 Exam Video
Exam MS-100: Microsoft 365 Identity and Services: https://docs.microsoft.com/en-us/learn/certifications/exams/ms-100
Candidates for this exam are Microsoft 365 Enterprise Administrators who take part in evaluating, planning, migrating, deploying, and managing Microsoft 365 services. They perform Microsoft 365 tenant management tasks for an enterprise, including its identities, security, compliance, and supporting technologies.
Candidates have a working knowledge of Microsoft 365 workloads and should have been an administrator for at least one Microsoft 365 workload (Exchange, SharePoint, Skype for Business, or Windows as a Service). Candidates also have a working knowledge of networking, server administration, and IT fundamentals such as DNS, Active Directory, and PowerShell.
Skills measured
- NOTE: The bullets that appear below each of the skills measured in the document below are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
- Design and implement Microsoft 365 services (25-30%)
- Manage user identity and roles (35-40%)
- Manage access and authentication (20-25%)
- Plan Office 365 workloads and applications (10-15%)
Latest updates Microsoft MS-100 exam practice questions(1-10)
QUESTION 1
You need to add the custom domain names to Office 365 to support the planned changes as quickly as possible. What
should you create to verify the domain names successfully?
A. three alias (CNAME) records
B. one text (TXT) record
C. one alias (CNAME) record
D. three text (TXT) records
Correct Answer: D
QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You need to assign User2 the required roles to meet the security requirements.
Solution: From the Office 365 admin center, you assign User2 the Security Reader role. From the Exchange admin
center, you assign User2 the Compliance Management role.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 3
You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You add an app named App1 to the enterprise applications in contoso.com.
You need to configure self-service for App1.
What should you do first?
A. Assign App1 to users and groups.
B. Add an owner to App1.
C. Configure the provisioning mode for App1.
D. Configure an SSO method for App1.
Correct Answer: A
References: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-self-service-access
QUESTION 4
Your company has offices in several cities and 100,000 users.
The network contains an Active Directory domain named contoso.com.
You purchase Microsoft 365 and plan to deploy several Microsoft 365 services.
You are evaluating the implementation of pass-through authentication and seamless SSO. Azure AD Connect will NOT
be in staging mode.
You need to identify the redundancy limits for the planned implementation.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 5
Your company has a main office and 20 branch offices in North America and Europe. Each branch office connects to
the main office by using a WAN link. All the offices connect to the Internet and resolve external host names by using the
main office connections.
You plan to deploy Microsoft 365 and to implement a direct Internet connection in each office.
You need to recommend a change to the infrastructure to provide the quickest possible access to Microsoft 365
services.
What is the best recommendation to achieve the goal? More than one answer choice may achieve the goal. Select the
BEST answer.
A. For all the client computers in the branch offices, modify the MTU setting by using a Group Policy object (GPO).
B. In each branch office, deploy a proxy server that has user authentication enabled.
C. In each branch office, deploy a firewall that has packet inspection enabled.
D. In each branch office, configure name resolution so that all external hosts are redirected to public DNS servers
directly.
Correct Answer: D
QUESTION 6
Your company has on-premises servers and a Microsoft Azure Active Directory (Azure AD) tenant.
Several months ago, the Azure AD Connect Health agent was installed on all the servers.
You review the health status of all the servers regularly.
Recently, you attempted to view the health status of a server named Server1 and discovered that the server is NOT
listed on the Azure Active Directory Connect Servers list.
You suspect that another administrator removed Server1 from the list.
You need to ensure that you can view the health status of Server1.
What are two possible ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. From Windows PowerShell, run the Register-AzureADConnectHealthSyncAgent cmdlet.
B. From Azure Cloud shell, run the Connect-AzureAD cmdlet.
C. From Server1, change the Azure AD Connect Health services Startup type to Automatic (Delayed Start).
D. From Server1, change the Azure AD Connect Health services Startup type to Automatic.
E. From Server1, reinstall the Azure AD Connect Health agent.
Correct Answer: AE
QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You need to assign User2 the required roles to meet the security requirements.
Solution: From the Office 365 admin center, you assign User2 the Security Administrator role. From the Exchange
admin center, you add User2 to the View-Only Organization Management role.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 8
Which role should you assign to User1?
A. Security Administrator
B. Records Management
C. Security Reader
D. Hygiene Management
Correct Answer: C
QUESTION 9
Your network contains an Active Directory forest named adatum.local. The forest contains 500 users and uses
adatum.com as a UPN suffix.
You deploy a Microsoft 365 tenant.
You implement directory synchronization and sync only 50 support users.
You discover that five of the synchronized users have usernames that use a UPN suffix of onmicrosoft.com.
You need to ensure that all synchronized identities retain the UPN set in their on-premises user account.
What should you do?
A. From the Microsoft 365 admin center, add adatum.com as a custom domain name.
B. From Windows PowerShell, run the Set-ADDomain ?llowedDNSSuffixes adatum.com command.
C. From Active Directory Users and Computers, modify the UPN suffix of the five user accounts.
D. From the Microsoft 365 admin center, add adatum.local as a custom domain name.
Correct Answer: C
QUESTION 10
Your company has a Microsoft 365 subscription.
You plan to move several archived PST files to Microsoft Exchange Online mailboxes.
You need to create an import job for the PST files.
Which three actions should you perform before you create the import job? Each correct answer presents part of the
solution.
NOTE: Each correct selection is worth one point.
A. Create a Microsoft Azure Storage account.
B. From Security and Compliance, retrieve the SAS key.
C. Run azcopy.exe to copy the PST files to Microsoft Azure Storage
D. Use Microsoft Azure Storage Explorer to copy the PST files to Azure Storage.
E. Create a PST import mapping file.
Correct Answer: BCE
References: https://docs.microsoft.com/en-us/office365/securitycompliance/use-network-upload-to-import-pst-files
[PDF] Free Microsoft MS-100 pdf dumps download from Google Drive: https://drive.google.com/open?id=1GWA8Jqht96ZO2LfC-rucvsDnrpexQY9Q
Full Microsoft MS-100 exam practice questions: https://www.leads4pass.com/ms-100.html (Total Questions: 171 Q&A)
Latest Microsoft MS-200 List
Microsoft MS-200 Exam Video
Exam MS-200: Planning and Configuring a Messaging Platform: https://docs.microsoft.com/en-us/learn/certifications/exams/ms-200
Candidates for this exam are Messaging Administrators who deploy, configure, manage, troubleshoot, and monitor recipients, permissions, mail protection, mail flow, and public folders in both on-premises and cloud enterprise environments.
Messaging Administrators are responsible for managing hygiene, messaging infrastructure, hybrid configuration, migration, disaster recovery, high availability, and client access.
Messaging Administrators collaborate with the Security Administrator and Microsoft 365 Enterprise Administrator to implement a secure hybrid topology that meets the business needs of a modern organization.
The Messaging Administrator should have a working knowledge of authentication types, licensing, and integration with Microsoft 365 applications.
Skills measured
- NOTE: The bullets that appear below each of the skills measured in the document below are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
- Manage modern messaging infrastructure (45-50%)
- Manage mail flow topology (35-40%)
- Manage recipients and devices (15-20%)
Latest updates Microsoft MS-200 exam practice questions (1-10)
QUESTION 1
Your network contains an Active Directory forest. The forest contains two Active Directory sites named Site1 and Site2.
You have a Microsoft Exchange Server 2019 organization that contains a database availability group (DAG) named
DAG1. DAG1 has three member servers in each site.
You need to prevent users from Site1 from sending email messages larger than 5 MB to the mailboxes in Site2.
What should you do?
A. Modify the properties of the Active Directory site link.
B. From Site1, create a custom Send connector, and then modify the address space.
C. From Site2, create a custom Receive connector, and then modify the remote IP address range.
D. Modify the properties of DAG1.
Correct Answer: B
QUESTION 2
You need to recommend a load balancing solution for the client connections that must be created to meet the disaster
recovery requirements. What should you recommend?
A. Deploy a Layer 7 load balancing solution.
B. Deploy a Layer 4 load balancing solution.
C. Implement Network Load Balancing (NLB) on each Exchange server.
D. Implement DNS load balancing for all the Exchange-related DNS records and implement round robin for DNS name
resolution.
Correct Answer: A
References: https://docs.microsoft.com/en-us/exchange/architecture/client-access/load-balancing?view=exchserver-2019
QUESTION 3
DRAG DROP
You have a Microsoft Exchange Server 2019 organization that contains two Mailbox servers as shown in the following
table.
EX01 fails. You do not know how long it will take to recover EX01.
You need to provide all affected users with the ability to send and receive email as quickly as possible.
How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each
value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to
view
content.
NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer:
QUESTION 4
HOTSPOT
After you deploy the Exchange organization, you run the Get-ActiveSyncDeviceAccessRule cmdlet, and you receive the
following output.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
Correct Answer:
The rule is incorrectly configured so nothing will be blocked. The QueryString parameter specifies the device identifier
that\\’s used by the rule, not the software.
QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company has a Microsoft Exchange Server 2019 server named EX01. EX01 has the default Receive connectors.
EX01 receives Internet email on port 25 from an appliance in the company\\’s perimeter network.
The company has an application named App1 that can only send email on port 25. The application administrator
requests that you enable App1 to route email through EX01 for delivery.
You need to ensure that EX01 only accepts email from the appliance and App1.
Solution: You create a new remote domain and set the domain name to App1. You create a new delivery agent
connector and set the IsScopedConnector property to $true.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 6
HOTSPOT
You need to recommend a solution for the Audits and Notes folders.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 7
HOTSPOT
You have a Microsoft Exchange Online subscription that contains the groups shown in the following table.
You have the recipients shown in the following table.
The groups contain the members shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company has a Microsoft Exchange Server 2019 server named EX01. EX01 has the default Receive connectors.
EX01 receives Internet email on port 25 from an appliance in the company\\’s perimeter network.
The company has an application named App1 that can only send email on port 25. The application administrator
requests that you enable App1 to route email through EX01 for delivery.
You need to ensure that EX01 only accepts email from the appliance and App1.
Solution: You add a second IP address to EX01. You create a new linked connector named App1 EX01.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
References: https://docs.microsoft.com/en-us/exchange/mail-flow/mail-routing/mail-routing?view=exchserver-2019
QUESTION 9
HOTSPOT
A user named User1 left the organization 10 days ago.
You need to purge all the email data of User1.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 10
You are deploying Microsoft Exchange Server 2019 to two data centers.
You need to protect all mailbox content against database corruption. The solution must minimize the recovery time
objective (RTO) and the recovery point objective (RPO).
What is the best way to achieve the goal? More than one answer choice may achieve the goal. Select the BEST
answer.
A. a recovery database
B. a lagged database copy
C. PST files
Correct Answer: B
[PDF] Free Microsoft MS-200 pdf dumps download from Google Drive: https://drive.google.com/open?id=1FCJZPShpQJinyMDY1Z8UWXe-XMtRR2Ls
Full Microsoft MS-200 exam practice questions: https://www.leads4pass.com/ms-200.html (Total Questions: 104 Q&A)
Latest Microsoft MS-201 List
Microsoft MS-201 Exam Video
Exam MS-201 – Microsoft Docs: https://docs.microsoft.com/en-us/learn/certifications/exams/ms-201
Candidates for this exam are Messaging Administrators who deploy, configure, manage, troubleshoot, and monitor recipients, permissions, mail protection, mail flow, and public folders in both on-premises and cloud enterprise environments.
Messaging Administrators are responsible for managing hygiene, messaging infrastructure, hybrid configuration, migration, disaster recovery, high availability, and client access.
Messaging Administrators collaborate with the Security Administrator and Microsoft 365 Enterprise Administrator to implement a secure hybrid topology that meets the business needs of a modern organization.
The Messaging Administrator should have a working knowledge of authentication types, licensing, and integration with Microsoft 365 applications.
Skills measured
- NOTE: The bullets that appear below each of the skills measured in the document below are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
- Plan and implement a hybrid configuration and migration (35-40%)
- Secure the messaging environment (40-45%)
- Manage organizational settings (15-20%)
Latest updates Microsoft MS-201 exam practice questions (1-10)
QUESTION 1
HOTSPOT
You have a Microsoft Exchange Server 2019 organization that uses a domain named contoso.com.
You need to ensure that when a new user mailbox is created, the email address of the mailbox uses the format shown
in the following table.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 2
HOTSPOT
You have a Microsoft Exchange Server 2019 hybrid deployment. You plan to enable Hybrid Modern Authentication
(HMA). You run the Get-MapiVirtualDirectory cmdlet and receive the output shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 3
Case Study : Litware,Inc.
Case Study
Overview
Litware, Inc. is food service supplier in Europe.
PhysicalLocations
Litware has a main office in Paris and branch offices in Munich, London, Brussels, Vienna, and Rome.
Each branch office has its own compliance officer.
ExistingEnvironment
The network contains one Active Directory forest named litware.com. The forest contains a single Active Directory
domain. Each office is configured as an Active Directory site. Each branch office is represented organizational unit (OU)
in an
OU named Offices in Active Directory.
Each branch office has a special Administrators group that contains the delegated administrators for that office. Each
Administrators group is named based on its location in a format of RegionalAdmins_Brussels,
RegionalAdmins_Munich,
RegionalAdmins_London, RegionalAdmins_Vienna and RegionalAdmins_Rome.
NetworkInfrastructure
Each office contains two domain controllers from the litware.com domain. All the domain controllers are configured as
DNS servers. All client computers connect only to the DNS servers in their respective office.
All offices have a high-speed connection to the Internet. Each office connects to the Internet by using a VPN appliance.
Each office has the following servers and client computers:
One reverse proxy appliance
One Microsoft Exchange Server 2019 server
One Windows Server Update Services (WSUS) server
Computers that run Windows 10 and have Microsoft Office 2019 installed. The office in Brussels contains an Exchange
Server 2016 server that has the Unified Messaging role installed and hosted voicemail configured.
Mailboxes are hosted on all the Exchange servers. Public folders are hosted only on an Exchange server in the main
office. Litware uses a disjoint namespace to access the servers. Each user has an archive mailbox. Archiving is
configured
to use the default settings. Exchange services are published to the internet by using a reverse proxy in each office. A full
backup of Exchange is performed nightly. Incremental backups occur every six hours. All the users in the transport
department connect to network resources by using a connection in the main office.
Requirements
Planned Changes
Litware plans to implement the following changes:
Implement calendar sharing to partner companies.
Implement a solution that prevents malware from being delivered to end users. Use personal archives to eliminate the
need for PST files. Ensure the Brussels office and move all the users in the Brussels office to the main office. All the
mailboxes in the Brussels office will be moved to a server in the main office. Implement a compliance solution to ensure
that items deleted from public folders are retained. If an item in a public folder is modified, the original version of the
item
must be available.
TechnicalRequirements
Litware identifies the following technical requirements:
Minimize administrative effort.
Use the principle of least privilege.
Ensure that junk email is deleted automatically after 14 days. Ensure that sent items and deleted items are deleted
automatically after 30 days. Ensure that users in the customer service department can open multiple mailboxes. Ensure
that
all the former Brussels office users always maintain access to hosted voicemail. Ensure that the staff in the IT
department can manage the email environment without and-user involvement.
Ensure that users cannot recover email messages that are deleted from the Junk Email folder and the Deleted Items.
Ensure that if an email message has a spam confidence level (SCL) of 3 or higher, the message automatically moves to
the Junk Email folder.
Problemstatements
The transport department users report that accessing a public folder named TransportPF is sometimes very slow.
Users in the customer service department report that Microsoft Outlook sometimes hangs when many mailboxes are
open.
You need to implement a solution that meets the technical requirements for the retention of junk email, sent items, and
deleted items.
What is the minimum number of retention policies and retention tags you should use? To answer, select the appropriate
options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 4
HOTSPOT
You have a Microsoft Exchange Server 2019 organization that contains the Mailbox servers shown in the following
table.
The organization contains the mailboxes shown in the following table.
You create the public folder mailboxes shown in the following table.
You set the DefaultPublicFolderMailbox property of each user mailbox to the public folder mailbox closest to the user.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
References:
https://docs.microsoft.com/en-us/exchange/collaboration/public-folders/publicfolders?view=exchserver-2019
QUESTION 5
HOTSPOT
You have a Microsoft Exchange Server 2019 organization that has the mailboxes shown in the following table.
You have the distribution groups shown in the following table.
Email messages sent within the organization are shown in the following table.
For each of the following statements, select Yes if the statements is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
Correct Answer:
References: https://docs.microsoft.com/en-us/exchange/policy-andcompliance/ediscovery/ediscovery?view=exchserver-2019
QUESTION 6
Overview
General Overview
Contoso, Ltd. is a national freight company in the United States. The company has 15,000 employees.
PhysicalLocations
Contoso has a main office in Houston and 10 branch offices that each contains 1,000 employees.
ExistingEnvironment
Active Directory and Microsoft Exchange Server Environments The network contains an Active Directory forest named
contoso.com. The forest contains one root domain named contoso.com and 10 child domains. All domain controllers
run
Windows Server 2019.
The forest has Active Directory Certificate Services (AD CS) and Active Directory Federation Services (AD FS)
deployed.
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365.
There are 2,000 user mailboxes in Exchange Online.
Each office contains two domain controllers and two Mailbox servers. the main office also contains an Edge transport
server.
The organization contains 100 public folders. The folders contain 80 GB of content. All email messages sent to
contoso.com are delivered to Exchange Online. All messages sent to onpremises mailboxes are routed through the
Edge
Transport server. Advanced Threat Protection (ATP) is enabled and configured for the Office 365 tenant.
NetworkInfrastructure
Each office connects directly to the Internet by using a local connection. The offices connect to each other by using a
WAN link.
Requirements
Planned Changes
Contoso plans to implement the following changes:
1.
or all new users in the on-premises organization, provide an email address that uses the value of the Last Name
attribute and the first two letters of the First Name attribute as a prefix.
2.
ecommission the public folders and replace the folders with a Microsoft 265 solution that maintains web access to the
content.
Technical Requirements
Contoso identifies the following technical requirements:
1.
All email messages sent from a SMTP domain named adatum.com must never be identified as spam.
2.
Any solution to replace the public folders must include the ability to collaborate with shared calendars.
Security Requirements
Contoso identifies the following security requirements:
1.
The principle of least privilege must be applied to all users and permissions.
2.
All email messages sent from an SMTP domain named com to contoso.com must be encrypted.
3.
All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
4.
If a user attempts to send an email message to a distribution group that contains more than 15 members by using
Outlook, the user must receive a warning before sending the message.
Problemstatements Recently, a user named HelpdeskUser1 erroneously created several mailboxes. Helpdesk1user1 is
a member of the Recipient Management management role group. Users who have a mailbox in office 365 report that it
takes a long time for email messages containing attachments to be delivered.
Exhibit
HOTSPOT
You need to configure the environment to support the planned changes for email addresses. How should you complete
the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
References: https://docs.microsoft.com/en-us/powershell/module/exchange/email-addresses-and-addressbooks/new-emailaddresspolicy?view=exchange-ps https://docs.microsoft.com/en-us/Exchange/email-addresses-and-address-books/email-addresspolicies/email-address-policies?view=exchserver-2019
QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this scenario, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company has a Microsoft Exchange Server 2019 hybrid deployment that contains two Mailbox servers named
MBX1 and MBX2.
The company has the departments shown in the following table.
From the on-premises organization, outbound email is sent directly to the internet by using DNS lookups. You are
informed that some sales department users send email messages that are identified as spam. You need to
automatically block the sales department users from repeatedly sending spam.
Solution: You migrate all the mailboxes of the sales department to Exchange Online. Does this meet the goal?
A. Yes
B. No
Correct Answer: B
QUESTION 8
You have a Microsoft Exchange Server 2019 organization.
You need to prevent credit card information from being emailed outside of the organization. Users must be informed of
any potential breaches before sending email.
What should you create?
A. a journal rule
B. a retention policy
C. a retention tag
D. a data loss prevention (DLP) policy
Correct Answer: D
References: https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies
QUESTION 9
Case Study : Litware,Inc.
Case Study
Overview
Litware, Inc. is food service supplier in Europe.
PhysicalLocations
Litware has a main office in Paris and branch offices in Munich, London, Brussels, Vienna, and Rome.
Each branch office has its own compliance officer.
ExistingEnvironment
The network contains one Active Directory forest named litware.com. The forest contains a single Active Directory
domain. Each office is configured as an Active Directory site. Each branch office is represented organizational unit (OU)
in an
OU named Offices in Active Directory.
Each branch office has a special Administrators group that contains the delegated administrators for that office. Each
Administrators group is named based on its location in a format of RegionalAdmins_Brussels,
RegionalAdmins_Munich,
RegionalAdmins_London, RegionalAdmins_Vienna and RegionalAdmins_Rome.
NetworkInfrastructure
Each office contains two domain controllers from the litware.com domain. All the domain controllers are configured as
DNS servers. All client computers connect only to the DNS servers in their respective office.
All offices have a high-speed connection to the Internet. Each office connects to the Internet by using a VPN appliance.
Each office has the following servers and client computers:
One reverse proxy appliance
One Microsoft Exchange Server 2019 server
One Windows Server Update Services (WSUS) server
Computers that run Windows 10 and have Microsoft Office 2019 installed. The office in Brussels contains an Exchange
Server 2016 server that has the Unified Messaging role installed and hosted voicemail configured.
Mailboxes are hosted on all the Exchange servers. Public folders are hosted only on an Exchange server in the main
office. Litware uses a disjoint namespace to access the servers. Each user has an archive mailbox. Archiving is
configured
to use the default settings. Exchange services are published to the internet by using a reverse proxy in each office. A full
backup of Exchange is performed nightly. Incremental backups occur every six hours. All the users in the transport
department connect to network resources by using a connection in the main office.
Requirements
Planned Changes
Litware plans to implement the following changes:
Implement calendar sharing to partner companies.
Implement a solution that prevents malware from being delivered to end users. Use personal archives to eliminate the
need for PST files. Ensure the Brussels office and move all the users in the Brussels office to the main office. All the
mailboxes in the Brussels office will be moved to a server in the main office. Implement a compliance solution to ensure
that items deleted from public folders are retained. If an item in a public folder is modified, the original version of the
item
must be available.
TechnicalRequirements
Litware identifies the following technical requirements:
Minimize administrative effort.
Use the principle of least privilege.
Ensure that junk email is deleted automatically after 14 days. Ensure that sent items and deleted items are deleted
automatically after 30 days. Ensure that users in the customer service department can open multiple mailboxes. Ensure
that
all the former Brussels office users always maintain access to hosted voicemail. Ensure that the staff in the IT
department can manage the email environment without and-user involvement.
Ensure that users cannot recover email messages that are deleted from the Junk Email folder and the Deleted Items.
Ensure that if an email message has a spam confidence level (SCL) of 3 or higher, the message automatically moves to
the Junk Email folder.
Problemstatements
The transport department users report that accessing a public folder named TransportPF is sometimes very slow.
Users in the customer service department report that Microsoft Outlook sometimes hangs when many mailboxes are
open.
You need to resolve the issue for the customer service department users.
What should you modify?
A. a transport rule
B. the Send connector to the Internet
C. the tarpit interval
D. the global throttling policy
Correct Answer: D
QUESTION 10
HOTSPOT
You have a Microsoft Exchange Server 2019 organization and a Microsoft 365 E5 subscription. From the Microsoft 365
admin center, you open Data migration as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
References:
https://www.stellarinfo.com/blog/hybrid-migration-migrate-exchange-mailboxes-office-365/
https://www.kerneldatarecovery.com/blog/migrate-from-exchange-on-premises-to-exchangeonlinein-hybrid-environment/
[PDF] Free Microsoft MS-201 pdf dumps download from Google Drive: https://drive.google.com/open?id=1jpcbTx7QWSmcYgs8uKh1T5lmg_asEOg-
Full Microsoft MS-201 exam practice questions: https://www.leads4pass.com/ms-201.html (Total Questions: 116 Q&A)
Latest Microsoft MS-500 List
Microsoft MS-500 Exam Video
Exam MS-500: Microsoft 365 Security Administration：https://docs.microsoft.com/en-us/learn/certifications/exams/ms-500
Candidates for this exam implement, manage, and monitor security and compliance solutions for Microsoft 365 and hybrid environments. The Microsoft 365 Security Administrator proactively secures Microsoft 365 enterprise environments, responds to threats, performs investigations, and enforces data governance. The Microsoft 365 Security Administrator collaborates with the Microsoft 365 Enterprise Administrator, business stakeholders, and other workload administrators to plan and implement security strategies and ensures that the solutions comply with the policies and regulations of the organization.
Candidates for this exam are familiar with Microsoft 365 workloads and have strong skills and experience with identity protection, information protection, threat protection, security management, and data governance. This role focuses on the Microsoft 365 environment and includes hybrid environments.
Skills measured
- NOTE: The bullets that appear below each of the skills measured in the document below are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
- Implement and manage identity and access (30-35%)
- Implement and manage threat protection (20-25%)
- Implement and manage information protection (15-20%)
- Manage governance and compliance features in Microsoft 365 (25-30%)
Latest updates Microsoft MS-500 exam practice questions (1-10)
QUESTION 1
You are evaluating which finance department users will be prompted for Azure MFA credentials. For each of the
following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth
one point.
Hot Area:
Correct Answer:
QUESTION 2
What should User6 use to meet the technical requirements?
A. Supervision in the Security and Compliance admin center
B. Service requests in the Microsoft 365 admin center
C. Security and privacy in the Microsoft 365 admin center
D. Data subject requests in the Security and Compliance admin center
Correct Answer: B
QUESTION 3
You have a Microsoft 365 subscription.
A customer requests that you provide her with all documents that reference her by name.
You need to provide the customer with a copy of the content.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to
the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr-dsr-office365
QUESTION 4
You have a Microsoft 365 subscription.
You are creating a retention policy named Retention1 as shown in the following exhibit.
Hot Area:
Correct Answer:
QUESTION 5
Which IP address space should you include in the MFA configuration?
A. 131.107.83.0/28
B. 192.168.16.0/20
C. 172.16.0.0/24
D. 192.168.0.0/20
Correct Answer: B
QUESTION 6
You have a Microsoft 365 subscription.
Some users access Microsoft SharePoint Online from unmanaged devices.
You need to prevent the users from downloading, printing, and synching files.
What should you do?
A. Run the Set-SPODataConnectionSetting cmdlet and specify the AssignmentCollection parameter
B. From the SharePoint admin center, configure the Access control settings
C. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection sign-in risk policy
D. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) conditional access policy
Correct Answer: B
QUESTION 7
You have a Microsoft 365 subscription.
You need to create data loss prevention (DLP) queries in Microsoft SharePoint Online to find sensitive data stored in
sites.
Which type of site collection should you create first?
A. Records Center
B. Compliance Policy Center
C. eDiscovery Center
D. Enterprise Search Center
E. Document Center
Correct Answer: C
Reference: https://support.office.com/en-us/article/overview-of-data-loss-prevention-in-sharepoint-server-2016-80f907bb-b944-448d-b83d-8fec4abcc24c
QUESTION 8
You have a Microsoft 365 subscription.
You have a site collection named SiteCollection1 that contains a site named Site2. Site2 contains a document library
named Customers.
Customers contains a document named Litware.docx. You need to remove Litware.docx permanently.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
QUESTION 9
Your company uses Microsoft Azure Advanced Threat Protection (ATP).
You enable the delayed deployment of updates for an Azure ATP sensor named Sensor1.
How long after the Azure ATP cloud service is updated will Sensor1 be updated?
A. 7 days
B. 24 hours
C. 1 hour
D. 48 hours
E. 12 hours
Correct Answer: B
Note: The delay period was 24 hours. In ATP release 2.62, the 24 hour delay period has been increased to 72 hours.
QUESTION 10
Which role should you assign to User1?
A. Global administrator
B. User administrator
C. Privileged role administrator
D. Security administrator
Correct Answer: C
[PDF] Free Microsoft MS-500 pdf dumps download from Google Drive: https://drive.google.com/open?id=1WhwPCNr3HzOcm9ry1Jp7wepZvlJ_k7fl
Full Microsoft MS-500 exam practice questions: https://www.leads4pass.com/ms-500.html (Total Questions: 120 Q&A)
Related Microsoft Popular Exam resources
Lead4Pass Year-round Discount Code
What are the advantages of Lead4pass?
Lead4pass employs the most authoritative exam specialists from Microsoft, Cisco, CompTIA, Oracle, Microsoft, etc. We update exam data throughout the year. Highest pass rate! We have a large user base. We are an industry leader! Choose Lead4Pass to pass the exam with ease!
Summarize:
It’s not easy to pass the Microsoft exam, but with accurate learning materials and proper practice, you can crack the exam with excellent results. https://www.leads4pass.com/role-based.html provides you with the most relevant learning materials that you can use to help you prepare.
