[Free] 2019(Nov) EnsurePass Microsoft 70-346 Dumps with VCE and PDF 121-130

Get Full Version of the Exam
http://www.EnsurePass.com/70-346.html

Question No.121

DRAG DROP

A company has an Active Directory Domain Services domain. You plan to implement Active Directory Federation Service (AD FS) with single sign-on.

You have the following requirements:

image

Servers must a Windows Server 2012 R2.

image

image

Internet-facing servers must be placed in the perimeter network. The solution must support at least 105 AD FS trust relationships.

You need to deploy the appropriate roles. Each record may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

image

Correct Answer:

image

Question No.122

HOTSPOT

A company has an Office 365 tenant.

You plan to use Active Directory Federated Services for user authentication. You create an account named SyscService in Active Directory and in Office 365. You must configure the permissions for the accounts in both environments by granting the minimum permissions required.

In the table below, identify the role that you must assign to each account. Note: Make only one selection in each column. Each correct answer is worth one point.

image

Correct Answer:

image

Question No.123

DRAG DROP

You have an Office 365 tenant that has an Enterprise E3 subscription.

You enable Azure Rights Management for users in the tenant. You need to define the methods that you can implement to encrypt and decrypt email message.

What should you do?

To answer, drag the appropriate method to the correct action. Each method may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.

image

Correct Answer:

image

Question No.124

Contoso Ltd, has an on-premises SharePoint environment. The Company plans to deploy SharePoint Online.

You must use Active Directory Federation Service (AD FS). The global administrator account must be able to access the Office 365 tenant even if AD FS is unavailable.

You need to set up the global administrator account. What should you do?

  1. In the Office 365 admin center, create a user named sp_admin@contoso.onmicrosoftcom.

  2. In the Office 365 admin center, create a user named sp_admin@contoso.com.

  3. In Active Directory Domain Services Users and Computers, create a user named sp_admm@contoso.onmicrosoftcom.

  4. In Active Directory Domain Services Users and Computers, create a user named sp_admin@contoso.com.

Correct Answer: A

Explanation:

A complete set up of ADFS federates the entire domain of contoso.com. Even if you create a global admin user in Office 365 using the @contoso.com domain the domain is federated so I believe you will be redirected you to your ADFS login page. If you create a global admin in Office 365 and configure the UPN to use the domain suffix of contoso.onmicrosoft.com you will not be sent to the ADFS log in page.

Question No.125

Note This question is part of a series of questions that present the same scenario Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

You have an on-premises Active Directory forest.

You deploy Active Directory Federation Services (AD FS) and purchase an Office 365 subscription.

You need to create a trust between the AD FS servers and the Office 365 subscription. Solution: You run the netdom.com command.

Does the meet the goal?

  1. Yes

  2. No

Correct Answer: A

Question No.126

Note: This question is part of a series of questions that present the same scenario Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.

Your network contains a single Active directory forest. The forest contains a domain controller and Active Directory Federation Services (AD FS) servers that are deployed to virtual machines. The virtual machines run either on-premises or on Microsoft Azure.

You have Azure AD connect deployed on-premises. The Azure AD connect database is installed on an on-premises instance of Microsoft SQL Server 2014.

Last month, an Azure AD connect server experienced a hardware failure that caused an Azure AD connect server to go offline for several days.

You need to recommend a solution to reduce the outage window when hardware failure occurs on the Azure AD connect server.

Solution: You deploy a new Azure AD Connect server to an Azure virtual machine that uses a new SQL Server instance. You set the Azure AD Connect server to staging mode.

Does this meet the goal?

  1. Yes

  2. No

Correct Answer: A

Question No.127

You have an Office 365 subscription that has several thousand mailboxes. The users in the Office 365 organization are located in different regions.

You need to view the path of the email messages sent from a user to an external recipient

Which cmdlet should you use?

  1. Get-MailboxActivityReport

  2. Get-MailDetailTransportRuleReport

  3. Get-MailTrafficReport

  4. Get-ServiceDeliveryReport

Correct Answer: D

Question No.128

You have an Office 365 subscription.

All users have mailboxes hosted in Microsoft Exchange Online.

The network administrators in your organization are updating the network infrastructure, including making changes to the DNS providers and updating the SSL certificates.

You need to perform the following test in the Exchange Online environment:

image

image

Verity that the mail exchanger (MX) records for Exchange Online are published correctly. Send a test message from an external recipient to an Exchange Online recipient

image

Verify that the SMTP service is accessible from the Internet. Which tool should you use?

  1. Microsoft Connectivity Analyzer Tool

  2. Microsoft Office 365 Client Performance Analyzer

  3. Office 365 health, readiness and connectivity checks

  4. Microsoft Remote Connectivity Analyzer.

  5. Microsoft Support and Recovery Assistant for Office 365

Correct Answer: D

Question No.129

A Company has an Office 365 tenant that has an Enterprise E1 subscription. You synchronize disabled user accounts from an Active Directory domain Services environment.

You need to enable the user accounts in Office 365. Which Windows PowerShell cmdlet should you run?

  1. Set-MsolUser

  2. Redo-MsolProvisionUser

  3. Set-MsolUserLicense

  4. Set-MsolUserPrincipalName

  5. Convert-MsolFederatedUser

  6. Set-MailUser

  7. Set-LinkedUser

  8. New-MsolUser

Correct Answer: A

Explanation:

When you dirsync a disabled user from on premise to Office 365 the user is created in Office 365 with the BlockCredential attribute set to True. The set-msoluser – userprincipalname –

BlockCredential $false will enable that account.

Question No.130

You have a legacy application that needs to send email to employees.

The legacy application runs on a client computer that must send email by using SMTP through Exchange Online.

You need to identify the correct host name and port information. Which settings should you use?

  1. Outlook.office36S.com and port 25

  2. Outlook-Office365.com and port 587

  3. smtp.office365.corn and port 587

  4. smtp.office365.com and port 25

Correct Answer: D

Get Full Version of the Exam
70-346 Dumps
70-346 VCE and PDF

Leave a Reply

Your email address will not be published. Required fields are marked *

Proudly powered by WordPress