- (Exam Topic 5)
Your company has an on premises Microsoft Exchange Server 2016 organization and a Microsoft 365 Enterprise subscription. You plan to migrate mailboxes and groups to Exchange Online.
You start a new migration batch.
Users report *low performance when they use the on premises Exchange Server organization.
You discover that the migration is causing the slow performance.
You need to reduce the impact of the mailbox migration on the end-users. What should you do?
Correct Answer:
C
The migration is causing the slow performance. This suggests that the on-premise Exchange server is struggling under the load of copying the mailboxes to Exchange Online. You can reduce the load on the
on-premise server by reducing the maximum number of concurrent mailbox migrations. Migrating just a few
mailboxes at a time will have less of a performance impact than migrating many mailboxes concurrently.
Reference:
https://support.microsoft.com/en-gb/help/2797784/how-to-manage-the-maximum-concurrent-migration-batches
- (Exam Topic 5)
You plan to implement a new task pane in Microsoft Office.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
Graphical user interface, text, application, email Description automatically generated
Reference:
https://github.com/OfficeDev/office-js-docs-pr/blob/master/docs/develop/automatically-open-a-task-pane-with-a https://docs.microsoft.com/en-us/office/troubleshoot/settings/office-program-task-panes
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 5)
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.
User1 is the owner of Group1, User2 is the owner of Group2.
You create an access review that contains the following configurations:
* Users to review, Member of a group
* Scope Everyone
* Group: Group1 and Group2
* Review Group owners
For each of the following statements, select Yes if the statement is true. Otherwise select No. NOTE: Each correct selection is worth one point.
Solution:
Box 1: Yes
User1 is the owner of Group1. User2 is in Group1 and Group2. Group owners can review access. Therefore, User1 can review User2’s membership of Group1.
Box 2: Yes
User1 is the owner of Group1. User3 is in Group1 and Group2. Group owners can review access. Therefore, User1 can review User3’s membership of Group1.
Box 3: No
Only group owners can review access. User3 is not a group owner. Therefore, User3 cannot review membership of the groups.
References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 5)
You have a hybrid deployment of Microsoft 365 that contains the users shown in the following table.
You have an on-premises web app named AppA. Group1 has permissions to access AppA. You configure an Azure Active Directory (Azure AD) Application Proxy.
You add an Application Proxy entry for AppA as shown the exhibit. (Click the Exhibit tab.)
You assign the AppA enterprise application in Azure to Group2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Solution:
Box 1: No
User1 is in Group2. The enterprise app is assigned to Group2. However, the authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Only Group1 has access to the web app. Therefore, User1 will not be able to access the web app.
Box 2: Yes.
User2 is in Group1 and Group2. The enterprise app is assigned to Group2. The authentication method is “Passthrough” so the authentication will be passed to the on-premises web app. Group1 has access to the web app. Therefore, User2 will be able to access the web app in MyApps.
Box 3: No
User3 is in Group1. Group1 has access to the web app so User3 could access the app on-premises. However, the enterprise app is assigned to Group2 which User3 is not a member of. Therefore, User3 will not be able to access the external URL of the web app.
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 5)
Your network contains an on-premises Active Directory domain. You have a Microsoft 365 subscription.
You implement a directory synchronization solution that uses pass-through authentication.
You configure Microsoft Azure Active Directory (Azure AD) smart lockout as shown in the following exhibit.
You discover that Active Directory users can use the passwords in the custom banned passwords list. You need to ensure that banned passwords are effective for all users.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Correct Answer:
ACE
References:
Azure AD password protection is a feature that enhances password policies in an organization. On-premises deployment of password protection uses both the global and custom banned-password lists that are stored in Azure AD. It does the same checks on-premises as Azure AD does for cloud-based changes. These checks are performed during password changes and password reset scenarios.
You need to install the Azure AD Password Protection Proxy on a domain controller and install the Azure AD Password Protection DC Agent on all domain controllers. When the proxy and agent are installed and configured, Azure AD password protection will work.
In the exhibit, the password protection is configured in Audit mode. This is used for testing. To enforce the configured policy, you need to set the password protection setting to Enforced.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-de https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad-on-premises