- (Exam Topic 5)
You have a Microsoft 365 subscription that uses a default domain named contoso.com.
Users report that email messages from a domain named fabrikam.com are identified as spam even though the messages are legitimate.
You need to prevent messages from fabrikam.com from being identified as spam. What should you do?

1. A. Enable the Zero-hour auto purge (ZAP) email protection feature.
2. B. Enable the safe list on a connection filter.
3. C. Edit the default mail flow rule to bypass the spam filter.
4. D. Modify the IP Allow list of a connection filter policy.

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-the-connection-filter-poli

- (Exam Topic 5)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Exchange Online tenant that contains 1,000 users.
A user named User1 receives a non-delivery report (NDR) when attempting to send an email message to an internal group named sales@contoso.com. The NDR contains the following text: “5.7.1 Delivery not authorized.”
You need to ensure that User1 can send email to sales@contoso.com successfully.
Solution: You modify the properties of a mail flow rule

1. A. Yes
2. B. No

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/non-delivery-reports-in-exchange-online/fix

- (Exam Topic 5)
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of
tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username: admin@abc.com
Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only.
Lab Instance: XXXXXX
You need to ensure that all email messages received from an organization named contoso.com are encrypted by using TLS.
To complete this task, sign in to the Microsoft 365 admin center.
Solution:
Navigate to Mail flow in the Exchange Admin Center, > Connectors. The Connectors
screen appears.
Click +Add a connector. The New connector
screen appears.
Graphical user interface, text, application, email Description automatically generated

Under Connection from, choose Partner organization.
Graphical user interface, text, application, email Description automatically generated

Click Next. The Connector name
screen appears.
Provide a name for the connector and click Next. The Authenticating sent email
screen appears.
Choose one of the two options between By verifying that the sender domain matches one of the
following domains
andBy verifying that the IP address of the sending server matches one of the
following IP addresses, which belong to your partner organization.
Click Next. The Security restrictions
screen appears.
Check the check box for Reject email messages if they aren't sent over TLS.
Check the check box for
eRject email messages if they aren't sent from within this IP address range
, and provide the IP address range.
Click Next. The Review connector
screen appears.
Review the settings you have configured, and click Create connector.
Reference:
https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
You have a Microsoft Exchange Server 2019 organization. You purchase a Microsoft Office 365 E5 subscription.
You plan to implement Exchange Modern Hybrid and free/busy sharing.
Which two components should you configure for the planned implementations? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

1. A. a sharing policy
2. B. a federation trust
3. C. a relying party trust
4. D. Active Directory Lightweight Directory Services (AD LDS)
5. E. an organization relationship

Correct Answer: BE
References:
https://docs.microsoft.com/en-us/exchange/shared-free-busy

- (Exam Topic 2)
You need to configure the required objects for the branch office administrators. What should you create for each administrator?

1. A. a management role assignment policy and a management role group
2. B. a management role scope and a management role assignment
3. C. a management role scope and a management role group
4. D. a management role and a management role assignment policy

Correct Answer: C

Reference:
https://practical365.com/exchange-server/exchange-server-role-based-access-control-in-action/