Lead2pass 2017 September New Microsoft 70-346 Exam Dumps!
100% Free Download! 100% Pass Guaranteed!
Our dumps have been reviewed and approved by industry experts and individuals who have taken and passed 70-346 exam. Lead2pass will have you prepared to take 70-346 test with high confidence and pass easily. Whether you are looking for 70-346 study guide, 70-346 exam questions, 70-346 exam dump or 70-346 test, Lead2pass.com has you covered.
Following questions and answers are all new published by Microsoft Official Exam Center: https://www.lead2pass.com/70-346.html
QUESTION 121
An organization plans to deploy Exchange Online.
You must support all Exchange Online features.
You need to create the required DNS entries.
Which two DNS entries should you create? Each correct answer presents part of the solution.
A. A
B. SRV
C. MX
D. CNAME
Answer: CD
Explanation:
http://technet.microsoft.com/en-us/library/hh852557.aspx
QUESTION 122
Drag and Drop Question
Fabrikam has the Office 365 Enterprise E3 plan.
You must add the domain name fabrikam.com to the Office 365 tenant.
You need to confirm ownership of the domain.
Which DNS record types should you use? To answer, drag the appropriate DNS record type to the correct location or locations in the answer area. Each DNS record type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 123
Hotspot Question
You manage a team of three administrators for an organization that uses Office 365.
You must assign roles for each of the administrators as shown in the table.
You must assign the minimum permissions required to perform the assigned tasks.
Which administrative role should you configure for each user? Select the correct answer from each list in the answer area.
Answer:
QUESTION 124
Hotspot Question
A company plans to deploy an Office 365 tenant.
You have the following requirements:
– Administrators must be able to access the Office 365 admin center.
– Microsoft Exchange Online must be used as a Simple Mail Transfer Protocol (SMTP) relay for a line-of-business application that sends email messages to remote domains.
– All users must be able to use the audio and video capabilities in Microsoft Lync 2013.
You need to configure the ports for the firewall.
Which port should you use for each application? Select the correct answer from each list in the answer area.
Answer:
QUESTION 125
Your company purchases an Office 365 plan.
The company has an Active Directory Domain Services domain.
User1 must manage Office 365 delegation for the company.
You need to ensure that User1 can assign administrative roles to other users.
What should you do?
A. Create an Office 365 tenant and assign User1 the password administrator role.
B. Use a password administrator account to assign the role to User1.
C. Use a user management administrator account to assign the role to User1.
D. Create an Office 365 tenant and assign User1 the global administrator role.
Answer: D
Explanation:
Global admin: Has access to all administrative features. Global admins are the only admins who can assign other admin roles.
You can have more than one global admin in your organization. The person who signs up to purchase Office 365 becomes a global admin.
https://support.office.com/client/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504
QUESTION 126
Contoso, Ltd., has an Office 365 tenant.
You configure Office 365 to use the domain contoso.com, and you verify the domain.
You deploy and configure Active Directory Federation Services (AD FS) and Active Directory Synchronization Services (AAD Sync) with password synchronization.
You connect to Azure Active Directory by using a Remote PowerShell session.
You need to switch from using password-synced passwords to using AD FS on the Office 365 verified domain.
Which Windows PowerShell command should you run?
A. Convert-MsolDomainToFederated -DomainName contoso.com
B. Convert-MsolDomainToStandard -DomainName contoso.com
C. Convert-MsolFederatedUser
D. Set-MsolDomainAuthentication -DomainName contoso.com
Answer: A
Explanation:
The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on (also known as identity federation), including configuring the relying party trust settings between the Active Directory Federation Services (AD FS) server and the Microsoft Online Services. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in; no action is required by the administrator.
Incorrect:
Not B: This is the opposite to what is required. The Convert-MsolDomainToStandard cmdlet converts the specified domain from single sign-on (also known as identity federation) to standard authentication. This process also removes the relying party trust settings in the AD FS server and online service. After the conversion, this cmdlet will convert all existing users from single sign-on to standard authentication.
Not C: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user.
Not D: The Set-MsolDomainAuthentication cmdlet is used to change the domain authentication between standard identity and single-sign on. This cmdlet will only update the settings in Microsoft Online Services; typically the Convert-MsolDomainToStandard or Convert-MsolDomainToFederated should be used instead.
Reference: Convert-MsolDomainToFederated
https://msdn.microsoft.com/en-us/library/azure/dn194092.aspx
QUESTION 127
Drag and Drop Question
Contoso, Ltd., uses SharePoint Online and plans a new single sign-on (SSO) implementation that uses Active Directory Federation Services (AD FS).
Your environment contains the following configurations:
– two servers named Server1 and Server2
– a partner collaboration website for the domain contoso.com that points to a SharePoint Online team site
– a hardware load balancer to use with Server1 and Server2
You need to install AD FS to support the environment.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
https://technet.microsoft.com/en-us/library/dn479416(v=wps.630).aspx
QUESTION 128
You have an Office 365 tenant that uses an Enterprise E3 subscription.
You have two servers in a perimeter network that have the Active Directory Federation Services (AD FS) proxy role service installed. A federation server farm is located behind a firewall.
You need to ensure that the AD FS proxies can communicate with the federation server farm.
Which two name resolution strategies can you use? Each correct answer presents a complete solution.
A. HOSTS file on the proxy servers
B. DNS server in the perimeter network
C. LMHOSTS file on the proxy servers
D. LMHOSTS file on the federation servers
E. HOSTS file on the federation servers
Answer: AB
Explanation:
Configure Name Resolution for a Federation Server Proxy in a DNS Zone That Serves Only the Perimeter Network
So that name resolution can work successfully for a federation server in an Active Directory Federation Services (AD FS) scenario in which one or more Domain Name System (DNS) zones serve only the perimeter network, the following tasks must be completed:
* The hosts file on the federation server proxy must be updated to add the IP address of a federation server.
* DNS in the perimeter network must be configured to resolve all client requests for the AD FS host name to the federation server proxy. To do this, you add a host (A) resource record to perimeter DNS for the federation server proxy.
Reference: Configure Name Resolution for a Federation Server Proxy in a DNS Zone That Serves Only the Perimeter Network
https://technet.microsoft.com/en-us/library/dd807045.aspx
QUESTION 129
You have an Office 365 tenant.
You display the Office 365 Service Health Dashboard.
The following screenshot shows the relevant portion of the dashboard:
Answer: Cant see the entire Service Health Dashboard – just learn what the different icons mean (https://support.office.com/en-au/article/View-the-status-of-your-services-932ad3ad-533c-418a-b938-6e44e8bc33b0#__translate_a_service_1)
QUESTION 130
A company has an Office 365 tenant.
You must retrieve mailbox diagnostic date.
You need to provide a report with this data for all user.
Which report solution should you choose?
A. Office 365 admin center
B. downloadable spreadsheet
C. reporting Windows PowerShell cmdlets
D. REST reporting web service
Answer: D
Explanation:
The Office 365 Reporting web service enables developers to integrate information on email and spam, antivirus activity, compliance status, and Lync Online activities into their custom service reporting applications and web portals. All the reports available in the admin portal, within the downloadable Microsoft Excel spreadsheets, and those accessed through Windows PowerShell cmdlets, are accessible using the Reporting web service.
Reference: Office 365 Reporting web service
https://msdn.microsoft.com/en-us/library/office/jj984325.aspx
QUESTION 131
Drag and Drop Question
You have an Office 365 tenant. An organization is migrating from an Exchange organization to Office 365.
Users report that Outlook does not display the availability of other users for meetings.
You must determine whether an Office 365 mailbox can access the scheduling availability of a user with an on-premises mailbox.
You must also run a test to verify that an on-premises mailbox can access the scheduling availability of a user that has an Office 365 mailbox.
You need to conduct the tests.
What should you do? To answer, drag the appropriate test to run to the correct mailbox test scenario. Each test may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 132
Hotspot Question
A company with 75,000 employees has an Office 365 tenant.
You need to install the Azure Active Directory Synchronization (AAD Sync) tool by using the least amount of administrative effort.
Which versions of each product should you implement? To answer, select the appropriate version from each list in the answer area.
Answer:
Explanation:
The following components need to be installed:
Net 4.5.1
PowerShell (PS3 or better is required)
* Azure AD Sync requires a SQL Server database to store identity data. By default a SQL Express LocalDB (a light version of SQL Server Express) is installed and the service account for the service is created on the local machine. SQL Server Express has a 10GB size limit that enables you to manage approximately 100.000 objects.
This is fine for the scenario in this question.
If you need to manager a higher volume of directory objects, you need to point the installation process to a different version of SQL Server. AAD Sync supports all flavors of Microsoft SQL Server from SQL Server 2008 to SQL Server 2014.
https://msdn.microsoft.com/en-us/library/azure/dn757602.aspx
QUESTION 133
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in the question apply only to that question.
A company has an Office 365 tenant that has an Enterprise E1 subscription. Users currently sign in with credentials that include the contoso.com domain suffix.
The company is acquired by Fabrikam. Users must now sign in with credentials that include the fabrikam.com domain suffix.
You need to ensure that all users sign in with the new domain name.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: D
Explanation:
The Set-MsolUserPrincipalName cmdlet is used to change the User Principal Name (user ID) of a user. This cmdlet can be used to move a user between a federated and standard domain, which will result in their authentication type changing to that of the target domain.
The following command renames [email protected] to [email protected]. Set-MsolUserPrincipalName -UserPrincipalName [email protected] – NewUserPrincipalName [email protected]
Incorrect:
Not A: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should be used for basic properties only.
Not B: The Redo-MsolProvisionUser cmdlet can be used to retry the provisioning of a user object in Azure Active Directory when a previous attempt to create the user object resulted in a validation error.
Not C: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user.
Not E: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user.
Not F: Use the Set-MailUser cmdlet, used for on premises Exchange Server (not Office 365), to modify the mail-related attributes of an existing user in Active Directory.
Not G: Use the Set-LinkedUser cmdlet to modify the properties of an existing linked user account. The Outlook Live Directory Sync (OLSync) service account is a linked user.
Not H: The New-MsolUser cmdlet is used to create a new user in the Microsoft Azure Active Directory (Microsoft Azure AD).
Reference: Set-MsolUserPrincipalName
https://msdn.microsoft.com/en-us/library/azure/dn194096.aspx
QUESTION 134
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in the question apply only to that question.
You have an Office 365 tenant that uses an Enterprise E1 subscription.
You need to convert the users in the tenant to an Enterprise E3 subscription.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: C
Explanation:
The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
Note: Switching plans manually means that you’re completing the following separate procedures instead of using the switch plans wizard. The procedures are:
Buy licenses for the subscription you’re switching users to. Verify the subscription is ready to switch users to.
Reassign user licenses
Remove unneeded licenses from the subscription you’re switching from. Cancel the original subscription (if switching all users). Switching only some users isn’t supported by the switch
Reference: Set-MsolUserLicense
https://msdn.microsoft.com/en-us/library/azure/dn194094.aspx
QUESTION 135
Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in the question apply only to that question.
A company has an Office 365 tenant that has an Enterprise E1 subscription.
You plan to test a new deployment by using 50 tenant user accounts.
You need to ensure that the passwords for the test user accounts do not expire.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: A
Explanation:
The Set-MsolUser cmdlet is used to update a user object.
This cmdlet should be used for basic properties only.
Parameter -PasswordNeverExpires <Boolean>
Sets whether or not the user’s password will expire periodically.
Reference: Set-MsolUser
https://msdn.microsoft.com/en-us/library/azure/dn194136.aspx
QUESTION 136
Drag and Drop Question
A company has an Office 365 tenant.
You plan to use Office 365 to manage the DNS settings for a custom domain.
You purchase the domain through a third-party provider.
You create a custom website.
You must host the website through a third-party provider at the IP address 134.170.185.46.
You need to configure the correct DNS settings.
What should you do? To answer, drag the appropriate DNS record to the correct DNS target. Each record may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
* Change your domain’s nameserver (NS) records
When you get to the last step of the domains setup wizard in Office 365, you have one task remaining. To set up your domain with Office 365 services, like email, you change your domain’s nameserver (or NS) records at your domain registrar to point to the Office 365 primary and secondary nameservers.
* Use (A) DNS record for the web site.
QUESTION 137
Drag and Drop Question
A company has an Active Directory Domain Services domain.
You plan to implement Active Directory Federation Service (AD FS) with single sign-on.
You have the following requirements:
– Servers must an Windows Server 2012 R2.
– Internet-facing servers must be placed in the perimeter network.
– The solution must support at least 105 AD FS trust relationships.
You need to deploy the appropriate roles.
Answer:
QUESTION 138
Hotspot Question
A company has an Office 365 tenant.
You plan to use Active Directory Federated Services for user authentication.
You create an account named SyscService in Active Directory and in Office 365.
You must configure the permissions for the accounts in both environments by granting the minimum permissions required.
In the table below, identify the role that you must assign to each account/
Note: Make only one selection in each column. Each correct answer is worth one point.
Answer:
QUESTION 139
Drag and Drop Question
You have an Office 365 tenant that has an Enterprise E3 subscription.
You enable Azure Rights Management for users in the tenant.
You need to define the methods that you can implement to encrypt and decrypt email message.
What should you do? To answer, drag the appropriate method to the correct action. Each method may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.)
Answer:
Explanation:
Send Encrypted email: Transport Rule https://technet.microsoft.com/en-us/library/dn569289.aspx
Receive encrypted email : Organization account https://technet.microsoft.com/en-us/library/dn569287.aspx
View encrypted email: Organization account https://technet.microsoft.com/en-us/library/dn569287.aspx
Although a one-time password can be used to view encrypted emails if an organization account is not available
QUESTION 140
You have a legacy application that needs to send email to employees.
The legacy application must send email by using SMTP through Exchange Online.
You need to identify the correct host name and port information.
Which settings should you use?
A. Smtp.office365.com and port 587
B. Outlook.office365.com and port 25
C. Outlook.office365.com and port 587
D. Smtp.office365.com and port 25
Answer: D
More free Lead2pass 70-346 exam new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDVjBwLTI5aDNwM1k
At Lead2pass we verify that 100% of the 70-346 exam questions in exam test prep package are real questions from a recent version of the 70-346 test you are about to take. We have a wide library of 70-346 exam dumps.
2017 Microsoft 70-346 (All 216 Q&As) exam dumps (PDF&VCE) from Lead2pass:
https://www.lead2pass.com/70-346.html [100% Exam Pass Guaranteed]