Microsoft Role-based MS-700 Questions & Answers

• Question 1:

  DRAG DROP

  Your company uses Teams and deploys the Yammer Communities app to all users.

  The communications department at the company needs you to replace the image on the Teams app bar for the Communities app.

  Which three actions should you perform in sequence? To answer, drag the appropriate reports to the correct requirements. Each report may be used once, more than once, or not at all.

  Select and Place:

  

  Correct Answer:

  

• Question 2:

  HOTSPOT

  You need to recommend which inbound ports to the network and outbound ports to Office 365 must be allowed on the company's firewall after the planned upgrade. The solution must meet the security requirements.

  Which inbound and outbound ports should you recommend? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoftteams/microsoft-teams-online-call-flows

• Question 3:

  HOTSPOT

  During the pilot project, you review the global policies in the Microsoft Teams admin center.

  Contoso has a global meeting policy configured as shown in the following exhibit.

  

  Contoso has a global live events policy configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 4:

  HOTSPOT

  You need to configure Microsoft Teams to meet the department upgrade requirements.

  For each of the following statements, select Yes if that statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoftteams/teams-and-skypeforbusiness-coexistence-and-interoperability

• Question 5:

  HOTSPOT

  You need to recommend a solution to perform the network validation tasks for the planned upgrade.

  Which tool and role should you recommend for each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoftteams/network-planner

  https://docs.microsoft.com/en-us/microsoftteams/difference-between-call-analytics-and-call-quality-dashboard

• Question 6:

  DRAG DROP

  You need to recommend a voice topology for the departments. The topology must meet the calling requirements and the security requirements.

  What should you recommend for each department? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoftteams/direct-routing-landing-page https://docs.microsoft.com/en-us/microsoftteams/calling-plan-landing-page https://docs.microsoft.com/en-us/skypeforbusiness/skype-for-business-hybrid-solutions/plan-your-phone-system-cloud-pbx-solution/plan-skype-for-business-cloud-connector-edition

• Question 7:

  DRAG DROP You need to configure data retention policies for the teams. The solution must meet the data retention requirements. Which content location should you include in the retention policies? To answer, drag the appropriate content locations to the correct requirements. Each content location may be used once, more than once, or not at all. You may need to drag

  the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-teams?view=o365-worldwide

  https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-sharepoint?view=o365-worldwide

• Question 8:

  DRAG DROP

  You have a Microsoft 365 E5 subscription that contains a Microsoft Teams team named Confidential.

  You need to ensure that guest users cannot be added to the Confidential team.

  How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Explanation: Box 1: Get-AzureADDirectorySettingTemplate See step 2 below.

  Azure Active Directory cmdlets for configuring group settings Create settings at the directory level These steps create settings at directory level, which apply to all Microsoft 365 groups in the directory. The Get-AzureADDirectorySettingTemplate cmdlet is available only in the Azure AD PowerShell Preview module for Graph.

  1.

  In the DirectorySettings cmdlets, you must specify the ID of the SettingsTemplate you want to use. If you do not know this ID, this cmdlet returns the list of all settings templates:

  Get-AzureADDirectorySettingTemplate

  This cmdlet call returns all templates that are available.

  2.

  To add a usage guideline URL, first you need to get the SettingsTemplate object that defines the usage guideline URL value; that is, the Group.Unified template:

  $TemplateId = (Get-AzureADDirectorySettingTemplate | where { $_.DisplayName -eq "Group.Unified" }).Id $Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value $TemplateId -EQ

  3.

  Next, create a new settings object based on that template: $Setting = $Template.CreateDirectorySetting()

  4.

  Then update the settings object with a new value. The two examples below change the usage guideline value and enable sensitivity labels. Set these or any other setting in the template as required:

  $Setting["UsageGuidelinesUrl"] = "https://guideline.example.com" $Setting["EnableMIPLabels"] = "True"

  5.

  Then apply the setting:

  New-AzureADDirectorySetting -DirectorySetting $Setting

  Box 2: Set-AzureADDirectorySetting

  See step 5 below.

  Example: Configure Guest policy for groups at the directory level

  1.

  Get all the setting templates:

  2.

  Get-AzureADDirectorySettingTemplate To set guest policy for groups at the directory level, you need Group.Unified template

  $Template = Get-AzureADDirectorySettingTemplate | where -Property Id -Value "62375ab9-6b52-47ed-826b-58e47e0e304b" -EQ

  3.

  Next, create a new settings object based on that template: $Setting = $template.CreateDirectorySetting()

  4.

  Then update AllowToAddGuests setting $Setting["AllowToAddGuests"] = $False

  5.

  Then apply the setting:

  Set-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ).id -DirectorySetting $Setting Example: Configure Guest policy for groups at the directory level Reference: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-settings-cmdlets

• Question 9:

  DRAG DROP

  Your company has a trading department and a research department.

  The company purchases a Microsoft 365 E5 subscription.

  You plan to deploy Microsoft 365 E5 licenses to all users.

  You need to block communication between the users in the trading department and the users in the research department.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Explanation:

  Step 1: From the Microsoft Teams admin center, enable scoped directory search.

  1: Make sure prerequisites are met Make sure prerequisites are met

  *

  Scoped directory search: Before you define your organization's first IB policy, you must enable scoped directory search in Microsoft Teams. Wait at least 24 hours after enabling scoped directory search before you set up or define IB policies. (Step 1)

  Step 3: Provide admin consent for the Information Barrier Processor.

  *

  Admin consent for IB in Microsoft Teams: When your IB policies are in place, they can remove non-IB compliance users from Groups (for example, Teams channels, which are based on groups). This configuration helps ensure your organization remains compliant with policies and regulations.

  *

  Etc.

  Step 2: Make a list of segments to define.

  2: Segment users in your organization

  In this step, you'll determine what IB policies are needed, make a list of segments to define, and define your segments. Defining segments doesn't affect users, it just sets the stage for IB policies to be defined and then applied.

  Step 4: Create information barrier policies

  3: Create IB policies

  When you create your IB policies, you'll determine whether you need to prevent communications between certain segments or limit communications to certain segments. Ideally, you'll use the minimum number of IB policies to ensure your

  organization is compliant with internal, legal, and industry requirements.

  4: Apply IB policies

  IB policies aren't in effect until you set them to active status and apply the policies.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/information-barriers-policies

• Question 10:

  DRAG DROP

  Your company uses Teams.

  All users are assigned a Microsoft 365 E3 license.

  You need to purchase add-on licenses that will enable the following features for the Teams environment:

  Microsoft Purview Information Barriers Data loss prevention (DLP) for Teams chat and channel messages Safe attachments for Microsoft SharePoint, OneDrive, and Teams

  Which add-on license should you purchase for each feature? To answer, drag the appropriate licenses to the correct features. Each license may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Explanation:

  Box 1: Microsoft 365 E5 Compliance

  Data loss prevention (DLP) for Teams chat and channel messages

  Data loss prevention and Microsoft Teams

  If your organization has Microsoft Purview Data Loss Prevention (DLP), you can define policies that prevent people from sharing sensitive information in a Microsoft Teams channel or chat session.

  DLP Licensing for Microsoft Teams

  Data loss prevention capabilities include Microsoft Teams chat and channel messages, including private channel messages for:

  Office 365 E5/A5/G5

  Microsoft 365 E5/A5/G5

  Microsoft 365 E5/A5/G5 Information Protection and Governance

  Microsoft 365 E5/A5/G5/F5 Compliance and F5 Security and Compliance

  Office 365 and Microsoft 365 E3 include DLP protection for SharePoint Online, OneDrive, and Exchange Online. This also includes files that are shared through Teams because Teams uses SharePoint Online and OneDrive to share files.

  Support for DLP protection in Teams Chat requires E5.

  Box 2: Microsoft Defender for Office 365 plan 1

  Safe attachments for Microsoft SharePoint, OneDrive, and Teams

  Safe Attachments in Microsoft Defender for Office 365

  Applies to

  Microsoft Defender for Office 365 plan 1 and plan 2

  Microsoft 365 Defender

  Safe Attachments in Microsoft Defender for Office 365 provides an additional layer of protection for email attachments that have already been scanned by anti-malware protection in Exchange Online Protection (EOP). Specifically, Safe

  Attachments uses a virtual environment to check attachments in email messages before they're delivered to recipients (a process known as detonation).

  Box 3: Microsoft 365 E5 Compliance,

  Microsoft Purview Information Barriers

  Which licenses provide the rights for a user to benefit from the service?

  Enterprise Mobility + Security E5/A5, Microsoft 365 E5/A5, Microsoft 365 E5/A5/F5 Security and F5 Security and Compliance, and Azure Active Directory Premium Plan 2 provide the rights for a user to benefit from Azure Active Directory Identity

  Governance.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-microsoft-teams

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-attachments

  https://learn.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance