Microsoft MS-700 Online Practice Questions and Exam Preparation

Microsoft MS-700 Online Questions & Answers

• Question 441:

  HOTSPOT

  You are reviewing the planned implementation of information barriers for your company.

  You run the following command.

  

  You activate the information barrier policies.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  To allow one segment to communicate with only one other segment, use the New-InformationBarrierPolicy cmdlet with the SegmentsAllowed parameter.

  When you want to block segments from communicating with each other, you define two policies: one for each direction. Each policy blocks communication one way only.

  Box 2: No

  When you want to block segments from communicating with each other, you define two policies: one for each direction. Each policy blocks communication one way only.

  Box 3: Yes

  No polices between Research and HR so it is allowed.

  Block policies prevent one segment from communicating with another segment.

  Allow policies allow one segment to communicate with only certain other segments.

  References:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-barriers-policies

• Question 442:

  Your company uses Teams.

  All users are assigned a Microsoft 365 E5 license.

  You need to purchase an add-on license that will enable the users to apply a sensitivity label to control the end-to-end encryption of highly sensitive Teams meetings.

  Which add-on license should you purchase?

  A. Priva Privacy Risk Management
  B. Microsoft Teams Premium
  C. Audio Conferencing
  D. Microsoft 365 E5 Security
  E. Microsoft 365 E5 Compliance
  B. Microsoft Teams Premium

  ---

  Explanation

  https://support.microsoft.com/en-us/office/sensitivity-labels-for-teams-meetings-2b244d1d-72d0-471e-8e58-c41079e190fb#:~:text=Sensitivity%20labels%20are%20available%20as,Premium%2C%20contact%20your%20IT%20admin.ComplianceiswhereyouconfigureSensitivitylabelsforTeamsmeetingsTeamsPremiumistheadd-onlicenseyouneedtohavetheabilitytoconfigureit.

• Question 443:

  SIMULATION

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

  When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g. copy and paste, ability to navigate to external websites) will not be possible by design.

  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

  Please not that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

  You may now click next to proceed to the lab.

  Username and password.

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Microsoft 365 Username:

  [email protected] Microsoft 365 Password: XXXXXXXXXXXX

  You need to ensure that only users from litwareinc.com can be added to Teams as guest users.

  To complete this task, sign in to the Microsoft 365 portal.

  A. Check the answer in explanation.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Check the answer in explanation.

  ---

  Explanation

  Solution 1: Limit sharing in Microsoft 365

  While you can't disable internal sharing entirely or remove the Share button from sites, there are various ways that you can limit sharing in Microsoft 365 to meet the needs of your organization.

  Limit guest sharing to specified domains

  You can limit guest sharing to users from specific domains by allowing or blocking domains in Microsoft Entra ID. This also affects guest sharing in SharePoint if you have enabled SharePoint and OneDrive integration with Microsoft Entra B2B. To allow sharing invitations only from specified domains:

  1. In the Microsoft Entra admin center, expand External identities, and then choose External collaboration settings.

  2. Under Collaboration restrictions, select Deny invitations to the specified domains or Allow invitations only to the specified domains, and then type the domains that you want to use.

  3. Select Save.

  

  Note:

  Microsoft Entra ID external collaboration settings

  Sharing in Microsoft 365 is governed at its highest level by the B2B external collaboration settings in Microsoft Entra ID. If guest sharing is disabled or restricted in Microsoft Entra ID, this setting overrides any sharing settings that you configure in Microsoft 365.

  External collaboration settings let you specify what roles in your organization can invite external users for B2B collaboration. These settings also include options for allowing or blocking specific domains, and options for restricting what external guest users can see in your Microsoft Entra directory. The following options are available:

  Allow or block domains: You can use collaboration restrictions to allow or deny invitations to the domains you specify.

  Solution 2:

  Allow or block invitations to B2B users from specific organizations (Add an allowlist)

  With this more restrictive configuration, you can set specific domains in the allowlist and restrict invitations to any other organizations or domains that aren't mentioned.

  If you want to use an allowlist, make sure that you spend time to fully evaluate what your business needs are. If you make this policy too restrictive, your users can choose to send documents over email, or find other non-IT sanctioned ways of collaborating.

  To add an allowlist:

  1. Sign in to the Microsoft Entra admin center as a Global Administrator.

  2. Browse to Identity > External Identities > External collaboration settings.

  3. Under Collaboration restrictions, select Allow invitations only to the specified domains (most restrictive).

  4. Under Target domains, enter the name of one of the domains that you want to allow. For multiple domains, enter each domain on a new line. For example:

  

  5: When you're done, select Save.

  After you set the policy, if you try to invite a user from a domain that's not on the allowlist, you receive a message saying that the domain of the user is currently blocked by your invitation policy.

• Question 444:

  Your company uses Teams.

  You are assigned the Teams Communications Support Specialist role.

  You need to be assigned a role that will enable you to publish a new app to the Teams apps page. The solution must follow the principle of least privilege.

  Which role should be assigned to you?

  A. Teams Administrator
  B. Cloud Application Administrator
  C. Application Administrator
  D. Office Apps Administrator
  A. Teams Administrator

  ---

  Explanation

  Even though there is a Cloud Application Administrator role in Azure Active Directory (now called Entra), that role cannot access the Teams Admin Center with priviledges to make changes.

  https://learn.microsoft.com/en-us/microsoftteams/using-admin-roles

• Question 445:

  You have a Microsoft 365 E5 subscription.

  You plan to use Teams.

  You run the Microsoft 365 network connectivity test tool and generate a report.

  You discover that the Microsoft Teams section of the report has a warning notification for media connectivity.

  You suspect a firewall issue at the test location.

  Which destination protocol and port range should you configure on the firewall?

  A. UDP ports 50020 through 50059
  B. TCP ports 3478 through 3481
  C. UDP ports 50000 through 50019
  D. UDP ports 3478 through 3481
  D. UDP ports 3478 through 3481

• Question 446:

  You work as a Systems Administrator for your company. The company has recently purchased a subscription to Microsoft 365.

  All users in the company have a Microsoft 365 E3 license.

  The company has a large Sales department. You plan to deploy Microsoft Teams to users in the Sales department.

  You need to create a team in Microsoft Teams for the Sales department users. Users should automatically be added to the team when they join the Sales department. Users who leave the Sales department should automatically be removed from the team.

  Which of the following actions should you perform first?

  A. Create a dynamic distribution group and configure a member ship rule for the group.
  B. Create an Azure Active Directory security group and add the Sales users to the group.
  C. Create an Office 365 group and configure a membership rule for the group.
  D. Create a new team by using the New-Team PowerShell cmdlet.
  C. Create an Office 365 group and configure a membership rule for the group.

• Question 447:

  You have a Microsoft 365 E5 subscription that uses Teams.

  When you attempt to create a new sensitivity label for Teams, you discover that the Groups & sites option is unavailable as shown in the following exhibit.

  

  You need to be able to select Groups & sites when you create the sensitivity label.

  Which cmdlet should you run?

  A. Set-UnifiedGroup
  B. Set-AzureADDirectorySetting
  C. Set-CsTeamsEnhancedEncryptionPolicy
  D. Set-SPOSiteOffice365Group
  B. Set-AzureADDirectorySetting

  ---

  Explanation

  Assign sensitivity labels to Microsoft 365 groups in Azure Active Directory

  Enable sensitivity label support in PowerShell (see step 6 below).

  To apply published labels to groups, you must first enable the feature. These steps enable the feature in Azure AD.

  1. Open a Windows PowerShell window on your computer. You can open it without elevated privileges.

  2. Run the following commands to prepare to run the cmdlets.

  Install-Module AzureADPreview

  Import-Module AzureADPreview

  AzureADPreview\Connect-AzureAD 3. Fetch the current group settings for the Azure AD organization and display the current group settings.

  $grpUnifiedSetting = (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ)

  $Setting = $grpUnifiedSetting

  $grpUnifiedSetting.Values

  4. Enable the feature:

  $Setting["EnableMIPLabels"] = "True" 5. Check the new applied value:

  $Setting.Values 6. Save the changes and apply the settings:

  Set-AzureADDirectorySetting -Id $grpUnifiedSetting.Id -DirectorySetting $Setting

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels

• Question 448:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that includes Teams.

  You are planning a Teams deployment for a new branch office in London that contains the resources shown in the following table.

  

  The office has network bandwidth available for Teams as shown in the following table.

  

  You have Teams bandwidth requirements for the resources as shown in the following table.

  

  For each of the following statements, select Yes if True. Otherwise select No. NOTE: Each correct selection is worth one point.

  

  

• Question 449:

  You need to create a team for the sales department.

  What should you do first?

  A. Create an Office 365 group and modify the membership rule for the group.
  B. From PowerShell, run the Add-AzureAdGroupMember cmdlet.
  C. From PowerShell, run the New-Team cmdlet.
  D. Create a team and select Build a team from scratch.
  A. Create an Office 365 group and modify the membership rule for the group.

  ---

  Explanation

  https://docs.microsoft.com/en-us/microsoftteams/dynamic-memberships

• Question 450:

  Your company has a Microsoft Office 365 subscription.

  The company has the departments and teams shown in the following table.

  

  You need to ensure that only the following apps appear in the app bar of the Microsoft Teams client for only the events department:

  1. Activity

  2. Shifts

  3. Chat

  What should you do first?

  A. Create a custom app permission policy.
  B. Modify the global app permission policy.
  C. Create a custom app setup policy.
  D. Modify the global app setup policy.
  C. Create a custom app setup policy.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/microsoftteams/teams-app-setup-policies#assign-a-custom-app-setup-policy-to-users