Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 101:

  You use an IMAP-based email system.

  You purchase a Microsoft 365 subscription.

  In Exchange Online, you create mailboxes for all users.

  You need to migrate all the email accounts of all the users to Exchange Online.

  Which three components should you create? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a migration batch

  B. a CSV migration file

  C. an inbound connector

  D. an accepted domain

  E. a remote domain

  F. a migration endpoint

  Correct Answer: BDF

  Reference: https://docs.microsoft.com/en-us/exchange/mailbox-migration/migrating-imap-mailboxes/migrate-other-typesof-imap-mailboxes

• Question 102:

  You have a Microsoft Exchange Online tenant.

  All users are assigned only an Office 365 Enterprise E3 license.

  You need to ensure that the users can use only Microsoft Outlook to connect to their Microsoft 365 mailbox when they connect from an Android device. What should you create?

  A. an Outlook Web App policy in Exchange Online

  B. a connection filter policy in Exchange Online Protection (EOP)

  C. an Exchange ActiveSync device access rule

  D. an app protection policy in Microsoft Endpoint Manager

  Correct Answer: C

• Question 103:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.

  All the users in the sales department at your company are in a group named Sales.

  The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group.

  You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group.

  Solution: You modify the Exchange Online Protection (EOP) settings.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You can block common attachments (attachments commonly used as malware) in EOP but not all attachments as required in this question. Instead, you should create a mail flow rule.

  Reference: https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachmentblocking-scenarios

• Question 104:

  You have a Microsoft Exchange Server 2019 organization.

  You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential.

  What should you do?

  A. Add User1 to the Discovery Management management role group.

  B. Assign the Legal Hold and Mailbox Import Export management roles to User1.

  C. Add User1 to the Records Management management role group.

  D. Add User1 to the Compliance Management management role group.

  Correct Answer: A

  Alternatively, assign the Mailbox Search and Legal Hold management roles to User1

  Reference: https://docs.microsoft.com/en-us/exchange/policy-and-compliance/holds/holds?view=exchserver-2019

• Question 105:

  You have a Microsoft 365 environment that contains 1,000 mobile devices.

  You need to recommend a solution to prevent all the mobile devices that use the Exchange ActiveSync protocol from authenticating by using Basic authentication.

  Which two solutions should you recommend? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Configure the CAS mailbox settings for each mailbox.

  B. Implement Azure Multi-Factor Authentication (MFA).

  C. Create an authentication policy.

  D. Create a conditional access policy.

  E. Create a device access rule.

  Correct Answer: CD

  Reference: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/disable-basicauthentication-in-exchange-online https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/block-legacy-authentication

• Question 106:

  Your company has a Microsoft Exchange Server 2019 hybrid deployment.

  You are migrating mailboxes to Exchange Online by using remote mailbox move requests.

  A recent security breach at the company required that the passwords of all privileged accounts be changed.

  Since the password change, mailbox move requests are failing.

  You need to ensure that the mailbox migration can resume.

  What should you do first?

  A. From Exchange on-premises, run Set-MigrationEndpoint.

  B. From Exchange on-premises, run Set-MigrationConfig.

  C. From Exchange Online, run Set-MigrationConfig.

  D. From Exchange Online, run Set-MigrationEndpoint.

  E. Run iisreset /noforce on all the Exchange servers that have MRSProxy enabled.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/move-and-migration/set-migrationendpoint?view=exchange-ps

• Question 107:

  You have a hybrid deployment between a Microsoft Exchange Online tenant and an on- premises Exchange Server 2019 organization.

  The tenant uses an email domain named @contoso.com.

  You recently purchased an email domain named fabrikam.com.

  You need to ensure that all the users in the tenant can receive email messages by using the @fabrikam.com email domain. The solution must ensure that the users can continue to receive email by using the @contoso.com email domain.

  Which three actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.

  A. From Azure AD Connect add a domain for fabrikam.com.

  B. From the on-premises Exchange admin center, add an accepted domain for fabrikam.com.

  C. From the Exchange Management Shell, create a script that runs the

  D. From the Microsoft 365 admin center, verify the fabrikam.com email domain

  E. From the on-premises Exchange admin center, modify the email address policy

  F. From the Microsoft 365 admin center, add the fabrikam.com email domain.

  Correct Answer: BDE

• Question 108:

  You have a Microsoft Exchange Online tenant.

  All users use an email address suffix of @contoso.com.

  You need to ensure that all the email messages sent to users who use an email address suffix of @fabrikam.com are encrypted automatically. The solution must ensure that the messages can be inspected for data loss prevention (DLP) rules

  before they are encrypted.

  What should you create?

  A. an Outbound connector

  B. a safe attachments policy

  C. a remote domain

  D. a mail flow rule

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide https://docs.microsoft.com/en-us/exchange/security-and-compliance/data-loss-prevention/data-loss-prevention

• Question 109:

  You have a Microsoft Exchange Server 2019 hybrid deployment.

  You migrate public folders from on-premises to Exchange Online by using the batch migration process.

  After the batch migration completes, additional public folders are created on-premises.

  You need to migrate the new on-premises public folders to Exchange Online.

  What should you do?

  A. Export the contents of the folders to a PST file, and then import the PST files by using Outlook PST export.

  B. Create a new public folder migration batch that contains only the new folders.

  C. Repeat the original batch migration process and add the new folders to the migration batch.

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/exchange/collaboration/public-folders/migrate-to-exchange-online?view=exchserver-2019

• Question 110:

  You manage a hybrid deployment between Microsoft Exchange Online and on-premises Exchange Server 2019. The deployment contains a primary SMTP domain named contoso.com.

  Users have email addresses that use a syntax of [email protected].

  A user named Ben Smith receives a new client computer. You configure the computer1 to access Ben Smith's mailbox. Ben Smith reports that he cannot connect to his mailbox from the new computer.

  You verify that other users can connect successfully to their mailbox and that new users can discover their mailboxes by using Autodiscover.

  You need to ensure that Ben Smith can connect to his mailbox from the new computer.

  What should you do?

  A. Modify the primarySmtpAddress property for the mailbox of Ben Smith.

  B. Modify the email address of Ben Smith to use a syntax of [email protected]

  C. Modify the RemoteRoutingAddress parameter for the mailbox of Ben Smith.

  D. Modify the email address of Ben Smith to use a syntax of [email protected]

  Correct Answer: C