Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 121:

  All the users in your company have Microsoft 365 mailboxes.

  Each user connects to Microsoft Exchange Online and OneDrive for Business from a personal computer that runs Windows 10.

  You need to ensure that the users can save attachments to OneDrive for Business only when they connect to their mailbox from Outlook on the web.

  What should you create?

  A. an app protection policy in Microsoft Endpoint Manager

  B. a device compliance policy in Microsoft Endpoint Manager

  C. an Outlook Web App policy in Exchange Online

  D. an Exchange ActiveSync device access rule

  Correct Answer: C

  https://www.pelegit.co.il/prevent-downloading-attachments-through-owa/

• Question 122:

  You have a Microsoft Exchange Server 2019 organization.

  You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential.

  What should you do?

  A. Add User1 to the Organization Management management role group.

  B. Add User1 to the Records Management management role group.

  C. Assign the mailbox Search and Mailbox Import Export

  D. Assign the Mailbox Search and Legal Hold management roles to User1.

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/exchange/policy-and-compliance/holds/holds?view=exchserver-2019

• Question 123:

  You have a Microsoft Exchange Online tenant.

  You discover that a virus has infected the mailboxes of several users. The users are currently spreading the virus by emailing attachments that contain the virus.

  You need to temporarily prevent all users from emailing attachments while you remove the virus from all the mailboxes.

  What should you configure?

  A. a connection filter

  B. a mail flow rule

  C. a connector

  D. a spam fitter

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachmentblocking-scenarios

• Question 124:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center.

  Solution: You assign the Security Reader role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Security Administrator can view the audit reports but cannot create a message trace.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc

• Question 125:

  You have a Microsoft 365 tenant that contains a user named User1.

  User1 reports that she cannot configure a mail profile in Microsoft Outlook for Windows.

  User1 receives the following error message: "Encrypted connection to your mail server is not available."

  You verify that User1 is assigned a Microsoft Office 365 Enterprise F3 license and can send email messages from her account by using Outlook on the web.

  You need to ensure that User1 can connect to Outlook successfully.

  What should you do?

  A. Run the Microsoft Support and Recovery Assistant for Office 365.

  B. Activate the installation of Office 365 ProPlus.

  C. Modify the license assigned to User1.

  D. Install a new certificate on the computer of User1.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/outlook-issues/encrypted-connection-unavailable

• Question 126:

  You have a Microsoft Exchange Online tenant that contains two SMTP domains named contoso.com and litwareinc.com.

  You need to ensure that users who have a contoso.com email address are prevented from seeing users who have a litwareinc.com email address in the global address list (GAL). The litwareinc.com users must be able to see the contoso.com

  users in the GAL.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Modify the Default Address book policy to exclude the litwareinc.com users

  B. Create an offline address book (OAB) that contains the contoso.com users

  C. Create a separate GAL that contains the contoso.com users

  D. Modify the default GAL to exclude the litwareinc.com users

  E. Create a new email address policy for the contoso.com users

  F. Create a new address book policy (ABP) and assign the ABP to the contoso.com mailboxes

  Correct Answer: BCF

  Reference: https://docs.microsoft.com/en-us/exchange/address-books/address-book-policies/address-book-policies

• Question 127:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com.

  You need to prevent all users from performing the following tasks:

  Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com.

  The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet.

  Solution: You create one mail flow rule.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/remote-domains/remote-domains

• Question 128:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a Microsoft 365 subscription.

  Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages.

  Users in the marketing department of the company report that they must be able to access all the links embedded in email messages.

  You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users.

  Solution: You create a new safe links policy and apply the policy to finance department users.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-safe-links-policies?view=o365-worldwide

• Question 129:

  Your company has a Microsoft Exchange Server 2019 hybrid deployment.

  Users in the advertising department and the editorial department of the company have mailboxes in Exchange Online.

  A company policy requires that the advertising department users and the editorial department users be segmented based on the following requirements:

  1.

  The advertising department users must not see the editorial department users in the global address list(GAL).

  2.

  The editorial department users must not see the advertising department users in the GAL.

  3.

  The editorial department users must be treated as external recipients of the advertising department users.

  4.

  The advertising department users must be treated as external recipients of the editorial department users.

  5.

  You need to recommend a solution that meets the requirements and minimize costs and effort. What should you recommend?

  A. In the Exchange Online tenant, create separate address book policies (ABPs) for the advertising and editorial departments.

  B. Migrate all the mailboxes of the advertising department to the on-premises organization, and then enable address book policy (ABP) routing.

  C. Purchase an additional Microsoft 365 subscription, and then migrate all the mailboxes of the advertising department to the new subscription.

  D. Create two address book policies (ABPs) in Exchange Online, and then enable ABP routing for the Exchange Online tenant.

  Correct Answer: D

  References: https://docs.microsoft.com/en-us/exchange/email-addresses-and-address-books/address-book-policies/address-book-policies?view=exchserver-2019

• Question 130:

  You have a Microsoft Exchange Online tenant that contains a user named User1. User1 has a mobile device.

  You need to enable Exchange ActiveSync logging for User1 and retrieve the log files.

  Which two Exchange Online PowerShell cmdlets should you use? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Get-ActiveSyncDevice

  B. Set-ActiveSyncMailboxPolicy

  C. Set-ClientAccessRule

  D. Get-MobileDeviceStatistics

  E. Set-CASMailbox

  Correct Answer: E

  Reference: https://docs.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/change-oab-generation-schedule?view=exchserver-2019