Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 131:

  You have a Microsoft Exchange Server 2019 organization that contains several thousand users. Most users connect to their mailbox by using a mobile device.

  A new corporate security policy requires that when connecting from a mobile device, all users on devices that run iOS must use the Outlook mobile app only.

  You need to modify the organization to meet the security requirement.

  What should you do?

  A. From the Exchange Management Shell, run the New-DeviceConditionalAccessPolicy cmdlet.

  B. From the Exchange admin center, create a mobile device access rule.

  C. From the Exchange Management Shell, run the New-DeviceConfigurationRule cmdlet.

  D. From the Exchange admin center, modify the default mobile device mailbox policy.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/exchange/clients/exchange-activesync/mobile-device-mailbox-policies?view=exchserver-2019

• Question 132:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that contains the following email domains:

  1.

  Adatum.com

  2.

  Contoso.com

  3.

  Fabrikam.com

  When external recipients receive email messages from the users in the tenant, all the messages are delivered by using the @contoso.com email domain.

  You need to ensure that the users send email by using the @fabrikam.com email domain.

  Solution: You modify the properties of the fabrikam.com accepted domain.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow/accepted-domains/accepted-domains?view=exchserver-2019

• Question 133:

  You have a Microsoft Exchange Online tenant named contoso.com.

  You create a partnership with two other companies named fabhkam.com and wingtiptoys.com. All the mailboxes of fabnkam.com are hosted in Microsoft 365. All the mailboxes of wingtiptoys.com are hosted in an on-premises Exchange

  Server 2019 organization.

  You need to ensure that all the email messages sent from contoso.com to fabrikam.com and wingtiptoys.com is encrypted by using TLS.

  What should you do?

  A. Configure one connector.

  B. Create an organizational relationship.

  C. Create two remote domains.

  D. Run the Office 365 Exchange Hybrid Configuration wizard.

  E. Configure two mail flow rules.

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set-up-connectors-for-secure-mail-flow-with-a-partner

• Question 134:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Server 2019 hybrid deployment. All user mailboxes are hosted in Microsoft 365. All outbound SMTP email is routed through the on-premises Exchange organization.

  A corporate security policy requires that you must prevent credit card numbers from being sent to internet recipients by using email.

  You need to configure the deployment to meet the security policy requirement.

  Solution: From the Exchange organization, you create a data loss prevention (DLP) policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide

• Question 135:

  You have a Microsoft Exchange Server 2019 organization named contoso.com and an Exchange Online tenant.

  You plan to implement a hybrid deployment.

  You have the certificates shown in the following table.

  

  You need to identify which certificates can be assigned in the Microsoft Office 365 Exchange Hybrid Configuration wizard.

  Which certificates should you identify?

  A. Cert4 and Cert5 only

  B. Cert2 and Cert3 only

  C. Cert1 only

  D. Cert3 and Cert5 only

  E. Cert2 and Cert4 only

  F. Cert2, Cert3, Cert4, and Cert5 only

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/exchange/certificate-requirements

• Question 136:

  You have a hybrid deployment between a Microsoft Exchange Online tenant and an on- premises Exchange Server 2019 organization.

  Users report that emails sent from Exchange Online mailboxes to the on-premises Exchange Server mailboxes are undelivered.

  You need to review the non-delivery report (NDR) for each undelivered email.

  What should you use?

  A. message trace in the Exchange admin center

  B. auditing in the Exchange admin center

  C. the SMTP protocol logs in Exchange Server

  D. the transport logs in Exchange Server

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-faq

• Question 137:

  You have an on-premises Microsoft Exchange Server 2019 organization.

  You plan to configure the environment to support a hybrid deployment.

  You need to ensure that you can migrate mailboxes from the on-premises organization to Exchange Online.

  Which two ports should be open between Exchange Online and the on-premises organization? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. 25

  B. 80

  C. 143

  D. 389

  E. 443

  F. 993

  Correct Answer: AE

  Reference: https://docs.microsoft.com/en-us/exchange/hybrid-deployment-prerequisites#hybrid-deployment-protocolsports-and-endpoints

• Question 138:

  Your network contains an Active Directory domain named corp.contoso.com. The domain contains client computers that have Microsoft Office 36S Apps installed. You have a hybrid deployment that contains a Microsoft Exchange Online

  tenant and an on-premises Exchange Server 2019 server named Server1. All recipients use an email address suffix of Contoso.com.

  You migrate all the Exchange Server recipients to Exchange Online, and then decommission Server1.

  Users connected to the internal network report that they receive an Autodiscover error when they open Microsoft Outlook.

  You need to ensure that all users can connect successfully to their mailbox by using Outlook.

  Which two actions should you perform? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. From the corp.contoso.com DNS zone, modify the Autodiscover host (A) record.

  B. Add an accepted domain.

  C. From the contoso.com DNS zone, modify the Autodiscover alias (CNAME) record

  D. Modify the name of the TLS certificate.

  E. From the domain, modify the Autodiscover service connection point (SCP).

  Correct Answer: CE

• Question 139:

  You have a Microsoft Exchange Online tenant that contains the groups shown in the following table.

  

  Which groups can you upgrade to a Microsoft 365 group?

  A. Group1 only

  B. Group1, Group2, Group3, and Group4

  C. Group2 and Group3 only

  D. Group3 only

  E. Group1 and Group4 only

  Correct Answer: AE

  Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/manage/upgrade-distribution-lists?view=o365-worldwide

• Question 140:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription.

  You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center.

  Solution: You assign the Security administrator role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Security Administrator can view the audit reports but cannot create a message trace.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc