Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 141:

  You have a Microsoft Exchange Online tenant that uses a third-party email hygiene system named Service1. Service1 blocks all encrypted email.

  All external email is routed through Service1 by using a connector.

  Users classify email by using sensitivity labels. Emails classified as Secret are encrypted automatically.

  You need to ensure that the users can send emails classified as Secret to external recipients.

  Which two items should you create? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a remote domain

  B. a connector

  C. a data loss prevention (DLP) policy

  D. a mail flow rule

  E. a label policy

  Correct Answer: BD

  Use an additional Connector and a Mail Flow Rule to bypass the third-party email hygiene system for emails that have the Secret sensitivity label. Emails with the sensitivity label will use the new connector. All other emails will use the existing connector.

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/conditional-mail-routing

• Question 142:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.

  All the users in the sales department at your company are in a group named Sales.

  The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group.

  You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group.

  Solution: You modify the permissions granted to the Sales group.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Create a mail flow rule.

  Reference: https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachmentblocking-scenarios

• Question 143:

  You deploy a Microsoft Exchange Server 2019 organization.

  You need to ensure that users of all new mailboxes are prevented from editing their personal information.

  What should you do?

  A. From the Exchange admin center, create a new role assignment policy.

  B. From PowerShell, run the New-Ro1eAssignmentPolicy cmdlet and specify the -isDefault parameter.

  C. From the Exchange admin center, create a new role group and assign the role group to Domain Users.

  D. From PowerShell, run the New-RoleGroup cmdlet and specify the -CustomRecipientWriteScope parameter.

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/role-based-access-control/newroleassignmentpolicy?view=exchange-ps

• Question 144:

  Your company has a Microsoft Exchange Online tenant named contoso.com.

  The company acquires a company named ADatum Corporation that uses a third-party IMAP email service named adatum.com.

  You plan to migrate the mailbox content of adatum.com to contoso.com.

  You need to connect Microsoft 365 to the IMAP email service.

  What should you create first?

  A. a new organization relationship

  B. a new migration endpoint

  C. a new remote domain

  D. a new staged migration batch

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/mailbox-migration/migrating-imap-mailboxes/migrating-imap-mailboxes

• Question 145:

  All the users in your company are licensed for Microsoft 365 and connect to their mailbox from client computers that run Windows 10. The users connect to Outlook on the web by using the following browsers:

  1.

  Google Chrome

  2.

  Microsoft Edge

  3.

  Firefox

  You apply restrictions for Outlook on the web sessions by using app protection policies in Microsoft Endpoint Manager, and then you deploy several Outlook Web App policies.

  You need to ensure that the users can continue to connect successfully to their mailbox by using Outlook on the web.

  What should you do?

  A. Enroll all the computers in Microsoft Intune

  B. Instruct all the users to connect by using Microsoft Edge only

  C. From Microsoft Cloud App Security, configure a sanctioned application

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy

• Question 146:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com.

  You need to prevent all users from performing the following tasks:

  Sending out-of-office replies to an email domain named fabrikam.com. Sending automatic replies to an email domain named adatum.com.

  The solution must ensure that all the users can send out-of-office replies and automatic replies to other email domains on the internet.

  Solution: You modify the default remote domain.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/remote-domains/remote-domains

• Question 147:

  You have a Microsoft Exchange Online tenant that contains 1,000 users.

  A user recently sent an email message that was never received by a recipient on the internet. From the Exchange admin center, you successfully run a message trace but cannot see the message in the trace.

  What is the most likely reason why the message fails to appear in the message trace?

  A. The user addressed the message to multiple internal and external receipts

  B. The user encrypted the email message.

  C. Your administrative user account requires additional rights.

  D. The message is in the user's Outbox folder.

  Correct Answer: D

• Question 148:

  You have a Microsoft Exchange Online tenant that uses an email domain named contoso.com.

  Your company has a partnership with another company named fabrikam.com.

  You need to ensure that all email messages sent to and received by the users at fabrikam.com are encrypted by using TLS.

  What should you create in the Exchange admin center?

  A. one connector and one remote domain

  B. one remote domain and one accepted domain

  C. one connector and one accepted domain

  D. two connectors

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/setup-connectors-for-secure-mail-flow-with-a-partner

• Question 149:

  You have a Microsoft Exchange Server 2019 organization.

  You plan to implement a hybrid deployment between Exchange Online and Exchange Server. The deployment must meet the following requirements:

  1.

  Support Outlook for iOS and Android.

  2.

  Support 500 on-premises mailboxes.

  3.

  Support Modern Authentication.

  Which hybrid configuration topology should you recommend?

  A. Classic Full

  B. Modern Minimal

  C. Modern Full

  D. Classic Minimal

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/exchange/hybrid-configuration-wizard-options https://docs.microsoft.com/en-us/exchange/hybrid-deployment/hybrid-agent

• Question 150:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a Microsoft Exchange Server 2019 hybrid deployment that contains two Mailbox servers named MBX1 and MBX2. The company has the departments shown in the following table.

  

  From the on-premises organization, outbound email is sent directly to the Internet by using DNS lookups.

  You are informed that some sales department users send email messages that are identified as spam.

  You need to automatically block the sales department users from repeatedly sending spam.

  Solution: You run the Install-AntispamAgents.psl PowerShell script on the MBX1 Mailbox server.

  Does this meet the goal?

  A. yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/antispam-and-antimalware/antispam-protection/antispam-on-mailbox-servers?view=exchserver-2019