Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 251:

  You have a Microsoft 365 subscription that uses Microsoft Exchange Online Protection (EOP) with the default settings

  You need to ensure that email messages sent from the unauthorized IP addresses of any sending domain are marked as High confidence spam. The solution must minimize administrative effort.

  What should you do?

  A. Create a mail flow rule.

  B. For the default anti-spam inbound policy, set SPF record: hard fail to On.

  C. For the default anti-spam inbound policy, set Conditional Sender ID filtering: hard fail to On.

  D. For the default connection filter policy, add an entry to the IP Block List.

  Correct Answer: B

  Explanation:

  In all Microsoft 365 organizations, the Advanced Spam Filter (ASF) settings in anti-spam policies in EOP allow admins to mark messages as spam based on specific message properties. ASF specifically targets these properties because

  they're commonly found in spam. Depending on the property, ASF detections will either mark the message as Spam or High confidence spam.

  Enable, disable, or test ASF settings

  For each ASF setting, the following options are available in anti-spam policies:

  On: ASF adds the corresponding X-header field to the message, and either marks the message as Spam (SCL 5 or 6 for Increase spam score settings) or High confidence spam (SCL 9 for Mark as spam settings).

  Off: The ASF setting is disabled. This is the default value, and we recommend that you don't change it.

  Mark as spam settings

  The following Mark as spam ASF settings set the SCL of detected messages to 9, which corresponds to a High confidence spam filter verdict and the corresponding action in anti-spam policies.

  Incorrect:

  Not C:

  The following Mark as spam ASF settings set the SCL of detected messages to 6, which corresponds to a Spam filter verdict and the corresponding action in anti-spam policies.

  *

  SPF record: hard fail

  MarkAsSpamSpfRecordHardFail

  Messages sent from an IP address that isn't specified in the SPF Sender Policy Framework (SPF) record in DNS for the source email domain are marked as high confidence spam.

  *

  Etc.

  *

  Sender ID filtering hard fail

  Messages that hard fail a conditional Sender ID check are marked as spam.

  This setting combines an SPF check with a Sender ID check to help protect against message headers that contain forged senders.

  *

  Backscatter

  Backscatter is useless non-delivery reports (also known as NDRs or bounce messages) caused by forged senders in email messages.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-spam-policies-asf-settings-about

• Question 252:

  You have a Microsoft Exchange Online tenant that contains a group named Group1.

  The members of Group1 need to create user mailboxes. The solution must use the principle of least privilege.

  To which role group should you add Group1?

  A. Security Operator

  B. Recipient Management

  C. Help Desk

  D. Organization Management

  Correct Answer: B

  Explanation:

  Recipient Management

  Members have administrative access to create or modify Exchange Online recipients within the Exchange Online organization.

  Incorrect:

  *

  Security Operator

  No such role.

  *

  Help Desk

  Members can view and manage the configuration for individual recipients and view recipients in an Exchange organization. Members of this role group can only manage the configuration each user can manage on their own mailbox.

  Reset Password

  User Options

  View-Only Recipients

  *

  Organization Management

  Members have administrative access to the entire Exchange Online organization and can perform almost any task in Exchange Online.

  Reference: https://learn.microsoft.com/en-us/exchange/permissions-exo/permissions-exo

• Question 253:

  You have a Microsoft Exchange Online tenant that uses Microsoft Defender for Office 365.

  You create a new anti-phishing policy named Policy1.

  You need to ensure that users are notified every five days about all the email messages quarantined by Policy1.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Add a custom quarantine policy and assign the policy to Policy1.

  B. Modify the DefaultFullAccessPolicy quarantine policy and assign the policy to Policy1.

  C. Modify the AdminOnlyAccessPolicy quarantine policy and assign the policy to Policy1.

  D. Configure the User reported messages settings.

  E. Modify the global settings for quarantine policies.

  Correct Answer: AE

  Explanation:

  Step 1: Create quarantine policies in the Microsoft 365 Defender portal

  Step 2: Assign a quarantine policy to supported features

  In supported protection features that quarantine email messages, you can assign a quarantine policy to the available quarantine actions.

  Step 3: Assign quarantine policies in supported policies in the Microsoft 365 Defender portal

  Note: Quarantine policies define what users are allowed to do to quarantined messages based on why the message was quarantined (for supported features). For more information, see Quarantine policies. Quarantine polices also control

  whether the affected recipients (including shared mailboxes) get periodic quarantine notifications about their quarantined messages. Quarantine notifications are the replacement for end-user spam notifications for all supported protection

  features (not just anti-spam policy verdicts).

  Incorrect:

  Not B, not C: Quarantine notifications are not turned on in the built-in quarantine notifications named AdminOnlyAccessPolicy or DefaultFullAccessPolicy. Quarantine notifications are turned on in the built-in quarantine policy named

  NotificationEnabledPolicy if your organization has it. Otherwise, to turn on quarantine notifications in quarantine policies, you need to create and configure a new quarantine policy.

  Reference: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/quarantine-policies

  https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/use-spam-notifications-to-release-and-report-quarantined-messages

• Question 254:

  Your network contains an Active Directory domain. The domain contains an on-premises Microsoft Exchange Server 2019 organization.

  You have a hybrid deployment between the Exchange Server organization and an Exchange Online tenant. Exchange Online contains all the mailboxes, including a shared mailbox named CustomerSupport.

  You need to ensure that users cannot directly sign in to the CustomerSupport mailbox. Shared mailbox functionality must be unaffected.

  What should you do?

  A. Remove the user account of CustomerSupport from Active Directory.

  B. From the Microsoft 365 admin center, block sign-ins for the user account of CustomerSupport.

  C. Remove the user account of CustomerSupport from Azure AD.

  D. From the Microsoft 365 admin center, reset the password for the user account of CustomerSupport.

  Correct Answer: B

  Explanation:

  Block Sign-in from Shared Mailboxes

  You need to go and block sign-in for that account after you created the Shared Mailbox.

  set-MsolUser -UserPrincipalName -BlockCredential $true

  This will block the Sign-in for that account now.

  Reference:

  https://shehanperera.com/2020/07/03/block-sign-in-from-shared-mailboxes/

• Question 255:

  DRAG DROP

  You have a Microsoft Exchange Online tenant.

  You enable hierarchical address books (HABs).

  You create a new distribution group named Contoso.

  You need to configure the Contoso group as the root of the hierarchy. The members of the group must appear in the hierarchy.

  How should you complete the PowerShell commands? To answer, drag the appropriate cmdlets to the correct targets. Each cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll

  to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/exchange/address-books/hierarchical-address-books/enable-or-disable-hierarchical-address-books

• Question 256:

  DRAG DROP

  Your company has a Microsoft Exchange Server 2019 hybrid deployment.

  The company has two departments that have the mailboxes configured as shown in the following table.

  

  All the accounting department mailboxes reside in a database named ACCT-DB01. You create the mailboxes shown in the following table.

  

  You need to record all the email communication of the users in each department. The solution must minimize costs.

  What should you use for each department? To answer, drag the appropriate options to the correct departments. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.microsoft.com/en-gb/microsoft-365/exchange/microsoft-exchange-server-licensing-licensing-overview?rtc=1

• Question 257:

  DRAG DROP

  You have a Microsoft Exchange Server 2019 hybrid deployment that contains the users shown in the following table.

  

  You need to provide each user with an archive mailbox that is stored in Exchange Online.

  Which admin center should you use to perform the configuration for each user? To answer, drag the appropriate admin centers to the correct users. Each admin center may be used once, more than once, or not at all. You may need to drag

  the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  User1: The Compliance admin center (or "The Security and Compliance admin center") User2: The Exchange amdin center from an on-premises server

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/enable-archive-mailboxes https://docs.microsoft.com/en-us/exchange/hybrid-deployment/create-cloud-based-archive

• Question 258:

  DRAG DROP

  You have a Microsoft Exchange Online tenant.

  You need to import PST files from a legacy archiving solution to Exchange Online. You will import the PST files over the internet.

  Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/use-network-upload-to-import-pst-files?view=o365-worldwide

• Question 259:

  DRAG DROP

  You have a Microsoft Exchange Server 2019 hybrid deployment.

  All Mailbox servers and domain controllers are in the same site.

  You deploy an Edge Transport server.

  You need to ensure that all SMTP traffic between the on-premises organization and Exchange Online is routed through the Edge Transport server.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 260:

  DRAG DROP

  Your company has a Microsoft Exchange Online subscription for an email domain named contoso.com.

  The company works with a partner company that uses an email domain named tailspintoys.com.

  You need to configure the environment only to accept email from tailspintoys.com if the email is sent from an IP address of 131.107.12.85.

  How should you configure the connector from the Exchange admin center? To answer, drag the appropriate options to the correct message settings. Each option may be used once, more than once, or not at all. You may need to drag the split

  bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer: