Microsoft Microsoft Certifications MS-203 Questions & Answers

• Question 61:

  You have a Microsoft Exchange Online tenant.

  Remote users report that they receive an error message when they attempt to add their email account to Microsoft Outlook.

  You need to confirm that the DNS records resolve correctly for the users.

  Which two DNS records should you test? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. autodiscover.outlook.com

  B. smtp.office365.com

  C. outlook.office365.com

  D. security.microsoft365.com

  E. portal.office.com

  Correct Answer: AC

  Reference: https://docs.microsoft.com/en-us/exchange/troubleshoot/administration/incorrect-settings

• Question 62:

  You have a Microsoft 365 subscription.

  A safe attachments policy that uses Dynamic Delivery is applied to all recipients who match your SMTP domains.

  You need to prevent attachments form being scanned when internal users send email to one another.

  What should you do?

  A. From the Security and and Compliance admin center, modify the safe attachments policy.

  B. From the Security and and Compliance admin center, modify the Service assurance settings.

  C. From the Exchange admin center, create a transport rule.

  D. From the Exchange admin center, modify the malware filter.

  Correct Answer: C

  Create a transport rule (or mail flow rule as they are called nowadays) to configure the message header: X-MS-Exchange-Organization-SkipSafeAttachmentProcessing.

  Reference: https://docs.microsoft.com/en-gb/archive/blogs/office365labs/eo-atp-considerations-reports-demonstrations

• Question 63:

  Your company named Contoso, Ltd. has a Microsoft Exchange Online subscription.

  You have several transport rules. The rules automatically apply a disclaimer to email messages that contain certain keywords in the subject and are sent to recipients in an email domain named fabrikam.com.

  You receive a report that some messages are delivered without the disclaimer.

  You need to view which transport rules were applied to messages sent to the fabrikam.com recipients.

  What should you use?

  A. the SMTP protocol logs

  B. a URL trace

  C. the transport server logs

  D. a message trace

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/run-a-message-trace-andview-results

• Question 64:

  You have a Microsoft Exchange Online subscription.

  You need to prevent all Android devices from using Exchange ActiveSync to sync email.

  Other devices must be allowed to sync email by using Exchange ActiveSync.

  What should you use?

  A. data loss prevention (DLP) policies

  B. Exchange ActiveSync access settings

  C. device access rules

  D. mobile device mailbox policies

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/new-activesyncdeviceaccessrule?view=exchange-ps

• Question 65:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has a Microsoft 365 subscription.

  Several users in the finance department of the company recently accessed unsafe websites by clicking on links in email messages.

  Users in the marketing department of the company report that they must be able to access all the links embedded in email messages.

  You need to reduce the likelihood of the finance department users accessing unsafe websites. The solution must affect only the finance department users.

  Solution: You modify the Global settings Safe Links policy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-global-settings-for-safe-links?view=o365-worldwide

• Question 66:

  You have a Microsoft Exchange Server 2019 hybrid deployment that contains the public folders shown in the following table.

  

  You plan to migrate the public folders to Exchange Online to improve the collaboration options available to users. Which public folders can be migrated to Office 365 groups without losing the folders' existing functionality?

  A. PF2 and PF3 only

  B. PF2 only

  C. PF1 and PF2 only

  D. PF1 only

  E. PF3 only

  Correct Answer: A

  Not PF1. Office 365 groups are `flat' so you would lose the folder hierarchy.

  Reference: https://docs.microsoft.com/en-us/exchange/collaboration/public-folders/migrate-to-microsoft-365-groups?view=exchserver-2019

• Question 67:

  Your company has a Microsoft Exchange Server 2019 hybrid deployment.

  The company has a finance department.

  You need to move all the on-premises mailboxes of the finance department to Exchange Online. The bulk of the move operation must occur during a weekend when the company's Internet traffic is lowest. The move must then be finalized the

  following Monday. The solution must minimize disruption to end users.

  What should you do first?

  A. Schedule a task that runs the New-MoveRequest cmdlet and specifies the Remote parameter.

  B. Run the New-MigrationBatch cmdlet and specify the MoveOptions parameter.

  C. Run the New-MigrationBatch cmdlet and specify the CompleteAfter parameter.

  D. Create a script that moves most of the mailboxes on Friday at 22:00 and the remaining mailboxes on Monday at 09:00.

  Correct Answer: C

  Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/new-migrationbatch?view=exchange-ps

• Question 68:

  You manage an Exchange Online tenant.

  You plan to migrate on-premises Microsoft Exchange Server mailboxes by using a cutover migration.

  You need to grant the required permissions to the migration administrator account to complete the migration. The solution must use the principle of least privilege.

  Which three permissions should you grant? Each correct answer presents a complete solution

  NOTE: Each correct selection is worth one point.

  A. the FullAccess permission on each on-premises mailbox and the WriteProperty permission to modify the TargetAddress property of the on-premises user account

  B. the Receive As permission on the on-premises mailbox database that stores the user mailboxes and the WriteProperty permission to modify the TargetAddress property of the on-premises user account

  C. Domain Admins group member in Active Directory Domain Services (AD DS) of the on- premises Exchange organization

  D. the FullAccess permission on each on-premises mailbox

  E. the Receive As permission on the on-premises mailbox database that stores the user mailboxes

  Correct Answer: CDE

  https://docs.microsoft.com/en-us/exchange/mailbox-migration/assign-permissions-for-migration

• Question 69:

  You have a Microsoft 365 environment that contains 1,000 mailboxes.

  You need to ensure that only an administrator named Admin1 can use the Exchange Management Shell to manage

  What should you do?

  A. Create a conditional access policy and apply the policy to all users.

  B. For all users, run the set-user cmdlet and specify the -RemotePowershellEnabled parameter.

  C. Create a conditional access policy and apply the policy to Admin1.

  D. For Admin1, run the set-user cmdlet and specify the -RemotePowerShellEnabled parameter.

  Correct Answer: A

• Question 70:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft Exchange Online tenant that contains 1,000 users.

  A user named User1 receives a non-delivery report (NDR) when attempting to send an email message to an internal group named [email protected]. The NDR contains the following text: "5.7.1 Delivery not authorized."

  You need to ensure that User1 can send email to [email protected] successfully.

  Solution: You modify the properties of User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/non-delivery-reports-in-exchange-online/fix-error-code-550-5-7-1-in-exchange-online