♥♥ 2021 NEW RECOMMEND ♥♥
Free VCE & PDF File for Microsoft 70-346 Real Exam (Full Version!)
★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 70-346 Exam Dumps (PDF & VCE):
Available on:
http://www.surepassexam.com/70-346-exam-dumps.html
Q11. You create an Office 365 tenant. You assign administrative roles to other users. You hire a new user named User2.
User2 must NOT be able to change passwords for other users.
You need to assign an administrative role to User2.
Which role should you assign?
A. Service administrator
B. Global administrator
C. Delegate administrator
D. Password administrator
Answer: A
Explanation:
Reference:
https://support.office.com/en-US/Article/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504?ui=en-US&rs=en-US&ad=US#__choose_an_admin
Q12. DRAG DROP
A company deploys an Office 365 tenant.
You need to enable multi-factor authentication for Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate
actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q13. A company has an Office 365 tenant that has an Enterprise E1 subscription. You configure the policies required for self-service password reset.
You need to ensure that all existing users can perform self-service password resets.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: C
Explanation:
Self-service password reset with on-premises write-back is a Premium-only feature.
Example:
The following command adds the Office 365 for enterprises license to the user.
Set-MsolUserLicense -UserPrincipalName user@contoso.com -AddLicenses
"Contoso:ENTERPRISEPACK"
Note: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user. This can include adding a new license, removing a license, updating the license options, or any combination of these actions.
Reference: Set-MsolUserLicense
https://msdn.microsoft.com/en-us/library/azure/dn194094.aspx
Q14. An organization deploys an Office 365 tenant.
User accounts must be synchronized to Office 365 by using the Windows Azure Active
Directory Sync tool.
You have the following password policies:
Passwords for the on-premises Active Directory Domain Services (AD DS) user accounts are at least six characters long.
Passwords for Office 365 user accounts are at least eight characters long.
You need to ensure that the user accounts will be synchronized. Which user accounts will be synchronized?
A. All user accounts
B. No user accounts
C. User accounts with a password length of at least 8 characters
D. User accounts with a password length of at least 14 characters
Answer: A
Explanation:
After deploying ADFS tenant password policies are handled by the local Active Directory Environment, and not Office 365 Azure. All users will be synchronized and will utilize the AD DS six character long password policy.
Reference: http://howdouc.blogspot.ca/2011/04/active-directory-federation-services.html
Q15. Contoso Ltd. uses Office 365 for collaboration. You are implementing Active Directory Federation Services (AD FS) for single sign-on (SSO) with Office 365 services. The environment contains an Active Directory domain and an AD FS federation server.
You need to ensure that the environment is prepared for the AD FS setup.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Configure Active Directory to use the domain contoso.com.
B. Configure Active Directory to use the domain contoso.local.
C. Create a server authentication certificate for the federation server by using fs.contoso.com as the subject name and subject alternative name.
D. Create a server authentication certificate for the federation server by using fs.contoso.local as the subject name and subject alternative name.
Answer: A,C
Q16. You are the Office 365 administrator for your company. A user named User1 from a partner organization is permitted to sign in and use the Office 365 services. User1 reports that the password expires in ten days. You must set the password to never expire. Changes must NOT impact any other accounts.
You need to update the password policy for the user.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolPasswordPolicy
B. Set-MsolPartnerlnformation
C. Set-MsolUser
D. Set-MsolUserPassword
Answer: C
Explanation:
Reference:
http://onlinehelp.microsoft.com/en-ca/office365-enterprises/hh534387.aspx
Q17. DRAG DROP
A company has a Windows Server 2008 domain controller and a SharePoint 2007 farm. All servers on the network run Windows Server 2008.
You must provide single sign-on for Office 365 SharePoint sites from the company's network.
You need to install the required software.
What should you install? To answer, drag the appropriate action to the correct location. Each answer may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Q18. Your company has a hybrid deployment of Office 365. You need to verify whether free/busy information sharing with external users is configured.
Which Windows PowerShell cmdlet should you use?
A. Test-OutlookConnectivity
B. Test-FederationTrust
C. Get-OrganizationRelationship
D. Get-MSOLDomainFederationSettings
Answer: C
Q19. HOTSPOT
An organization prepares to migrate to Office 365. The organization has one domain controller named NYC-DC1 and one server named NYC-DS that is designated as the directory synchronization computer.
The organization has the following servers:
You plan to upgrade the servers to support directory synchronization.
You must upgrade each server to meet only the minimum requirements by using the least amount of administrative effort. You need to ensure that you can use the Windows Azure Active Directory Sync tool to
synchronize the local Active Directory with Office 365.
What should you do? Select the correct action from each list in the answer area.
Answer:
Q20. A company has an Office 365 tenant that has an Enterprise E1 subscription. Users currently sign in with credentials that include the contoso.com domain suffix.
The company is acquired by Fabrikam. Users must now sign in with credentials that include the fabrikam.com domain suffix.
You need to ensure that all users sign in with the new domain name.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: D
Explanation: The Set-MsolUserPrincipalName cmdlet is used to change the User Principal Name (user ID) of a user. This cmdlet can be used to move a user between a federated and standard domain, which will result in their authentication type changing to that of the target domain.
The following command renames user1@contoso.com to CCole@contoso.com.
Set-MsolUserPrincipalName -UserPrincipalName User1@contoso.com -NewUserPrincipalName CCole@contoso.com
Incorrect:
Not A: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should be used for basic properties only.
Not B: The Redo-MsolProvisionUser cmdlet can be used to retry the provisioning of a user object in Azure Active Directory when a previous attempt to create the user object resulted in a validation error.
Not C: The Set-MsolUserLicense cmdlet can be used to adjust the licenses for a user.
Not E: The Convert-MsolFederatedUser cmdlet is used to update a user in a domain that was recently converted from single sign-on (also known as identity federation) to standard authentication type. A new password must be provided for the user.
Not F: Use the Set-MailUser cmdlet, used for on premises Exchange Server (not Office 365), to modify the mail-related attributes of an existing user in Active Directory.
Not G: Use the Set-LinkedUser cmdlet to modify the properties of an existing linked user account. The Outlook Live Directory Sync (OLSync) service account is a linked user.
Not H: The New-MsolUser cmdlet is used to create a new user in the Microsoft Azure Active Directory (Microsoft Azure AD). In
Reference: Set-MsolUserPrincipalName
https://msdn.microsoft.com/en-us/library/azure/dn194096.aspx