[Dec 09, 2021] Free Microsoft 365 Certified MS-203 Official Cert Guide PDF Download
Microsoft MS-203 Official Cert Guide PDF
Management of mobile devices
- Configuration and management of Outlook mobile
- Configuration and management of ActiveSync
- Configuration of mobile devices mailbox plans
- Management of the access of mobile devices
- Configuration of mobile verification methods
NEW QUESTION 136
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.
All the users in the sales department at your company are in a group named Sales.
The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group.
You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group.
Solution: You configure a mailbox quota.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
Create a mail flow rule.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachmentblocking-scenarios
NEW QUESTION 137
You need to configure the required objects for the branch office administrators.
What should you create for each administrator?
- A. a management role scope and a management role group
- B. a management role scope and a management role assignment
- C. a management role and a management role assignment policy
- D. a management role assignment policy and a management role group
Answer: A
Explanation:
Reference:
https://practical365.com/exchange-server/exchange-server-role-based-access-control-in-action/
Topic 3, Fabrikam, Inc
Existing Environment
Network Environment
The on-premises network of Fabrikam contains an Active Directory domain named fabrikam.com.
Fabrikam has a Microsoft 365 tenant named fabrikam.com. All users have Microsoft 365 Enterprise E5 licenses.
User accounts sync between Active Directory Domain Services (AD DS) and the Microsoft 365 tenant.
Fabrikam.com contains the users and devices shown in the following table.
Fabrikam currently leases mobile devices from several mobile operators.
Microsoft Exchange Online Environment
All users are assigned an Outlook Web App policy named FilesPolicy.
In-Place Archiving is disabled for Exchange Online.
You have the users shown in the following table.
User1 and User3 use Microsoft Outlook for iOS and Android to access email from their mobile device. User2 uses a native Android email app.
A Safe Links policy in Microsoft Defender for Office 365 is applied to the fabrikam.com tenant. The marketing department uses a mail-enabled public folder named FabrikamProject.
Default MRM Policy is disabled for the fabrikam.com tenant.
Problem Statements
Fabrikam identifies the following issues:
Users report that they receive phishing emails containing embedded links.
Users download and save ASPX files when they use Outlook on the web.
Email between Fabrikam and Litware is unencrypted during transit.
User2 reports that he lost his mobile device.
Requirements
Planned Changes
Fabrikam plans to implement the following changes:
Configure FilesPolicy to prevent Outlook on the web users from downloading attachments that have the ASPX extension.
Purchase a new smartboard and configure the smartboard as a booking resource in Exchange Online.
Ensure that the new smartboard can only be booked for a maximum of one hour.
Allow only Admin1 to accept or deny booking requests for the new smartboard.
Standardize mobile device costs by moving to a single mobile device operator.
Migrate the FabrikamProject public folder to Microsoft SharePoint Online.
Enable In-Place Archiving for users in the marketing department.
Encrypt all email between Fabrikam and Litware.
Technical Requirements
Fabrikam identifies the following technical requirements:
Ensure that the planned Sharepoint site for FabrikamProject only contains content that was created during the last 12 months.
Any existing file types that are currently configured as blocked or allowed in the FilesPolicy policy must remain intact.
When users leave the company, remove their licenses and ensure that their mailbox is accessible to Admin1 and Admin2.
Generate a report that identifies mobile devices and the mobile device operator of each device.
Use the principle of least privilege.
Minimize administrative effort.
Retention Requirements
Fabrikam identifies the following retention requirements for all users:
Enable users to tag items for deletion after one year.
Enable users to tag items for deletion after two years.
Enable users to tag items to be archived after one year.
Automatically delete items in the Junk Email folder after 30 days.
Automatically delete items in the Sent Items folder after 300 days.
Ensure that any items without a retention tag are moved to the Archive mailbox two years after they were created and permanently deleted seven years after they were created.
NEW QUESTION 138
You have a hybrid deployment that contains a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 server named Server1. All users use an email address suffix of @contoso.com.
On Server1, you create a new mailbox that uses an email address of [email protected].
Users hosted in Exchange Online report that they receive a non-delivery report (NDR) when they attempt to send email messages to [email protected]. The NDR contains the following text: "User1 wasn't found at contoso.com." You verify that the Exchange Online users can send email successfully to the other mailboxes hosted on Server1. Users hosted on Server1 can send email to [email protected] successfully.
You need to identify what causes the email delivery to fail.
What should you use?
- A. the on-premises Exchange admin center
- B. the Azure Active Directory admin center
- C. Azure AD Connect Health
- D. the Exchange admin center
Answer: C
Explanation:
It's likely that the new user account hasn't replicated to Azure Active Directory. Azure AD Connect is responsible for account replication between on-prem AD and Azure AD.
NEW QUESTION 139
You have a Microsoft Exchange Server 2019 hybrid deployment.
All Mailbox servers and domain controllers are in the same site.
You deploy an Edge Transport server.
You need to ensure that all SMTP traffic between the on-premises organization and Exchange Online is routed through the Edge Transport server.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
New-EdgeSubscription -FileName "c:\EdgeServerSubscription.xml" This example creates the Edge Subscription file. It should be run on your Edge Transport server. New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path "C:\EdgeServerSubscription.xml" -Encoding Byte -ReadCount 0)) -Site
"Default-First-Site-Name" This example also imports the Edge Subscription file generated in Example 1 to the Active Directory site Default-First-Site-Name; however, the end result is accomplished using one command.
You must run this command on the Mailbox server. ref.
https://docs.microsoft.com/en-us/powershell/module/exchange/mail-flow/new-edgesubscription?view=exchange
NEW QUESTION 140
You have a Microsoft Exchange Online tenant that contains three Azure Active Directory (Azure AD) security groups named Administrators, Managers, and Marketing. The tenant contains the users shown in the following table.
The tenant contains the resources shown in the following table.
ConferenceRoom1 has he following policy.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
The BookInPolicy allows the Managers group. User1 is in the Managers group so User 1 can book ConferenceRoom1 automatically without the approval of User4.
Box 2: No
The BookInPolicy allows the Managers group. User2 is not in the Managers group so User 2 cannot book ConferenceRoom1 automatically without the approval of User4.
Box 3: No
The RequestInPolicy does not include User4. Therefore, User3 is not allowed to request to book the meeting room either with or without approval.
Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/set-calendarprocessing?view=exchange-ps
NEW QUESTION 141
You have a hybrid deployment that contains a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 server named Server1.
Server1 uses a certificate from a third-party certification authority (CA). The certificate is enabled for the SMTP service.
You replace the certificate with a new certificate.
You discover that delivery fails for all email messages sent from Server1 to your Microsoft 365 tenant.
You receive the following error message for all the queued email messages: "450 4.4.101 Proxy session setup failed on Frontend with 451 4.4.0 Primary target IP address responded with 451 5.7.3 STARTTLS is required to send mail." You need to ensure that the messages are delivered successfully from Server1 to the Microsoft 365 tenant.
What should you do?
- A. From Server1, regenerate the certificate and select Make private keys exportable
- B. From Server1, enable the new certificate for the IMAP4 service
- C. From the Exchange admin center, update the certificate thumbprint in the properties of a connector
- D. From the firewall, disable SMTP content inspection
Answer: D
NEW QUESTION 142
You have a Microsoft Exchange Server 2019 hybrid deployment.
You plan to implement Hybrid Modern Authentication (HMA).
You retrieve the Exchange virtual directory settings, and you discover the following output.
You need to prepare the virtual directories for the planned implementation of HMA.
What should you do?
- A. Remove NTLM as an authentication method.
- B. Modify the InternalUrlvalue to http://mail.contoso.com.
- C. Add OAuth as an authentication method.
- D. Delete https://mail.contoso.com from the ExternalUrlvalue.
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/configure-exchange-server-for-hybrid-modern- authentication?view=o365-worldwide
NEW QUESTION 143
Your company named Contoso, Ltd. has a Microsoft Exchange Online subscription.
You have several transport rules. The rules automatically apply a disclaimer to email messages that contain certain keywords in the subject and are sent to recipients in an email domain named fabrikam.com.
You receive a report that some messages are delivered without the disclaimer.
You need to view which transport rules were applied to messages sent to the fabrikam.com recipients.
What should you use?
- A. a URL trace
- B. a message trace
- C. the SMTP protocol logs
- D. the transport server logs
Answer: B
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/run-a-message-trace-andview-res
NEW QUESTION 144
Your company has a Microsoft Exchange Server 2019 hybrid deployment.
The company has two departments that have the mailboxes configured as shown in the following table.
All the accounting department mailboxes reside in a database named ACCT-DB01.
You create the mailboxes shown in the following table.
You need to record all the email communication of the users in each department. The solution must minimize costs.
What should you use for each department? To answer, drag the appropriate options to the correct departments. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://www.microsoft.com/en-gb/microsoft-365/exchange/microsoft-exchange-server-licensing-licensing-overview?rtc=1
NEW QUESTION 145
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Exchange Server 2019 hybrid deployment that contains two Mailbox servers named MBX1 and MBX2.
The company has the departments shown in the following table.
From the on-premises organization, outbound email is sent directly to the Internet by using DNS lookups.
You are informed that some sales department users send email messages that are identified as spam.
You need to automatically block the sales department users from repeatedly sending spam.
Solution: You migrate all the mailboxes of the sales department to Exchange Online.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Exchange Online Protection (EOP) will scan outbound messages from Exchange Online mailboxes.
Secure the messaging environment
Testlet 2
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
General Overview
Contoso, Ltd. is a national freight company in the United States. The company has 15,000 employees.
Physical Locations
Contoso has a main office in Houston and 10 branch offices that each contain 1,000, employees.
Existing Environment
Active Directory and Microsoft Exchange Server Environments
The network contains an Active Directory forest named contoso.com. The forest contains one root domain named contoso.com and 10 child domains. All domain controllers run Windows Server 2019.
The forest has Active Directory Certificate Services (AD CS) and Active Directory Federation Services (AD FS) deployed.
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365.
There are 2,000 user mailboxes in Exchange Online.
Each office contains two domain controllers and two Mailbox servers. The main office also contains an Edge Transport server.
The organization contains 100 public folders. The folders contain 80 GB of content.
All email messages sent to contoso.com are delivered to Exchange Online. All messages sent to on-premises mailboxes are routed through the Edge Transport server.
Advanced Threat Protection (ATP) is enabled and configured for the Office 365 tenant.
Network Infrastructure
Each office connects directly to the Internet by using a local connection. The offices connect to each other by using a WAN link.
Requirements
Planned Changes
Contoso plans to implement the following changes:
* For all new users in the on-premises organization, provide an email address that uses the value of the Last Nameattribute and the first two letters of the First Nameattribute as a prefix.
* Decommission the public folders and replace the folders with a Microsoft 365 solution that maintains web access to the content.
Technical Requirements
Contoso identifies the following technical requirements:
* All email messages sent from an SMTP domain named adatum.com must never be identified as spam.
* Any solution to replace the public folders must include the ability to collaborate with shared calendars.
Security Requirements
Contoso identifies the following security requirements:
* The principle of least privilege must be applied to all users and permissions.
* All email messages sent from an SMTP domain named fabrikam.com to contoso.com must be encrypted.
* All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
* If a user attempts to send an email message to a distribution group that contains more than 15 members by using Outlook, the user must receive a warning before sending the message.
Problem Statements
Recently, a user named HelpdeskUser1 erroneously created several mailboxes. HelpdeskUser1 is a member of the Recipient Management management role group.
Users who have a mailbox in Office 365 report that it takes a long time for email messages containing attachments to be delivered.
Exhibit
Exchange Online Connector
You configure a connector as shown in the following exhibit.
NEW QUESTION 146
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an Exchange Online tenant that contains 2,000 mailboxes.
A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22.
You discover that several email messages from the fabrikam.com domain are erroneously marked as spam.
You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company.
Solution: You create a connection filter.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
NEW QUESTION 147
You need to recommend an Office 365 solution that meets the technical requirements for email from adatum.com.
Which two components should you recommend configuring from the Exchange admin center in Exchange Online? Each correct presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. DKIM signatures
- B. a spam filter
- C. data loss prevention (DLP) policies
- D. a connection filter
- E. a malware filter
Answer: B,D
Explanation:
Topic 1, Contoso Ltd
General Overview
Contoso, Ltd. is a national freight company in the United States. The company has 15,000 employees.
Physical Locations
Contoso has a main office in Houston and 10 branch offices that each contains 1,000 employees.
Existing Environment
Active Directory and Microsoft Exchange Server Environments
The network contains an Active Directory forest named contoso.com. The forest contains one root domain named contoso.com and 10 child domains. All domain controllers run Windows Server 2019.
The forest has Active Directory Certificate Services (AD CS) and Active Directory Federation Services (AD FS) deployed.
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365.
There are 2,000 user mailboxes in Exchange Online.
Each office contains two domain controllers and two Mailbox servers. the main office also contains an Edge transport server.
The organization contains 100 public folders. The folders contain 80 GB of content.
All email messages sent to contoso.com are delivered to Exchange Online. All messages sent to on-premises mailboxes are routed through the Edge Transport server.
Advanced Threat Protection (ATP) is enabled and configured for the Office 365 tenant.
Network Infrastructure
Each office connects directly to the Internet by using a local connection. The offices connect to each other by using a WAN link.
Requirements
Planned Changes
Contoso plans to implement the following changes:
For all new users in the on-premises organization, provide an email address that uses the value of the Last Name attribute and the first two letters of the First Name attribute as a prefix.
Decommission the public folders and replace the folders with a Microsoft 265 solution that maintains web access to the content.
Technical Requirements
Contoso identifies the following technical requirements:
All email messages sent from a SMTP domain named adatum.com must never be identified as spam.
Any solution to replace the public folders must include the ability to collaborate with shared calendars.
Security Requirements
Contoso identifies the following security requirements:
The principle of least privilege must be applied to all users and permissions.
All email messages sent from an SMTP domain named com to contoso.com must be encrypted.
All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
If a user attempts to send an email message to a distribution group that contains more than 15 members by using Outlook, the user must receive a warning before sending the message.
Problem statements
Recently, a user named HelpdeskUser1 erroneously created several mailboxes. Helpdesk1user1 is a member of the Recipient Management management role group.
Users who have a mailbox in office 365 report that it takes a long time for email messages containing attachments to be delivered.
Exhibit
NEW QUESTION 148
Your company named ADatum Corporation has a Microsoft 365 subscription.
ADatum acquires a company named Contoso, Ltd.
In the subscription, you create a new mailbox for each user at Contoso.
You need to provide the Contoso users with a global address list (GAL) that contains only their email addresses.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a new GAL named Contoso GAL.
2 - Create an adress book policy (ABP) named Contoso-AB that use the GAL.
3 - Assign Contoso-AB to all the mailboxes of the Contoso users.
Reference:
https://docs.microsoft.com/en-us/exchange/address-books/address-lists/create-global-address-list
https://docs.microsoft.com/en-us/exchange/address-books/address-lists/address-lists
NEW QUESTION 149
You have a Microsoft Exchange Online tenant that contains three users named User1, User2, and User3.
Mobile device mailbox policies are configured as shown in the following exhibit.
The users are configured as shown in the following table.
You create a new mobile device mailbox policy as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/create-or-modify-a-mobile-device-mailbox-policy-exchange-2013-help
NEW QUESTION 150
Your company has a Microsoft Exchange Online subscription for an email domain named contoso.com.
The company works with a partner company that uses an email domain named tailspintoys.com.
You need to configure the environment only to accept email from tailspintoys.com if the email is sent from an IP address of 131.107.12.85.
How should you configure the connector from the Exchange admin center? To answer, drag the appropriate options to the correct message settings. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 151
Your company has a Microsoft Exchange Server 2019 organization.
The company has 10,000 mailboxes. Each department at the company has 1,000 mailboxes.
You need to ensure that when users query the global address list (GAL), they can view only the list of the users in their department.
What should you create?
- A. 10 GALs, 10 offline address books (OABs), 10 address lists, 10 room lists, and 10 address book policies (ABPs)
- B. One GAL, 10 offline address books (OABs), 10 address lists, 10 room lists, and one address book policy (ABP)
- C. 10 GALs, 10 offline address books (OABs), 10 address lists, and 10 email address policies
- D. One GAL, 10 offline address books (OABs), 10 address lists, 10 address policies (ABPs), and one email address policy
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/address-books/address-lists/create-global-address-list
https://docs.microsoft.com/en-us/exchange/address-books/address-book-policies/address-book-policies
NEW QUESTION 152
You have a Microsoft Exchange Server 2019 hybrid deployment.
All Mailbox servers and domain controllers are in the same site.
You deploy an Edge Transport server.
You need to ensure that all SMTP traffic between the on-premises organization and Exchange Online is routed through the Edge Transport server.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
New-EdgeSubscription -FileName "c:\EdgeServerSubscription.xml" This example creates the Edge Subscription file. It should be run on your Edge Transport server. New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path "C:\EdgeServerSubscription.xml" -Encoding Byte -ReadCount 0)) -Site "Default-First-Site-Name" This example also imports the Edge Subscription file generated in Example 1 to the Active Directory site Default-First-Site-Name; however, the end result is accomplished using one command. You must run this command on the Mailbox server. ref. https://docs.microsoft.com/en-us/powershell/module/exchange/mail-flow/new-edgesubscription?view=exchange-ps
NEW QUESTION 153
You have a Microsoft Exchange Online tenant.
You need to import PST files from a legacy archiving solution to Exchange Online. You will import the PST files over the internet.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/use-network-upload-to-import-pst-files?view=o365-worldwide
NEW QUESTION 154
You have a Microsoft Exchange Server 2019 organization and a Microsoft 365 E5 subscription.
From the Microsoft 365 admin center, you open Data migration as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://www.stellarinfo.com/blog/hybrid-migration-migrate-exchange-mailboxes-office-365/
https://www.kerneldatarecovery.com/blog/migrate-from-exchange-on-premises-to-exchange-online-in-hybrid-environment/
NEW QUESTION 155
......
Planning & Implementing Hybrid Migration and Configuration: 20-25%
- Manage Public Folders: the learners should also be able to demonstrate competence in creating public folder mailboxes, implementing public folder TLJ as well as mail-enabled public folders; planning and configuring public folders; planning public folder migrations to Microsoft 365.
- Plan & Implement Migration: this subject area requires one’s skills in evaluating migration methods; configuring migration endpoints within Microsoft 365; managing request batches in mailbox migration; troubleshooting mailbox migration.
Certification Overview
Like any other Microsoft certificate, the Messaging Administrator Associate is an industry-recognized one. It is sure to make you more attractive to employers, giving you an edge over other players in this field. Note that certified employees earn 15% more than uncertified ones, according to a Microsoft White Paper. Speaking of earnings, the average salaries of messaging administrators range from $65k to $107k, according to Payscale. This figure shows that the messaging administrator role is a lucrative career option. Next is the circumstance that’s responsible for the massive demand for these specialists. Emails are essential to the smooth running of processes in the overwhelming majority of organizations. For many, it is their primary communication tool, both internally and externally, hence the need for messaging administrators. Meanwhile, the Messaging Administrator Associate certification is one of the prerequisites to earning the Microsoft 365 Certified: Enterprise Administrator Expert designation. That’s one more reason for you to attempt to add the Messaging Administrator Associate certificate to your arsenal.
Free MS-203 Exam Dumps to Improve Exam Score: https://learningtree.actualvce.com/Microsoft/MS-203-valid-vce-dumps.html