
It is more faster and easier to pass the Microsoft exam 70 346 exam by using Download Microsoft Managing Office 365 Identities and Requirements questuins and answers. Immediate access to the Improve 70 346 exam questions Exam and find the same core area 70 346 exam questions questions with professionally verified answers, then PASS your exam with a high score now.
Q21. You are the Office 365 administrator for your company.
You must use Windows PowerShell to manage cloud identities in Office 365. You must use a computer that runs Windows 8 to perform the management tasks.
You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
A. Microsoft Office 365 Best Practices Analyzer for Windows PowerShell
B. Windows PowerShell 4.0
C. Remote Server Administration Tools for Windows
D. Microsoft Online Services Sign-in Assistant
Answer: D
Explanation:
Reference: http://technet.microsoft.com/en-us/magazine/hh750396.aspx
Q22. You have an Office 365 tenant that uses an Enterprise E3 subscription. You activate Azure
Rights Management for the tenant.
You must test the service with the Development security group before you deploy Azure
Rights Management for all users.
You need to enable Azure Rights Management for only the Development security group. Which Windows PowerShell cmdlet should you run?
A. Enable-Aadrm
B. New-AadrmRightsDefinition
C. Enable-AadrmSuperUserFeature
D. Add-AadrmSuperUser
E. Set-AadrmOnboardingControlPolicy
Answer: E
Explanation:
The Set-AadrmOnboardingControlPolicy cmdlet sets the policy that controls user on-boarding for Azure Rights Management. This cmdlet supports a gradual deployment by controlling which users in your organization can protect content by using Azure Rights Management.
Example:
Restrict Azure RMS to users who are members of a specified group This command allows only users that are members of the security group with the specified object ID to protect content by using Azure Rights Management. The command applies to Windows clients and mobile devices.
Windows PowerShell
PS C:\> Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -SecurityGroupObjectId "f
Reference: Set-AadrmOnboardingControlPolicy
https://msdn.microsoft.com/en-us/library/dn857521.aspx
Q23. You administer the Office 365 environment for a company that has offices around the world. All of the offices use the same Office 365tenant.
You need to ensure that all users can access the services that are available in their regions.
Which setting or service should you update?
A. User location settings
B. User licenses
C. Service usage address
D. Rights management
Answer: A
Q24. An organization plans to deploy Exchange Online.
You must support all Exchange Online features.
You need to create the required DNS entries.
Which two DNS entries should you create? Each correct answer presents part of the solution.
A. A
B. SRV
C. MX
D. CNAME
Answer: C,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/hh852557.aspx
Q25. A company migrates to Office 365. 2,000 active users have valid Office 365 licenses assigned.
An additional 5,000 user accounts were created during the migration and testing processes. These users do not have any licenses assigned.
You need to remove the Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort.
Which Windows PowerShell command should you run?
A. Get-MsolUser -All -EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
B. Get-MsolUser-EnabledFilter "DisabledOnly" | Remove-MsolUser -Force
C. Get-MsolUser -All -UnlicensedUsersOnly | Remove-MsolUser -Force
D. Get-MsolUser -UnlicensedUsersOnly | Remove-MsolUser–Force
Answer: C
Explanation:
Reference: http://technet.microsoft.com/en-us/library/dn194133.aspx
Q26. DRAG DROP
You are the Office 365 administrator for your company.
You need to ensure that trusted applications can decrypt rights-protected content.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Q27. You have an Exchange Online tenant. You must identify mailboxes that are no longer in use.
You need to locate the inactive mailboxes.
Which Windows PowerShell command should you run?
A. Get-StaleMailboxReport-StartDate
B. Get-MailboxActivityReport-Organization
C. Get-MailboxActivityReport-Expression
D. Get-MailboxActivityReport-EndDate
Answer: A
Explanation:
Use the Get-StaleMailboxDetailReport cmdlet to view mailboxes that haven't been
accessed for at least 30 days.
The StartDate parameter specifies the start date of the date range.
Reference: Get-StaleMailboxDetailReport https://technet.microsoft.com/en-us/library/jj200715(v=exchg.150).aspx
Q28. Contoso uses Office 365 for collaboration services. You implement single sign-on (SSO) with Office 365 by using Active Directory Federation Services (AD FS).
You need to implement Windows Azure multi-factor authentication.
Which three actions should you perform? Each correct answer presents part of the solution.
A. On the AD FS federation server, run PhoneFactorAgentSetup.exe.
B. On the AD FS Federation server, run WindowsAzureSDK-x64.exe.
C. On the AD FS Federation server, run the Windows PowerShell cmdlet Register-AdfsAuthenticationProvider.
D. On the AD FS Federation server, run FsConfigWizard.exe.
E. Run the Active Directory Domains and Trusts MMC snap-in. Register Windows Azure
Multi-Factor Authentication Server as an additional authentication provider.
F. Run the Windows Azure Multi-Factor Authentication Server Authentication Configuration Wizard.
Answer: B,C,F
Q29. A company has an Office 365 tenant that has an Enterprise E1 subscription. The company has offices in several different countries.
You need to restrict Office 365 services for existing users by location.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: A
Explanation:
The Set-MsolUser cmdlet is used to update a user object.
Example: The following command sets the location (country) of this user. The country must be a two-letter ISO code. This can be set for synced users as well as managed users. Set-MsolUser -UserPrincipalName user@contoso.com -UsageLocation "CA"
Note: Some organizations may want to create policies that limit access to Microsoft Office 365 services, depending on where the client resides. Active Directory Federation Services (AD FS) 2.0 provides a way for organizations to configure these types of policies. Office 365 customers using Single Sign-On (SSO) who require these policies can now use client access policy rules to restrict access based on the location of the computer or device that is making the request. Customers using Microsoft Online Services cloud User IDs cannot implement these restrictions at this time.
Reference: Limiting Access to Office 365 Services Based on the Location of the Client
https://technet.microsoft.com/en-us/library/hh526961(v=ws.10).aspx
Reference: Set-MsolUser
https://msdn.microsoft.com/en-us/library/azure/dn194136.aspx
Q30. DRAG DROP
Litware Inc. has an Office 365 Enterprise El plan. Employees have access to all Office 365 services.
Employees in the human resources (HR) department must continue to use the on-premises SharePoint 2013 deployment due to legal requirements.
You need to disable access to SharePoint Online for all HR department employees.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location or locations in the answer area. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer: