★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions
Free Instant Download NEW 70-346 Exam Dumps (PDF & VCE):
Available on:
https://www.certleader.com/70-346-dumps.html
It is impossible to pass Microsoft 70-346 exam without any help in the short term. Come to Testking soon and find the most advanced, correct and guaranteed Microsoft 70-346 practice questions. You will get a surprising result by our Renovate Managing Office 365 Identities and Requirements practice guides.
2021 Aug examen 70-346:
Q71. You are the Office 365 administrator for your company. The company synchronizes the local Active Directory objects with a central identity management system.
The environment has the following characteristics:
Each department has its own organizational unit (OU).
The company has OU hierarchies for partner user accounts.
All user accounts are maintained by the identity management system.
You need to ensure that partner accounts are NOT synchronized with Office 365.
What should you do?
A. Configure OU-based filtering by using the Windows Azure Active Directory Sync tool.
B. In the Windows Azure Active Directory portal, configure OU-based filtering.
C. Configure user attribute-based filtering by using the Windows Azure Active Directory Sync tool.
D. In the Windows Azure Active Directory portal, configure user attribute-based filtering.
Answer: A
Explanation:
Reference: http://technet.microsoft.com/en-us/library/jj710171.aspx
Company has OU hierarchies for partner user accounts so OU-based filtering should be fine.
Q72. A company has an Office 365 tenant. The company uses a third-party DNS provider that does not allow TXT records.
You need to verify domain ownership.
What should you do?
A. Create an MX record.
B. Create a CNAME record.
C. Create an A record.
D. Create an SRV record.
Answer: A
Explanation:
Add a TXT or MX record for DNS verification.
Reference: Change nameservers to set up Office 365 with any domain registrar
https://support.office.com/en-us/article/Change-nameservers-to-set-up-Office-365-with-anydomain-registrar-a8b487a9-2a45-4581-9dc4-5d28a47010a2
Q73. DRAG DROP
You are the Office 365 administrator for your company.
You need to ensure that trusted applications can decrypt rights-protected content.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Q74. HOTSPOT
A company plans to synchronize users in an existing Active Directory organizational unit with Office 365.
You must configure the Azure Active Directory Synchronization (AAD Sync) tool with password sync.
You need to ensure that the service account has the minimum level of permissions required.
Which two permission levels should you assign to the account for each task? To answer, select the appropriate permission level from each list in the answer area.
Answer:
Q75. A company has an Office 365 tenant that has an Enterprise E1 subscription.
You plan to test a new deployment by using 50 tenant user accounts.
You need to ensure that the passwords for the test user accounts do not expire.
Which Windows PowerShell cmdlet should you run?
A. Set-MsolUser
B. Redo-MsolProvisionUser
C. Set-MsolUserLicense
D. Set-MsolUserPrincipalName
E. Convert-MsolFederatedUser
F. Set-MailUser
G. Set-LinkedUser
H. New-MsolUser
Answer: A
Explanation: The Set-MsolUser cmdlet is used to update a user object. This cmdlet should
be used for basic properties only.
Parameter -PasswordNeverExpires <Boolean>
Sets whether or not the user's password will expire periodically.
Reference: Set-MsolUser
https://msdn.microsoft.com/en-us/library/azure/dn194136.aspx
Latest office 365 exam 70-346:
Q76. DRAG DROP
A company is deploying an Office 365 tenant.
You need to deploy a Windows Server 2012 R2 federation server farm.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Q77. Your company deploys an Office 365 tenant.
You need to ensure that you can view service health and maintenance reports for the past seven days.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.
A. Run the Microsoft Online Services Diagnostics and Logging (MOSDAL) Support Kit.
B. View the service health current status page of the Office 365 admin center.
C. View the service settings page of the Office 365 admin center.
D. Subscribe to the Office 365 Service Health RSS Notifications feed.
Answer: B,D
Q78. A company has an Office 365 tenant.
You need to monitor Active Directory synchronization.
Which tool should you run?
A. ldFix
B. Office 365 Health, Readiness, and Connectivity Check
C. Microsoft Remote Connectivity Analyzer Tool
D. Synchronization Service (MIISClient)
Answer: A
Explanation: dFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Office 365. IdFix is intended for the Active Directory administrators responsible for DirSync with the Office 365 service.
Reference: IdFix DirSync Error Remediation Tool
http://www.microsoft.com/en-us/download/details.aspx?id=36832
Q79. You have an Office 365 tenant that uses an Enterprise E3 subscription. You activate Azure
Rights Management for the tenant.
You must test the service with the Development security group before you deploy Azure
Rights Management for all users.
You need to enable Azure Rights Management for only the Development security group. Which Windows PowerShell cmdlet should you run?
A. Enable-Aadrm
B. New-AadrmRightsDefinition
C. Enable-AadrmSuperUserFeature
D. Add-AadrmSuperUser
E. Set-AadrmOnboardingControlPolicy
Answer: E
Explanation:
The Set-AadrmOnboardingControlPolicy cmdlet sets the policy that controls user on-boarding for Azure Rights Management. This cmdlet supports a gradual deployment by controlling which users in your organization can protect content by using Azure Rights Management.
Example:
Restrict Azure RMS to users who are members of a specified group This command allows only users that are members of the security group with the specified object ID to protect content by using Azure Rights Management. The command applies to Windows clients and mobile devices.
Windows PowerShell
PS C:\> Set-AadrmOnboardingControlPolicy -UseRmsUserLicense $False -SecurityGroupObjectId "f
Reference: Set-AadrmOnboardingControlPolicy
https://msdn.microsoft.com/en-us/library/dn857521.aspx
Q80. An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory Domain Services environment to Office 365.
You need to prepare to install the Windows Azure Active Directory Sync tool.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Upgrade the domain controller to Windows Server 2012.
B. Install Microsoft .NET Framework 3.5 SP1 and Microsoft .NET Framework 4.0.
C. Install Windows Server 2012 Standard edition.
D. Raise the forest functional level to Windows Server 2008 R2.
E. Join a workstation to an Active Directory domain.
Answer: B,D
Explanation:
Reference: http://technet.microsoft.com/en-us/library/jj151831.aspx#BKMK_ComputerRequirements