Case Study
This is a case study. Case studies are not timed separately. You ca
n use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time prov
ided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described i
n the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of
the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question on this case study, click the
Next
button. Use the buttons in the left pane to explore the content of the case study before y
ou answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an
All Information
tab, note that the information displayed is identical to the informat
ion displayed on the subsequent tabs. When you are ready to answer a question, click the
Question
button to return to the question.
Overview
General Overview
Fabrikam, Inc. is a financial services organization.
Fabrikam recently purchased another
financial services organization named Contoso, Ltd.
Fabrikam has 2,000 users. Contoso has 500 users.
Windows 10 and Office 2016 are deployed to all computers.
Physical Locations
Fabrikam has an office in the United States. Contoso has an office in the
United Kingdom.
The offices connect to each other by using a WAN link. Each office also connects directly to the Internet.
Existing Environment
Active Directory
The network of Fabrikam contains an Active Directory forest.
The Active Directory
Environment of Contoso was migrated to the Active Directory forest of Fabrikam. The forest contains three domains name fabrikam.com, contractor.fabrikam.com, and contoso.com.
All domain controllers run Windows Server 2008 R2.
All contractors outsourced
by Fabrikam use the user principal name (UPN) suffix of contractor.fabrikam.com. If Fabrikam hires the contractor as a permanent employee, the UPN suffix changes to fabrikam.com.
Network
The network has the following configurations:
External IP address f
or the Unites States office: 192.168.1.100
External IP address for the United Kingdom office: 192.168.2.100
Internal IP address range for the Unites States office: 10.0.1.0/24
Internal IP address range for the United Kingdom office: 10.0.2.0/24
Active Dir
ectory Federation Services (AD FS)
AD FS and Web Application Proxies are deployed to support an app for the sales department. The app is accessed from the Microsoft Azure portal.
Office 365 Tenant
You have an Office 365 subscription that has the followi
ng configurations:
Organization name: Fabrikam Financial Services
Vanity domain: Fabrikamfinancialservices.onmicrosoft.com
Microsoft SharePoint domain: Fabrikamfinancialservices.sharepoint.com
Additional domains added to the subscription: Contoso.com and f
abrikam.com
Requirements
Planned Changes
Fabrikam plans to implement the following changes:
Deploy Azure AD Connect.
Move mailboxes from Microsoft Exchange 2016 to Exchange Online.
Deploy Azure multi-factor authentication for devices that connect from
untrusted networks only.
Deploy the Azure Authenticator app and the Company Portal app to all mobile devices.
Customize the AD FS sign-in webpage to include the Fabrikam logo, a helpdesk phone number, and a sign-in description.
Once all of the Fabrikam use
rs are replicated to Azure Active Directory (Azure AD), assign an E3 license to all of the users in the United States office.
Technical Requirements
Contoso identifies the following technical requirements:
When a device connects from an untrusted network
to https://outlook.office.com, ensure that users must type a verification code generated from a mobile app.
Ensure that all users can access Office 365 services from a web browser by using either a UPN or their primary SMTP email address.
After Azure AD C
onnect is deployed, change the UPN suffix of all the users in the Contoso sales department to fabrikam.com.
Ensure that administrators are notified when the health information of Exchange Online changes.
Use Office 365 reports to review previous tasks perf
ormed in Office 365.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution
, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You need to configure the Office 365 subscription to e
nsure that Active Directory users can connect to Office 365 resources by using single sign-on (SSO).
Solution: You run Convert-MsolDomainToFederated for the fabrikam.com domain and the contoso.com domain.
Does this meet the goal?
A. Yes
B. No
Explanation:
The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on. This includes configuring the relying party trust settings between the Active Directory Federation Services 2.0 server and
Microsoft Online. As part of converting a domain from standard authentication to single sign-on, each user must also be converted. This conversion happens automatically the next time a user signs in. No action is required by the administrator.
References:
https://docs.microsoft.com/en-us/powershell/module/msonline/convert-msoldomaintofederated?view=azureadps-1.0