A company deploys an Office 365 tenant.

You must provide an administrator with the ability to manage company information in Office 365.

You need to assign permissions to the administrator by following the principle

of least privilege.

Which role should you assign?

A. Global administrator

B. Service administrator

C. Billing administrator

D. User management administrator

Explanation:

Global admin: Has access to all administrative features. Global admins

are the only admins who can assign other admin roles. You can have more than one global admin in your organization. The person who signs up to purchase Office 365 becomes a global admin. Only the global administrator role will allow you to manage company i

nformation by means of editing the organization profile. None of the other roles are enabled to manage organization information.

References:

https://support.office.com/en-US/Article/Assigning-admin-roles-eac4d046-1afd-4f1a-85fc-8219c79e1504

A company deploys an Office 365 tenant.

You need to configure single sign-on (SSO) for all user accounts.

Which two actions should you perform? Each correct answer presents part of the solution.

A. Run the Windows

PowerShell cmdlet

Convert-MsolDomainToStandard

.

B. Run the Windows PowerShell cmdlet

Enable-ADFSEndpoint

.

C. Run the Windows PowerShell cmdlet

Convert-MsolDomainToFederated

.

D. Deploy a federation server proxy.

E. Run the Windows PowerShell cmdlet

New-ADFS

Organization

.

F.

Deploy a federation server farm.

Explanation:

C: The Convert-MSOLDomainToFederated cmdlet converts the specified domain from standard authentication to single sign-on (SSO).

F: Single sign-on (SSO) requires Active Directory

Federation Services (AD FS) which can be installed as a federation farm.

References:

http://technet.microsoft.com/en-us/library/dn194092.aspx

A company deploys an Office 365 tenant.

You need to configure single sign-on (SSO) for all user accounts. External users are not allowed to connect directly to internal servers.

Which t

hree actions should you perform? Each correct answer presents part of the solution.

A. Run the Windows PowerShell cmdlet

Enable-ADFSEndpoint

.

B. Deploy a federation server proxy.

C. Run the Windows PowerShell cmdlet

Convert-MsolDomainToStandard

.

D. Run

the Windows PowerShell cmdlet

New-ADFSOrganization

.

E. Deploy a federation server farm.

F. Run the Windows PowerShell cmdlet

Convert-MsolDomainToFederated

.