You are the Office 365 administrator for your company. The company has a single office.
You have the following requirements:
You must configure a redundant Active Directory Federation Services (AD FS) implementation.
You must use a Windows Internal Database to store AD FS configuration data.
The solution must use a custom login page for external users.
The solution must use single sign-on for internal users.
You need to deploy the minimum number of servers.
How many servers should you deploy? allow internal users to use single sign-on (SSO). additional servers for the database as WIM is included in Windows Server 2008 and later versions. would need to set up an AD FS proxy farm. This would require a minimum of 2 more servers. would access. There is thus no need for additional servers. proxy farm. https://technet.microsoft.com/en-us/library/gg982488.aspx http://blogs.technet.com/b/askpfeplat/archive/2013/07/22/faq-on-adfs-part-1.aspx

DRAG DROP

Which certificate types should you assign? To answer, drag the appropriate certificate type to the correct test description. Each certificate type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:

network run Windows Server 2008. used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. automatically be installed by the AD FS 2.0Setup Wizard. We must therefore install the .NET Framework 3.5 with Service Pack 1 first. for AD FS 2.0. https://technet.microsoft.com/en-us/library/dn151311.aspx http://technet.microsoft.com/en-us/library/cc771145.aspx

You are the Office 365 administrator for your company. You prepare to install Active Directory Federation
Services (AD FS).
You need to open the correct port between the AD FS proxy server and the AD FS federation server.
Which port should you open?

Contoso Ltd. uses Office 365 for collaboration. You are implementing Active Directory Federation Services (AD
FS) for single sign-on (SSO) with Office 365 services. The environment contains an Active Directory domain and an AD FS federation server.
You need to ensure that the environment is prepared for the AD FS setup.
Which two actions should you perform? Each correct answer presents part of the solution. within our own public DNS servers. We cannot use contoso.local as it is not routable outside of the intranet. default sub-domain for AD FS is fs. As we use contoso.com as the domain, we are probably using fs,contoso.com as the AD FS name and we must also use it in the subject name for the certificate.

DRAG DROP
Contoso Ltd. plans to use Office 365 services for collaboration between departments. Contoso has one Active
Directory Domain Services domain named contoso.local. You deploy Azure AD Connect.
You plan to implement single sign-on (SSO) for Office 365.
You need to synchronize only the user accounts that have valid routable domain names and are members of specified departments.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of

actions to the answer area and arrange them in the correct order.
Select and Place:

within our own public DNS servers. We cannot use contoso.local as it is not routable outside of the intranet. We can then use Active Directory Domains and Trusts to add user principal name (UPN) suffixes to the domain. contains the user account. We can add contoso.com as an alternative UPN suffixes for logon processes. specified departments to contoso.com. have a contoso.local as their UPN suffix.

You are the Office 365 administrator for your company.
The environment must support single sign-on.
You need to install the required certificates.
Which two certificates should you install? Each correct answer presents part of the solution.

federation server proxies, the cloud service, and web clients. clients, Web Application Proxy, and federation server proxy computers. federation server issues and that the cloud service will accept and validate.

Your company has a hybrid deployment of Office 365. All mailboxes are hosted on Office 365. All users access their Office 365 mailbox by using a user account that is hosted on-premises. You need to delete a user account and its associated mailbox.
Which tool should you use? the synchronized mail-enabled objects in Microsoft Azure Active Directory. You should thus delete accounts from Active Directory and when directory synchronization runs the associated object will be deleted from Azure and the associated mailbox will be soft-deleted.

HOTSPOT
You are the Office 365 administrator for your company.
User1 leaves the company. You must delete the account for User1.
In the table below, identify when each type of data will be deleted. Make only one selection in each column.
Each correct selection is worth one point.
Hot Area:

https://support.office.com/en-us/article/Manage-SharePoint-Online-user-profiles-from-the-SharePoint-admin- center-494bec9c-6654-41f0-920f-f7f937ea9723?CorrelationId=bd632ebb-fd74-4030-a971-

An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs
Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory Domain
Services environment to Office 365.

raise the forest functional level.

DRAG DROP
An organization plans to deploy an Office 365 tenant. The company has two servers named SERVER1 and
SERVER2. SERVER1 is a member server of the Active Directory forest that you are synchronizing. SERVER2 is a standalone server. Both servers run Windows Server 2012.
You need to use the Azure Active Directory Connect to provision users
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Explanation/Reference:
Explanation:
You must activate directory synchronization before you install the Directory Sync tool.

plan to synchronize. As SERVER2 is a standalone server, it is not joined to the Active Directory forest and cannot be used for synchronization.