An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller
that runs Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory
Domain Services environment to Office 365.
You need to prepare to install the Windows Azure Active Directory Sync tool.
Which two actions should you perform? Each correct answer presents part of the solution.

A company uses Office 365 services. You implement the Windows Azure Active Directory Sync tool in
the local environment.
An employee moves to a new department. All Office 365 services must display the new department
information for the employee.
You need to update the employee’s user account.
Where should you change the value of the department attribute for the employee?

You have an Office 365 environment. Synchronization between the on-premises Active Directory and
Office 365 is enabled.
You need to deactivate directory synchronization.
Which Windows PowerShell cmdlet should you run?

You are the Office 365 administrator for your company. The company uses Active Directory
Federation Services (AD FS) to provide single sign-on to cloud-based services. You enable multifactor authentication.
Users must NOT be required to use multi-factor authentication when they sign in from the
company’s main office location. However, users must be required to verify their identity with a
password and token when they access resources from remote locations.
You need to configure the environment.
What should you do?

HOTSPOT
An organization has over 10,000 users and uses a SQL-based Active Directory Federation Services
(AD FS) server farm.
You need to change the AD FS 2.0 service account password.
What should you do? Select the correct answer from each list in the answer area.

Contoso uses Office 365 for collaboration services. You implement single sign-on (SSO) with Office
365 by using Active Directory Federation Services (AD FS).
You need to implement Windows Azure multi-factor authentication.
Which three actions should you perform? Each correct answer presents part of the solution.

DRAG DROP
A company deploys an Office 365 tenant. You install the Active Directory Federation Services (AD FS)
server role on a server that runs Windows Server 2012. You install and configure the Federation
Service Proxy role service. Users sign in by using the Security Assertion Markup Language (SAML) protocol.
You need to customize the sign-in pages for Office 365.
Which pages should you customize? To answer, drag the appropriate page to the correct
customization. Each page may be used once, more than once, or not at all. You may need to drag the
split bar between panes or scroll to view content.

A company plans to deploy an Office 365 tenant. You have two servers named FS1 and FS2 that have
the Federation Service Proxy role service installed.
You must deploy Active Directory Federation Services (AD FS) on Windows Server 2012.
You need to configure name resolution for FS1 and FS2.
What should you do?

DRAG DROP
You are the Office 365 administrator for your company.
You must configure a trust between the on-premises Active Directory domain and the Office 365
environment by using Active Directory Federation Services.
You need to assign the correct certificate to the description of your on-premises server environment below.
Which certificate types should you assign? To answer, drag the appropriate certificate type to the
correct test description. Each certificate type may be used once, more than once, or not at all. You
may need to drag the split bar between panes or scroll to view content.