You configure Windows Remote Desktop to allow remote connections. You are testing the remote desktop
connection.
When users that are not administrators sign in to the Remote Desktop Connection, the following error message
displays: “To sign in remotely, you need the right to sign in through Remote Desktop Services.”
You need to ensure that all employees can access resources by using Remote Desktop Connection.
What should you do?

DRAG DROP
A company uses Office 365 for email and instant messaging. You deploy Azure Active Directory (AD) Connect
and enable password synchronization. The company acquires Enterprise Mobility Suite licenses.
You must allow users to update their passwords online.
You need to configure Azure AD Connect.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

A company uses Office 365. The company has an on-premises Active Directory Domain Services (AD DS)
domain and Azure Active Directory Connect. The company runs an on-premises installation of System Center
Configuration Manager. All devices are joined to the domain. All users have AD DS accounts and use their AD
DS credentials to access the Office 365 resources.
You plan to use Cloud App Discovery.
You need to deploy a solution.Which three will achieve the goal? Each correct answer presents a complete solution.

HOTSPOT
You administer Office 365 and Azure Active Directory (AD) for a car rental company. You also manage an onpremises Active Directory Domain Services (AD DS) domain. You implement Active Federation Services (AD
FS).
You plan to implement Azure AD Connect Health.
You need to ensure that you can install and configure Azure AD Connect Health.
What should you do? To answer, select the appropriate option from each list in the answer area.
Hot Area:

You are a network administrator for a company that has an Office 365 E3 subscription. You purchase
Enterprise Mobility Suite licenses. You implement synchronization by using a federated identity model.
Passwords for Sales team users often expire while they are travelling. When this happens, the users are not
able to log on to the virtual private network (VPN) to perform their duties. Users must be able to reset their own
passwords.
You need to enable password write-back.
Which application should you configure?

A company has a policy that all data stored on a corporate mobile device must be encrypted.
You need a management solution that enforces the policy.
Which two management solutions should you use? Each correct answer presents part of the solution.

DRAG DROP
Your organization needs to implement a Dynamic Access Control (DAC) plan that includes user and device
claims.
The domain controllers have not been enabled to provide claims and compound authentication.
You need to configure the Default Domain Controller’s Group Policy Object to provide claims and compound
authentication.
You decide to first enable the domain controllers to provide claims and compound authentication on request.
In which order should you perform the actions? To answer, move all actions from the list of actions to the
answer area and arrange them in the correct order.
Select and Place:

You manage an Active Directory Domain Services (AD DS) domain that has 500 devices. All devices run
Windows 7 Enterprise Edition. You deploy System Center 2012 R2 Configuration Manager SP1.
You plan to upgrade all devices to Windows 10 Enterprise and encrypt the devices by using Microsoft BitLocker
Administration and Monitoring (MBAM), Data secured with BitLocker must not be stored on USB devices.
You need to ensure that existing devices are ready for the upgrade.
What should you do?

A company has an Active Directory Domain Services (AD DS) domain named global.fabrikam.com, and an onpremises Microsoft Exchange Server 2010 server. The company has an Office 365 E3 subscription. You have
not assigned any licenses to users. You deploy Enterprise Mobility Suite (EMS). All client devices run Windows
7 and Office 2010.
You must protect emails that contain sensitive information from unauthorized access.
You need to ensure that users can easily protect sensitive emails as messages are sent.
Which three actions should you perform? Each correct answer presents part of the solution.

DRAG DROP
Your organization is deploying new Windows 10 devices. You create a new organizational unit that contains all
Windows 10 devices.
You are preparing a new security policy for Windows 10 devices. Your organization requires audits on the use
of removable storage devices on personal devices.
You need to enable audits of removable storage.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place: