DRAG DROP
Contoso Ltd. plans to use Office 365 services for collaboration between departments. Contoso has one Active
Directory Domain Services domain named contoso.local. You deploy Azure AD Connect.
You plan to implement single sign-on (SSO) for Office 365.
You need to synchronize only the user accounts that have valid routable domain names and are members of specified departments.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of

actions to the answer area and arrange them in the correct order.
Select and Place:

within our own public DNS servers. We cannot use contoso.local as it is not routable outside of the intranet. We can then use Active Directory Domains and Trusts to add user principal name (UPN) suffixes to the domain. contains the user account. We can add contoso.com as an alternative UPN suffixes for logon processes. specified departments to contoso.com. have a contoso.local as their UPN suffix.

You are the Office 365 administrator for your company.
The environment must support single sign-on.
You need to install the required certificates.
Which two certificates should you install? Each correct answer presents part of the solution.

federation server proxies, the cloud service, and web clients. clients, Web Application Proxy, and federation server proxy computers. federation server issues and that the cloud service will accept and validate.

Your company has a hybrid deployment of Office 365. All mailboxes are hosted on Office 365. All users access their Office 365 mailbox by using a user account that is hosted on-premises. You need to delete a user account and its associated mailbox.
Which tool should you use? the synchronized mail-enabled objects in Microsoft Azure Active Directory. You should thus delete accounts from Active Directory and when directory synchronization runs the associated object will be deleted from Azure and the associated mailbox will be soft-deleted.

HOTSPOT
You are the Office 365 administrator for your company.
User1 leaves the company. You must delete the account for User1.
In the table below, identify when each type of data will be deleted. Make only one selection in each column.
Each correct selection is worth one point.
Hot Area:

https://support.office.com/en-us/article/Manage-SharePoint-Online-user-profiles-from-the-SharePoint-admin- center-494bec9c-6654-41f0-920f-f7f937ea9723?CorrelationId=bd632ebb-fd74-4030-a971-

An organization purchases an Office 365 plan for 10,000 user accounts. You have a domain controller that runs
Windows Server 2008 R2. The forest functional level is set to Windows Server 2000.
The organization must be able to synchronize user attributes from the on-premises Active Directory Domain
Services environment to Office 365.

raise the forest functional level.

DRAG DROP
An organization plans to deploy an Office 365 tenant. The company has two servers named SERVER1 and
SERVER2. SERVER1 is a member server of the Active Directory forest that you are synchronizing. SERVER2 is a standalone server. Both servers run Windows Server 2012.
You need to use the Azure Active Directory Connect to provision users
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Explanation/Reference:
Explanation:
You must activate directory synchronization before you install the Directory Sync tool.

plan to synchronize. As SERVER2 is a standalone server, it is not joined to the Active Directory forest and cannot be used for synchronization.

An organization deploys an Office 365 tenant.
User accounts must be synchronized to Office 365 by using the Windows Azure Active Directory Sync tool.
You have the following password policies:
Passwords for the on-premises Active Directory Domain Services (AD DS) user accounts are at least six characters long.
Passwords for Office 365 user accounts are at least eight characters long.
You need to ensure that the user accounts will be synchronized. Which user accounts will be synchronized? synchronizes user passwords from your on-premises Active Directory to Azure Active Directory. When password sync is enabled, the password complexity policies configured in the on-premises Active Directory override any complexity policies that are defined in the cloud for synchronized users.

An organization plans to migrate to Office 365. You use the Windows Azure Active Directory (AD) Sync tool.
Several users will not migrate to Office 365. You must exclude these users from synchronization. All users must continue to authenticate against the on-premises Active Directory.
You need to synchronize the remaining users.
Which three actions should you perform? Each correct answer presents part of the solution. object that is to be filtered in your on-premises Active Directory. Then you need to enable Active Directory synchronization filtering and configure the connection filter to use the user attribute. Finally, you must perform a full synchronization.

You are the Office 365 administrator for your company. The company synchronizes the local Active Directory objects with a central identity management system.
The environment has the following characteristics:
Each department has its own organizational unit (OU).
The company has OU hierarchies for partner user accounts.
All user accounts are maintained by the identity management system.
You need to ensure that partner accounts are NOT synchronized with Office 365.
What should you do? allows you to filter out objects that should not be synchronized to the cloud. The objects that can be filtered are:

DRAG DROP
Litware Inc. has an Office 365 Enterprise El plan. Employees have access to all Office 365 services.
Employees in the human resources (HR) department must continue to use the on-premises SharePoint 2013 deployment due to legal requirements.
You need to disable access to SharePoint Online for all HR department employees.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate
Windows PowerShell segment to the correct location or locations in the answer area. Each Windows
PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:

Explanation/Reference:
Box 1: -MsolLicenseOptions
We must create license object. The New-MsolLicenseOptions cmdlet creates a new License Options object.
Box 2: SHAREPOINTSTANDARD
We must disable SharePoint Online. SharePoint Online is denoted by SHAREPOINTSTANDARD.
The New-MsolLicenseOptions-DisabledPlans <string[]> produces a list of service plans to disable when assigning this license to the user.
Box 3: We get all HR department users through the Get –MsolUser –All –Department “HR” command.
The Get-MsolUser cmdlet can be used to retrieve an individual user, or list of users.

constructed.