This is a case study. Case studies are not timed separately. You can use as much exam times as you would
like to complete each case. However, there may be additional studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.
To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to
make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information such
as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
You are the system administrator for an insurance company named Contoso, Ltd. The company has an onpremises Active Directory Services (AD DS) domain named contoso.com, and a Microsoft Office 365
environment. You deploy the following operating systems across the enterprise:

You configure removable storage usage auditing for all Dallas devices.
Contractors
You hire 25 contractors. The contractors must use their own devices to access Microsoft SharePoint Online
sites in the company’s Office 365 environment. They must use Windows BitLocker and store a recovery key in
Microsoft OneDrive.User synchronization and authentication
You need to implement synchronization between the on-premises AD DS domain and the Office 365
environment. The solution must use the latest supported Microsoft technologies.
Users must be able to reset their own passwords by using the Microsoft Office 365 portal. When a user resets
their Office 365 password, the password for the user’s on-premises AD DS account must also reset.
Users must be able to sign in to Office 365 by using their AD DS credentials.
Security
You must prevent all users in Seattle except Sales users from using any removable devices. Sales users must
be able to fully access local attached tape drives. Sales users must be prevented from writing to removable
drives.
Technical requirements
General
You deploy a new application to the devices in Seattle. Sales department users in Seattle run an application
that only works on devices that run windows 7.
You deploy a new display driver to all devices in Dallas.
Backup and Recovery
You create system images for all devices that run Windows 7. You must create a new system image each time
you update these devices. You schedule file versioning for these devices to occur at 09:00 and 17:00 each day
on Monday through Friday.
All devices that run Windows 10 must back up the C:\\CompanyDoes folder to a network drive.
You must configure all devices that run Windows 8.1 to use a recovery drive.
Monitoring
You must review and take action on any alerts for Active Directory Federation Services (AD FS) application.
You must create detailed views of AD FS log on patterns. You must minimize the number of open firewall ports.
You must monitor audit events for all devices used by the Marketing user group.
Problem Statements
User1 makes frequent changes to a Microsoft Excel workbook each day. Today at 12:00, User overwrites the
existing document on a device that runs Windows 7.
Users in Seattle report a variety of computer issues. You must use the quickest method to revert the devices to
a working state. Users in Dallas also report issues. You must correct the issues that are interfering with existing
applications or files.
A Sales department user overwrites a version of a Word document on their device.
You need to configure Azure Active Directory (AD) Connect Health.
Which additional port should you open?

A.
389

B.
1433

C.
3268

D.
5671

E.
9350

Explanation:
https://azure.microsoft.com/en-gb/documentation/articles/active-directory-aadconnect-health-agent-install/