Question 90 Microsoft 365 important service communications go to an out-of-date administrator contact. What should be addressed? Change the domain's DKIM selector labels Modify a user's personal Outlook signature Maintain current service and organizational contact settings in the tenant administration experience Disable Microsoft Defender XDR alert policies Explanation Correct Answer C:Current owner contact information helps deliver administrative notices to responsible staff. Incorrect Answers A:DKIM keys authenticate email but do not specify organization contacts. B:An email signature is not the authoritative service contact registration. D:Security alerts are independent of organizational contact information.
Question 91 A custom domain migration causes intermittent inbound mail errors due to differing public MX answers. What should the team do before changing DNS again? Change the domain's public MX record again as soon as one administrator's resolver shows the new target, without comparing other cached answers Change Exchange accepted-domain mode to internal relay on every accepted domain without confirming which legacy gateway still receives messages Modify the custom domain's SPF policy to prioritize Microsoft 365 sending infrastructure, while retaining mismatched inbound MX destinations Confirm authoritative answers, current cached records and the approved cutover/rollback plan Explanation Correct Answer D:This distinguishes inconsistent propagation from routing misconfiguration and limits churn. Incorrect Answers A:A single fresh lookup does not establish global propagation or diagnose stale DNS caches during a controlled cutover. B:A broad routing-mode change is not justified by inconsistent cached MX destinations and can create further mail delivery failures. C:SPF controls authorized outbound senders and cannot reconcile differing inbound MX answers at authoritative and cached resolvers.
Question 92 A company decides to route outgoing mail through a legacy relay again. Which control should be revisited in addition to connectors? Purview Content explorer permissions SPF and DKIM alignment for the systems now actually sending Microsoft 365 Apps channel servicing policies Microsoft Entra administrative unit membership Explanation Correct Answer B:Outbound sender changes alter authentication requirements and reputation signals. Incorrect Answers A:Content inventory access cannot establish mail domain alignment. C:Desktop update channels do not authorize SMTP relay traffic. D:Administrative unit scoping is unrelated to SMTP sender authorization.
Question 93 A device lacks the expected Microsoft 365 Apps update status because it is not in a supported management solution. What should administrators determine? Whether the device is enrolled, eligible and reporting to the selected update management mechanism Whether a domain verification TXT record is current Whether the employee's personal OneDrive has a sharing link Whether a Defender incident was automatically resolved Explanation Correct Answer A:Update telemetry requires appropriate client management and reporting prerequisites. Incorrect Answers B:DNS ownership alone does not register device update status. C:File sharing does not enroll a device in update management. D:Incident status is not application update enrollment.
Question 94 A delegated support engineer asks to change organization-wide sharing settings to fix one user's problem. Which practice minimizes impact? Identify the scoped user or workload cause before modifying tenant-wide defaults Grant Global Administrator to every support engineer Delete all domain records to reset permissions Change the tenant default domain to prevent single-user access errors Explanation Correct Answer A:Broad defaults should not be changed to treat an isolated symptom without evidence. Incorrect Answers B:Broad permanent privilege undermines least privilege. C:DNS deletion harms availability without addressing sharing behavior. D:Default domain selection does not determine every sharing permission.
Question 95 The security team asks whether a recovery was successful but the restore portal only shows job completion. What additional record should be kept? Business validation that specific restored files and versions are correct Only the monthly user licensing total Only the public domain registration renewal email A new service-health subscription list Explanation Correct Answer A:Restore completion is technical evidence; usability requires confirming affected content. Incorrect Answers B:License counts do not prove files were restored. C:Domain billing is unrelated to data restore completeness. D:Subscriptions cannot validate recovered items.
Question 96 An automation vendor requests the exact Microsoft Entra tenant identifier to register authorization. What should the admin provide? The service incident identifier from Microsoft 365 health The tenant's directory GUID from its verified Entra tenant properties A random employee email address with the correct suffix The Exchange Online inbound MX hostname Explanation Correct Answer B:Applications identify the tenant with a stable directory ID rather than a user alias. Incorrect Answers A:A service incident ID is unrelated to the tenant's directory identity. C:An address is not the stable directory identifier required by applications. D:MX identifies mail routing infrastructure, not the Entra tenant object.
Question 97 A subsidiary is moving to a separate Microsoft 365 tenant and needs its custom domain. Which coordination is essential? Assign both tenants the same default onmicrosoft.com namespace Remove the domain's dependencies in the original tenant before verification in the new one Set one Exchange MX record to both tenants without resolving identity ownership Change every user account's primary MFA method Explanation Correct Answer B:Only one tenant can claim the custom domain, and existing account references must be cleaned. Incorrect Answers A:Initial tenant domains are unique and cannot be shared for migration. C:MX does not allow two tenants to hold a domain simultaneously. D:Authentication changes do not release verified custom-domain bindings.
Question 98 The admin center shows a user has the needed subscription, but the application tile is absent. What should be checked next? Only the DNS SPF TXT record The user's effective workload service-plan status and provisioning Only the tenant default email domain setting Only the number of Service health advisories Explanation Correct Answer B:A disabled plan or incomplete service provisioning can hide an entitled application. Incorrect Answers A:Sender authentication is unrelated to application entitlement. C:The default suffix is not the workload activation state. D:Advisories alone cannot explain a single user's effective license.
Question 99 An incident is closed, and auditors request a timeline of Microsoft 365 service impact and recovery. Which source best provides provider status updates? The Service health incident history and resolution notes for the affected workload Export Message center announcements without the Service health incident's resolution timeline The organization's global role assignment history alone A list of expired Exchange room mailboxes Explanation Correct Answer A:Vendor updates document milestones and reported remediation for the service event. Incorrect Answers B:Message center communications may give change context but are not the incident-status chronology and resolution evidence requested. C:Role history cannot replace a provider outage timeline. D:Resource mailbox inventory is not service incident chronology.
Question 100 A SharePoint owner assumes the site's standard version history provides the same restoration capabilities as Microsoft 365 Backup. How should this be evaluated? Configure Exchange DKIM to make files recoverable Compare supported recovery points, scope, and retention behavior of each mechanism Use Microsoft Secure Score as the sole recovery plan Disable version history before enabling backup Explanation Correct Answer B:File versioning and dedicated backup may have different recovery guarantees and administrative procedures. Incorrect Answers A:Email signatures cannot create SharePoint restore points. C:A posture score is not a defined data recovery mechanism. D:Removing version history is not required to assess backup coverage.
