Question 10 A company is decommissioning a brand and wants to remove its custom domain from Microsoft 365. What dependency must be addressed first? Delete Microsoft 365 service-health history before removing a custom domain, assuming historical notices constitute the domain dependency Remove that domain from user and group references that still use it Require all accounts to enroll passkeys before domain removal, leaving their original UPNs and proxy addresses unchanged Remove endpoint protection entitlements from the organization before deleting a brand domain referenced by mailboxes and cloud identities Explanation Correct Answer B:A domain in use by objects cannot be removed until those dependencies are reconfigured. Incorrect Answers A:Incident history does not bind recipient or user objects to a DNS namespace; used user and group addresses must be moved first. C:Authentication method replacement does not clear identity or email objects' references to the domain targeted for removal. D:Defender entitlement cannot release users, aliases, and groups that still reference the custom domain and may cause unrelated loss of security.
Question 11 Legal requires a consistent external recipient warning across the company. Which management scope should be used? Configure an appropriate organization-wide Exchange mail flow policy Prepend an external-recipient warning to each mailbox's display name, leaving organization-wide Exchange mail-flow policies unchanged Update the company contact profile in the Microsoft 365 admin center and expect that organization metadata to create an external-recipient banner Set the preferred sign-in domain for new cloud users instead of configuring an Exchange transport condition and external-recipient action Explanation Correct Answer A:An Exchange transport rule can apply message-handling behavior to mail across the organization. Incorrect Answers B:Personal mailbox naming cannot conditionally classify outbound recipients and produce a consistent policy warning across the tenant. C:Organization profile fields are not transport-rule actions and cannot insert a mail-flow warning across messages. D:The default UPN suffix affects user creation, not a consistent warning applied to messages addressed to external recipients.
Question 12 A tenant wants to restrict calendar detail sharing to external recipients without changing tenant-domain ownership. What feature area fits? Configure the organization's Exchange calendar sharing policy Reissue the verified custom-domain ownership TXT value so external recipients receive fewer details from shared calendars Assign premium Microsoft 365 subscriptions to all employees, assuming licensing alone limits what external users can see in shared calendars Reroute incoming Exchange messages to a different MX gateway and assume the gateway changes externally shared calendar permission levels Explanation Correct Answer A:Exchange controls calendar external-sharing permissions separately from DNS ownership. Incorrect Answers B:DNS verification controls ownership registration and does not change sharing permissions or calendar free/busy details. C:Licensing does not set the allowed calendar detail level; the relevant Exchange sharing policy must enforce external visibility. D:Mail routing does not impose the calendar sharing policy needed to limit detail visibility for external recipients.
Question 13 Many users in distinct locations suddenly cannot access Teams, and local networking tests pass. Which place gives the official cloud-service incident status? Microsoft 365 admin center Service health Review individual Exchange Online message-trace histories to determine whether Microsoft's worldwide Teams service currently has an incident Query all verified domain TXT records and infer from their availability whether Microsoft has a current multi-region Teams outage Search Purview Content explorer for Teams-related documents and interpret the classification results as official Microsoft service availability Explanation Correct Answer A:Service health reports affected Microsoft 365 workloads and active advisories. Incorrect Answers B:Message trace investigates mail delivery, while Service health publishes official workload-specific incidents affecting Teams availability. C:DNS ownership records do not report Microsoft's current workload incident status, even if users in multiple locations are affected. D:Content discovery is not a service incident feed and cannot establish the vendor's current Teams platform health.
Question 14 An IT operations team wants automatic emails when Microsoft announces new tenant service health incidents. Where should the administrator set this up? Service health notification preferences Create an Exchange outbound spam notification rule, assuming it subscribes IT staff to vendor-wide Microsoft 365 Service health incident notices Publish a Purview retention label for service-desk mail and expect it to deliver new vendor incident notification emails Modify the custom domain's DKIM selector settings to request administrative mail whenever a Microsoft 365 service incident begins Explanation Correct Answer A:These settings subscribe administrators to service incidents and advisories. Incorrect Answers B:Outbound spam alerts concern organization sending behavior rather than Microsoft's official workload service status advisories. C:A content lifecycle label can retain received messages but does not subscribe anyone to the Service health incident notification system. D:DKIM message authentication is separate from service-health notification preferences, which select recipients and alert types.
Question 15 A service-health entry reports a planned improvement that may temporarily change a feature, but no service outage is ongoing. How should staff classify the message? As an Exchange transport failure investigation As evidence that tenant DNS ownership has expired As proof that every tenant user has a current outage As a service health advisory describing an upcoming or non-outage change Explanation Correct Answer D:Advisories can communicate relevant feature or operational changes without an active disruption. Incorrect Answers A:Mail flow investigation is distinct from Microsoft's announced service-health notice. B:Microsoft's feature notice does not revoke DNS verification. C:An advisory does not necessarily indicate service interruption for all users.
Question 16 Users in a branch have high Microsoft 365 latency while offices elsewhere work normally. Which Microsoft 365 admin experience can help evaluate that branch connectivity? Network connectivity insights for Microsoft 365 Analyze received DMARC authentication aggregates to identify branch-specific end-user latency and Microsoft 365 network routes Run Purview retention-policy simulation against branch employees, using its report as a measurement of their Microsoft 365 network path Export the regional Exchange global address list and correlate the mailbox entries to proxy and routing latency for that branch Explanation Correct Answer A:Insights can expose branch-location connectivity measurements and recommendations. Incorrect Answers B:DMARC reports summarize email authentication outcomes, not the branch's Internet path or proximity to Microsoft endpoints. C:Retention simulation predicts content preservation policies, not regional client connectivity quality or network delays. D:Address book content does not capture measured network latency, local egress, proxy inspection, or cloud endpoint connectivity.
Question 17 Only one site experiences intermittent access to Microsoft 365, while Service health reports no active issues. What is the next likely diagnostic direction? Disable Conditional Access for the entire tenant Change the organization's legal display name Inspect the site's network path, DNS resolution, proxy, and Internet egress Delete the affected tenant's verified domains Explanation Correct Answer C:A location-specific problem points to local routing or security appliances before a global outage. Incorrect Answers A:Disabling all access controls is disproportionate without sign-in denial evidence. B:Profile branding does not influence connectivity quality. D:Removing domains would disrupt identities and mail rather than diagnose one site.
Question 18 An IT director wants to compare active use of Teams and OneDrive after deploying licenses. Which reporting surface is relevant? Microsoft 365 usage and adoption reports Exchange mail flow rules Purview sensitivity-label policy settings Microsoft Entra sign-in risk events only Explanation Correct Answer A:Usage reports provide workload-specific adoption measures instead of mere license ownership. Incorrect Answers B:Transport rules do not summarize activity in collaboration workloads. C:Label configuration does not count collaboration feature adoption. D:Identity risk events are security signals, not a complete adoption analysis.
Question 19 All 800 employees have Teams licenses but monthly Teams active-user reporting shows only 430 users. What does this difference indicate? The 370 remaining employees have necessarily been disabled The MX record for Teams needs correction License assignment does not guarantee actual user engagement The tenant has 430 total licensed users Explanation Correct Answer C:A license provides entitlement, while adoption reports measure use during a reporting window. Incorrect Answers A:Lack of Teams activity does not prove the identities are disabled. B:Teams user engagement is not determined by Exchange inbound MX routing. D:The active-user report is not the same as total licensing inventory.
Question 20 The company wants to monitor and manage Microsoft 365 Apps release channels using its central service management process. Which feature area is relevant? Microsoft 365 Apps update management in the admin center Entra domain verification wizard Exchange mailbox retention settings Purview sensitive-information types Explanation Correct Answer A:The organization can monitor supported update deployments and channel configurations centrally. Incorrect Answers B:DNS proof cannot select or monitor Office application builds. C:Mailbox retention is unrelated to desktop application update delivery. D:Classification patterns do not configure Microsoft 365 Apps update channels.
