Question 50 One migrated brand's mail fails while the first remains healthy; each has a different MX host. What should be compared first? The tenant's Microsoft Secure Score trend The working brand's mailbox retention labels The functioning brand's Teams meeting policy The failing brand's own published DNS and accepted-domain configuration Explanation Correct Answer D:Each independent SMTP domain uses its own records and recipient acceptance. Incorrect Answers A:Secure Score is not an MX or accepted-domain diagnostic. B:Retention labels cannot explain the other brand's inbound MX lookup. C:Meeting controls do not direct delivery for a distinct SMTP domain.
Question 51 A tenant's connectivity dashboard shows poor performance but the IT team cannot tell which branch needs remediation. What is the most useful refinement? Grant every branch manager Purview Compliance Administrator Disable the entire organization's DNS resolver service Collect and review location-specific connectivity data for each branch Reassign Exchange shared mailbox ownership Explanation Correct Answer C:Location context differentiates local path or egress problems from tenant-wide trends. Incorrect Answers A:Compliance permissions do not measure branch connectivity. B:Removing DNS would make Microsoft 365 connectivity worse. D:Mailbox delegation does not identify network bottlenecks.
Question 52 Remote workers route every Microsoft 365 session through a congested central VPN. What should the networking team evaluate? Raise the Exchange mailbox storage quota Turn off Defender phishing protection for remote users Supported local breakout or split tunneling for designated Microsoft 365 endpoints Move all users to a different tenant default domain Explanation Correct Answer C:Appropriately scoped egress can reduce unnecessary backhaul and latency. Incorrect Answers A:Mail storage capacity does not improve network route latency. B:Email threat controls do not shorten the VPN network path. D:A UPN suffix has no effect on network backhaul.
Question 53 Teams calls are failing on a site with SSL-inspecting proxies while other sites work. Which diagnostic has priority? Reinstall Teams across the affected site before verifying the network path used by calls Review Microsoft 365 endpoint requirements and whether the proxy is disrupting supported traffic Reassign Teams voice licenses to every site user before checking SSL inspection bypass Disable all Teams calling policies for the site while leaving proxy inspection unchanged Explanation Correct Answer B:Proxy interception and routing choices can impair real-time Microsoft 365 traffic. Incorrect Answers A:Reinstalling clients is premature when call failures correlate with a site using SSL-inspecting proxies. C:User entitlement changes would not diagnose a proxy-specific pattern affecting calls at one location. D:Broad calling-policy changes risk disruption and do not test whether the network intermediary is altering supported media traffic.
Question 54 The service desk needs a list of installed Office builds on managed clients. What source is more useful than tenant licensing counts? An Exchange anti-spam policy export Microsoft 365 Apps inventory and update reports for eligible devices Purview label usage charts Entra external user invitation history Explanation Correct Answer B:Application inventory reports actual installed versions rather than assigned licenses. Incorrect Answers A:Email filters cannot enumerate Office clients. C:Label telemetry does not report application versions. D:Guest events do not report installed desktop builds.
Question 55 A managed device has not checked in for weeks and appears noncompliant with a new Office update policy. What should be checked first? The user mailbox's Litigation Hold setting A domain's DKIM selector validity The device's management connectivity, update channel and recent check-in status Service health alerts for OneDrive alone Explanation Correct Answer C:A stale or unmanaged device cannot reliably receive or report an update. Incorrect Answers A:Mailbox legal preservation does not control Office update check-ins. B:Email DKIM does not make an Office client contact management. D:An unrelated workload advisory cannot confirm this device's update channel.
Question 56 A pilot deployment of a new Office build causes a critical add-in to fail. Which response best aligns with change control? Delete all Microsoft 365 Backup policies Pause broad rollout and use the supported remediation or channel rollback strategy Remove the organization's verified tenant domains Disable every Exchange mailbox for affected users Explanation Correct Answer B:Containing the pilot reduces disruption while compatibility is addressed. Incorrect Answers A:Backup deletion cannot roll back an Office application build. C:Domain removal disrupts identities and mail without fixing the client build. D:Mailboxes are unrelated to add-in binary compatibility.
Question 57 A finance application depends on specific Office behavior, while IT test machines tolerate rapid changes. Which approach balances the needs? Set Exchange anti-phishing sensitivity differently for finance Apply one experimental build to all finance users first Use separate supported update cohorts with different validation and release timing Use shared mailboxes as update targeting groups Explanation Correct Answer C:Device group rollout avoids forcing risky feature changes on finance first. Incorrect Answers A:Phishing detection policy is not Office application servicing. B:Business-critical users are a poor first validation group. D:Mailbox type does not define client deployment membership.
Question 58 CFO asks for monthly actual SharePoint activity, not entitlement inventory. Which number should the admin avoid substituting? Assigned SharePoint service plans as a proxy for active users Unique user interaction activity for the reporting period Workload-specific usage trends over several months The SharePoint active-user metric in usage reports Explanation Correct Answer A:Entitlement counts do not establish that users accessed SharePoint in the month. Incorrect Answers B:Recorded activity is relevant to measuring adoption. C:Trend measures help distinguish activation from retention. D:This is the usage evidence that addresses the stated question.
Question 59 SharePoint licenses remain constant, but documents shared per week rise sharply. What conclusion is supported? The tenant's service uptime necessarily improved The domain verification DNS token has changed Collaboration activity increased even though assigned license count did not Every additional share represents a newly licensed user Explanation Correct Answer C:Activity and entitlement measure different outcomes. Incorrect Answers A:Increased sharing does not demonstrate a service availability change. B:A sharing metric cannot establish a DNS token change. D:One person can share multiple documents without any license change.
Question 60 An admin sees anonymized or obscured user names in usage exports. What control area should be reviewed? The organization's privacy setting for identifiable report data The tenant's service health notification address Defender for Cloud Apps application connectors Exchange accepted domain routing configuration Explanation Correct Answer A:Microsoft 365 reporting privacy options can hide identifiable names in reports. Incorrect Answers B:Notification recipients do not control whether usage report names are obscured. C:Cloud app telemetry connectors do not set the tenant's usage-report anonymity toggle. D:Mail domain routing does not anonymize usage telemetry.
