Question 70 A site was never included in the tenant's Microsoft 365 Backup protection policy. What is the correct operational assumption? Any user with an E5 license creates daily site backups automatically A Microsoft 365 Backup recovery point for that site cannot be assumed to exist Sensitivity labels guarantee recovery of any historic document content Microsoft Secure Score always restores unprotected site versions Explanation Correct Answer B:Recovery depends on eligible workload protection configured before loss. Incorrect Answers A:License entitlement alone does not prove site protection. C:Classification labels do not provision missing backup points. D:A security posture score has no data recovery function.
Question 71 A restoration job reports success after recovering compromised OneDrive files. What should be validated with the owner? Whether the tenant's admin portal color changed Whether MX records were reset to the old mail provider Recovered content versions, access, and business completeness for the chosen recovery point Whether external guest invitation quotas increased Explanation Correct Answer C:A job status must be supplemented with confirmation that the required data is usable. Incorrect Answers A:A visual setting has no bearing on restored content. B:Mail routing does not validate OneDrive file recovery. D:Guest invitations do not verify file versions.
Question 72 Restoring a broad time interval could reverse valid changes as well as malicious ones. What step reduces avoidable impact? Delete every sensitivity label to make files easier to restore Make all users global admins for the restore window Change the default login domain for all users Review restoration scope and expected effects with business owners before execution Explanation Correct Answer D:Selecting the correct object set and point in time prevents unintended loss of legitimate edits. Incorrect Answers A:Classification removal is not a prerequisite to defining the backup restore scope. B:Unnecessary privileges increase risk and do not improve recovery accuracy. C:UPN suffix changes are unrelated to recovery-point selection.
Question 73 A legal team wants mailbox evidence preserved for a case while operations needs a restore point from before accidental deletion. What distinction matters? A backup policy automatically satisfies every eDiscovery preservation duty An Exchange litigation hold is an unrestricted tenant-wide restore service Both capabilities are administered solely through DNS records Legal hold preserves content for compliance; backup restore addresses operational recovery Explanation Correct Answer D:The controls solve different data retention and restoration objectives. Incorrect Answers A:Recovery configurations do not replace compliance requirements. B:A hold is not a general point-in-time backup for all workloads. C:DNS cannot configure legal hold or Microsoft 365 Backup.
Question 74 After a announced feature rollout, some users report missing settings but no loss of service. What administrative information should be reviewed? Message center rollout description and affected-user scope The company site's SSL certificate expiration The list of retired Purview label IDs The MX lookup result for each user's mailbox Explanation Correct Answer A:A published change can explain an evolving UI or behavior without a broad outage. Incorrect Answers B:A separate website certificate does not control admin portal feature flighting. C:Label inventory does not reveal provider feature rollout scope. D:Email DNS does not describe a Microsoft 365 interface rollout.
Question 75 The sole service incident notification recipient is an individual who leaves the organization next month. What governance improvement reduces missed incidents? Use the Executive team's shared mailbox as an administrative role Convert every mailbox to a Microsoft 365 group Assign supported notification settings to an actively maintained operations contact or team Change the tenant's domain verification TXT record on departure Explanation Correct Answer C:Operational notifications should not depend on one departing user's mailbox. Incorrect Answers A:A mailbox alone does not define the service health notification subscription. B:A tenant-wide mailbox conversion is unnecessary to maintain alerts. D:Domain ownership tokens are not incident-notification contact management.
Question 76 A domain registrar migration removed Microsoft's verification TXT record, but the domain remains configured in the tenant. What should the admin assess? Replace the registrar's name servers without change control The domain's current DNS health and any provider prompts requiring verification Assume the Exchange online mailboxes were automatically erased Disable Entra user synchronization immediately Explanation Correct Answer B:The missing ownership token can complicate future validation and domain operations. Incorrect Answers A:Repeated DNS moves could introduce additional outages. C:A missing DNS token alone does not prove mailbox deletion. D:Directory sync does not recreate missing verification records.
Question 77 Messages from the Internet are accepted at Exchange Online but recipients report no delivery; message traces show recipient-level failures. Which diagnostic step is most relevant? Change Microsoft 365 Apps update channels Analyze the transport failure code and the intended recipient object or routing connector Measure Teams meeting jitter on affected users Review Microsoft 365 adoption activity reports only Explanation Correct Answer B:SMTP traces and recipient configuration can explain a post-cutover delivery failure. Incorrect Answers A:Office client releases do not alter Exchange transport recipient resolution. C:Media quality has no bearing on SMTP recipient acceptance. D:Adoption reports do not show SMTP transaction failure detail.
Question 78 Some mailboxes remain on-premises while others move online under one accepted domain. What must the cutover plan account for? Remove the custom domain from the cloud while keeping cloud mailboxes Replace SPF with the domain verification TXT value Assign PIM eligibility to every recipient Correct hybrid recipient routing and connectors for both mailbox locations Explanation Correct Answer D:Coexistence requires mail to reach the location hosting each recipient. Incorrect Answers A:Domain removal would break addresses that cloud recipients need. B:Overwriting SPF cannot route hybrid recipients and weakens mail authentication. C:Privileged directory role membership is not mail routing configuration.
Question 79 Inbound mail arrives correctly, but newly migrated Outlook clients fail automatic profile configuration. Which DNS or configuration area is more likely relevant? The Purview retention label publishing policy The domain verification TXT record alone The SPF record alone Autodiscover and modern Outlook client discovery settings Explanation Correct Answer D:Outlook profile discovery differs from the MX route used by external senders. Incorrect Answers A:Retention labels do not identify mailbox client endpoints. B:Ownership verification does not configure client profile discovery. C:SPF checks sender authorization, not Outlook account configuration.
Question 80 An organization is retiring an old mail alias but wants ongoing messages to the old addresses to reach staff during a transition. What should it avoid doing too early? Removing the accepted old domain or recipient aliases before the redirection period ends Tracking tenant adoption statistics during the transition Documenting an agreed shutdown date for old aliases Creating a shared operational message center subscription Explanation Correct Answer A:Messages sent to old addresses need a routable domain and recognized recipients until migration completes. Incorrect Answers B:Reporting does not interfere with mail acceptance. C:A planned retirement window supports rather than harms migration. D:An admin notification subscription does not prevent old alias delivery.
