Online Access Free 070-346 Exam Questions

You need to configure the single sign-on environment for Contoso.
Which certificate type and DNS entry should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: self-signed SSL
Box 2: sts.contoso.com
The token-signing certificate must contain a private key that chains to a trusted root in the FS. AD FS creates a self-signed certificate by default.
It is recommend that the self-signed token-signing certificate generated by AD FS is used.
Microsoft best practices recommends that you use the host name, STS (secure token service). ie.
sts.domain.com.
References:
https://www.digicert.com/csr-creation-microsoft-office-365.htm
https://support.office.com/en-us/article/Plan-for-third-party-SSL-certificates-for-Office-365-b48cdf63-07e0-4cda

You are the Office 365 administrator for your company.
Users report that their passwords expire too frequently, and they do not receive adequate notice of password expiration.
Account passwords must remain active for the longest duration allowed. Users must receive password expiration notifications as early as possible.
You need to configure the password expiration policy.
How should you set the policy on the password page of the Office 365 admin center? To answer, drag the appropriate duration to the correct location. Each duration may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.

Correct Answer:

Explanation

The maximum number of days you can set the 'Days before password expire' to is 730. This will make the password valid for the longest duration.
To be notified as early as possible on that the password is about to expire, we should set the maximum value, which is 30, to the ' days before users are notified that their password will expire' setting.
Note: Set a user's password expiration policy
References:
https://support.office.com/en-us/article/Set-a-users-password-expiration-policy-0f54736f-eb22-414c-8273-498a0

You deploy Office 365.
You need to activate Rights Management.
Which method should you use?

• A.the Active Directory Administrative Center console
• B.the Office 365 admin center
• C.the set-xdsconf iguration Windows PowerShell cmdlet
• D.the Enable-AadrmDevicePlatform Windows PowerShell Cmdlet

Fabrikam has the Office 365 Enterprise E3 plan.
You must add the domain name fabrikam.com to the Office 365 tenant. You need to confirm ownership of the domain.
Which DNS record types should you use? To answer, drag the appropriate DNS record type to the correct location or locations in the answer area. Each DNS record type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

TXT record is used for verification. When you have added the record at your domain registrar's site, you'll go back to Office 365 and request Office 365 to look for the record. When Office 365 finds the correct TXT record, your domain is verified.
MX (mail exchanger) record points to where your email should be sent. It also has a priority field so that you can send mail to different servers in a priority order.

Your company has 100 user mailboxes. The company purchases a subscription to Office 365 for professionals and small businesses. You need to enable the Litigation Hold feature for each mailbox.
What should you do first?

• A.Enable audit logging for all of the mailboxes.
• B.Modify the default retention policy.
• C.Purchase a subscription to Office 365 for midsize business and enterprises.
• D.Create a service request.