Online Access Free 70-346 Exam Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains a single Active Directory forest. The forest contains a domain controller and Active Directory Federation Services (AD FS) servers that are deployed to virtual machines. The virtual machines run either on-premises or on Microsoft Azure.
You have Azure AD Connect deployed on-premises. The Azure AD Connect database is installed on an on-premises instance of Microsoft SQL Server 2014.
Last month, an Azure AD Connect server experienced a hardware failure that caused an Azure AD Connect server to go offline for several days.
You need to recommend a solution to reduce the outage window when hardware failure occurs on the Azure AD Connect server.
Solution: You deploy a new on-premises Azure AD Connect server that uses the same SQL Server instance.
You start Azure AD Connect sync.
Does this meet the goal?

• A.No
• B.Yes

A company has an Office 365 tenant. You implement two-factor authentication for all users. You hire an employee named User1 to track service usage and status.
User1 must be able to monitor the status of the services over a period of time by using a report. User1 does not have administrator access.
You need to provide a report for User1.
Which report solution should you choose?

• A.reporting Windows PowerShell cmdlets
• B.REST reporting web service
• C.Office 365 admin center
• D.downloadable spreadsheet

You need to configure the single sign-on environment for Contoso.
Which certificate type and DNS entry should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: self-signed SSL
Box 2: sts.contoso.com
The token-signing certificate must contain a private key that chains to a trusted root in the FS. AD FS creates a self-signed certificate by default.
It is recommend that the self-signed token-signing certificate generated by AD FS is used.
Microsoft best practices recommends that you use the host name, STS (secure token service). ie.
sts.domain.com.
References:
https://www.digicert.com/csr-creation-microsoft-office-365.htm
https://support.office.com/en-us/article/Plan-for-third-party-SSL-certificates-for-Office-365-b48cdf63-07e0-4cda

You are the Office 365 administrator for a company. All employees currently use Microsoft Exchange Online for email.
You must enable message encryption for Exchange Online. The necessary transport rules are in place.
You need to configure and verify the Microsoft Azure Rights Management (Azure RMS) service.
Which four Windows PowerShell cmdlets should you run in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation

You are the system administrator for a small sales company in Chicago.
You must migrate all users to Office 365. You add a domain to the Office 365 tenant.
You need to verify the new domain.
Which type of DNS record should you create?

• A.A
• B.PTR
• C.NS
• D.TXT