Get Latest [Oct-2021] Conduct effective penetration tests using Exams4sures MS-203
Penetration testers simulate MS-203 exam PDF
NEW QUESTION 13
You have a Microsoft Exchange Online tenant.
You need to import PST files from a legacy archiving solution to Exchange Online. You will import the PST files over the internet.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/use-network-upload-to-import-pst-files?view=o365-worldwide
NEW QUESTION 14
You have a Microsoft 365 tenant that contains a user named User1.
User1 reports that she cannot configure a mail profile in Microsoft Outlook for Windows.
User1 receives the following error message: "Encrypted connection to your mail server is not available." You verify that User1 is assigned a Microsoft Office 365 Enterprise F3 license and can send email messages from her account by using Outlook on the web.
You need to ensure that User1 can connect to Outlook successfully.
What should you do?
- A. Install a new certificate on the computer of User1.
- B. Run the Microsoft Support and Recovery Assistant for Office 365.
- C. Activate the installation of Office 365 ProPlus.
- D. Modify the license assigned to User1.
Answer: D
Explanation:
Reference:
D18912E1457D5D1DDCBD40AB3BF70D5D
https://docs.microsoft.com/en-us/exchange/troubleshoot/outlook-issues/encrypted-connection-unavailable
NEW QUESTION 15
You have a Microsoft Exchange Server 2019 organization.
You need to identify which accounts in Active Directory are assigned permissions to dismount mailbox databases.
How should you complete the command? To answer, drag the appropriate values to the correct targets. Each value may he used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps
NEW QUESTION 16
You have a Microsoft Exchange Server 2019 hybrid deployment.
You run the Get-HybridConfiguration cmdlet and receive the output shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/powershell/module/exchange/federation-and-hybrid/set-hybridconfiguration?view=exchange-ps
NEW QUESTION 17
You run the Get-WebServicesVirtualDirectory cmdlet as shown in the following exhibit.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/Exchange/architecture/mailbox-servers/mrs-proxy-endpoint?view=exchserver-2019
NEW QUESTION 18
You have an Exchange Online tenant that contains several hundred mailboxes.
Several users report that email messages from an SMTP domain named @fabrikam.com often fail to be delivered to their mailbox.
You need to increase the likelihood that the email messages from the @fabrikam.com are delivered successfully to the users in the tenant.
- A. From the Security & Compliance admin center, modify the anti-spam policy settings.
- B. From the Security & Compliance admin center, create a new ATP anti-phishing policy.
- C. From your public DNS zones, create a Sender Policy Framework (SPF) TXT record.
- D. From the Security & Compliance admin center, modify the DKIM settings.
Answer: A
NEW QUESTION 19
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Exchange Server 2019 hybrid deployment that contains two Mailbox servers named MBX1 and MBX2.
The company has the departments shown in the following table.
From the on-premises organization, outbound email is sent directly to the Internet by using DNS lookups.
You are informed that some sales department users send email messages that are identified as spam.
You need to automatically block the sales department users from repeatedly sending spam.
Solution: You migrate all the mailboxes of the sales department to Exchange Online.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Exchange Online Protection (EOP) will scan outbound messages from Exchange Online mailboxes.
Secure the messaging environment
Testlet 2
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
General Overview
Contoso, Ltd. is a national freight company in the United States. The company has 15,000 employees.
Physical Locations
Contoso has a main office in Houston and 10 branch offices that each contain 1,000, employees.
Existing Environment
Active Directory and Microsoft Exchange Server Environments
The network contains an Active Directory forest named contoso.com. The forest contains one root domain named contoso.com and 10 child domains. All domain controllers run Windows Server 2019.
The forest has Active Directory Certificate Services (AD CS) and Active Directory Federation Services (AD FS) deployed.
You have a hybrid deployment of Exchange Server 2019 and Microsoft Office 365.
There are 2,000 user mailboxes in Exchange Online.
Each office contains two domain controllers and two Mailbox servers. The main office also contains an Edge Transport server.
The organization contains 100 public folders. The folders contain 80 GB of content.
All email messages sent to contoso.com are delivered to Exchange Online. All messages sent to on-premises mailboxes are routed through the Edge Transport server.
Advanced Threat Protection (ATP) is enabled and configured for the Office 365 tenant.
Network Infrastructure
Each office connects directly to the Internet by using a local connection. The offices connect to each other by using a WAN link.
Requirements
Planned Changes
Contoso plans to implement the following changes:
* For all new users in the on-premises organization, provide an email address that uses the value of the Last Nameattribute and the first two letters of the First Nameattribute as a prefix.
* Decommission the public folders and replace the folders with a Microsoft 365 solution that maintains web access to the content.
Technical Requirements
Contoso identifies the following technical requirements:
* All email messages sent from an SMTP domain named adatum.com must never be identified as spam.
* Any solution to replace the public folders must include the ability to collaborate with shared calendars.
Security Requirements
Contoso identifies the following security requirements:
* The principle of least privilege must be applied to all users and permissions.
* All email messages sent from an SMTP domain named fabrikam.com to contoso.com must be encrypted.
* All users must be protected from accessing unsecure websites when they click on URLs embedded in email messages.
* If a user attempts to send an email message to a distribution group that contains more than 15 members by using Outlook, the user must receive a warning before sending the message.
Problem Statements
Recently, a user named HelpdeskUser1 erroneously created several mailboxes. HelpdeskUser1 is a member of the Recipient Management management role group.
Users who have a mailbox in Office 365 report that it takes a long time for email messages containing attachments to be delivered.
Exhibit
Exchange Online Connector
You configure a connector as shown in the following exhibit.
NEW QUESTION 20
You have a Microsoft Exchange Online tenant that contains a retention policy named Policy1 and a user named User1.
Policy1 is assigned to all users and contains the retention tags shown in the following table.
Tag3 is applied to an email message in the inbox of User1.
You remove Tag3 from Policy1.
What will occur to the message?
- A. The default mailbox retention tag will apply.
- B. The default folder retention tag will apply.
- C. The existing retention tag will be retained.
- D. The existing retention tag will be removed.
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/ retention-tags-and-policies
NEW QUESTION 21
Your company has a Microsoft Exchange Online subscription for an email domain named contoso.com.
The company works with a partner company that uses an email domain named tailspintoys.com.
You need to configure the environment only to accept email from tailspintoys.com if the email is sent from an IP address of 131.107.12.85.
How should you configure the connector from the Exchange admin center? To answer, drag the appropriate options to the correct message settings. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 22
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Exchange Server 2019 organization that contains 200 mailboxes.
You need to add a second email address to each mailbox. The address must have a syntax that uses the first letter of each user's last name, followed by the user's first name, and then @fabrikam.com.
Solution: You create an email address policy that uses the %1s%[email protected] email address format.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/email-addresses-and-address-books/email-address-policies/email-address-policies?view=exchserver-2019
NEW QUESTION 23
You need to recommend an Office 365 solution that meets the technical requirements for email from adatum.com.
Which two components should you recommend configuring from the Exchange admin center in Exchange Online? Each correct presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. data loss prevention (DLP) policies
- B. a connection filter
- C. a malware filter
- D. DKIM signatures
- E. a spam filter
Answer: B,E
NEW QUESTION 24
You have a Microsoft Exchange Server 2019 organization.
You plan to implement a hybrid deployment between Exchange Online and Exchange Server.
You need to install the Exchange Online Hybrid Agent. The solution must use the principle of least privilege.
To which roles should you be assigned to perform the installation? To answer, drag the appropriate roles to the correct products. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/hybrid-deployment/hybrid-agent
NEW QUESTION 25
Your company named Contoso, Ltd. has a Microsoft Exchange Online subscription.
You have several transport rules. The rules automatically apply a disclaimer to email messages that contain certain keywords in the subject and are sent to recipients in an email domain named fabrikam.com.
You receive a report that some messages are delivered without the disclaimer.
You need to view which transport rules were applied to messages sent to the fabrikam.com recipients.
What should you use?
- A. a URL trace
- B. a message trace
- C. the transport server logs
- D. the SMTP protocol logs
Answer: B
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/run-a-message-trace-and- view-results
NEW QUESTION 26
You have a Microsoft Exchange Online tenant that contains a user named User1. User1 has a mobile device.
You need to enable Exchange ActiveSync logging for User1 and retrieve the log files.
Which two Exchange Online PowerShell cmdlets should you use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Get-ActiveSyncDevice
- B. Set-ClientAccessRule
- C. Set-ActiveSyncMailboxPolicy
- D. Set-CASMailbox
- E. Get-MobileDeviceStatistics
Answer: D
NEW QUESTION 27
You have a Microsoft 365 tenant that contains a user named User1.
User1 reports that she cannot configure a mail profile in Microsoft Outlook for Windows.
User1 receives the following error message: "Encrypted connection to your mail server is not available." You verify that User1 is assigned a Microsoft Office 365 Enterprise F3 license and can send email messages from her account by using Outlook on the web.
You need to ensure that User1 can connect to Outlook successfully.
What should you do?
- A. Install a new certificate on the computer of User1.
- B. Run the Microsoft Support and Recovery Assistant for Office 365.
- C. Activate the installation of Office 365 ProPlus.
- D. Modify the license assigned to User1.
Answer: D
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/troubleshoot/outlook-issues/encrypted-connection-unavailable
NEW QUESTION 28
You have a hybrid deployment between a Microsoft Exchange Online tenant and an on-premises Exchange Server 2019 organization.
The tenant uses an email domain named @contoso.com.
You recently purchased an email domain named fabrikam.com.
You need to ensure that all the users in the tenant can receive email messages by using the @fabrikam.com email domain. The solution must ensure that the users can continue to receive email by using the @contoso.com email domain.
Which three actions should you perform? Each correct answer presents part of the solution. NOTE; Each correct selection is worth one point.
- A. From the Microsoft 365 admin center, add the fabrikam.com email domain.
- B. From the on-premises Exchange admin center, modify the email address policy
- C. From the Exchange Management Shell, create a script that runs the
- D. From Azure AD Connect add a domain for fabrikam.com.
- E. From the Microsoft 365 admin center, verify the fabrikam.com email domain
- F. From the on-premises Exchange admin center, add an accepted domain for fabrikam.com.
Answer: B,E,F
NEW QUESTION 29
You have a Microsoft Exchange Server 2019 hybrid deployment.
You are migrating mailboxes from the on-premises organization to Exchange Online.
From the Exchange admin center, you create a new migration batch that includes 25 mailboxes, and then you select Manual Complete the batch.
Later, you must complete the migration of a mailbox named [email protected] in the batch as soon as possible. You discover that the status of the migration batch is Syncing, but the status of the move request for [email protected] is Synced.
You need to complete the migration of the [email protected] mailbox to Exchange Online as soon as possible.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/move-and-migration/set-moverequest?view=exchange-ps
NEW QUESTION 30
You have an on-premises Microsoft Exchange Server 2019 organization.
You plan to configure the environment to support a hybrid deployment.
You need to ensure that you can migrate mailboxes from the on-premises organization to Exchange Online.
Which two ports should be open between Exchange Online and the on-premises organization? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. 0
- B. 1
- C. 2
- D. 3
- E. 4
- F. 5
Answer: C,D
Explanation:
Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/exchange/hybrid-deployment-prerequisites#hybrid-deployment-protocols- ports-and-endpoints
NEW QUESTION 31
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.
All the users in the sales department at your company are in a group named Sales.
The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group.
You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group.
Solution: You configure a mailbox quota.
Does this meet the goal?
- A. Yes
- B. No
D18912E1457D5D1DDCBD40AB3BF70D5D
Answer: B
Explanation:
Explanation
Create a mail flow rule.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachmentblockin scenarios
NEW QUESTION 32
You have a Microsoft Exchange Online tenant named contoso.com.
You create a partnership with two other companies named fabrikam.com and wingtiptoys.com. All the mailboxes of fabrikam.com are hosted in Microsoft 365. All the mailboxes of wingtiptoys.com are hosted in an on-premises Exchange Server 2019 organization.
You need to ensure that all the email messages sent from contoso.com to fabrikam.com and wingtiptoys.com is encrypted by using TLS.
What should you do?
- A. Configure one connector.
- B. Configure two mail flow rules.
- C. Create an organizational relationship.
- D. Create two remote domains.
- E. Run the Office 365 Exchange Hybrid Configuration wizard.
Answer: A
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/set- up-connectors-for-secure-mail-flow-with-a-partner
NEW QUESTION 33
Use the drop-down menus to select the answer choice that complete each statement based on the information presented in the Exchange Online Connector exhibit.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
SenderDomains
to the Edge Transport server encrypted
NEW QUESTION 34
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has a Microsoft Exchange Server 2019 hybrid deployment that contains two Mailbox servers named MBX1 and MBX2.
The company has the departments shown in the following table.
From the on-premises organization, outbound email is sent directly to the Internet by using DNS lookups.
You are informed that some sales department users send email messages that are identified as spam.
You need to automatically block the sales department users from repeatedly sending spam.
Solution: You modify the outbound spam filter policy in Exchange Online.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
From the on-premises organization, outbound email is sent directly to the Internet by using DNS lookups. Therefore, the Exchange Online outbound spam filter will not scan the emails sent from the on-premises mailboxes.
NEW QUESTION 35
You have a Microsoft Exchange Online subscription that uses a namespace of litwareinc.com.
You create a connector in Exchange Online that is configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 36
You have a Microsoft Exchange Online tenant that contains the users shown in the following table.
From the Exchange admin center, you issue a Wipe Data command for User1 and User2.
What occurs on the device of each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/clients/exchange-activesync/remote-wipe?view=exchserver-2019
NEW QUESTION 37
You have a Microsoft Exchange Online subscription.
You run the following command.
Set-ActiveSyncOrganizationSettings -DefaultAccessLevel Block
You run Get-ActiveSyncDeviceAccessRule | f1 Identity, AccessLevel, Characteristic, QueryString and you receive the following output.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 38
......
Tested Material Used To MS-203 Test Engine: https://www.exams4sures.com/Microsoft/MS-203-practice-exam-dumps.html
Steps Necessary To Pass The MS-203 Exam: https://drive.google.com/open?id=1lgMHFJSaNOdxyRPWj1KxSuC_ArG7BeUR