1
Multi-Factor Authentication is enabled for a company. One of the users has chosen to get a code on the phone however he lost his mobile. As per company policy, MFA should never be turned off. As an administrator what will be your immediate step?
2
A Cloud Engineer is deploying Microsoft Intune for your organization to secure and manage the devices and has created some policies to be pushed to the enrolled users. Due to licensing reasons, the policy is not getting pushed to the user devices. According to you, select which license you can assign to the user so that Intune policies start working?
Choose one or more answers
3
As a user, you are facing some issues with your Microsoft 365 Apps activation and you asked your administrator to raise a service request with Microsoft. Where should the service request be raised from?
4
As an administrator, you need to create a user in Microsoft 365 tenant. While creating a user you find out that you do not have licenses available. Can we still proceed to create a user?
5
As a Global Administrator, you want to have User A assist you in some of the administrative tasks. What administrative role will you assign to User A who can reset the password for other admins as well?
Choose one or more answers
6
As an administrator, you need to create a Shared Mailbox to which your Manager wants to have a “Send As” permission. Which of the following steps will you perform to provide ‘Send As’ permission?
7
A CEO of your company wants to check the Productivity Score of the Microsoft 365 tenant. As a Global Administrator, you need to assign him the role which has the capability to check the Productivity score. Which role will you assign?
Choose one or more answers
Feedback
RESET PASSWORD - IS INCORRECT: Reset password will not help the user to Sign in, it would still ask for the code which will be sent to the authentication phone which was provided earlier and is lost now.
RESET USER MFA SETTING - IS CORRECT: From Azure, AD Admin can reset user MFA settings, once this reset is done the user can provide the authentication method again and then choose the option which is suitable for the user at the point of time.
ENABLE SSPR - IS INCORRECT: Enable SSPR will help users to reset passwords on their own however It won’t help in resetting MFA settings.
DISABLE MFA - INCORRECT: Since the company policy is to not turn off MFA, this option is out of scope.
MICROSOFT 365 BUSINESS PREMIUM - IS CORRECT: Microsoft Business Premium consists of Intune service hence this license can be assigned to resolve the deployment issue for Intune.
AZURE INFORMATION PROTECTION P2 - IS INCORRECT: Azure Information Protection licenses are used to deploy Azure Information Protection which helps organizations to discover, classify, label, and protect sensitive emails and documents. Hence this license will not help with Intune.
MICROSOFT 365 BUSINESS STANDARD - IS INCORRECT: Microsoft 365 Business Standard license doesn’t have any advanced security and compliance settings like Defender, Intune, Information protection, etc.
ENTERPRISE MOBILITY AND SECURITY - IS CORRECT: EMS license includes Microsoft Intune hence this is the correct answer since Intune is required for the solution.
MICROSOFT 365 F3 - IS CORRECT: Microsoft 365 F3 provides apps and services for first-line workers, and it consists of Microsoft Intune services within the subscription.
MICROSOFT 365 F1: Microsoft 365 F1 provides apps and services for first-line workers however this app does not consist of Microsoft Intune services.
MICROSOFT POWER PLATFORM ADMIN CENTER - IS INCORRECT: You can raise a service request from Power Platform Admin Center but for the other Microsoft services such as Dynamics 365, BI, F&O, Power App, Power Automate, etc, however, you need to raise a service request for Microsoft 365 Business Apps hence this is incorrect.
AZURE ACTIVE DIRECTORY - IS INCORRECT: You can raise a service request here with respect to Azure Services and Enterprise mobility and security however you need to raise a service request for Microsoft 365 Business Apps hence this is incorrect.
MICROSFT 365 ADMIN CENTER - IS CORRECT: You can raise all the Microsoft 365 Apps and Services-related queries here so this is the correct answer.
ENDPOINT MANAGER ADMIN CENTER - IS INCORRECT: You can raise service requests in the Endpoint manager admin center with respect to Microsoft Intune, etc however you need to raise a service request for Microsoft 365 Business Apps hence this is incorrect.
Even if you do not have licenses available you can still create a user using an option: “create a user without product license”.
SERVICE SUPPORT ADMINISTRATOR - IS INCORRECT: Service Support Administrator can open and manage service requests, manage the message center and monitor service health. It can not reset passwords for any other users.
GLOBAL ADMINISTRATOR - IS CORRECT: Global Administrator can reset for all the other users and Administrator hence this answer is correct apart from that Global Admin has all the rights across other Microsoft 365 services such (OneDrive, SharePoint Online and Azure AD).
PASSWORD ADMINISTRATOR - IS INCORRECT: Password Administrators can only reset passwords for non-administrators and Password Administrators.
HELPDESK ADMINISTRATOR - IS CORRECT: Helpdesk Administrator helps in resetting passwords, managing service requests, monitoring service health, etc. Using this role you can reset passwords for a few other admin roles like password admin, helpdesk admin, etc however it can not reset the password for all the other admins such as Global Admins.
MANAGE ALIAS - IS INCORRECT: Adding an alias to the Shared Mailbox does not give “Send As” permission hence this option is incorrect. Adding an alias can help in receiving emails.
MANAGE SHARED MAILBOX FEATURE - IS INCORRECT: With Shared Mailbox Feature, you can manage policies on the mailbox such as Retention policy, etc, and also you can manage email forwarding, Mailbox Hold, and a lot more things, however, you won’t be able to manage the Send As permission on the mailbox.
MANAGE SHARED MAILBOX DELEGATION - IS CORRECT: With Shared Mailbox Delegation you can manage delegate permissions on the Shared Mailbox which are “Full Access”, “Send on Behalf” and “Send As” hence this answer is correct.
MANAGE ROLES - IS INCORRECT: With Manage Roles on the Shared Mailbox, you can provide Admin permissions to the Shared Mailbox itself which is anyways not required and it does not provide permissions for Send As.
REPORT READER - IS CORRECT: Report Reader has the permission to read usage reporting data from the dashboard, Sign-In reports, etc, and also has the access to the Productivity score hence this option is correct.
SERVICE SUPPORT ADMINISTRATOR - IS INCORRECT: Service Support Administrator has the permission to create and manage Microsoft 365 service requests and can monitor tenant health, this role doesn’t provide permission to check the productivity score hence this is incorrect.
GLOBAL ADMIN - IS CORRECT: Global Admin has access to everything in the Microsoft 365 tenant hence this option is correct.
HELPDESK ADMINISTRATOR - IS INCORRECT: The helpdesk Administrator has the permission to reset passwords, manage service requests and monitor Microsoft 365 tenant Health however has no permission to check the productivity score hence this option is incorrect.
|
