Microsoft MS-203 Practice Test - Questions Answers, Page 16
List of questions
Question 151

You have a Microsoft 365 subscription.
A safe attachments policy that uses Dynamic Delivery is applied to all recipients who match your SMTP domains. You need to prevent attachments from being scanned when internal users send email to one another.
What should you do?
From the Exchange admin center, create a transport rule.
From the Exchange admin center, modify the malware filter.
From the Security & Compliance admin center, modify the safe attachments policy.
From the Security & Compliance admin center, modify the Service assurance settings.
Explanation:
Create a transport rule (or mail flow rule as they are called nowadays) to configure the message header: X-MS-Exchange-Organization-SkipSafeAttachmentProcessing.
Reference:
https://docs.microsoft.com/en-gb/archive/blogs/office365labs/eo-atp-considerations-reports-demonstrations
Question 152

You have a Microsoft 365 E5 subscription.
A user attempts to send an email message to an external recipient and receives the following error message: "Your message couldn't be delivered because you weren't recognized as a valid sender. The most common reason for this is that your email address is suspected of sending spam and it's no longer allowed to send messages outside of your organization. Contact your email admin for assistance. Remove Server returned '550 5.1.8 Access denied, bad outbound sender'."
You need to ensure that the user can send email to external recipients.
What should you use?
Threat management in the Security & Compliance admin center.
Data loss prevention in the Security & Compliance admin center.
compliance management in the Exchange admin center
action center in the Exchange admin center
Explanation:
Reference: http://www.noelpulis.com/fix-550-5-1-8-access-denied-bad-outbound-sender/
Question 153

Your company has a Microsoft Exchange Server 2019 organization.
You are auditing the Litigation Hold on the mailboxes of the company's research and development department. You discover that the mailbox of a user named User1 has a Litigation Hold enabled.
You need to discover who placed the Litigation Hold on the mailbox of User1, and when the Litigation Hold was enabled. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
From the Exchange admin center, run a per-mailbox Litigation Hold report.
From PowerShell, run the Get-Mailbox cmdlet.
From PowerShell, run the Get-MailboxStatistics cmdlet.
From the Exchange admin center, run an In-place eDiscovery and Hold report.
Question 154

You have a Microsoft Exchange Server 2019 organization. You create a retention policy.
You need to ensure that all email older than one year is moved to an archive mailbox.
What should you use?
a personal tag
a data loss prevention (DLP) policy
a default policy tag
a retention policy tag
Explanation:
Reference:
https://docs.microsoft.com/en-us/exchange/policy-and-compliance/mrm/retention-tags-and-retention-policies?view=exchserver-2019
Question 155

You have a Microsoft Exchange Server 2019 organization.
You need to provide a user named User1 with the ability to create and manage transport rules.
To which management role group should you add User1?
Server Management
Compliance Management
Records Management
Hygiene Management
Explanation:
Reference: https://docs.microsoft.com/en-us/exchange/records-management-exchange-2013-help
Question 156

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.
All the users in the sales department at your company are in a group named Sales.
The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You modify the permissions granted to the Sales group.
Does this meet the goal?
Yes
No
Explanation:
Create a mail flow rule.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachment-blocking-scenarios
Question 157

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.
All the users in the sales department at your company are in a group named Sales.
The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You configure a mailbox quota.
Does this meet the goal?
Yes
No
Explanation:
Create a mail flow rule.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachment-blocking-scenarios
Question 158

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Exchange Online tenant that contains 1,000 mailboxes.
All the users in the sales department at your company are in a group named Sales.
The company is implementing a new policy to restrict the use of email attachments for the users in the Sales group. You need to prevent all email messages that contain attachments from being delivered to the users in the Sales group. Solution: You modify the Exchange Online Protection (EOP) settings.
Does this meet the goal?
Yes
No
Explanation:
You can block common attachments (attachments commonly used as malware) in EOP but not all attachments as required in this question. Instead, you should create a mail flow rule.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/common-attachment-blocking-scenarios
Question 159

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes.
A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You create a spam filter policy.
Does this meet the goal?
Yes
No
Explanation:
Add Fabrikam.com to the 'Domain allow list' in a spam filter policy.
Question 160

Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has an Exchange Online tenant that contains 2,000 mailboxes.
A partner company named Fabrikam, Inc. uses a third-party messaging solution. The outbound SMTP server for Fabrikam uses an IP address of 131.107.2.22. You discover that several email messages from the fabrikam.com domain are erroneously marked as spam. You need to ensure that all the email messages sent from the fabrikam.com domain are delivered successfully to the user mailboxes of your company. Solution: You create a connection filter.
Does this meet the goal?
Yes
No
Explanation:
You can allow the server IP address in the Connection Filter. This would achieve the objective of ensuring all email from Fabrikam.com is delivered. However, it would also allow any other company that uses the third-party email server to bypass the spam filter.
The fact that the question-specifies that Fabrikam uses a "third-party messaging solution" suggests that the answer to this question-should be No although technically it would work.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/create-safe-sender-lists-in-office-365?view=o365-worldwide
Question