Microsoft MS-700 Practice Test - Questions Answers, Page 32

To ensure that all unused teams expire and are deleted automatically, you need to configure a Microsoft 365 group expiration policy. This policy applies to teams because they are backed by groups. Here are the steps to follow:

Sign in to the Microsoft 365 admin center with your admin credentials.

Go toGroups>Expiration.

Turn on theEnable expirationtoggle.

In theGroup lifetimebox, enter365days or select it from the drop-down list. This means that the teams will expire 365 days from their creation date.

In theSelect group types to apply the policysection, check theTeamsbox. You can also select other group types if you want.

In theChoose how to handle owners of groups without ownerssection, enteradminLOD-Se551723.onmicrosoft.comas the email address to receive notifications for the expiration of orphaned teams. You can also add more email addresses if you want.

ClickSaveto apply the policy.

That's it. You have successfully configured a group expiration policy for teams. This policy will automatically delete the teams that are not renewed by their owners before the expiration date. You can also view and restore the deleted teams within 30 days from theDeleted groupspage in the admin center.

To ensure that only users from litwareinc.com can be added to Teams as guest users, you need to configure the guest access settings in Azure Active Directory (AAD). Here are the steps to follow:

Sign in to the Azure portal with your admin credentials.

Go toAzure Active Directory>External identities>External collaboration settings.

UnderCollaboration restrictions, selectAllow invitations only to the specified domains (most restrictive).

In theAllow invitations to these domainsbox, enterlitwareinc.com. You can also add more domains if you want, separated by commas.

ClickSaveto apply the settings.

That's it. You have successfully restricted the guest access in Teams to a specific domain. This means that only users with email addresses from litwareinc.com can be invited as guests to your teams.You can also prevent guests from being added to a specific team by using sensitivity labels1or PowerShell2.

To ensure that a team named US Sales automatically contains all the users that have the department attribute set to Sales, you need to create a dynamic team based on Azure AD group dynamic membership rules. Here are the steps to follow:

Create a new team in Microsoft Teams as you would to create a normal team. Name it US Sales. If the team already exists, you can skip this step.

Sign in to the Azure portal with your admin credentials.

Go toAzure Active Directory>Groups. Find the group that corresponds to the US Sales team and select it.

On the group details page, selectPropertieson the left menu and change the membership type toDynamic user. ClickSave.

On the same page, selectDynamic membership ruleson the left menu and add an expression that dynamically retrieves the users that have the department attribute set to Sales. In this case, the expression isuser.department -eq 'Sales'. ClickSave.

That's it. You have successfully created a dynamic team for US Sales. This means that only users with the department attribute set to Sales will be added or removed from the team automatically.You can also modify the expression to include other criteria, such as location, job title, or manage

To ensure that the Approvals app is pinned to the top of the app bar of the Teams client for all members of the Retail team, you need to create a custom app setup policy and assign it to the Retail team members. Here are the steps to follow:

Sign in to the Teams admin center with your admin credentials.

Go toTeams apps>Setup policies.

SelectAdd.

Provide a name and description for the policy, such as Retail App Policy.

Optionally, turn onUser pinningto allow users to pin apps and change the order of the pinned apps.

UnderPinned apps, selectAdd apps.

Search for the Approvals app and add it to the list of pinned apps. You can also add other apps that you want to pin for the Retail team members.

ClickSaveto create the policy.

To assign the policy to the Retail team members, go toUserson the left menu and select the users that belong to the Retail team. You can use the filters or the search box to find them.

On the right pane, underPolicies, selectEditnext toApp setup policy.

Choose the Retail App Policy from the drop-down list and clickApply.

To ensure that content on Microsoft SharePoint Online sites can be shared only with new and existing guest users, you need to limit the external sharing settings in the SharePoint admin center. Here are the steps to follow:

Sign in to the SharePoint admin center with your admin credentials.

Go toPolicies>Sharing.

UnderExternal sharing, drag theSharePointslider down toNew and existing guests. (TheOneDriveslider is dependent on SharePoint and will also be set toNew and existing guests.)

UnderMore external sharing settings, check the boxAllow only users in specific security groups to share externallyand selectManage security groups.

Add the security groups that contain the users who are allowed to share content with guest users. You can also create a new security group if needed.

ClickSaveto apply the settings.

To ensure that only users that are assigned the Global Administrator, User Administrator, or Guest Inviter roles can invite guest users to your company's tenant, you need to configure the external collaboration settings in the Microsoft Entra admin center. Here are the steps to follow:

Sign in to the Microsoft Entra admin center with your admin credentials.

ExpandExternal identities, and then selectExternal collaboration settings.

UnderGuest invite settings, chooseOnly users assigned to specific admin roles can invite guests.

SelectSaveto apply the settings.