Microsoft MS-203 Practice Test - Questions Answers, Page 26
List of questions
Question 251

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center.
Solution: You assign the Security Reader role to User1.
Does this meet the goal?
Yes
No
Explanation:
Security Administrator can view the audit reports but cannot create a message trace.
Reference:https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc
Question 252

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription.
You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center.
Solution: You assign the Security administrator role to User1.
Does this meet the goal?
Yes
No
Explanation:
Security Administrator can view the audit reports but cannot create a message trace.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc
Question 253

DRAG DROP
You plan to migrate to Microsoft Exchange Online. The solution must meet the following requirements. Messages sent by the research & development department at your company must be routed to the internet through an onpremises Data loss prevention (DLP) appliance. The actual source of the messages received by Exchange Online from a third-party cloud filtering service must be identified. What features should you use to meet the requirements? To answer, drag the appropriate options to the correct requirements. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation:
https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/conditional-mail-routing https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-configure-mail-flow/enhancedfiltering-for-connectors
Question 254

DRAG DROP
You have a hybrid deployment between a Microsoft Exchange Online tenant and an on-premises Exchange Server 2013 organization. The deployment contains the public folders shown in following table. You need to configure the deployment to meet the following requirements:
Exchange Server 2013 mailboxes must be able to access PF2.
Exchange Online mailboxes must be able to accessPF1.
Which PowerShell script should you run from an Exchange Server 2013 server to meet each requirement? To answer, drag the appropriate scripts to the correct requirements. Each script may be used once, more than once, or at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Question 255

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: [email protected] Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only.
Lab Instance: XXXXXX
You need to ensure that a user named Miriam Graham has the required rights to create new recipients by using the Exchange Online admin center. Miriam must be prevented from managing recipients. The solution must use the principle of least privilege.
To complete this task, sign in to the Microsoft 365 admin center.
Explanation:
Answer: A
Explanation:
1. From the Microsoft 365 admin center dashboard, go to Admin > Exchange.
2. In the Exchange admin center, go to Roles > Admin roles, select the Recipient Management role group.
3. In Assigned section, add Miriam Graham to the role group.
4. When you're finished, click Save.
Reference: https://docs.microsoft.com/en-us/exchange/permissions-exo/role-groups https://docs.microsoft.com/en- us/exchange/permissions-exo/permissions-exo
Question 256

You have a Microsoft Exchange Server 2019 organization.
You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential. What should you do?
Assign the Mailbox Search and Legal Hold management roles to User1.
Assign the Legal Hold and Mailbox Import Export management roles to User1.
Add User1 to the Records Management management role group.
Assign the Mailbox Search and Mailbox Import Export management roles to User1.
Explanation:
Reference: https://docs.microsoft.com/en-us/exchange/policy-and-compliance/holds/holds?view=exchserver-2019
Question 257

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 E5 subscription.
You need to ensure that a user named User1 can review audit reports from the Microsoft 365 security center. User1 must be prevented from tracing messages from the Security admin center. Solution: You assign the Compliance administrator role to User1.
Does this meet the goal?
Yes
No
Explanation:
A user with the Compliance Administrator role can review audit reports but can also perform a message trace.
Reference: https://docs.microsoft.com/en-us/exchange/permissions-exo/permissions-exo
Question 258

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: [email protected] Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only.
Lab Instance: XXXXXX
Two users named Christie Cline and Irvyn Sayers leave your company.
You need to ensure that all email sent to the users at your company are forwarded automatically to the mailbox of Megan Bowen. The solution must NOT use mail flow rules. To complete this task, sign in to the Microsoft 365 admin center.
Explanation:
Answer: A
Explanation:
1. In the EAC, go to Recipients > Mailboxes.
2. In the list of user mailboxes, click or tap the mailbox that you want to configure mail forwarding for, and then click or tap Edit
3. On the mailbox properties page, click Mailbox Features.
4. Under Mail Flow, select View details to view or change the setting for forwarding email messages. On this page, you can set the maximum number of recipients that the user can send a message to. For on-premises Exchange organizations, the recipient limit is unlimited. For Exchange Online organizations, the limit is 500 recipients. 5. Check the Enable forwarding check box, and then click or tap Browse.
6. On the Select Recipient page, select a user you want to forward all email to. Select the Deliver message to both forwarding address and mailbox check box if you want both the recipient and the forwarding email address to get copies of the emails sent. Click or tap OK, and then click or tap Save.
Reference:
https://docs.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-user-mailboxes/configure-email- forwarding
Question 259

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: [email protected] Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only.
Lab Instance: XXXXXX
You need to ensure that all emails sent from the users in your company to recipients who use a suffix of @fabnkam.com are encrypted by using Microsoft Office 365 Message Encryption (OME).
To complete this task, sign in to the Exchange admin center.
Explanation:
Answer: A
Explanation:
1. In the Microsoft 365 admin center, choose Admin centers > Exchange.
2. In the EAC, go to Mail flow > Rules and select New + > Create a new rule.
3. In Name, type a name for the rule, such as Encrypt mail for [email protected].
4. In Apply this rule if, select a condition, and enter a value if necessary. For example, to encrypt messages going to [email protected]:
In Apply this rule if, select the recipient is.
Select an existing name from the contact list or type a new email address in the check names box.
- To select an existing name, select it from the list and then click OK.
- To enter a new name, type an email address in the check names box and then select check names > OK. 5. To add more conditions, choose More options and then choose add condition and select from the list. For example, to apply the rule only if the recipient is outside your organization, select add condition and then select The recipient is external/internal > Outside the organization > OK.
6. To enable encryption using the new OME capabilities, from Do the following, select Modify the message security and then choose Apply Office 365 Message Encryption and rights protection. Select an RMS template from the list, choose Save, and then choose OK.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/define-mail-flow-rules-to-encrypt-email?view=o365-worldwide
Question 260

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time. When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task. Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username: [email protected] Microsoft 365 Password: xxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only.
Lab Instance: XXXXXX
You need to ensure that when emails containing an attachment that uses an .ace extension is sent to your company, the email is blocked. Each time an email is blocked, a notification must be sent to [email protected]. To complete this task, sign in to the Exchange admin center.
Explanation:
Answer: A
Explanation:
1. In the EAC, in the left navigation pane, select mail flow, and then select rules.
2. Select New (+), and then select Create a new rule.
3. In the New Rule window, select More options.
4. In the Name box, specify a name for the new rule.
5. Select the *Apply this rule if drop-down list, point to Any attachment, and then select File extension includes these words.
6. In the Specify words or phrases window, type the file name extension of any attachment that you want to block, and then select the plus symbol (+) to add the file name extension to the list. When the list is completed, select OK.
7. Select the Do the following drop-down list, point to Block the message, and then select Reject the message and include an explanation or select Delete the message without notifying anyone.
If it's required, add a statement to inform users who will receive the non-delivery report (NDR) of the reason that mail delivery failed, and then select OK.
8. Specify any additional options such as rule auditing and rule activation or deactivation time, and then select Save.
Reference:
https://docs.microsoft.com/en-us/exchange/troubleshoot/email-delivery/how-to-block-message-from-being-sent-or-received
Question