MS-203 Free Practice Test

- (Exam Topic 5)
Your company named Contoso, Ltd. has a Microsoft Exchange Online subscription.
You have several transport rules. The rules automatically apply a disclaimer to email messages that contain certain keywords in the subject and are sent to recipients in an email domain named fabrikam.com.
You receive a report that some messages are delivered without the disclaimer.
You need to view which transport rules were applied to messages sent to the fabrikam.com recipients. What should you use?

1. A. the SMTP protocol logs
2. B. a URL trace
3. C. the transport server logs
4. D. a message trace

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/run-a-message-trace-andview-re

- (Exam Topic 5)
You have a Microsoft 365 subscription for a company named Fabrikam,Inc. The company uses an Exchange Online tenant that has an email domain named fabirkam.com.
Fabrikam works with a partner company Contoso, Ltd. that uses an email domain named contoso.com.
A new security policy at Contoso states that any email sent from partners to Contoso employees must use TLS encryption.
You need to ensure that email sent from Fabrikam to Contoso uses TLS. What should you create in the tenant?

1. A. a new connector that specifies the contoso.com SMTP domain
2. B. a remote domain named contoso.com
3. C. a new connector that specifies the fabrikam.com SMTP domain
4. D. a remote domain named fabrikam.com

Correct Answer: A
Configure a Send connector in Fabrikam to point to Contoso.

- (Exam Topic 5)
You have a Microsoft Exchange Server 2019 organization.
You need to identify which accounts in Active Directory are assigned permissions to dismount mailbox databases.
How should you complete the command? To answer, drag the appropriate values to the correct targets. Each value may he used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/powershell/exchange/find-exchange-cmdlet-permissions?view=exchange-ps

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 5)
You deploy a Microsoft Exchange Server 2019 organization.
You need to ensure that users of all new mailboxes are prevented from editing their personal information. What should you do?

1. A. From the Exchange admin center, create a new role assignment policy.
2. B. From PowerShell, run the New-Ro1eAssignmentPolicy cmdlet and specify the-isDefault parameter.
3. C. From the Exchange admin center, create a new role group and assign the role group to Domain Users.
4. D. From PowerShell, run the New-RoleGroup cmdlet and specify the-CustomRecipientWriteScope parameter.

Correct Answer: B

Reference:
https://docs.microsoft.com/en-us/powershell/module/exchange/role-based-access-control/newroleassignmentpol

- (Exam Topic 5)
HOTSPOT
You have a Microsoft Exchange Online tenant.
The Exchange organization has the following configurations.

The Azure Active Directory (Azure AD) Sign-ins report is shown in the following table.

The Outlook Connection Status for User1 is shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Solution:
Graphical user interface, text, application, email Description automatically generated
Box 1: Yes
The authentication in the Outlook Connection Status exhibit is “Clear”. This means that Basic authentication is being used.
Box 2: No
In the first exhibit, the OAuth2ClientProfileEnabled parameter is False. This means that Modern
Authentication is not enabled. A value of True means that Modern Authentication is enabled. Box 3: No
The Authentication Requirement for User3 in the second exhibit is Single-factor authentication. This means that the Microsoft Authenticator App is not being used.

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A