Your network contains an Active Directory domain and a Microsoft Azure Active Directory (Azure AD) tenant.
The network uses a firewall that contains a list of allowed outbound domains.
You begin to implement directory synchronization.
You discover that the firewall configuration contains only the following domain names in the list of allowed domains:
*.microsoft.com

*.office.com

Directory synchronization fails.
You need to ensure that directory synchronization completes successfully.
What is the best approach to achieve the goal? More than one answer choice may achieve the goal. Select the BEST answer.

• A.From the firewall, allow the IP address range of the Azure data center for outbound communication.
• B.From the firewall, modify the list of allowed outbound domains.
• C.From Azure AD Connect, modify the Customize synchronization options task.
• D.Deploy an Azure AD Connect sync server in staging mode.
• E.From the firewall, create a list of allowed inbound domains.

Comment: *

Name: *

Email: *

Verification: *

Your network contains an on-premises Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD) as shown in the following exhibit.

An on-premises Active Directory user account named Allan Yoo is synchronized to Azure AD. You view Allan's account from Microsoft 365 and notice that his username is set to [email protected].
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Allan Yoo's user account is synchronized from the on-premise Active Directory. This means that most user account settings have to be configured in the on-premise Active Directory.
In the exhibit, Password Writeback is disabled. Therefore, you cannot reset the password of Allan Yoo from the Azure portal.
You also cannot change Allan Yoo's job title in the Azure portal because his account is synchronized from the on-premise Active Directory.
One setting that you can configure for synchronized user accounts I the usage location. The usage location must be configured on a user account before you can assign licenses to the user.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback

Comment: *

Name: *

Email: *

Verification: *

You need to meet the application requirements for the Office 365 ProPlus applications.
You create an XML files that contains the following settings.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Your network contains an Active Directory domain named adatum.com that is synced to Microsoft Azure Active Directory (Azure AD).
The domain contains 100 user accounts.
The city attribute for all the users is set to the city where the user resides.
You need to modify the value of the city attribute to the three-letter airport code of each city.
What should you do?

• A.From Active Directory Administrative Center, select the Active Directory users, and then modify the Properties settings.
• B.From the Microsoft 365 admin center, select the users, and then use the Bulk actions option.
• C.From Azure Cloud Shell, run the Get-MsolUser and Set-MSOluser cmdlets.
• D.From Windows PowerShell on a domain controller, run the Get-AzureADUser and Set-AzureADUser cmdlets.

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 E5 subscription.
You need to ensure that users are prompted for multi-factor authentication (MFA) when they attempt to access Microsoft SharePoint Online resources. Users must NOT be prompted for MFA when they attempt to access other Microsoft 365 services.
What should you do?

• A.From the Microsoft Endpoint Manager admin center, create an app protection policy.
• B.From the multi-factor authentication page, configure the users settings.
• C.From the Azure Active Directory admin center, create a conditional access policy.
• D.From the Cloud App Security admin center, create an app access policy.

Comment: *

Name: *

Email: *

Verification: *