You work as a Systems Administrator for your company. The company has recently purchased a subscription to Microsoft 365.
All users in your company have a Microsoft 365 E3 license.
You are in the process of configuring Microsoft Teams.
You need to configure Microsoft Teams to ensure that users within your company can collaborate with users in a partner company. You plan to create guest accounts for users in the partner company.
Users with Guest accounts must not be able to invite other guests.
Only users in the partner company must be able to collaborate with your users by using Microsoft Teams.
Which of the following should you configure?
A.The external sharing settings in the SharePoint Admin Center.
B.The external collaboration settings in Microsoft Entra ID (formerly Azure Active Directory).Correct
C.The Anonymous users can join a meeting setting in the Teams Meeting Settings.
D.The Global Meeting Policy in the Teams Admin Center.
Explanation
Guest invite settings and collaboration restrictions both live in the Microsoft Entra external collaboration settings. Guest invite settings let you choose an option that stops guests from inviting other guests, and collaboration restrictions let you allow invitations only to the partner company's domain. SharePoint external sharing controls file and site sharing, not who can be invited to the directory, and the anonymous join and meeting policy settings only affect meetings.
You work as a Systems Administrator for your company. The company has recently purchased a subscription to Microsoft 365.
All users in your company have a Microsoft 365 E3 license.
You are in the process of configuring Microsoft Teams.
You enable Guest access in Microsoft Teams to allow users in your company to collaborate with external users.
A company security policy states that guest users should not be able to use their cameras during Microsoft Teams meetings. Company users should be able to use their cameras during Microsoft Teams meetings.
You need to configure Microsoft Teams to meet the security requirement.
Which of the following actions should you perform in the Microsoft Teams Admin Center?
A.Configure the External access settings in Org-wide settings.
B.Configure the Teams settings in Org-wide settings.
C.Configure the Guest access settings in Org-wide settings.Correct
D.Configure the Audio & Video settings in the default Meeting Policy
Explanation
Guest permissions in Teams are set in the Guest access settings (Users > Guest access in the Teams admin center, formerly under Org-wide settings), where the Video conferencing setting controls whether guests can use video in calls and meetings. Turning it off there affects only guests, so company users keep their cameras. Changing Audio & video in the default (Global) meeting policy would also remove video for internal users who are assigned that policy, and the external access settings govern federation with other organizations, not guest accounts.
You work as a Microsoft 365 Administrator for your company. All users have Microsoft 365 licenses.
Users frequently collaborate by using private chats in Microsoft Teams.
You need to ensure that a single user is unable to permanently delete private chats.
Which of the following should you configure?
A.The user's Microsoft 365 license options in the Microsoft 365 Admin Center.
B.A meeting policy in Microsoft Teams.
C.A litigation hold on the user's mailbox.Correct
D.A Sensitivity Label in the Security & Compliance Admin Center.
Explanation
Messages in Teams 1:1 and group chats are kept for compliance in the Exchange Online mailboxes of the chat participants. Placing a litigation hold on the user's mailbox preserves that content, so even if the user deletes chats, the items are retained and remain discoverable. Meeting policies control meeting features, not retention, and license options or sensitivity labels do not preserve deleted chat content.
You work as a Systems Administrator for your company. The company has departments named Sales, Accounts, Research and Production.
The company has recently purchased a subscription to Microsoft 365.
All users in your company have a Microsoft 365 E3 license.
You are in the process of configuring Microsoft Teams. You plan to create a team for each of the company departments.
All users have the Microsoft Teams desktop client installed.
You need to ensure that the Research team is labelled as Confidential when viewed in the Microsoft Teams client.
Which of the following actions should you perform?
A.Configure and publish a sensitivity label in the Microsoft Purview portal (formerly the Security & Compliance admin center).Correct
B.Configure and publish a retention label in the Microsoft Purview portal (formerly the Security & Compliance admin center).
C.Configure a Teams policy in the Microsoft Teams admin center.
D.Configure the Meeting Settings in the Microsoft Teams admin center.
Explanation
Sensitivity labels can be applied to Microsoft 365 groups and teams, and the label name (such as Confidential) is shown in the Teams client for that team. The label is created and published from the compliance portal and then applied to the Research team. Retention labels control how long content is kept and are not displayed on the team, while Teams policies and meeting settings have no labelling feature.
You work as a Systems Administrator for your company. The company has departments named Sales, Accounts, Research and Production.
The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
You have configured a Team for each of the departments.
Currently, users in any department can use Microsoft Teams to communicate with users from any other department.
You need to configure the environment to ensure that users in the Research team can only communicate with other users in the Research team by using Microsoft Teams.
What should you do?
A.Configure a Teams Meeting policy.
B.Configure Information Barrier policies.Correct
C.Configure an App Protection policy.
D.Configure Conference Bridges.
Explanation
Information barrier policies in Microsoft Purview restrict which segments of users can communicate and collaborate in Teams. Defining a segment for Research and a policy that allows Research to communicate only with Research blocks chats and calls with other departments. Meeting policies control meeting features, app protection policies protect data on mobile apps, and conference bridges provide dial-in numbers; none of them restrict who can talk to whom.
You work as a Systems Administrator for your company. The company has several departments.
The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
You have configured a Team for each of the departments.
You need to ensure that you are notified if a user creates a new Team by using the Create a Team option in the Microsoft Teams client.
Which of the following actions should you perform?
A.Configure the External collaboration settings in the Microsoft Entra admin center (formerly the Azure Active Directory admin center).
B.Configure a communication compliance policy (formerly supervision) in the Microsoft Purview portal.
C.Configure an eDiscovery case in the Microsoft Purview portal.
D.Configure an alert policy in the Microsoft Purview portal (formerly the Security & Compliance admin center).Correct
Explanation
An alert policy can trigger on audited activities, including the creation of a team, and send an email notification to administrators when the activity occurs. Communication compliance (formerly supervision) policies review message content, an eDiscovery case is for searching and holding content, and external collaboration settings control guest invitations; none of them notify you when a team is created.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365.
All users in your company have a Microsoft 365 E5 license.
A user named User1 has the Microsoft Teams desktop client on his Windows 10 client computer.
User1 reports several problems when using Microsoft Teams.
You need to view the debug logs on User1's computer.
Which of the following actions should you perform to generate the debug logs?
A.Press the following key combination: Ctrl+Alt+Shift+1.Correct
B.Right click on the Teams icon and select Get Logs.
C.Use Windows Event Viewer and browse to the Application Log.
D.Run a Usage report in the Teams admin center.
Explanation
On a Windows computer, pressing Ctrl+Alt+Shift+1 in the Teams desktop client (or selecting Collect support files from the Teams icon in the system tray) generates the diagnostic logs and saves them to the Downloads folder. The application log in Event Viewer does not contain Teams debug logs, and a usage report in the Teams admin center shows organization-wide activity, not client diagnostics. Get logs was the tray menu name in the classic client; the current client calls it Collect support files.
Your company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
All users use Microsoft Teams for collaboration.
A manager wants to be able to view the Microsoft Teams usage reports.
You need to assign the manager permission to view the usage reports. The solution must use the principle of least privilege.
Which of the following actions should you perform?
A.Assign the Teams Communications Administrator role to the manager.
B.Assign the Security Administrator role to the manager.
C.Assign the Reports Reader role to the manager.Correct
D.Assign the Compliance Manager role to the manager.
Explanation
The Reports Reader role lets a user view usage data and activity reports in the Microsoft 365 admin center, including Microsoft Teams activity, without any permission to change settings, which makes it the least privileged choice. Teams Communications Administrator can manage meetings, calling policies and phone numbers, which is far more than viewing reports. Security Administrator and Compliance Manager are unrelated to usage reporting and also grant management rights.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
All users in the company use Microsoft Teams for collaboration.
Users report that a team has been deleted in Microsoft Teams. The team was available yesterday.
You need to restore the deleted team.
Which tool should you use?
A.The Microsoft Teams admin center
B.The Microsoft Teams client app
C.The Microsoft Entra admin center (formerly Azure Active Directory admin center)Correct
D.The Exchange Online admin center
Explanation
A deleted team is brought back by restoring the Microsoft 365 group behind it during the 30-day soft-delete period. The Microsoft Entra admin center (formerly Azure Active Directory admin center) restores the group under Groups > Deleted groups, and the team comes back with its channels, tabs and files. The Teams client app can't restore a team deleted from the organization, and the Exchange admin center isn't the tool for restoring the group. The Teams admin center has since added its own restore option for deleted teams, but restoring the Microsoft 365 group is the route this question tests.
Your company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
All users use Microsoft Teams for collaboration.
A Microsoft 365 group contains 300 users including 50 guest accounts. A team in Microsoft Teams has been created from the group.
You need to ensure that the group contains only members and guest accounts that require access to the group. Any members or guest accounts that are either inactive or no longer require access to the group should be removed. The solution must ensure that group membership is validated every month.
Which of the following should you configure?
A.A Conditional Access policy
B.A Supervision policy
C.An access reviewCorrect
D.A Teams policy
Explanation
Microsoft Entra access reviews let you review the members and guests of a Microsoft 365 group or team on a recurring schedule, such as monthly, and remove users whose access is denied or who are inactive. A Conditional Access policy controls sign-in conditions, not group membership. A Supervision (communication compliance) policy reviews message content, and a Teams policy controls feature behavior, so neither validates membership.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365 and all users have a Microsoft 365 E3 license.
The company network includes Windows Server 2019 servers that host a Virtual Desktop Infrastructure (VDI).
All company users use the Microsoft Teams desktop client in non-persistent virtual desktops.
Microsoft has released an update to the Microsoft Teams client that includes several new features.
You need to ensure that all virtual desktop users are able to use the updated Microsoft Teams clients.
Which of the following actions should you perform?
A.Configure the Teams Upgrade Policy with the Upgrade to Teams setting.
B.Uninstall the Microsoft Teams package from the VM image and install the latest version.Correct
C.Configure a Group Policy Object to deploy the latest version of the Microsoft Teams client.
D.Configure Windows Updates on the servers hosting the VDI.
Explanation
In non-persistent virtual desktops, Teams automatic updates are disabled, because any change is lost when the session resets. To give users a new Teams version you update the master (golden) VM image: remove the old Teams package and install the latest one. The Teams Upgrade policy only governs the Skype for Business to Teams coexistence mode, Windows Update does not update Teams, and a GPO deployment to non-persistent desktops would not persist across sessions.
You work as a Systems Administrator for your company. The company has several departments including a Research and Development department.
The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
You have configured a team for each of the departments.
The Research & Development team has a channel named Design. The company plans to work with an external contractor to help design a new product. You have created a guest account for the contractor.
The contractor reports that he is unable to post to the Design channel.
You need to enable the contractor to post to the Design channel.
Which of the following actions should you perform?
A.Configure the Global meeting policy in the Microsoft Teams admin center.
B.Configure the external collaboration settings in Microsoft Entra ID.
C.Configure the Global (Org-wide default) app permission policy in the Microsoft Teams admin center.
D.Configure the Guest access settings in the Microsoft Teams admin center.Correct
Explanation
Guest access in Teams is an organization-wide setting in the Teams admin center (Users > Guest access); when it is off, guests cannot participate in teams and channels even though their Microsoft Entra guest account exists. The guest account already exists, so the Entra external collaboration settings, which control who can invite guests, are not the blocker. Meeting policies and app permission policies do not affect posting in a channel.
You work as a Systems Administrator for your company. The network includes an Active Directory domain and 200 client computers that run Windows 10. All client computers are joined to the on-premises Active Directory domain and registered with Microsoft Entra ID.
The company has a Microsoft 365 subscription that includes Microsoft Intune. All client computers are enrolled in Microsoft Intune.
You need to deploy the Microsoft Teams client to the client computers.
Which two of the following deployment methods could you use? Each correct answer presents a complete solution.
A.Configure a Conditional Access policy in Microsoft Entra ID.
B.Configure an app in Microsoft Intune.Correct
C.Configure an Active Directory Group Policy Object (GPO).Correct
D.Configure an app registration in Microsoft Entra ID.
E.Configure a collection in Microsoft Entra ID.
Explanation
Microsoft documents distributing the Teams installer to computers with Intune, Configuration Manager, Group Policy software installation or third-party tools, so an Intune app and an Active Directory GPO both work here. A Conditional Access policy controls access, not software deployment, and an app registration defines an application identity for authentication. Collections belong to Configuration Manager, not Microsoft Entra ID.
You work as a Systems Administrator for your company. The company has several departments.
The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E3 license.
You have configured a team for each of the departments. Each team includes several guest accounts for external contractors.
A security policy has the following requirements:
- Contractors must not be able to create channels in Microsoft Teams.
- Contractors must not be able to update channels in Microsoft Teams.
You need to implement the security policy.
Which two of the following actions would meet the requirement? Each correct answer presents a complete solution.
A.Run the Get-AzureADGroup and Set-AzureADGroup PowerShell cmdlets.
B.Configure the guest permissions for the teams in the Microsoft Teams admin center.Correct
C.Modify the default meeting policy.
D.Modify the meeting settings.
E.Run the Get-Team and Set-Team PowerShell cmdlets.Correct
Explanation
Whether guests can create and update channels is a per-team guest permission. In the Teams admin center you edit each team under Teams > Manage teams and turn off the guest permission to add or edit channels, or you use Get-Team to list the teams and Set-Team -AllowGuestCreateUpdateChannels $false on each. Set-AzureADGroup changes Microsoft 365 group properties, not Teams guest permissions, and meeting policies and meeting settings do not govern channels.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365. The company has 300 users and all users have a Microsoft 365 E3 license.
All users in the company use Microsoft Teams for collaboration.
The company has hired a new technician to help with the management of Microsoft Teams.
You need to assign a role to the new technician to ensure that he can perform the following tasks for all users:
- Access, monitor, and troubleshoot call quality and reliability using data displayed in the Call Quality Dashboard (CQD).
- Use the advanced troubleshooting toolset to troubleshoot call quality issues.
Which of the following roles should you assign to the technician? The solution must minimize the assigned permissions.
A.Teams Communications Support Specialist
B.Teams Communications Administrator
C.Teams Communications Support EngineerCorrect
D.Teams Service Administrator
Explanation
The Teams Communications Support Engineer role troubleshoots communications issues with the advanced troubleshooting toolset and can use CQD data down to the impacted users, and it does nothing more, so it meets both tasks with the least permissions. The Support Specialist role has only basic tools and can view only the specific user searched for. Teams Communications Administrator and Teams (Service) Administrator also cover these tasks but add management of meetings, voice and the whole Teams service.
You work as a Systems Administrator for your company. The company has a main office in New York and 20 branch offices in North America. Some of the branch offices are in locations with low bandwidth Internet connectivity.
The company has a Microsoft 365 subscription. All users in the company have a Microsoft 365 E3 license.
All users in the main office use Microsoft Teams for collaboration.
You want to roll out Microsoft Teams to all branch office users. However, you are concerned about the branch offices' Internet connectivity.
You plan to test Microsoft Teams call quality with test users in the branch offices.
Which of the following tools should you use to view the packet loss during Microsoft Teams calls to the branch offices?
A.Microsoft Teams usage report
B.Microsoft Teams Call Quality DashboardCorrect
C.Microsoft Teams device usage report
D.Microsoft Network Testing Companion
Explanation
Call Quality Dashboard reports call and meeting quality across the organization, including network metrics such as packet loss, jitter and round-trip time, and with building data uploaded it can break results down by office. The Teams usage and device usage reports show activity and client types, not network quality. The Network Testing Companion runs synthetic tests from one machine before a rollout, not measurements from real Teams calls.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365. All users in your company have a Microsoft 365 E3 license.
Most users currently use Microsoft Teams for collaboration. However, several users still use Microsoft Skype for Business Online for collaboration.
You plan to migrate all users to Microsoft Teams.
You need to configure the environment to ensure that Microsoft Teams is downloaded and installed in the background for all Microsoft Skype for Business users.
Which of the following actions should you perform?
A.Configure the Teams upgrade settings in the Microsoft Teams admin center.Correct
B.Configure the External access settings in the Microsoft Teams admin center.
C.Configure an App Setup policy in the Microsoft Teams admin center.
D.Configure an App Permission policy in the Microsoft Teams admin center.
Explanation
The Teams upgrade settings page in the Teams admin center includes the option Download the Teams app in the background for Skype for Business users, which silently downloads Teams for users running Skype for Business on Windows. External access controls federation with other organizations, and app setup and app permission policies control which Teams apps are pinned or allowed; none of them deploys the Teams client.
You work as a Systems Administrator for your company. The company has recently purchased a subscription to Microsoft 365. All users in your company have a Microsoft 365 E5 license.
You have deployed Microsoft Teams to all users in the company. Several teams and channels have been configured.
External contractors can access Microsoft Teams using guest accounts.
You need to configure the environment to ensure that no files containing malware can be opened from Microsoft Teams channels by either company users or external contractors.
Which of the following should you configure?
A.Sensitivity labels
B.Microsoft Defender for Office 365 (formerly Advanced Threat Protection)Correct
C.Protected Identity Management
D.Conditional Access policy
Explanation
Safe Attachments for SharePoint, OneDrive, and Microsoft Teams, part of Microsoft Defender for Office 365 (formerly Advanced Threat Protection, included in Microsoft 365 E5), detects malicious files in team sites and libraries and locks them so that people, including guests, can't open, copy, move or share them. Sensitivity labels classify and protect content but don't scan for malware, and Conditional Access controls sign-in conditions, not file content. Protected Identity Management is not a Microsoft 365 feature.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365. The company has 300 users and all users have a Microsoft 365 E3 license.
All users in the company use Microsoft Teams for collaboration.
The company has hired a new technician to help with the management of Microsoft Teams.
You need to assign a security role to the new technician to ensure that he can perform the following tasks for all users:
- Manage meetings, including meeting policies and configurations.
- Manage voice, including calling policies and phone number inventory and assignment.
Which of the following roles should you assign to the technician? The solution must minimize the assigned permissions.
A.Teams Communications Support Specialist
B.Teams Communications AdministratorCorrect
C.Teams Communications Support Engineer
D.Teams Service Administrator
Explanation
The Teams Communications Administrator role manages calling and meetings features: meeting policies and configurations, and voice, including calling policies and phone number inventory and assignment. Teams Administrator (formerly Teams Service Administrator) can do this too but manages the entire Teams service, so it grants more than needed. The Teams Communications Support Engineer and Support Specialist roles only troubleshoot call quality and cannot change policies or assign numbers.
You work as a Systems Administrator for your company. The company has a subscription to Microsoft 365. All users in the company have a Microsoft 365 E3 license.
All users use Microsoft Skype for Business Online for collaboration.
You plan to migrate all users to Microsoft Teams.
You need to ensure that users can use both Microsoft Skype for Business Online and Microsoft Teams during the migration period.
You need to configure the Teams upgrade settings to ensure that users receive chats and calls in Skype for Business but use Microsoft Teams for group collaboration and meeting scheduling.
Which of the following coexistence modes should you configure?
A.Islands
B.Skype for Business only
C.Skype for Business with Teams collaboration
D.Skype for Business with Teams collaboration and meetingsCorrect
E.Teams only
Explanation
In Skype for Business with Teams collaboration and meetings (Meetings First) mode, private chat and calling stay in Skype for Business while Teams is used for scheduling and conducting meetings and for channel-based collaboration. Skype for Business with Teams collaboration keeps meetings in Skype for Business, Skype for Business only gives no Teams collaboration, Islands delivers chats and calls in both clients without interop, and Teams only moves everything to Teams.
Verifying access...
Access Required
You need to purchase this exam to access practice mode
Unlock a few more questions every day for 300 points you earn free on
Godlike Academy. Everything you unlock with the Daily Climb stays open for 7 days after your last unlock.