Provisioning Office 365

  • 6/30/2015
Contents

Answers

This section contains the solutions to the thought experiments and answers to the objective review questions in this chapter.

Objective 1.1: Thought experiment

  1. The first user account created for a subscription will be assigned global administrator privileges. This will be the user account of the IT staff member who recently left and who set up Office 365.
  2. The license conflict can be resolved by either manually removing licenses from the 10 users who have left the organization, or by deleting their user accounts.

Objective 1.1: Review

  1. Correct answers: A and B

    1. Correct: Tenant name cannot be changed after deployment.
    2. Correct: Tenant region cannot be changed after deployment.
    3. Incorrect: User accounts assigned the global administrator role can be changed after deployment of an Office 365 tenancy.
    4. Incorrect: User accounts assigned the billing administrator role can be altered after deployment of an Office 365 tenancy.

  2. Correct answer: A

    1. Correct: Only users assigned the global administrator role are able to reset the passwords of users assigned the global administrator role.
    2. Incorrect: Only users assigned the global administrator role are able to reset the passwords of users assigned the global administrator role. Users assigned the password administrator role cannot perform this task
    3. Incorrect: Only users assigned the global administrator role are able to reset the passwords of users assigned the global administrator role. Users assigned the user management administrator role cannot perform this task
    4. Incorrect: Only users assigned the global administrator role are able to reset the passwords of users assigned the global administrator role. Users assigned the service administrator role cannot perform this task.

  3. Correct answer: C

    1. Incorrect: Assigning the global administrator role would involve assigning unnecessary privileges.
    2. Incorrect: Members of the service administrator role are unable to reset passwords.
    3. Correct: Assigning the password administrator role will ensure that the passwords of non-privileged Office 365 users can be changed without assigning unnecessary privileges.
    4. Incorrect: Assigning the user management administrator role would involve assigning unnecessary privileges.

  4. Correct answer: D

    1. Incorrect: Assigning the global administrator role would involve assigning unnecessary privileges.
    2. Incorrect: Members of the service administrator role are unable to create user accounts.
    3. Incorrect: Users assigned the password administrator role are unable to create user accounts.
    4. Correct: Assigning the user management administrator role would allow users to create non-privileged Office 365 accounts without assigning unnecessary privileges.

Objective 1.2: Thought experiment

  1. A TXT record must be added to confirm ownership of the Fabrikam.com DNS zone.
  2. The NS records for the zone must be modified to allow Microsoft to host the Fabrikam.com DNS zone.

Objective 1.2: Review

  1. Correct answer: B

    1. Incorrect: To move ownership of DNS to Office 365, you need to configure ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com as authoritative nameservers for the zone.
    2. Correct: To move ownership of DNS to Office 365, you need to configure ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com as authoritative nameservers for the zone.
    3. Incorrect: To move ownership of DNS to Office 365, you need to configure ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com as authoritative nameservers for the zone rather than MX2.contoso.com.
    4. Incorrect: To move ownership of DNS to Office 365, you need to configure ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com as authoritative nameservers for the zone rather than MX1.contoso.com

  2. Correct answer: A

    1. Correct: You need to reconfigure MX records to route email from a custom domain to Office 365 once domain ownership has been confirmed.
    2. Incorrect: You don’t need to reconfigure a TXT record. You need to reconfigure MX records to route email from a custom domain to Office 365 once domain ownership has been confirmed.
    3. Incorrect: You don’t need to reconfigure a NS record. You need to reconfigure MX records to route email from a custom domain to Office 365 once domain ownership has been confirmed.
    4. Incorrect: You don’t need to reconfigure a SRV record. You need to reconfigure MX records to route email from a custom domain to Office 365 once domain ownership has been confirmed.

  3. Correct answers: A and B

    1. Correct: You need to configure SRV and CNAME records to use Skype for Business with your confirmed custom DNS zone.
    2. Correct: You need to configure SRV and CNAME records to use Skype for Business with your confirmed custom DNS zone.
    3. Incorrect: You need to configure SRV and CNAME records, rather than MX records, to use Skype for Business with your confirmed custom DNS zone.
    4. Incorrect: You need to configure SRV and CNAME records, rather than TXT records, to use Skype for Business with your confirmed custom DNS zone.

  4. Correct answer: A

    1. Correct: You need to configure a custom TXT record in your custom DNS zone to allow Office 365 to confirm that your organization owns a specific DNS zone.
    2. Incorrect: You need to configure a custom TXT record and not an SRV record in your custom DNS zone to allow Office 365 to confirm that your organization owns a specific DNS zone.
    3. Incorrect: You need to configure a custom TXT record and not a CNAME record in your custom DNS zone to allow Office 365 to confirm that your organization owns a specific DNS zone.
    4. Incorrect: You need to configure a custom TXT record and not an AAAA record in your custom DNS zone to allow Office 365 to confirm that your organization owns a specific DNS zone.

Objective 1.3: Thought experiment

  1. You need to update the SPF record to allow pilot users’ email addresses to be hosted in Office 365.
  2. You need to configure email forwarding to the users’ @contoso.onmicrosoft.com accounts.

Objective 1.3: Review

  1. Correct answer: C

    1. Incorrect: A minimum of 5% of users should be involved in the Office 365 pilot. In an organization with 200 users, this is 10 people and not 2.
    2. Incorrect: A minimum of 5% of users should be involved in the Office 365 pilot. In an organization with 200 users, this is 10 people and not 5.
    3. Correct: A minimum of 5% of users should be involved in the Office 365 pilot. In an organization with 200 users, this is 10 people.
    4. Incorrect: A minimum of 5% of users should be involved in the Office 365 pilot. In an organization with 200 users, this is 10 people and not 1.

  2. Correct answer: A

    1. Correct: Exchange Online Protection offers spam filtering and malware protection.
    2. Incorrect: Exchange Online Archiving does not provide spam filtering and malware protection.
    3. Incorrect: SharePoint Online does not provide spam filtering and malware protection.
    4. Incorrect: OneDrive for Business does not provide spam filtering and malware protection.

  3. Correct answer: B

    1. Incorrect: You must configure the domain as an Internal Relay domain when configuring mail flow for pilot mail users rather than as an Authoritative domain.
    2. Correct: You must configure the domain as an Internal Relay domain when configuring mail flow for pilot mail users.
    3. Incorrect: You must configure the domain as an Internal Relay domain when configuring mail flow for pilot mail users rather than as an External Relay domain.
    4. Incorrect: You must configure the domain as an Internal Relay domain when configuring mail flow for pilot mail users rather than as a Remote domain.

  4. Correct answer: D

    1. Incorrect: The SPF record should be set to “v=spf1 mx include:tailspintoys.com include:spf.protection.outlook.com ~all”, it should not include a the TXT record type.
    2. Incorrect: The SPF record should be set to “v=spf1 mx include:tailspintoys.com include:spf.protection.outlook.com ~all” not include:spf.protection.tailspintoys.com.
    3. Incorrect: The SPF record should be set to “v=spf1 mx include:tailspintoys.com include:spf.protection.outlook.com ~all” not include:spf.protection.tailspintoys.com.
    4. Correct: The SPF record should be set to “v=spf1 mx include:tailspintoys.com include:spf.protection.outlook.com ~all.”
Save to your account

This chapter is from the book