MS-203 Online Practice Questions and Answers

Correct Answer:

Reference: https://www.withum.com/resources/a-breakdown-of-microsoft-365-admin-roles-responsibilities-previously-office-365-admin-roles/

Correct Answer: A

1.

From the Microsoft 365 admin center dashboard, go to Admin > Exchange.

2.

Go to Organization > Sharing.

3.

Under Organization Sharing, click New +.

4.

In new organization relationship, in the Relationship name box, type a friendly name for the organization relationship.

5.

In the Domains to share with box, type the domain for the external Microsoft 365, Office 365, or Exchange on-premises organization you want to let see your calendars. If you need to add more than one domain, you can do it after you create the organization relationship by editing it.

6.

Select the Enable calendar free/busy information sharing check box to turn on calendar sharing with the domains you listed. Set the sharing level for calendar free/busy information and set which users can share calendar free/busy information.

7.

To set the free/busy access level, select one of the following values:

-

Calendar free/busy information with time only

-

Calendar free/busy with time, subject, and location

To set which users will share calendar free/busy information, select one of the following values:

-Everyone in your organization

-A specified security group

8.

Click Browse to pick the security group from a list, then click OK.

9.

Click Save to create the organization relationship.

Reference: https://docs.microsoft.com/en-us/exchange/sharing/organization-relationships/create-an-organization-relationship

Correct Answer: A

1.

In the Microsoft 365 Defender portal at https://security.microsoft.com, go to Email and Collaboration > Policies and Rules > Threat policies > Anti-spam in the Policies section. To go directly to the Anti-spam policies page, use https:// security.microsoft.com/antispam.

2.

On the Anti-spam policies page, click Create policy and then select Inbound from the drop down list.

3.

The policy wizard opens. On the Name your policy page, configure these settings:

-Name: Enter a unique, descriptive name for the policy.

-Description: Enter an optional description for the policy.

When you're finished, click Next.

4.

On the Users, groups, and domains page that appears, identify the internal recipients that the policy applies to (recipient conditions):

-Users: The specified mailboxes, mail users, or mail contacts in your organization.

-Groups: The specified distribution groups, mail-enabled security groups, or Microsoft 365 Groups in your organization.

-Domains: All recipients in the specified accepted domains in your organization.

Click in the appropriate box, start typing a value, and select the value that you want from the results. Repeat this process as many times as necessary. To remove an existing value, click remove × next to the value.

For users or groups, you can use most identifiers (name, display name, alias, email address, account name, etc.), but the corresponding display name is shown in the results. For users, enter an asterisk (*) by itself to see all available

values. Multiple values in the same condition use OR logic (for example, or ). Different conditions use AND logic (for example, and ).

- Exclude these users, groups, and domains: To add exceptions for the internal recipients that the policy applies to (recipient exceptions), select this option and configure the exceptions. The settings and behavior are exactly like the

conditions. When you're finished, click Next.

5. On the Bulk email threshold and spam properties page that appears, configure the following settings:

- Bulk email threshold: Specifies the bulk complaint level (BCL) of a message that triggers the specified action for the Bulk spam filtering verdict that you configure on the next page (greater than the specified value, not greater than or equal

to). A higher value indicates the message is less desirable (more likely to resemble spam). The default value is 7. For more information, see Bulk complaint level (BCL) in EOP and What's the difference between junk email and bulk email?. By default, the PowerShell only setting MarkAsSpamBulkMail is On in anti-spam policies. This setting dramatically affects the results of a Bulk filtering verdict: MarkAsSpamBulkMail is On: A BCL that's greater than the threshold is converted to an SCL 6 that corresponds to a filtering verdict of Spam, and the action for the Bulk filtering verdict is taken on the message. MarkAsSpamBulkMail is Off: The message is stamped with the BCL, but no action is taken for a Bulk filtering verdict. In effect, the BCL threshold and Bulk filtering verdict action are irrelevant.

-Increase spam score, Mark as spam* and Test mode: Advanced Spam Filter (ASF) settings that are turned off by default.

The Contains specific languages and from these countries settings are not part of ASF.

- Contains specific languages: Click the box and select On or Off from the drop down list. If you turn it on, a box appears. Start typing the name of a language in the box. A filtered list of supported languages will appear. When you find the language that you're looking for, select it. Repeat this step as many times as necessary. To remove an existing value, click remove × next to the value.

- From these countries*: Click the box and select On or Off from the drop down list. If you turn it on, a box appears. Start typing the name of a country in the box. A filtered list of supported countries will appear. When you find the country

that you're looking for, select it. Repeat this step as many times as necessary. To remove an existing value, click remove × next to the value. When you're finished, click Next.

6. On the Actions page that appears, configure the following settings:

-Message actions: Select or review the action to take on messages based on the following spam filtering verdicts: Spam High confidence spam Phishing High confidence phishing Bulk

-

Retain spam in quarantine for this many days: Specifies how long to keep the message in quarantine if you selected Quarantine message as the action for a spam filtering verdict. After the time period expires, the message is deleted, and is not recoverable. A valid value is from 1 to 30 days.

-

Add this X-header text: This box is required and available only if you selected Add X-header as the action for a spam filtering verdict. The value you specify is the header field name that's added to the message header. The header field value is always This message appears to be spam.

- Prepend subject line with this text: This box is required and available only if you selected Prepend subject line with text as the action for a spam filtering verdict. Enter the text to add to the beginning of the message's subject line.

-

Redirect to this email address: This box is required and available only if you selected the Redirect message to email address as the action for a spam filtering verdict. Enter the email address where you want to deliver the message. You can enter multiple values separated by semicolons (;).

-Enable safety Tips: By default, Safety Tips are enabled, but you can disable them by clearing the checkbox.

- Enable zero-hour auto purge (ZAP): ZAP detects and takes action on messages that have already been delivered to Exchange Online mailboxes.

ZAP is turned on by default. When ZAP is turned on, the following settings are available: Enable ZAP for phishing messages: By default, ZAP is enabled for phishing detections, but you can disable it by clearing the checkbox. Enable ZAP for spam messages: By default, ZAP is enabled for spam detections, but you can disable it by clearing the checkbox.

When you're finished, click Next.

7. On the Allow and block list flyout that appears, you are able to configure message senders by email address or email domain that are allowed to skip spam filtering. In the Allowed section, you can configure allowed senders and allowed domains. In the Blocked section, you can add blocked senders and blocked domains. The steps to add entries to any of the lists are the same:

-Click the link for the list that you want to configure: Allowed > Senders: Click Manage (nn) sender(s). Allowed > Domains: Click Allow domains. Blocked > Senders: Click Manage (nn) sender(s). Blocked > Domains: Click Block domains.

-In the flyout that appears, do the following steps: Click + Add senders or Add domains. In the Add senders or Add domains flyout that appears, enter the sender's email address in the Sender box or the domain in the Domain box. As you're typing, the value appears below the box. When you're finished typing the email address or domain, select the value below the box. Repeat the previous step as many times as necessary. To remove an existing value, click remove × next to the value.

When you're finished, click Add senders or Add domains.

- Back on the main flyout, the senders or domains that you added are listed on the page. To remove an entry from this page, do the following steps: Select one or more entries from the list. You can also use the Search box to find values in the list. After you select at least one entry, the delete icon appears Click the delete icon to remove the selected entries

When you're finished, click Done.

Back on the Allow and block list page, click Next when you're read to continue.

8.

On the Review page that appears, review your settings. You can select Edit in each section to modify the settings within the section. Or you can click Back or select the specific page in the wizard. When you're finished, click Create.

9.

On the confirmation page that appears, click Done.

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-your-spam-filter-policies?view=o365-worldwide

Correct Answer: A

In the Microsoft 365 admin center, choose Admin centers > Exchange.

Open the EAC and go to Mail flow > Rules.

Click Add +, and then click Apply disclaimers.

In the New rule window that appears, enter a unique name the rule.

In the Apply this rule if box, select the conditions for displaying the disclaimer. For example, select The recipient is located condition, and then select Outside the organization. If you want this rule to apply to every message that enters or

leaves your organization, select [Apply to all messages].

Next to the Do the following box, select Enter text to enter the text of your disclaimer.

Click Select one, and select one of the Fallback options if the disclaimer can't be added.

Specify the audit severity level to assign the severity level that appears in the message log.

Select the mode for the rule. Select Enforce to turn on the disclaimer immediately, or select Test without Policy Tips to put a message in the message tracking log instead of adding the disclaimer.

If you have additional conditions or exceptions that you want to add, select More options at the bottom of the page, which will show additional settings. For example, to add the exception that prevents multiple disclaimers being added in an

email conversation, select Add exception and then select The subject or body > Subject or body matches these text patterns, and then specify the words or phrases in your disclaimer. Or, to put your disclaimer at the top of the email

message instead of the bottom, in Do the following, select Apply a disclaimer to the message > prepend a disclaimer.

When you're finished, click Save.

Correct Answer: C

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/get-publicfoldermailboxmigrationrequest?view=exchange-ps

Correct Answer: AD

Microsoft Hybrid Agent System requirements

The Hybrid Agent has multiple methods of installation with different requirements. In all cases, the core computer requirements are the same as described in the following list:

Windows Server 2012 R2, Windows Server 2016, or Windows Server 2019

.NET Framework 4.6.2 or later, as supported by the version of Exchange version.

TLS 1.2 enabled.

Azure Application Proxy

Capable of establishing outbound HTTPS connections to the internet.

Capable of establishing HTTPS connections to the Exchange Server chosen for hybrid configuration.

Reference: https://learn.microsoft.com/en-us/exchange/hybrid-deployment/hybrid-agent

Correct Answer: AD

A. All outbound HTTPS connections to Microsoft Online Services

Reference:https://docs.microsoft.com/en-us/exchange/hybrid-deployment/prepare-for-hybrid-deployment

To perform a hybrid deployment between an Exchange Online tenant and an on-premises Exchange Server organization, you must ensure that all outbound HTTPS connections to Microsoft Online Services are allowed. This is a prerequisite

for installing the Microsoft Hybrid Agent.

D. Enable TLS 1.2.

Reference: https://docs.microsoft.com/en-us/exchange/hybrid- deployment/prepare-for-hybrid-deployment

To perform a hybrid deployment between an Exchange Online tenant and an on-premises Exchange Server organization, you must ensure that Transport Layer Security (TLS) 1.2 is enabled on your on-premises Exchange servers. This is a

prerequisite for installing the Microsoft Hybrid Agent.

Correct Answer: C

Explanation:

Configure anti-phishing policies in Microsoft Defender for Office 365

Exclude these users, groups, and domains: To add exceptions for the internal recipients that the policy applies to (recipient exceptions), select this option and configure the exceptions. The settings and behavior are exactly like the conditions.

Note: Use the Set-AntiPhishPolicy cmdlet to modify antiphish policies in your cloud-based organization.

Parameters include: -ExcludedSenders

This setting is part of impersonation protection and is only available in Microsoft Defender for Office 365.

The ExcludedSenders parameter specifies an exception for impersonation protection that looks for the specified message sender. You can specify multiple email addresses separated by commas.

Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/anti-phishing-policies-mdo-configure

https://learn.microsoft.com/en-us/powershell/module/exchange/set-antiphishpolicy

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/exchange/sharing/organization-relationships/create-an-organization-relationship