Mixed Deck — All MS-203 Topics Flashcards

What is one way to protect mail flow in Microsoft 365?

Answer: Enable anti-phishing policies

Enabling anti-phishing policies is a critical measure to protect mail flow in Microsoft 365. These policies are designed to detect and block phishing attempts, which aim to trick users into revealing sensitive information or installing malware. By analyzing incoming emails for suspicious characteristics, anti-phishing policies help prevent malicious content from reaching user inboxes, thereby safeguarding organizational data and security.

What happens to a Microsoft 365 Group's mailbox, SharePoint site, and Teams channel when the group is deleted?

Answer: They are retained for 30 days in a soft-delete state and can be restored

Deleted Microsoft 365 Groups enter a soft-delete state for 30 days during which they can be fully restored with all associated resources including mailbox, SharePoint site, and Teams channel.

What does MFA stand for in Microsoft 365?

Answer: Multi-Factor Authentication

MFA stands for Multi-Factor Authentication, a security measure that requires users to provide two or more verification factors to gain access to an account or resource. In Microsoft 365, MFA adds an extra layer of security beyond just a password, typically requiring something the user knows (password) and something they have (phone or authenticator app), significantly reducing the risk of unauthorized access.

A messaging administrator wants to be automatically notified via email and receive a comprehensive summary whenever a user triggers a high-severity DLP rule by attempting to send a large number of Social Security Numbers. Which feature should be configured within the DLP policy rule to achieve this?

Answer: A mail flow rule with a 'Generate incident report' action

The 'Incident reports' feature within a DLP policy rule is designed specifically for this purpose. It can be configured to send an email notification to specified administrators when a policy match occurs. The severity level (low, medium, high) can also be set, and the report will contain details about the incident.

Which PowerShell cmdlet converts a regular user mailbox into a shared mailbox in Exchange Online?

Answer: Set-Mailbox -Type Shared

Set-Mailbox -Type Shared converts an existing user mailbox to a shared mailbox type.

What feature helps prevent users from sending sensitive data?

Answer: Data Loss Prevention

Data Loss Prevention (DLP) policies in Microsoft 365 are designed to identify, monitor, and protect sensitive information from being accidentally or intentionally shared outside the organization. DLP can detect specific types of sensitive data (e.g., credit card numbers, social security numbers) in emails and documents, then block or warn users before the data leaves the secure environment.

What is the maximum size of a single public folder mailbox in Exchange Online?

Answer: 50 GB

Each public folder mailbox in Exchange Online has a maximum size of 50 GB.

A legal department needs to preserve all emails pertaining to an internal investigation codenamed "Project Falcon" for an indefinite period. The data is spread across multiple users' mailboxes. What is the most precise and efficient method in Microsoft Purview to accomplish this?

Answer: Create a Microsoft Purview eDiscovery (Standard) case, and create a hold associated with the case using the keyword "Project Falcon".

Using a hold associated with a Microsoft Purview eDiscovery case is the most precise method. It allows an administrator to define a query-based hold (e.g., using the keyword "Project Falcon") that preserves only the specific content matching the criteria across specified mailboxes. This avoids placing a broad hold on all content for the users, which is what Litigation Hold would do. Relying on users to apply labels is inefficient and prone to error.

A junior administrator needs the ability to create and manage mailboxes, distribution groups, and mail contacts. However, according to the principle of least privilege, they should not be able to configure transport rules or other organization-wide settings. Which built-in management role group in Exchange Online is most appropriate for this administrator?

Answer: Recipient Management

The 'Recipient Management' role group contains roles that grant permissions to create and manage Exchange recipient objects like mailboxes, distribution groups, and contacts. The 'Organization Management' group has far too many permissions, 'View-Only' doesn't allow changes, and 'Help Desk' is more limited, typically for tasks like resetting user passwords.

What does Outlook on the web allow users to do?

Answer: Access emails via browser

Outlook on the web is a browser-based version of Microsoft Outlook, providing users with flexible access to their email, calendar, contacts, and tasks. It allows individuals to manage their messaging services from any device with an internet connection, without needing to install the desktop application. This makes it convenient for accessing emails remotely or on shared computers.

An organization is planning a migration to Exchange Online and needs to ensure seamless client connectivity during the coexistence period. Mailboxes will exist both on-premises and in Exchange Online. For Outlook clients to automatically connect to the correct mailbox location, which DNS record is most critical for the Autodiscover service in this hybrid environment?

Answer: An A record for autodiscover.contoso.com pointing to the on-premises Exchange server's external IP address.

In an Exchange Hybrid deployment, the public Autodiscover DNS record should point to the on-premises Exchange environment. The on-premises Exchange server will then proxy the Autodiscover request and provide the client with the correct target address for the mailbox, whether it is on-premises or in Exchange Online. Pointing it directly to Exchange Online would prevent on-premises mailboxes from being discovered correctly by external clients.

What is the default behavior when a user with FullAccess permission accesses a shared mailbox in Outlook?

Answer: The shared mailbox is automatically mapped and appears in the Outlook folder list

Automapping causes shared mailboxes to appear automatically in the user's Outlook folder list when FullAccess is granted.

An administrator is running the Hybrid Configuration Wizard (HCW) to connect their on-premises Exchange organization to Exchange Online. They need to decide between 'Classic' and 'Modern' hybrid topology. What is the key advantage of choosing Modern Hybrid?

Answer: It does not require any inbound network connections from the internet to the on-premises Exchange servers.

Modern Hybrid uses the Hybrid Agent, which removes the requirement to publish on-premises Exchange Client Access Servers to the internet. The agent establishes an outbound connection to Exchange Online, simplifying the network and firewall configuration and enhancing security by not requiring inbound HTTPS connections for features like free/busy and mailbox moves.

How long does Exchange Online wait before sending a wipe command after a device is reported lost (using the inactivity lock timeout feature)?

Answer: It is configured per policy using -MaxInactivityTimeLock

The -MaxInactivityTimeLock parameter in the mobile device mailbox policy defines the idle timeout before the device locks, and wipe thresholds are set separately.

What is the recommended approach for retiring public folders and moving content to Microsoft 365 Groups?

Answer: Use the New-MigrationBatch cmdlet with -PublicFolderToUnifiedGroup target

New-MigrationBatch with the PublicFolderToUnifiedGroup migration type migrates public folder content to Microsoft 365 Groups.

A messaging administrator has synced a migration batch of 50 mailboxes to Exchange Online. The status for the batch is 'Synced'. To finalize the migration and cut over the mailboxes so that users connect to their new Exchange Online mailbox, which PowerShell cmdlet must be run?

Answer: Complete-MigrationBatch

The `Complete-MigrationBatch` cmdlet is used to finalize a migration batch that has successfully finished its initial synchronization. This action performs a final incremental sync, configures the user's Outlook profile to point to the new cloud mailbox, and converts the source mailbox to a mail-enabled user.

A user receives a Non-Delivery Report (NDR) with the enhanced status code '5.7.1'. Which of the following is the most common reason for this type of NDR?

Answer: The message was rejected due to a permissions issue or a mail flow rule.

The status code '5.7.1' typically indicates that delivery is not authorized. This can happen for several reasons, such as the sender not having permission to send to a specific recipient or distribution group, or a mail flow (transport) rule is configured to block the message.

After running the Hybrid Configuration Wizard, a user with an on-premises mailbox reports they cannot see the free/busy information for a user whose mailbox is in Exchange Online. An administrator needs to verify the external connectivity for the on-premises services required for hybrid features. Which tool is most appropriate for this task?

Answer: Microsoft Remote Connectivity Analyzer (ExRCA)

The Microsoft Remote Connectivity Analyzer (ExRCA) is a web-based tool designed to test connectivity for various Exchange services from an external perspective, simulating how Microsoft 365 services connect. It includes specific tests for hybrid deployments that validate Autodiscover, Exchange Web Services (EWS), and other endpoints crucial for features like free/busy sharing.

A developer needs to configure a line-of-business application running on an on-premises server to send email notifications to external recipients using the company's domain. The application does not support modern authentication. The administrator wants to securely allow this relay through Microsoft 365. Which of the following is the most appropriate configuration?

Answer: Create an inbound connector of the type 'On-premises' that is scoped to the application server's public IP address.

For SMTP relay from on-premises devices or applications, the recommended and secure method is to create an inbound connector. This connector should be configured to accept mail from your organization's email server and be restricted by the specific public IP address(es) of the sending server or application. This allows relay without requiring authentication on the application itself.

Which type of Microsoft 365 Group provides a shared workspace that includes a mailbox, calendar, SharePoint site, and Teams channel?

Answer: Microsoft 365 Group

A Microsoft 365 Group provides an integrated collaboration workspace including a shared mailbox, calendar, SharePoint document library, OneNote notebook, Planner, and optional Teams channel.