- (Exam Topic 4)
You have 2,500 users who are assigned Microsoft Office 365 Enterprise E3 licenses. The licenses are assigned to individual users.
From the Groups blade in the Azure Active Directory admin center, you assign Microsoft 365 Enterprise E5
licenses to the users.
You need to remove the Office 365 Enterprise E3 licenses from the users by using the least amount of administrative effort.
What should you use?

1. A. the Identity Governance blade in the Azure Active Directory admin center
2. B. the Set-AzureAdUser cmdlet
3. C. the Licenses blade in the Azure Active Directory admin center
4. D. the Set-WindowsProductKey cmdlet

Correct Answer: C

- (Exam Topic 4)
You have a Microsoft 365 tenant.
The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

In Azure AD. you add a new enterprise application named Appl. Which groups can you assign to App1?

1. A. Group1 and Group2 only
2. B. Group2 only
3. C. Group3 only
4. D. Group1 only
5. E. Group1 and Group4

Correct Answer: C

- (Exam Topic 4)
You have a Microsoft 365 ES subscription that user Microsoft Defender for Cloud Apps and Yammer. You need prevent users from signing in to Yammer from high-risk locations.
What should you do in the Microsoft Defender for Cloud Apps portal?

1. A. Create an access Policy.
2. B. Create an activity policy.
3. C. Unsanction Yammer.
4. D. Create an anomaly detection policy.

Correct Answer: A

- (Exam Topic 1)
You need to configure the MFA settings for users who connect from the Boston office. The solution must meet the authentication requirements and the access requirements.
What should you configure?

1. A. named locations that have a private IP address range
2. B. named locations that have a public IP address range
3. C. trusted IPs that have a public IP address range
4. D. trusted IPs that have a private IP address range

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition
Location offer your country set, IP ranges MFA trusted IP and corporate network VPN gateway IP address: This is the public IP address of the VPN device for your on-premises network. The VPN device requires an IPv4 public IP address. Specify a valid public IP address for the VPN device to which you want to connect. It must be reachable by Azure Client Address space: List the IP address ranges that you want routed to the local on-premises network through this gateway. You can add multiple address space ranges. Make sure that the ranges you specify here do not overlap with ranges of other networks your virtual network connects to, or with the address ranges of the virtual network itself.

- (Exam Topic 4)
You have an Azure AD tenant that contains a user named User1. User1 is assigned the User Administrator role.
You need to configure External collaboration settings for the tenant to meet the following requirements: |
*Guest users must be prevented from querying staff email addresses.
*Guest users must be able to access the tenant only if they are invited by User1.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.

Solution:
Box1 = User access is restricted to properties and memberships of their own directory objects (most restrictive). This setting ensures that guest users are prevented from querying staff email addresses and can access the tenant only if they are invited by User1.
Box2 = Only users assigned to specific admin roles can invite guest users. This setting ensures that guest users can access the tenant only if they are invited by User1.
Box3 = This setting enables guest users to sign up for the tenant only if they are invited by User1.

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A