Are you struggling for the 70-346 exam? Good news, GreatExam Microsoft technical experts have collected all the questions and answers which are updated to cover the knowledge points and enhance candidates’ abilities. We offer the latest 70-346 PDF and VCE dumps with new version VCE player for free download, and the new 70-346 practice test ensures your 70-346 exam 100% pass.
QUESTION 36
Drag and Drop Question
A company deploys an Office 365 tenant.
You install the Active Directory Federation Services (AD FS) server role on a server that runs Windows Server 2012.
You install and configure the Federation Service Proxy role service.
Users sign in by using the Security Assertion Markup Language (SAML) protocol.
You need to customize the sign-in pages for Office 365.
Which pages should you customize? To answer, drag the appropriate page to the correct customization. Each page may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 37
Contoso uses Office 365 for collaboration services.
You implement single sign-on (SSO) with Office 365 by using Active Directory Federation Services (AD FS).
You need to implement Windows Azure multi-factor authentication.
Which three actions should you perform? Each correct answer presents part of the solution.
A. On the AD FS federation server, run PhoneFactorAgentSetup.exe.
B. On the AD FS Federation server, run WindowsAzureSDK-x64.exe.
C. On the AD FS Federation server, run the Windows PowerShell cmdlet Register-AdfsAuthenticationProvider.
D. On the AD FS Federation server, run FsConfigWizard.exe.
E. Run the Active Directory Domains and Trusts MMC snap-in. Register Windows Azure Multi-Factor Authentication Server as an additional authentication provider.
F. Run the Windows Azure Multi-Factor Authentication Server Authentication Configuration Wizard.
Answer: BCF
QUESTION 38
A company plans to deploy an Office 365 tenant.
You have two servers named FS1 and FS2 that have the Federation Service Proxy role service installed.
You must deploy Active Directory Federation Services (AD FS) on Windows Server 2012.
You need to configure name resolution for FS1 and FS2.
What should you do?
A. On FS1 and FS2, add the cluster DNS name and IP address of the federation server farm to the hosts file.
B. On FS1 only, add the cluster DNS name and IP address of the federation server farm to the hosts file.
C. On FS1 only, add the cluster NetBIOS name and IP address of the federation server farm to the LMHOSTS file.
D. On FS1 and FS2, add the cluster NetBIOS name and IP address of the federation server farm to the LMHOSTS file.
Answer: A
Explanation:
http://office365support.ca/setting-up-adfs-proxy-server-part-1/
QUESTION 39
Drag and Drop Question
You are the Office 365 administrator for your company.
You must configure a trust between the on-premises Active Directory domain and the Office 365 environment by using Active Directory Federation Services.
You need to assign the correct certificate to the description of your on-premises server environment below.
Which certificate types should you assign? To answer, drag the appropriate certificate type to the correct test description. Each certificate type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 40
A company named Fabrikam, Inc. is deploying an Office 365 tenant.
You install Active Directory Federation Services (AD FS) on a server that runs Windows Server 2012. The company’s environment is described in the following table:
You must obtain a certificate from a certification authority and install it on the federation servers. You need to specify the subject name for the certificate.
Which name should you specify?
A. fs.fabnkam.com
B. serverl.fabrikam.com
C. fabrikam.com
D. server2.fabrikam.com
Answer: A
QUESTION 41
An organization implements single sign-on (5SO) for use with Office 365 services.
You install an Active Directory Federation Services (AD FS) proxy server.
Users report that they are unable to authenticate.
You launch the Event Viewer and view the event information shown in the following screen shot:
You need to ensure that users can authenticate to Office 365.
What should you do?
A. Re-enter the credentials used to establish the trust.
B. Verify the federation server proxy is trusted by the federation service.
C. Re-install the Secure Sockets Layer (SSL) certificate for the federation service.
D. Verify network connectivity between the Federation Service Proxy and federation server.
Answer: A
Explanation:
The credentials that are used to establish a trust between the federation server proxy and the Federation Service are not valid, or the Federation Service cannot be reached.
The federation server proxy trust was revoked.
The federation server proxy has been inactive for a long period of time (such as 30 days or more).
Ensure that the credentials that are being used to establish a trust between the federation server proxy and the Federation Service are valid, and that the Federation Service can be reached.
QUESTION 42
A company migrates to Office 365. 2,000 active users have valid Office 365 licenses assigned. An additional 5,000 user accounts were created during the migration and testing processes. These users do not have any licenses assigned.
You need to remove the Office 365 user accounts that do not have any licenses assigned by using the least amount of administrative effort.
Which Windows PowerShell command should you run?
A. Get-MsolUser -All -EnabledFilter “DisabledOnly” | Remove-MsolUser -Force
B. Get-MsolUser-EnabledFilter “DisabledOnly” | Remove-MsolUser -Force
C. Get-MsolUser -All -UnlicensedUsersOnly | Remove-MsolUser -Force
D. Get-MsolUser -UnlicensedUsersOnly | Remove-MsolUser -Force
Answer: C
Explanation:
http://technet.microsoft.com/en-us/library/dn194133.aspx
QUESTION 43
Drag and Drop Question
Litware Inc. has an Office 365 Enterprise El plan.
Employees have access to all Office 365 services. Employees in the human resources (HR) department must continue to use the on-premises SharePoint 2013 deployment due to legal requirements.
You need to disable access to SharePoint Online for all HR department employees.
How should you complete the relevant Windows PowerShell commands? To answer, drag the appropriate Windows PowerShell segment to the correct location or locations in the answer area. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 44
Hotspot Question
A company deploys an Office 365 tenant.
You prepare to use the bulk add tool to add users to Office 365.
You need to prepare a file to use with the bulk add tool.
Which fields must you include in the file? To answer, drag the appropriate response to each field. Each response may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
http://onlinehelp.microsoft.com/en-us/office365-enterprises/ff637601.aspx
QUESTION 45
Drag and Drop Question
A company has 50 employees that use Office 365.
You need to enforce password complexity requirements for all accounts.
How should you complete the relevant Windows PowerShell command? To answer, drag the appropriate Windows PowerShell segment to the correct location or locations. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 46
Drag and Drop Question
You are the Office 365 administrator for your company.
Your company uses Office 365 for collaboration.
You must reset the password for all of the employees in your company.
You need to ensure that all employees create a new password the next time they sign in to Office 365.
How should you complete the relevant Windows PowerShell command? To answer, drag the appropriate Windows PowerShell segment to the correct location or locations. Each Windows PowerShell segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 47
You are the Office 365 administrator for your company.
You must use Windows PowerShell to manage cloud identities in Office 365.
You must use a computer that runs Windows 8 to perform the management tasks.
You need to ensure that the Windows 8 computer has the necessary software installed.
What should you install first?
A. Microsoft Office 365 Best Practices Analyzer for Windows PowerShell
B. Windows PowerShell 4.0
C. Remote Server Administration Tools for Windows
D. Microsoft Online Services Sign-in Assistant
Answer: D
Explanation:
http://technet.microsoft.com/en-us/magazine/hh750396.aspx
QUESTION 48
Drag and Drop Question
You are the Office 365 administrator for your company.
The company has two administrators named User1 and User2.
Users must be able to perform the activities as shown in the following table:
You need to grant the appropriate administrative role to each user.
What should you do? To answer, drag the appropriate role to the correct user. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
QUESTION 49
Drag and Drop Question
A company deploys an Office 365 tenant.
You need to enable multi-factor authentication for Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
If you read the following it clearly states creating a Multi-factor authentication provider is optional:
https://technet.microsoft.com/library/dn249466.aspx
Furthermore look at the following which outlines how to do this without creating the mult-factor auth provider:
https://msdn.microsoft.com/en-us/library/azure/dn383636.aspx
So the correct answer should be:
Enable multi-factor authentication for all user accounts
Instruct users to use a mobile phone to complete the registration process
Instruct users to obtain a single-use password to complete the registration
QUESTION 50
Drag and Drop Question
Contoso Ltd. plans to use Office 365 services for collaboration between departments.
Contoso has one Active Directory Domain Services domain named contoso.local.
You deploy the Windows Azure Active Directory Sync tool.
You plan to implement single sign-on (SSO) for Office 365.
You need to synchronize only the user accounts that have valid routable domain names and are members of specified departments.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
We ensure our new version 70-346 PDF and VCE dumps are 100% valid for passing exam, because GreatExam is the top IT certification study training materials vendor. Many candidates have passed exam with the help of GreatExam’s VCE or PDF dumps. GreatExam will update the study materials timely to make them be consistent with the current exam. Download the free demo on GreatExam, you can pass the exam easily.