MS-700 Practice Test 3 — 25 Questions

Question 1

Refer to the exhibit. A user assigned to the 'Marketing_Policy' cannot find an app in the store. Based on the exhibit, what is the best explanation?

Accepted Answer

The app is not explicitly listed in the AllowedApps property.. In Microsoft Teams app permission policies, the AllowedApps property defines the explicit list of apps that users assigned to that policy can install and use. If an app is not listed in AllowedApps (and the policy does not allow all apps), the user will not see it in the Teams app store. The exhibit likely shows a custom policy with a limited set of allowed apps, so the missing app is simply not included.

Answer

The app is globally blocked by Microsoft.

Answer

The user does not have an E5 license.

Answer

The user is not an owner of the team.

Question 2

A network administrator needs to open the correct firewall ports to ensure that Microsoft Teams media traffic (audio/video) can flow properly. Which port range and protocol are primarily used for Teams media traffic?

Accepted Answer

UDP ports 3478-3481. Microsoft Teams media traffic (audio, video, screen sharing) primarily uses UDP ports 3478 through 3481, which support the STUN/TURN protocols used for NAT traversal and media relay. Opening this range is essential for reliable real-time media flow.

Answer

TCP ports 80 and 443

Answer

TCP ports 50000-50059

Answer

UDP port 53

Question 3

You suspect that an internal network firewall is blocking Teams media traffic. Which specific ports must be open for UDP traffic to ensure optimal Teams media performance?

Accepted Answer

UDP 3478-3481. Microsoft Teams media traffic relies on UDP ports 3478 through 3481 for real-time audio, video, and screen sharing, with these ports used for STUN/TURN and media relay. Opening this UDP range ensures optimal media performance by allowing direct or relayed media paths. TCP 443 is used for signaling and fallback, but UDP is preferred for latency-sensitive media.

Answer

TCP 443

Answer

TCP 80

Answer

UDP 53

Question 4

You are managing a global organization. Which THREE factors impact the media quality of a Teams call for a remote user? (Select three)

Accepted Answer

Network jitter. Network jitter, packet loss, and Round Trip Time (RTT) are the three primary network metrics that directly degrade real-time media quality in Microsoft Teams. Jitter causes audio/video distortion, packet loss causes gaps and artifacts, and high RTT introduces latency that makes conversation feel unnatural. These are the factors Microsoft explicitly documents as impacting Teams call quality.

Answer

Azure AD password policy

Answer

Microsoft 365 license type

Question 5

A user reports they cannot sign in to the Microsoft Teams desktop client. You suspect a conditional access policy might be blocking the login. Which tool should you use first to verify if the sign-in attempt was blocked by a policy?

Accepted Answer

Microsoft Entra ID sign-in logs. Microsoft Entra ID sign-in logs record every authentication attempt, including the conditional access policies evaluated and whether access was granted, blocked, or required MFA. They show the specific policy that applied and the result, making them the definitive tool to verify if a conditional access policy blocked a Teams sign-in. This is the first place to check for policy-related sign-in failures.

Answer

Teams Admin Center usage reports

Answer

Microsoft 365 Connectivity Test Tool

Answer

Call Quality Dashboard (CQD)

Question 6

Refer to the exhibit. A user is unable to add external guests to a meeting despite the policy shown. What is the most likely reason?

Accepted Answer

Organization-wide Guest Access is disabled.. In Microsoft Teams, guest access is governed at two levels: the organization-wide Guest Access configuration in Teams admin center (or Entra ID external collaboration settings) and per-user or per-policy meeting settings. If organization-wide guest access is disabled, no user can add external guests to meetings regardless of what the meeting policy allows — the policy shown may permit it, but the tenant-level switch overrides it. This is the most likely reason the user cannot add guests.

Answer

The policy is corrupted.

Answer

The user is not licensed for guest access.

Answer

The AllowPrivateCalling parameter is blocking the guests.

Question 7

Your company is planning a transition from Skype for Business Online to Microsoft Teams. You need to ensure that users can only use Microsoft Teams for chat and meetings, but they must still be able to join Skype for Business meetings hosted by external partners. Which coexistence mode should you assign to these users?

Accepted Answer

Teams Only mode. Teams Only mode ensures users use Microsoft Teams for all chat and meetings, while still allowing them to join Skype for Business meetings hosted by external partners. This mode completes the upgrade to Teams while preserving interoperability for external Skype meetings.

Answer

Islands mode

Answer

Skype for Business only mode

Answer

Skype for Business with Teams Collaboration mode

Question 8

You want to ensure that the 'Tasks by Planner and To Do' app is automatically pinned to the navigation bar for all users in your company. Which policy should you modify?

Accepted Answer

App Setup Policy. The App Setup Policy in Teams controls which apps are pinned to the app bar and which apps are installed by default for users. To automatically pin 'Tasks by Planner and To Do' to the navigation bar for all users, you modify the App Setup Policy and add the app as a pinned app. This policy is applied via policy assignment to users or groups.

Answer

App Permission Policy

Answer

Teams Meeting Policy

Answer

Teams Messaging Policy

Question 9

A company is implementing Location-Based Routing (LBR) to comply with local telecommunications regulations. Which Microsoft Teams component is primarily responsible for enforcing LBR restrictions when a user attempts to make a PSTN call?

Accepted Answer

The Network Site associated with the user's IP address. Location-Based Routing (LBR) in Microsoft Teams enforces restrictions based on the user's physical location, which is determined by the Network Site associated with the user's IP address. When a user attempts a PSTN call, Teams checks the network site to determine if the call is allowed based on the LBR policy. The SBC enforces the routing but the decision is based on the network site configuration.

Answer

The Teams Phone Mobile provider

Answer

The Azure Virtual Desktop agent

Answer

The SBC (Session Border Controller) hardware

Question 10

You need to prevent users from using Giphy in their private chats and team channels. Which policy should you modify to achieve this?

Accepted Answer

Teams Messaging Policy. Giphy integration in Teams is controlled by the Teams Messaging Policy, which includes settings such as 'Allow Giphy,' 'Giphy content rating,' and 'Allow memes and stickers.' To block Giphy in private chats and team channels, an administrator modifies the messaging policy assigned to users and sets Allow Giphy to Off. This is the only policy that governs in-conversation content features.

Answer

Teams App Setup Policy

Answer

Teams Meeting Policy

Answer

Teams Update Policy

Question 11

Your company has many inactive teams that are no longer needed. You want to implement a solution that automatically asks team owners if they still need their team after 180 days of inactivity. If they do not respond, the team should be deleted. What should you configure?

Accepted Answer

Microsoft 365 Group Expiration policy. Microsoft 365 Group Expiration policy is the correct solution because it automatically prompts group owners to renew their group after a defined inactivity period (e.g., 180 days) and deletes the group if they do not respond. Since every team is backed by a Microsoft 365 group, this policy applies to Teams. It is configured in the Microsoft 365 admin center or via Microsoft Entra ID/Entra ID.

Answer

Teams Retention policy

Answer

Archive the teams manually in the Teams admin center

Answer

Sensitivity labels with expiration settings

Question 12

You are managing a fleet of Microsoft Teams Rooms (MTR) on Windows. You want to use the 'Remote Login' and 'Advanced Proactive Management' features. Which license must be assigned to these devices?

Accepted Answer

Microsoft Teams Rooms Pro license. The Microsoft Teams Rooms Pro license is required for advanced management features such as Remote Login and Advanced Proactive Management. These features allow IT admins to remotely access and manage Teams Rooms devices, monitor health, and perform proactive troubleshooting. The Pro license also includes other advanced capabilities like conditional access and detailed device analytics.

Answer

Microsoft Teams Shared Devices license

Answer

Microsoft Teams Rooms Basic license

Answer

Microsoft 365 E5 license

Question 13

You are reviewing the Teams Usage report in the Microsoft 365 Admin Center to track adoption. Which THREE metrics are provided in this specific report? (Select THREE).

Accepted Answer

Channel messages. The Teams usage report in the Microsoft 365 Admin Center focuses on adoption and activity metrics, so Channel messages (A) is correct because it counts messages posted in team channels, and Chat messages (B) is correct because it counts messages sent in private and group chats. Calls (E) is also correct because the report includes the number of calls (including 1:1 and group calls) made by users. Average jitter (C) and Round-trip time (D) are not part of the Teams usage report; those are network quality metrics found in the Teams call quality dashboard or per-call analytics, not in the usage/adoption report.

Answer

Average jitter

Answer

Round-trip time (RTT)

Question 14

Which administrative role should you assign to a user who only needs to manage Teams meeting policies and messaging policies?

Accepted Answer

Teams Administrator.. The Teams Administrator role is purpose-built to manage Teams and its policies, including meeting, messaging, calling, and app policies, without granting broader tenant-wide control. It provides exactly the least-privilege access needed for managing Teams meeting and messaging policies, making it the correct assignment for this user.

Answer

Global Administrator.

Answer

SharePoint Administrator.

Answer

Teams Communications Support Specialist.

Question 15

You are a Teams administrator. A user reports that they cannot start a new chat with a specific external user who uses Teams in a different organization. You have verified that external access is enabled for the domain of the external user. What should you check next?

Accepted Answer

Verify that the external user's organization has allowed external access to your domain.. External access for chats requires that both organizations allow each other's domains. Even if your organization permits the external domain, the external organization must also permit your domain. This mutual configuration is often overlooked, leading to the inability to start chats.

Answer

Confirm that the user has a Teams license that includes external collaboration.

Answer

Check if the user is a member of a team that has guest access enabled.

Answer

Ensure the user is assigned a Teams messaging policy that allows external chat.

Question 16

Which role is required to manage the creation of new teams in the Microsoft Teams Admin Center?

Accepted Answer

Teams Administrator.. The Teams Administrator role is specifically scoped to manage the Microsoft Teams service, including creating and managing teams through the Teams Admin Center. This role has the necessary permissions to configure Teams settings, policies, and lifecycle operations without granting broader tenant-wide administrative rights. Global Reader, by contrast, is read-only and cannot perform the creation action.

Answer

Global Reader.

Answer

User Administrator.

Answer

Teams Communications Support Specialist.

Question 17

Your organization has decided that all Teams chats should be retained for exactly 3 years for compliance. Which tool should you use to implement this?

Accepted Answer

Microsoft Purview portal. Retention of Teams chat messages for a fixed period is a compliance requirement handled by retention policies in the Microsoft Purview compliance portal (formerly Microsoft 365 compliance center). Purview retention policies target Teams channel messages and Teams chats specifically, and can be set to retain content for exactly 3 years before deletion. The Teams admin center does not expose retention controls.

Answer

Teams admin center

Answer

Azure AD Conditional Access

Answer

SharePoint admin center

Question 18

A user complains that they cannot add a new member from a partner organization to a specific team. What is the first thing you should check in the Teams admin center?

Accepted Answer

The Org-wide Guest Access setting. Guest access in Microsoft Teams is governed first by the tenant-level Org-wide Guest Access setting in the Teams admin center. If guest access is disabled or restricted at the organization level, no team owner can add external members regardless of other policies. This is the correct first check because it is the broadest gate controlling all guest invitations.

Answer

The user's individual Messaging policy

Answer

The Meeting policy assigned to the user

Answer

The Teams app permission policy

Question 19

You are a Teams administrator. A user reports that they cannot send messages in a specific channel. When they try to post, they see the error 'You don't have permission to post in this channel.' You need to identify the cause. What should you check first?

Accepted Answer

The channel moderation settings for that channel.. Channel moderation allows team owners to restrict who can post in a channel. When enabled, only moderators can post, and regular members receive a permission error. The correct action is to check the channel's moderation settings to see if the user is restricted.

Answer

The messaging policy assigned to the user.

Answer

The team's membership settings.

Answer

The user's role in the team (Owner, Member, or Guest).

Question 20

You need to configure External Access (federation) for your Teams environment. You want to allow your users to communicate with users from 'contoso.com' and 'fabrikam.com', but block communication with all other external domains. Which TWO actions should you perform in the Teams admin center?

Accepted Answer

Add 'contoso.com' and 'fabrikam.com' to the allowed domains list.. Option B is correct because in the Teams admin center under Users > External access, you must set the External access toggle to 'Allow only specific external domains' — this changes the federation mode from the default 'Allow all external domains' to a restricted allow-list model, which is the prerequisite for blocking all other domains. Option A is correct because after selecting that mode you must add 'contoso.com' and 'fabrikam.com' to the allowed domains list; only domains on this list will be able to federate with your users, and any domain not listed (e.g., tailspintoys.com) is automatically blocked. Option C is incorrect because 'Guests can access Microsoft Teams' is a Guest access setting that controls whether guests (B2B collaboration users) can use Teams, not external federation with other Teams tenants. Option D is incorrect because 'Block all external domains' would prevent communication with contoso.com and fabrikam.com as well, contradicting the requirement. Option E is incorrect because Teams App Permission policies govern which third-party or custom apps users can install, and have nothing to do with external federation or domain allow-lists.

Answer

Enable 'Guests can access Microsoft Teams' in Guest access settings.

Answer

Set the 'External access' option to 'Block all external domains'.

Answer

Create a new Teams App Permission policy for the domains.