MS-700 Practice Test 4 — 25 Questions

Question 1

You are the Teams administrator for a company that uses Microsoft 365 E5. The security team requires that all internal users can only communicate with other internal users and cannot initiate chats or calls with anyone outside the organization. You need to configure the appropriate policy to enforce this restriction. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create and assign a Teams external access policy that blocks all external domains, and also disable communication with consumer and unmanaged Teams users.. The correct approach is to use a Teams external access policy to block all external domains, and additionally disable communication with consumer and unmanaged Teams users. This prevents all forms of external communication, including chats and calls, aligning with the security team's requirement. Other policies, such as meeting or messaging policies, do not address external chat and calling restrictions comprehensively.

Answer

Configure a Teams meeting policy to disable anonymous join and dial-in users.

Answer

Create and assign a Teams external access policy that blocks all external domains.

Answer

Modify the global Teams messaging policy to disable external chat and file sharing.

Question 2

You are a Teams administrator for a multinational corporation. The company has recently deployed Microsoft Teams and wants to ensure that all users can make and receive calls using Teams. You need to assign phone numbers to users. Which PowerShell cmdlet should you use to assign a phone number to a user?

Accepted Answer

Set-CsPhoneNumberAssignment. The Set-CsPhoneNumberAssignment cmdlet is specifically designed to assign, update, or remove phone numbers for users in Microsoft Teams. It supports various phone number types and is the current recommended method for phone number management. Other cmdlets either serve different purposes or are not valid for this task. Using the correct cmdlet ensures successful phone number assignment.

Answer

Set-CsUser

Answer

Grant-CsOnlineVoiceRoutingPolicy

Answer

Set-CsOnlineVoiceUser

Question 3

Your organization has a Microsoft 365 E5 tenant with Teams Phone. The security team requires that all external calls to the PSTN from Teams clients must be recorded automatically for compliance. You need to configure the environment to meet this requirement. What should you do?

Accepted Answer

Assign a compliance recording policy to the affected users and integrate a certified recording solution.. To automatically record external PSTN calls for compliance, you must use a certified compliance recording solution integrated with Teams and assign a compliance recording policy to the users. Calling policies, meeting policies, and call park policies do not provide automatic recording of PSTN calls. The compliance recording policy ensures that calls are routed to the recording service, which handles the recording and storage.

Answer

Enable 'Automatic recording' in the Teams meeting policy for all users.

Answer

Configure a call park policy and assign it to all users who make external calls.

Answer

Create a calling policy and set 'Record external calls automatically' to On.

Question 4

You are a Teams administrator at Contoso. The legal department requires that all files shared in the 'Legal Matters' private channel must be stored in a dedicated SharePoint site collection that is separate from the parent team's site. You need to configure the private channel to meet this requirement. What should you do?

Accepted Answer

Create a private channel; Teams automatically provisions a separate SharePoint site collection for each private channel.. Private channels in Teams are designed with a separate SharePoint site collection to ensure that files shared within the private channel are only accessible to its members. This isolation is automatic and cannot be manually configured or overridden. Therefore, creating a private channel fulfills the legal department's requirement without additional administrative steps.

Answer

Convert the private channel to a standard channel and then move the files to a new document library.

Answer

Ensure the team is created with the appropriate sensitivity label that enforces a separate site collection for private channels.

Answer

Create a new SharePoint site collection and associate it with the private channel using the Teams admin center.

Question 5

You are a Teams administrator for a company that uses Microsoft 365. The company has a team named 'Sales' with 50 members. The sales manager wants to add a new tab to the 'Sales' team's general channel that displays a Power BI report. The report is in a Power BI workspace that is not currently connected to Teams. You need to add the tab with the least administrative effort. What should you do?

Accepted Answer

In Teams, go to the general channel, select '+', choose Power BI, and select the report from the workspace.. The simplest way to add a Power BI report to a Teams channel is to use the built-in Power BI tab. This method allows you to browse and select reports from any workspace you have access to, and it automatically handles authentication and rendering. It requires no additional configuration or code.

Answer

In the Power BI service, go to the workspace, select 'Embed', and generate a secure embed code. Then, in Teams, add a Website tab and paste the code.

Answer

In Teams, go to the general channel, select '+', choose 'Website', and paste the URL of the Power BI report.

Answer

In the Power BI service, open the report, select 'Export', and choose 'Embed in Teams'.

Question 6

You are a Teams administrator for Fabrikam. The security team requires that all files shared in Teams chats and channels are scanned for malware before users can download them. You need to ensure this scanning occurs without affecting user ability to upload files. What should you do?

Accepted Answer

Enable Safe Attachments in Microsoft Defender for Office 365 and apply a policy to SharePoint Online and OneDrive for Business.. Safe Attachments in Microsoft Defender for Office 365 is the correct solution because it provides malware scanning for files in SharePoint Online, OneDrive, and Microsoft Teams. By applying a Safe Attachments policy to these workloads, files are scanned asynchronously, and malicious files are blocked from download, ensuring security without hindering uploads.

Answer

Set up a third-party antivirus integration in Teams admin center > Teams apps > Manage apps.

Answer

Enable Conditional Access policy requiring compliant devices for Teams access.

Answer

Configure a Data Loss Prevention (DLP) policy in Microsoft Purview to block files containing malware.

Question 7

You are a Teams administrator for Northwind. A user reports that they cannot add a new tab to a channel in a team. You need to ensure the user can add tabs. What should you do?

Accepted Answer

Ensure the user is a member of the team and that app permission policies allow the tab app.. Adding tabs requires the user to be a member of the team and the specific tab app to be permitted by the app permission policy assigned to that user. If either condition is not met, the user cannot add the tab. Ensuring team membership and app policy allowlisting resolves the issue.

Answer

Modify the team's member permissions to allow adding tabs.

Answer

Enable the 'Allow tabs' setting in the Teams admin center.

Answer

Assign the user the Teams Administrator role.

Question 8

You are the Teams administrator for a healthcare company. A compliance officer must be able to search all one-on-one chats and channel conversations for a specific patient identifier across the tenant, including messages sent by users who have since left the company. What should you do?

Accepted Answer

Assign the compliance officer the eDiscovery Manager role and use Microsoft Purview eDiscovery to search Teams content.. Tenant-wide content search of Teams chats and channel messages is performed through Microsoft Purview eDiscovery, which can reach messages from departed employees because the data is retained in the associated mailboxes and SharePoint sites. The eDiscovery Manager role supplies the necessary permissions to create cases, place custodians on hold, and run searches.

Answer

Assign the compliance officer the Teams Communications Administrator role and enable recording for all meetings.

Answer

Assign the compliance officer the Teams Administrator role and have them run a search in the Teams client.

Answer

Assign the compliance officer the Global Reader role and export the Teams audit log for the past 90 days.

Question 9

You are a Teams administrator for a large organization that uses Microsoft Teams Rooms on Windows. A meeting room device is not appearing in the Teams Admin Center under Teams devices, and users cannot join meetings from that room. You have verified that the device is powered on and connected to the network. You need to diagnose the issue. What should you check first?

Accepted Answer

Verify that the device is signed in with a resource account that has a Teams Rooms license.. Teams Rooms devices require a resource account with a Teams Rooms license to authenticate and register with the Teams service. Without a valid license, the device will not appear in the Teams Admin Center and cannot join meetings. Therefore, verifying the resource account and its license is the critical first step. Other checks like network or firmware are secondary.

Answer

Check the network firewall rules to ensure that the device can reach the Teams service endpoints.

Answer

Verify that the device's firmware is up to date and that it is running a supported version of the Teams Rooms app.

Answer

Restart the Teams Rooms device and check if it appears after the restart.

Question 10

You are a Teams administrator for a company that uses Microsoft Teams Phone with Direct Routing. A user reports that they can make outbound calls to external numbers, but inbound calls from the PSTN fail to reach them. You have verified that the SBC is online and the voice routing policy is correctly configured. What is the most likely cause?

Accepted Answer

The SBC is not configured to send inbound calls to the correct SIP domain or the user's phone number is not properly mapped.. Inbound call failures in Direct Routing often stem from SBC configuration issues, such as incorrect SIP domain or number mapping. The SBC must be configured to route inbound calls to Microsoft's SIP proxy using the correct domain, and the called number must match the user's assigned phone number. Outbound calls working indicates that the user's Enterprise Voice and dial plan are fine. Therefore, the most likely cause is an SBC or number mapping problem.

Answer

The user's calling policy does not allow inbound calls.

Answer

The user is not enabled for Enterprise Voice.

Answer

The user does not have a dial plan assigned.

Question 11

You are a Teams administrator for a large organization that uses Microsoft Teams meetings. The company policy requires that all meeting recordings be stored for 90 days and then automatically deleted. You need to implement this policy with minimal administrative effort. What should you do?

Accepted Answer

Create a retention policy in the Microsoft 365 compliance center for Teams recordings with a 90-day retention period.. The correct approach is to use a retention policy in the Microsoft 365 compliance center. Retention policies can target Teams meeting recordings, which are stored in SharePoint and OneDrive, and automatically delete them after 90 days. This is a built-in, centralized feature that requires minimal administrative effort and ensures compliance. Meeting policies and custom scripts do not provide the same automated, policy-based deletion.

Answer

Use a PowerShell script to delete recordings older than 90 days from SharePoint and OneDrive.

Answer

Configure a meeting policy in the Teams admin center to set recordings to expire after 90 days.

Answer

Set the Teams meeting recording storage to Stream and configure a Stream retention policy for 90 days.

Question 12

A Teams administrator at Contoso needs to ensure that when a user dials an emergency number from a Teams client in the United States, the call is routed to the appropriate Public Safety Answering Point (PSAP) and includes the user's validated street address. The organization uses Microsoft Calling Plans. What should the administrator configure first?

Accepted Answer

Add and validate an emergency location for the user, then assign it.. For Microsoft Calling Plans, emergency calling requires each user to have a validated emergency location assigned. This location is used to route the call to the correct PSAP and to provide the dispatcher with the caller's address. While network topology can be used for dynamic location in Direct Routing, Calling Plans rely on the static assignment of a validated civic address.

Answer

Create an emergency calling policy and assign it to the user.

Answer

Enable the user for Enterprise Voice and assign a phone number.

Answer

Configure a network topology and associate the subnet with a location.

Question 13

You manage a Teams Phone deployment with Direct Routing. Your organization has a policy that all outbound calls to international destinations must be routed through a specific Session Border Controller (SBC) named SBC-Intl, while domestic calls use SBC-Dom. You create a voice route for international calls with a PSTN usage and assign it to a voice policy. A user reports that international calls fail with a 'Call not allowed' message, but domestic calls work. You verify the user has the correct voice policy. What is the most likely cause?

Accepted Answer

The voice route for international calls is not associated with the correct PSTN usage, or the PSTN usage is not added to the user's voice policy.. The 'Call not allowed' error for international calls while domestic calls succeed indicates that the user's voice policy lacks the PSTN usage associated with the international voice route. In Direct Routing, voice routes are linked to PSTN usages, and those usages must be included in the voice policy assigned to the user. Without the correct PSTN usage, Teams blocks the call before it reaches the SBC. Verifying the voice policy's PSTN usages and the voice route's associated usages resolves the issue.

Answer

The user's dial plan does not normalize the international number to E.164 format.

Answer

The SBC-Intl is not configured to allow international calls in its trunk configuration.

Answer

The user's account is not enabled for Enterprise Voice.

Question 14

You are a Teams administrator for a multinational company. The company uses Direct Routing for PSTN connectivity. A user reports that when they receive an incoming PSTN call, the call rings on their Teams client but when they answer, the call drops immediately. You have verified that the user's voice configuration is correct and that the Session Border Controller (SBC) is reachable. You need to troubleshoot the issue. Which tool should you use to capture and analyze the SIP traffic for this call?

Accepted Answer

Session Border Controller (SBC) logs and SIP tracing. For Direct Routing call drops, SIP signaling issues are common. Capturing and analyzing SIP traffic on the SBC provides the detailed SIP messages exchanged with Teams, revealing errors like 488 Not Acceptable Here or 603 Decline. SBC logs and SIP tracing are essential for this level of troubleshooting, whereas other tools offer only high-level or client-side data.

Answer

Teams client debug logs

Answer

Microsoft 365 network connectivity test tool

Answer

Microsoft Teams admin center Call Analytics

Question 15

You are a Teams administrator for a company that uses Direct Routing. A user reports that when they dial a 10-digit phone number from the Teams client, the call fails immediately with 'Call failed'. You verify that the user has a valid Phone System license and an assigned phone number. You need to ensure that calls to external PSTN numbers are routed correctly. What should you configure?

Accepted Answer

Create a voice routing policy and assign it to the user.. For Direct Routing, outbound PSTN calls require a voice routing policy that contains normalization rules and PSTN usage records linked to a voice route. Without this policy assigned, Teams cannot translate the dialed number or determine which SBC to send the call to, resulting in immediate failure. The other options do not provide the necessary routing logic.

Answer

Configure a calling policy with 'Allow calling' enabled.

Answer

Assign an audio conferencing license to the user.

Answer

Add the user to a call queue.

Question 16

You need to monitor the health of the Microsoft Teams service and receive alerts for incidents that affect your organization. You want to use the Microsoft 365 admin center. Which feature should you configure?

Accepted Answer

Service health dashboard. The Service health dashboard in the Microsoft 365 admin center is the central location for monitoring the health of Microsoft services, including Teams. It provides current status, incident details, and the ability to set up notifications. Administrators use it to stay informed about outages and advisories that may impact their organization.

Answer

Microsoft 365 network connectivity dashboard

Answer

Usage reports

Answer

Message center

Question 17

A Teams administrator is configuring a new auto attendant for a main reception line. The auto attendant must allow callers to reach a specific user by entering the user's extension using a custom range of 1000 to 1999. The administrator has already created the auto attendant and assigned a resource account. What should the administrator do next to meet this requirement?

Accepted Answer

In the auto attendant settings, enable 'Dial by extension' and specify the extension range 1000-1999.. Auto attendants in Microsoft Teams include a 'Dial by extension' option that can be enabled and configured with a custom extension range. When enabled, callers can enter an extension, and the auto attendant searches the organization's directory for a user with that extension. This is a native feature of auto attendants and does not require additional resource accounts or dial plans.

Answer

Create a call queue and assign the resource account to it, then configure the extension range.

Answer

Configure a dial plan with normalization rules for the extension range and assign it to the auto attendant's resource account.

Answer

Create a new resource account for each user in the range and assign them to the auto attendant.

Question 18

You are the Teams administrator for a company that uses Microsoft 365 E5. The security team requires that all internal users can only communicate with other internal users and cannot initiate chats or calls with anyone outside the organization. You need to configure the appropriate policy to enforce this restriction. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a new dial plan with an appropriate normalization rule and assign it to the affected users.. The failure is limited to how a dialed national number is translated, not to the user's assigned number or routing rights. A dial plan with normalization rules converts dialed digits into E.164 so Teams Phone can match a route, and it applies tenant-wide or per user. Because the +1 form already works, the fix is normalization rather than number reassignment or route policy changes.

Answer

Assign a new calling policy that enables the 'Prevent toll bypass' setting to the affected users.

Answer

Reassign the affected users' phone numbers from the Microsoft Teams admin center so that the numbers are re-provisioned.

Answer

Modify each affected user's LineUri attribute to include the ten-digit national format as a secondary number.

Question 19

You are the Teams administrator for a company that uses Microsoft 365 E5. The security team requires that all internal users can only communicate with other internal users and cannot initiate chats or calls with anyone outside the organization. You need to configure the appropriate policy to enforce this restriction. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Call Analytics in the Teams admin center. Call Analytics in the Teams admin center is specifically designed to troubleshoot call and meeting quality issues for individual users. It provides detailed metrics on network conditions, devices, and media quality, allowing administrators to pinpoint whether poor performance stems from the user's network or from the Teams service. Other tools like usage reports or service health lack the granular per-session data needed for this scenario.

Answer

Teams usage reports in the Microsoft 365 admin center

Answer

Microsoft 365 Service Health dashboard

Answer

Microsoft 365 network connectivity test tool

Question 20

You are a Teams administrator for a company that uses Microsoft Teams Phone with Direct Routing. You need to configure a new user for Enterprise Voice and ensure they can make outbound PSTN calls. The user must be able to dial 911, and all outbound calls must be routed through a specific SBC named SBC-Main. You have already created the SBC, voice route, PSTN usage, and voice policy. Which two actions must you perform to enable the user for outbound PSTN calling? (Choose two.)

Accepted Answer

Assign the voice policy to the user.. To enable a user for outbound PSTN calling in Direct Routing, you must enable the user for Enterprise Voice and assign the voice policy that contains the appropriate PSTN usages and voice routes. Dial plans are helpful but not mandatory for basic outbound calling if numbers are normalized. Calling Plan licenses are not used with Direct Routing. SBC configuration is part of the voice route setup, which is already completed. Thus, the two required actions are enabling Enterprise Voice and assigning the voice policy.

Answer

Create a dial plan and assign it to the user.

Answer

Assign a Calling Plan license to the user.

Answer

Configure the SBC to allow all outbound calls.