Free Microsoft MS-700 Practice Questions

Correct answer: B. Users receive chats and calls and schedule meetings in Skype for Business but use Teams for group collaboration.

In Skype for Business with Teams Collaboration mode, Skype for Business remains the tool for chat, calling and meeting scheduling. Teams is used only for group collaboration in teams and channels.

Why the other options are wrong

• A. This leaves out Teams group collaboration and describes Skype for Business only mode.
• C. Meeting scheduling moves to Teams only in Skype for Business with Teams Collaboration and Meetings mode.
• D. Using Teams for all communication and collaboration describes Teams Only mode.

Correct answer: C. Create an Office 365 group and configure a membership rule for the group.

Office 365 groups support dynamic membership rules that automatically add and remove users based on organizational attributes. When you create a team from an Office 365 group with dynamic membership configured for the Sales department, users are automatically added when they join the department and removed when they leave. This is the first action because the team is created from the group, not the other way around.

Why the other options are wrong

• A. Dynamic distribution groups are used for email distribution, not for Teams team membership management.
• B. Azure AD security groups do not support dynamic membership rules based on department changes without additional configuration.
• D. While the New-Team PowerShell cmdlet is used to create the team, it should be done after the Office 365 group with dynamic rules is created.

Correct answer: A, D. OneDrive accounts; SharePoint sites

To retain files used in personal chats and team collaborations, retention policies must be applied to OneDrive accounts (where personal chat files are stored) and SharePoint sites (where team collaboration files are stored). Files in Teams chats are backed by OneDrive, and team channel files are backed by SharePoint, so applying retention to these locations covers all file retention requirements.

Why the other options are wrong

• B. Exchange email is for email messaging retention, not file retention in Teams.
• C. Teams chat as a separate location is not independently configurable for retention; chat files are retained through OneDrive retention.
• E. Teams channel messages are not a separate retention location; channel files are retained through SharePoint site retention.

Correct answer: C. Deploy a configuration profile in the Microsoft Teams admin center.

Configuration profiles in the Microsoft Teams admin center are used to manage device-specific settings for Teams phones, including screen saver timing and screen capture capabilities. Profiles allow administrators to define hardware and software behavior settings that apply to Teams phone devices across the organization.

Why the other options are wrong

• A. Org-wide settings in Teams admin center configure application-level settings, not device-specific hardware configurations like screen savers.
• B. App Setup policies control which apps are available in Teams, not device settings.
• D. Teams policies manage user communication capabilities, not physical device configurations.

Correct answer: A. Configure the Automatically admit users to Everyone setting in the global meeting policy.

The 'Automatically admit users to Everyone' setting in the global meeting policy allows all meeting participants, including external guests, to join meetings directly without waiting in the lobby. This setting bypasses the lobby requirement for all attendee types.

Why the other options are wrong

• B. This setting admits only users in the organization automatically; it would still place external guests in the lobby.
• C. Allow Meet now in channels is for channel-based meeting initiation, not lobby admission control.
• D. Allow Meet now in private meetings is for meeting initiation functionality, not attendee admission policies.

Correct answer: C. Modify the default Meeting policy.

The default Meeting policy in Microsoft Teams admin center contains settings to control screen sharing permissions, including options to disable full screen sharing while allowing application window sharing. This policy-level configuration enforces presenter capabilities across all meetings.

Why the other options are wrong

• A. Meeting Settings control tenant-wide meeting features but not granular presenter sharing permissions.
• B. Live Events policies apply to large broadcast events, not standard Teams meetings.
• D. Live Events Settings apply to webinar and broadcast scenarios, not standard meeting presenter restrictions.

Correct answer: B, D. Configure a new Messaging policy and apply it to the managers; Modify the default Messaging policy.

To restrict urgent message capability, you must modify the default Messaging policy to disable urgent messages for regular users, then create a new Messaging policy with urgent messages enabled and apply it specifically to managers. Messaging policies control communication features like urgent message priority levels.

Why the other options are wrong

• A. Permission policies do not control messaging feature capabilities like urgent message sending.
• C. Modifying only the default Permission policy without addressing messaging policies will not restrict urgent message functionality.

Correct answer: A. Enable the Anonymous users can join a meeting in the Meeting settings.

Enabling 'Anonymous users can join a meeting' in the Meeting settings allows potential customers without guest accounts or organizational credentials to join Teams meetings directly via a meeting link. This setting permits external attendees to participate as anonymous participants without requiring an Azure AD account or guest invitation.

Why the other options are wrong

• B. The 'Automatically admit users to Everyone' setting admits users to meetings but does not enable anonymous access without pre-existing accounts.
• C. Guest access in org-wide settings allows guest accounts but does not enable anonymous meeting access for users without accounts.
• D. The 'Everyone in your organization' setting only admits internal organization users automatically, excluding external customers without accounts.

Correct answer: C. The Azure Active Directory admin center

A team is backed by a Microsoft 365 group, and deleting the team deletes that group. Deleted groups are kept for 30 days and can be restored from the deleted groups list in the Azure Active Directory admin center, which also restores the team.

Why the other options are wrong

• A. The Teams admin center can archive and delete teams but has no option to restore a deleted team.
• B. The Teams client cannot restore a team once it has been deleted.
• D. Deleted groups are restored from the directory, not from the Exchange Online admin center.

Correct answer: C. An Access Review

An Access Review is the Microsoft 365 feature designed to periodically validate group membership, identify inactive or unnecessary members, and remove those who no longer require access. Access reviews can be configured to run on a monthly schedule and apply to both members and guest accounts, making it the ideal solution for ongoing membership hygiene.

Why the other options are wrong

• A. Conditional Access policies control authentication and device compliance but do not manage or validate group membership.
• B. Supervision policies are designed for communication compliance and message monitoring, not membership validation.
• D. Teams policies manage feature availability and settings but do not address group membership validation.

Correct answer: C. A litigation hold on the user's mailbox.

A litigation hold on a user's mailbox preserves all communications, including Teams private chat messages, and prevents permanent deletion. Teams chats are stored in the user's mailbox, and litigation hold ensures that even if a user attempts to delete a chat, it is retained. License options don't control chat deletion, meeting policies don't apply to private chats, and Sensitivity Labels control data classification rather than preventing deletion.

Why the other options are wrong

• A. Microsoft 365 license options control feature availability, not chat deletion or retention.
• B. Meeting policies control meeting-specific behaviors and don't apply to private chat deletion.
• D. Sensitivity Labels classify data sensitivity levels but don't prevent permanent deletion of chats.

Correct answer: A, E. Install the Microsoft Teams clients on all the computers that run the Skype for Business client. Instruct the users to sign in to both client applications; Install the Skype for Business client on all the computers that run the Microsoft Teams client. Instruct the users to sign in to both client applications.

In Islands coexistence mode, both Skype for Business and Teams run independently. To receive all chat messages, users must be signed into both clients because some contacts may send messages to either application. Installing both clients and instructing users to sign into both applications (options A and E) ensures no messages are missed. Option A emphasizes installing Teams on Skype clients, while option E emphasizes installing Skype on Teams clients, both describe the same necessary outcome of having both clients running simultaneously.

Why the other options are wrong

• B. Modifying permissions in Teams client settings does not address the fundamental issue of messages being delivered to different applications.
• C. The global app setup policy manages which apps are available but does not control chat message delivery routing.
• D. The global app permission policy controls app permissions but does not ensure users receive messages in both applications.

Correct answer: B. From the Azure Active Directory admin center, configure Microsoft 365 Groups expiration.

Azure Active Directory admin center is where you configure Microsoft 365 Groups expiration policies. This setting allows you to define that groups expire after 365 days, specify deletion of content, and set a 30-day restoration window for deleted content. The compliance center handles retention policies for content, not group lifecycle. The Microsoft 365 admin center and Teams admin center do not provide these specific expiration settings.

Why the other options are wrong

• A. Retention policies in the compliance center govern content lifecycle but do not manage group expiration.
• C. The Microsoft 365 admin center does not have the granular group expiration settings needed.
• D. Teams admin center manages Teams policies but not group expiration settings.

Correct answer: D. an access review

Access reviews in Azure AD allow organizations to periodically verify and confirm that guest users should retain their membership in teams. This feature automatically sends verification emails to guest members on a scheduled basis, meeting the requirement for annual verification without manual intervention.

Why the other options are wrong

• A. An identity provider manages authentication, not periodic access verification for team membership.
• B. An Outlook add-in extends email functionality but does not handle guest access verification workflows.
• C. Communication compliance policies govern message monitoring and compliance, not guest membership verification.

Correct answer: B. From the Microsoft 365 Compliance admin center, create an Office 365 alert policy.

Office 365 alert policies in the Microsoft 365 Compliance admin center can be configured to notify administrators of specific activities, including the creation of new teams. This allows the security policy requirement to be met by sending notifications when teams are created using the Build a team from scratch option.

Why the other options are wrong

• A. Communication compliance is designed to monitor and remediate inappropriate communications, not to alert on team creation events.
• C. Azure Active Directory protection notifications are not configured in the Azure AD admin center for Microsoft 365 service-specific activities like team creation.
• D. Teams policies control team features and member behavior, but cannot be configured to send administrative notifications on team creation events.

Correct answer: D. Create a Teams policy.

A Teams policy controls permissions and behaviors for Teams users, including whether users can create private channels. This setting is managed through the Teams policy configuration in the Teams admin center, not through general Teams settings, messaging policies, or app permission policies.

Why the other options are wrong

• A. General Teams settings do not contain the granular control needed to restrict private channel creation.
• B. Messaging policies control message-related behaviors, not channel creation permissions.
• C. App permission policies control application access, not channel creation.

Correct answer: A. Yes

The Teams Device Administrator role is specifically designed to manage Teams devices and includes permissions to remotely restart Teams devices. This role provides the exact capability needed for the scenario.

Why the other options are wrong

• B. The Teams Device Administrator role is the correct role for managing and restarting Teams devices.

Correct answer: C. Teams only

Teams only mode is the correct coexistence mode to recommend for a complete upgrade from Skype for Business Online to Teams with Phone System enabled for all users. This mode ensures all users communicate exclusively through Teams and Phone System functionality is fully available in Teams. Islands mode allows users to run both clients simultaneously, which contradicts a migration goal. Skype for Business with Teams collaboration modes maintain Skype for Business as the primary platform, which is not appropriate for a full upgrade scenario.

Why the other options are wrong

• A. Skype for Business with Teams collaboration keeps Skype for Business as the primary platform, not appropriate for a full upgrade.
• B. Islands mode allows parallel use of both clients, creating confusion and not achieving a clean migration.
• D. Skype for Business with Teams collaboration and meetings still prioritizes Skype for Business rather than completing the upgrade to Teams.

Correct answer: A. Configure and publish a Sensitivity Label in the Security & Compliance admin center.

Sensitivity Labels configured and published in the Security & Compliance admin center can be applied to Teams to display classification levels like Confidential. When published, these labels appear in the Teams client and can be applied to individual teams during creation or modification. Retention Labels manage data lifecycle policies rather than visibility labels, Teams policies control user permissions and behaviors, and Meeting Settings control meeting-specific features.

Why the other options are wrong

• B. Retention Labels manage data retention and deletion schedules, not team classification labels.
• C. Teams policies control permissions and user capabilities, not team classification labeling.
• D. Meeting Settings control meeting-specific features and don't apply to team-level classification.

Correct answer: D. Add all the managers to a universal security group.

To restrict team creation to specific managers, those managers must first be added to a universal security group. This group can then be configured in Teams policies to control who has the ability to create teams. While Office 365 groups can be used, universal security groups are the preferred method for administrative permissions and policies. Adding managers to a Team itself doesn't control creation permissions. Distribution groups are for email distribution, not security-based policy assignment.

Why the other options are wrong

• A. Adding managers to a Microsoft Team doesn't provide the permission controls needed to restrict team creation organization-wide.
• B. Universal distribution groups are designed for email distribution, not for security-based administrative permissions.
• C. While Office 365 groups can work, universal security groups are the preferred and more appropriate choice for role-based administrative permissions.

Correct answer: D. Safe Links

Safe Links policy prevents users from clicking through to blocked URLs by providing real-time scanning of web links. When a link is detected as malicious, Safe Links can be configured to block click-through actions entirely. Anti-spam and anti-phishing policies address different threat vectors, while Safe Attachments protects against malware in file attachments, not URL access.

Why the other options are wrong

• A. Anti-spam policy filters unwanted email but does not control URL click-through behavior.
• B. Anti-phishing policy detects phishing attacks but does not prevent clicking through to blocked URLs.
• C. Safe Attachments protects against malware in files, not blocked URL access.

Correct answer: D. the MSIX package

The MSIX package format is optimized for bandwidth efficiency during installation on VDI environments. When using teamsbootstrapper.exe with MSIX packages, the installation process minimizes bandwidth usage through its containerized application format and efficient update mechanisms.

Why the other options are wrong

• A. PKG files are macOS installers and not applicable to Windows VDI session hosts.
• B. Microsoft 365 apps installation does not minimize bandwidth usage compared to MSIX packages.
• C. Standalone executables consume more bandwidth than MSIX packages for installation.

Correct answer: D. Skype for Business with Teams collaboration and meetings

The "Skype for Business with Teams collaboration and meetings" coexistence mode allows users to receive chats and calls in Skype for Business while using Microsoft Teams for group collaboration and meeting scheduling. This mode is specifically designed for this hybrid scenario during migration. Islands mode allows both clients independently. Skype for Business only prevents Teams usage. Skype for Business with Teams collaboration lacks meeting scheduling in Teams. Teams only eliminates Skype for Business.

Why the other options are wrong

• A. Islands mode allows independent use of both clients for all functions, not routing specific workloads as required.
• B. Skype for Business only prevents any Teams functionality.
• C. Skype for Business with Teams collaboration doesn't include meeting scheduling in Teams as required.
• E. Teams only eliminates Skype for Business entirely, preventing the coexistence needed during migration.

Correct answer: A. Configure the Teams upgrade settings in the Microsoft Teams admin center.

The Teams upgrade settings in the Microsoft Teams admin center control the coexistence mode and deployment of Microsoft Teams. This is where you configure automatic Teams installation for Skype for Business users during migration. App Setup policies control which apps are pinned or installed for users but don't specifically handle the Teams upgrade migration scenario. External access and App Permission policies manage different aspects of Teams functionality unrelated to automatic client deployment during upgrades.

Why the other options are wrong

• B. External access settings control communication with users outside the organization, not automatic Teams installation.
• C. App Setup policies manage which apps appear in Teams, not automatic Teams client deployment during Skype for Business migration.
• D. App Permission policies control which permissions apps have within Teams, not automatic Teams client installation.

Correct answer: D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Teams Nome: IsWVDEnvironment Data/Value: 1

The registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Teams with the name IsWVDEnvironment and value set to 1 enables media optimization for Teams in virtual desktop infrastructure environments. This key signals to the Teams client that it is running in a WVD (Windows Virtual Desktop, now Azure Virtual Desktop) environment, allowing it to activate optimizations for audio, video, and screen sharing in virtualized scenarios. HKEY_LOCAL_MACHINE is the correct hive for system-wide settings, and the value must be 1 to enable the feature.

Why the other options are wrong

• A. This uses HKEY_CURRENT_USER which is user-specific rather than system-wide, and the value of 0 would disable rather than enable the optimization.
• B. This references a WebRTC Redirector policy path that is not the correct location for VDI environment detection in Teams.
• C. This uses HKEY_CURRENT_USER instead of HKEY_LOCAL_MACHINE, and the path structure is incorrect for Teams VDI configuration.

Correct answer: D. Convert the group to an Office 365 group.

To create a Microsoft Teams team from an existing distribution group, the group must first be converted to an Office 365 group (also called a Microsoft 365 group). This conversion enables the group to have the collaboration features and mailbox required for Teams integration, allowing you to minimize administrative effort by seeding the team membership from the existing group.

Why the other options are wrong

• A. Membership rules configure dynamic group membership but do not enable the distribution group to be converted to a Teams-compatible format.
• B. Universal security groups are not compatible with Teams team creation; only Office 365 groups can be used to create teams.
• C. Global security groups are not compatible with Teams team creation; only Office 365 groups support Teams integration.

Correct answer: B, C. From the Microsoft Teams admin center, turn on external access; Add a _sipfederationtls SRV record to the contoso.com DNS domain.

External access must be enabled in the Microsoft Teams admin center to allow Teams users to communicate with external users, including Skype consumers. Additionally, a _sipfederationtls SRV record must be added to the DNS domain to establish the federation connection between Teams and Skype infrastructure. Guest access is for inviting external users into Teams organizations, not for federation. The _sipinternaltls record is for internal federation, not consumer federation. Azure AD B2C is not required for this scenario.

Why the other options are wrong

• A. Guest access is for bringing external users into Teams, not for Skype consumer federation.
• D. The _sipinternaltls SRV record is for internal federation, not external Skype consumer federation.
• E. Azure AD B2C is for customer identity management, not Skype consumer federation.

Correct answer: B. No

Creating an In-Place Hold on a user's OneDrive for Business site does not prevent permanent deletion of private chats in Teams. Private chats in Teams are stored in Exchange Online mailboxes, not in OneDrive. To prevent permanent deletion of private chats, you must create a hold on the user's Exchange mailbox or implement a Teams retention policy that applies to chat data. OneDrive holds protect only files stored in OneDrive, not Teams chat content.

Why the other options are wrong

• A. The solution does not meet the goal because OneDrive holds do not apply to Teams chat data, which is stored in Exchange Online.

Correct answer: B. The external collaboration settings in Azure Active Directory.

Azure Active Directory's external collaboration settings control guest access policies, including restrictions on guest invitations. This is where you configure whether guests can invite other guests and manage which external organizations can collaborate with your users. The SharePoint Admin Center controls SharePoint-specific sharing, Teams Meeting Settings control anonymous meeting join capabilities, and the Global Meeting Policy controls meeting-specific behaviors, none of which directly address guest invitation restrictions.

Why the other options are wrong

• A. SharePoint Admin Center manages SharePoint-specific external sharing, not Teams guest account invitation capabilities.
• C. Anonymous user meeting settings don't control whether existing guests can invite other guests.
• D. Global Meeting Policy controls meeting behaviors but not guest account invitation restrictions.

Correct answer: B, E. Configure the Guest Access settings in the Microsoft Teams admin center; Run the Get-Team and Set-Team PowerShell cmdlets.

Configuring Guest Access settings in the Microsoft Teams admin center allows administrators to disable the ability for guests to create and edit channels. Additionally, the Set-Team PowerShell cmdlet can be used to modify team-level permissions that restrict guest capabilities. Both methods directly control the specific permissions required by the security policy.

Why the other options are wrong

• A. Get-AzureADGroup and Set-AzureADGroup manage group membership and properties, not Teams-specific channel creation permissions.
• C. Meeting policy controls meeting features, not channel creation or editing in Teams.
• D. Meeting settings control meeting configurations and do not restrict channel creation or modification capabilities.

Correct answer: B. No

The Teams Communications Support Engineer role does not include permissions to remotely restart Teams devices. This role is designed for support and troubleshooting of communication issues, not device management. Remote device management capabilities require the Teams Device Administrator role or similar device management permissions.

Correct answer: D. Configure an alert policy in the Security & Compliance admin center.

Alert policies in the Security & Compliance admin center monitor and notify administrators when specific activities occur, including team creation. By configuring an alert policy for the 'Create Team' activity, you receive notifications whenever a user creates a new team. External Collaboration settings in Azure AD control guest and federation policies, supervision policies monitor and record communications for compliance, and eDiscovery cases search and retrieve data rather than triggering proactive notifications.

Why the other options are wrong

• A. External Collaboration settings in Azure AD control guest and external access policies, not team creation notifications.
• B. Supervision policies record and monitor communications for compliance review, not proactive alert notifications.
• C. eDiscovery Cases search and preserve data but don't provide proactive notifications of new team creation.

Correct answer: A. The External access settings.

External access settings in Microsoft Teams allow administrators to control federation with external organizations by specifying which domains users can communicate with. This setting enables you to create an allowlist of the five supplier company domains, restricting Teams communication to only those organizations while blocking all others.

Why the other options are wrong

• B. Guest access settings control whether external users can be invited as guests to teams and channels, but do not restrict communication to specific external organizations.
• C. Messaging policies control messaging features and behaviors for users within your organization, not external domain-level access restrictions.
• D. Org-wide Teams settings configure general Teams features and behaviors but do not provide domain-level external communication restrictions.

Correct answer: A, B, C. Modify the global teams policy; Assign the members of the IT group to the policy; Create a custom teams policy.

To restrict private channel creation to only IT group members, you must create a custom teams policy with the appropriate restrictions (Option C), modify the global teams policy as a baseline (Option A), and assign the custom policy to the IT group members (Option B). The Set-TeamsChannel cmdlet manages channel properties after creation, not creation permissions. Messaging policies control chat and message features, not channel creation. Meeting policies govern meeting-related settings, not channel creation.

Why the other options are wrong

• D. Set-TeamsChannel cmdlet configures existing channel properties, not creation permissions.
• E. Messaging policies control chat and messaging features, not channel creation settings.
• F. Custom messaging policies do not control channel creation permissions.

Correct answer: B. access reviews in the Azure Active Directory admin center

Access reviews in the Azure Active Directory admin center provide a mechanism to periodically review and validate group membership, allowing administrators to remove inactive users and ensure members are still appropriate for the group. This supports the monthly validation requirement.

Why the other options are wrong

• A. Data subject requests are used for data privacy and GDPR compliance, not for managing group membership or removing inactive users.
• C. eDiscovery cases are designed for legal holds and content searches, not for managing active group membership.
• D. Usage reports in the Teams admin center show activity metrics but do not provide functionality to manage or remove group members.

Correct answer: D. Download and install the WebView2 Runtime.

The WebView2 Runtime is a required dependency for the new Teams desktop client on Windows 10. When this runtime is not installed, users receive the 'We've run into an issue' error message. Installing WebView2 Runtime resolves the installation failure.

Why the other options are wrong

• A. Clearing the cache does not resolve installation errors caused by missing runtime dependencies.
• B. ASP.NET Core Runtime is not a required dependency for the new Teams desktop client.
• C. Elevated permissions are not the solution to missing runtime dependency errors.

Correct answer: D. SkypeSettings.xml

SkypeSettings.xml is the configuration file used to customize meeting layout settings for Teams Rooms for Windows devices. This file controls the default meeting layout configuration and other device-specific settings that apply when the device joins meetings.

Why the other options are wrong

• A. Configuration.json is not the primary file for Teams Rooms meeting layout customization.
• B. Settings.json is not used for Teams Rooms meeting layout configuration.
• C. Persistent.conf is not associated with Teams Rooms for Windows configuration.

Correct answer: A. Yes

A messaging policy is the correct policy type to control private chat functionality. Messaging policies include settings that allow administrators to enable or disable private chat for assigned users. By creating a messaging policy with private chat disabled and assigning it to temporary employees, the organization can prevent them from using the private chat feature while other users retain access.

Correct answer: A. Allow uploading custom apps.

To upload a custom app packaged as a ZIP file to Microsoft Teams, the 'Allow uploading custom apps' setting must be enabled in Teams admin settings. This specific setting controls whether users and administrators can sideload custom applications that have not been published through the Teams App Store, which is the exact requirement for uploading App1 as a ZIP package.

Why the other options are wrong

• B. This setting controls whether new external apps from the Teams Store are enabled by default for users, not whether custom ZIP packages can be uploaded.
• C. This setting manages default apps that come with Teams, not the ability to upload custom packaged applications.
• D. This setting controls external apps available through the Teams Store or organization-approved sources, not the ability to sideload custom ZIP files.

Correct answer: B, C. Configure an app in Microsoft Intune; Configure an Active Directory Group Policy Object (GPO).

Both Microsoft Intune and Active Directory Group Policy are valid deployment methods for Teams on domain-joined, Intune-enrolled computers. Intune can deploy apps to enrolled devices including Teams, and Group Policy Objects can deploy software through Active Directory to domain-joined computers. Both provide effective enterprise deployment mechanisms.

Why the other options are wrong

• A. Conditional Access policies control access based on conditions but do not deploy applications.
• D. App registration in Azure AD is used for application identity and API permissions, not for software deployment.
• E. Collections in Azure AD do not exist as a deployment mechanism; this is not a valid feature for application deployment.

Correct answer: C. Grant-CsTeamsUpgradePolicy -PolicyName SfBWithTeamsCollab

The SfBWithTeamsCollab policy allows users to use Skype for Business for chats and calls only, while Microsoft Teams is available for group collaboration. This matches the requirement of enabling Skype for Business for chats and calls while transitioning to Teams for collaboration. SfBWithTeamsCollabAndMeeting adds meeting scheduling to Teams. Islands allows independent use of both clients. SfBonly eliminates Teams entirely.

Why the other options are wrong

• A. SfBWithTeamsCollabAndMeeting includes meeting scheduling in Teams, which exceeds the requirement of chats and calls only in Skype for Business.
• B. Islands mode allows independent use of both applications for all workloads, not specifically routing chats and calls to Skype for Business.
• D. SfBonly prevents Teams usage entirely, eliminating the ability for users to transition to Teams for any workload.

Correct answer: B. No

Modifying the Teams upgrade policy will not ensure that VDI users receive new Teams features. The issue stems from the MSI deployment method in VDI environments, which does not automatically update to newer versions. VDI deployments require special configuration using Teams' VDI optimization or switching to a supported deployment method that enables automatic updates. The coexistence mode setting controls only Skype for Business and Teams interaction, not feature availability or client updates.

Why the other options are wrong

• A. Changing the upgrade policy does not address the underlying issue of MSI packages not auto-updating with new features in VDI environments.

Correct answer: B. From Org-wide settings, configure the Teams upgrade settings.

The Teams upgrade settings in Org-wide settings is the correct location to configure automatic Teams client deployment and manage the transition from Skype for Business Online to Teams. This setting controls coexistence modes and deployment behavior across the organization. Messaging policies control message retention and editing, App setup policies manage pinned apps for users, and the Teams policy applies to specific communication features but not to client deployment.

Why the other options are wrong

• A. Messaging policies manage message features like retention and editing, not client deployment.
• C. App setup policies configure which apps are pinned or available to users, not client installation.
• D. The Teams policy controls specific Teams features but not client installation and upgrade behavior.

Correct answer: A. Yes

Placing User1's mailbox on Litigation Hold prevents permanent deletion of private chats in Teams. When a mailbox is on Litigation Hold, all content including Teams private chat messages is preserved and cannot be permanently deleted by the user, meeting the goal of preventing permanent deletion.

Why the other options are wrong

• B. Litigation Hold is the correct mechanism for preventing permanent deletion of Teams chat content stored in user mailboxes.

Correct answer: D, E. Microsoft 365 E5; the Microsoft 365 E5 Compliance add-on

Information barriers in Teams require either Microsoft 365 E5 or the Microsoft 365 E5 Compliance add-on. E5 includes all compliance features needed for information barriers, while the E5 Compliance add-on provides these specific compliance capabilities to users with lower-tier licenses. Both options enable the full information barrier functionality for Teams.

Why the other options are wrong

• A. Teams Premium add-on does not include information barrier capabilities.
• B. Priva Privacy Risk Management focuses on privacy risk assessment, not information barriers.
• C. Microsoft 365 Business Standard does not include information barrier features.

Correct answer: A. Network Planner

Network Planner is the Microsoft tool specifically designed to calculate network bandwidth requirements for Teams deployments. You input the number of users and the features being used (audio, video, screen sharing) to generate bandwidth recommendations. The Network Assessment Tool, Advisor for Teams, and Bandwidth Utilization Analyzer are not the correct tools for this planning purpose.

Why the other options are wrong

• B. Network Assessment Tool is not a Microsoft Teams bandwidth planning tool.
• C. Advisor for Teams provides recommendations for Teams rollout but not bandwidth calculations.
• D. Bandwidth Utilization Analyzer is not a standard Microsoft Teams planning tool.

Correct answer: B. Microsoft SharePoint Online

Files and OneNote in Microsoft Teams are stored in SharePoint Online and OneDrive for Business. External sharing must be configured in Microsoft SharePoint Online settings to allow guest users to access these resources when they are embedded in Teams channels.

Why the other options are wrong

• A. Microsoft Teams settings control team features but not the underlying file sharing permissions that govern access to SharePoint-based content.
• C. OneDrive for Business external sharing is for personal files, not for team channel files which are stored in SharePoint Online.
• D. Microsoft Yammer is a separate social collaboration platform and is not involved in Teams file or OneNote access.

Correct answer: A. Assign Device1 a Teams Rooms Pro license.

Remote management and restart capabilities for Teams Rooms devices require the Teams Rooms Pro license. The Teams Rooms Basic license provides only essential meeting functionality without remote management features. Teams Rooms Pro includes device management capabilities through the Teams admin center that allow administrators to perform actions like restart from a remote location.

Why the other options are wrong

• B. Microsoft 365 E5 is a user subscription license, not a device license, and does not provide the specific Teams Rooms management capabilities needed.
• C. Intune enrollment alone does not provide Teams Rooms-specific remote management; a proper Teams Rooms license is required.
• D. Entra join is a prerequisite for device management but does not independently enable remote restart functionality for Teams Rooms.

Correct answer: A. Network Assessment Tool

The Network Assessment Tool is the additional software required to complement the Network Testing Companion module for performing network quality and connectivity tests to Microsoft 365 services. Together, these tools provide comprehensive network diagnostics from on-premises environments.

Why the other options are wrong

• B. Windows Performance Analyzer is used for performance profiling and tracing, not for network connectivity testing to Microsoft 365.
• C. The Microsoft Teams desktop client is not required software for running network diagnostic tests; it is the application being optimized for.
• D. Windows Assessment Toolkit is for system performance and readiness assessment, not for testing connectivity to cloud services.

Correct answer: D. Teams advisor

Teams Advisor is the dedicated tool within Microsoft 365 that assesses the current environment, identifies gaps, and recommends configurations needed to support Teams meetings and online conferences. It provides a comprehensive assessment of your organization's readiness for Teams deployment.

Why the other options are wrong

• A. Network Planner assesses network bandwidth requirements but does not provide comprehensive environment assessment for Teams meetings.
• B. The Microsoft 365 Assessment tool is not specifically designed for Teams meeting and conference configuration assessment.
• C. Office Deployment Tool (ODT) is used for deploying Office applications, not for assessing Teams readiness.

Correct answer: A. Configure the global app setup policy.

The global app setup policy controls which apps are pinned to the app bar and in what order they appear for all users. By configuring the app setup policy and adding your custom app to the pinned apps list, you ensure the custom app appears at the top of the app bar in Teams for all users in the organization.

Why the other options are wrong

• B. Configuration profiles are not a standard Teams feature for managing app appearance in the app bar.
• C. App permission policies control which apps users can access, not the visual arrangement or pinning of apps in the app bar.
• D. The global Teams policy controls general Teams features but does not manage app pinning or app bar appearance.

Correct answer: A. Yes

The External collaboration settings in the Azure Active Directory admin center provide the controls needed to restrict guest access to specific domains and prevent guest users from inviting other guests. These settings directly implement B2B collaboration policies that govern who can be invited as guests and what actions they can perform, fully addressing both security policy requirements.

Why the other options are wrong

• B. Azure AD External collaboration settings are the correct location for configuring domain-based guest restrictions and guest invitation controls.

Correct answer: A, B, F. From the Services & AddIns settings in the Microsoft 365 admin center, set Let group members outside the organization access group content to On; From the Guest access settings in the Microsoft Teams admin center, set Allow guest access in Microsoft Teams to On; From the Services & AddIns settings in the Microsoft 365 admin center, set Let group owners add people outside the organization to groups to On.

To allow Contoso users to collaborate as guests in Teams channels, three configuration steps are required. First, enable guest access in Teams admin center (option B). Second, enable group owners to add external users (option F) from Microsoft 365 admin center. Third, enable group members outside the organization to access group content (option A) also from Microsoft 365 admin center. These three settings work together to permit external guest collaboration in Teams channels.

Why the other options are wrong

• C. Adding domains to target domains in Azure AD is for B2B direct connect or federation, not for guest collaboration.
• D. External access settings in Teams admin center configure federation between organizations, not guest member access.
• E. Guest user permissions policy settings do not directly enable or configure the ability to add guests to Teams.

Correct answer: C. Microsoft Teams Rooms Standard

Microsoft Teams Rooms Standard license is required for conference phones that support Direct Routing and one-touch join for Teams calendar meetings. This license provides the necessary authentication and meeting join capabilities for shared conference devices. Common Area Phone is a different license type for basic shared phones, Microsoft 365 Business Standard and E3 are user licenses, not device licenses.

Why the other options are wrong

• A. Common Area Phone is for basic shared phones without Teams Rooms features.
• B. Microsoft 365 Business Standard is a user license, not appropriate for conference phone devices.
• D. Microsoft 365 E3 is a user license; devices require Teams Rooms licensing.

Correct answer: B. No

Creating an In-Place Hold on a SharePoint site does not prevent permanent deletion of private chats in Teams. Private chats are stored in user mailboxes, not on the Teams SharePoint site. In-Place Hold on the Teams SharePoint site would only preserve team-level content, not private chat messages which require holds on the user mailboxes.

Why the other options are wrong

• A. In-Place Hold on SharePoint does not protect private chat content stored in user mailboxes.

Correct answer: A. a Teams policy

A Teams policy controls team and channel creation permissions, including the ability to create private channels. To prevent specific users from creating private channels while allowing others to do so, you create a custom Teams policy with private channel creation disabled and assign it to those users. Meeting policies govern meeting settings, setup policies control client app installation and update settings, and permission policies do not exist as a distinct policy type in Teams.

Why the other options are wrong

• B. Meeting policies control meeting-related features, not channel creation permissions.
• C. Setup policies manage Teams client app configuration and updates, not channel creation.
• D. Permission policy is not a valid policy type in the Teams admin center.

Correct answer: A. Modify the Team discovery settings.

Team discovery settings control whether a team appears in suggested teams and team discovery lists. Modifying the Team discovery settings allows administrators or team owners to hide the Sales team from the list of suggested teams while maintaining the team's private status.

Why the other options are wrong

• B. There is no 'Hide team' option in Teams; team visibility is controlled through discovery settings.
• C. Modifying team privacy settings to Private does not prevent the team from appearing in suggested teams.
• D. Team member permissions do not control team discovery or suggestion visibility.

Correct answer: B. No

A teams policy controls team creation, channel creation, and team management features, but does not control private chat access. Private chat restrictions are managed through messaging policies, which specifically govern chat and messaging capabilities. Teams policies focus on team and channel-level settings, not individual chat features.

Correct answer: A. Yes

When you use the 'Create a Team' option from a SharePoint modern team site, it creates a Microsoft Team connected to that SharePoint site. This connection ensures that the SharePoint site content is available in Teams, and when new channels are added to the team, corresponding folders are automatically created in the associated SharePoint site's document library. This is the standard behavior of team-connected SharePoint sites.

Why the other options are wrong

• B. This solution does meet the stated goal of making SharePoint content available in Teams and automatically creating channel folders.

Correct answer: A. From the SharePoint admin center, edit the External sharing settings for the associated site.

To prevent guest users from accessing files in a specific team without affecting other teams, external sharing settings must be configured at the SharePoint site level associated with that team. Each Teams team is backed by a SharePoint site, and adjusting external sharing for just that site provides granular control that does not impact other teams' collaboration.

Why the other options are wrong

• B. Azure AD external collaboration settings apply tenant-wide and would affect all teams.
• C. Conditional Access policies control device and location-based access, not guest file permissions.
• D. Blocking all external domains would prevent external collaboration across all teams, not just Team1.
• E. Disabling guest access in Teams would prevent guests across the entire tenant, affecting all teams.

Correct answer: B. Run the Start-CsExMeetingMigration PowerShell cmdlet.

The Start-CsExMeetingMigration PowerShell cmdlet specifically migrates existing Skype for Business Online meetings to Microsoft Teams. Running this cmdlet before changing the coexistence mode to Teams Only ensures all scheduled meetings are converted, preventing disruption.

Why the other options are wrong

• A. Meeting policy modifications control future meeting settings but do not convert existing scheduled meetings.
• C. Set-CsTeamsUpgradeConfiguration manages upgrade behavior and routing but does not perform meeting migration.
• D. Set-CsTeamsMeetingConfiguration adjusts meeting features but does not convert existing Skype for Business meetings to Teams.

Correct answer: B. No

The Set-AzureADGroup cmdlet is used to modify Azure Active Directory group properties and does not configure the relationship between a SharePoint site and Teams, nor does it create channel folders automatically. This cmdlet cannot meet the requirement of ensuring SharePoint content availability in Teams or automating channel folder creation.

Why the other options are wrong

• A. Set-AzureADGroup modifies Azure AD group properties only and cannot configure SharePoint-Teams integration or channel folder creation.

Correct answer: B. No

The CsExternalAccessPolicy cmdlets control federation with users in other organizations, not guest access. Limiting guests to specific domains is done with the Azure AD B2B collaboration allow list, and stopping guests from inviting other guests is done in the Azure AD external collaboration settings, so this solution does not meet the goal.

Why the other options are wrong

• A. External access policies manage federated chat and calling, so they cannot restrict guest domains or block guests from inviting guests.

Correct answer: B. Microsoft Call Quality Dashboard

The Microsoft Call Quality Dashboard is the appropriate tool to verify whether Quality of Service (QoS) is being applied to Teams calls and to investigate call quality issues. It provides detailed metrics and analytics about call quality, including information about QoS application. The Teams client itself does not provide this level of diagnostic detail, Network Testing Companion is for pre-deployment assessment, and Network Monitor is a general network analysis tool not specifically designed for Teams QoS verification.

Why the other options are wrong

• A. The Teams client does not provide diagnostic information about QoS application or detailed call quality metrics.
• C. Network Testing Companion is used for pre-deployment readiness assessment, not for verifying QoS on active calls.
• D. Network Monitor is a general network packet capture tool, not specifically designed for Teams call quality and QoS analysis.

Correct answer: C. From the SharePoint admin center, configure the Sharing settings.

SharePoint admin center Sharing settings control who can access files stored in Teams and SharePoint. This is where you can restrict new guest user access while maintaining access for existing guest accounts, as it governs external sharing permissions at the file storage level.

Why the other options are wrong

• A. Teams admin center guest access settings control Teams communication features, not file access restrictions.
• B. External access settings manage federation between organizations, not guest file sharing permissions.
• D. Microsoft Entra external collaboration settings control invitation and access policies but not the granular file-level sharing controls needed.

Correct answer: A. Yes

The Microsoft Teams admin center includes Guest access settings that allow administrators to control what capabilities guest users have during Teams meetings. These settings include the ability to disable camera usage for guest participants. Modifying the Guest access settings in the Teams admin center is the correct method to prevent guest users from using cameras during meetings.

Why the other options are wrong

• B. Guest access settings in Teams admin center do provide controls over guest user capabilities including camera permissions, making this solution valid for the stated goal.

Correct answer: A. From Compliance Manager, search the audit log.

The Compliance Manager audit log search function provides the ability to identify Teams app installation, removal, and catalog changes within a specific date and time range. This audit log tracks administrative actions related to Teams apps, including when apps are installed on clients, removed from clients, added to the catalog, or removed from the catalog. The Teams usage reports and other options do not provide the detailed audit trail needed for these specific events.

Why the other options are wrong

• B. Teams usage reports in the admin center display usage metrics, not installation or removal events.
• C. The App usage report in Microsoft 365 admin center shows usage statistics rather than installation and removal audit events.
• D. Entra audit logs track identity and access events, not Teams app-specific actions.

Correct answer: C. the Azure Active Directory admin center

Changing a group's membership type from Assigned (static) to Dynamic User requires the Azure Active Directory admin center. This is where you manage group properties and membership rules for Microsoft 365 groups. Active Directory Users and Computers is for on-premises management only, while the Teams clients and admin center do not provide this capability.

Why the other options are wrong

• A. Active Directory Users and Computers manages on-premises AD objects and cannot change cloud group membership types.
• B. The Microsoft Teams client is for end-user collaboration and does not have group management capabilities.
• D. The Microsoft Teams admin center manages Teams-specific policies and settings, not group membership types.

Correct answer: C. Create a Conditional Access policy.

A Conditional Access policy can enforce terms of use acceptance as a condition for guest users before they gain access to Teams. This policy-based approach ensures all guest users from fabrikam.com must accept the TOU before accessing the service.

Why the other options are wrong

• A. Verified ID is for identity verification, not for enforcing terms of use acceptance.
• B. Access reviews are for periodic certification of access rights after they are granted, not for preventing initial access.
• D. PIM is for privileged identity management of administrative accounts, not for guest user onboarding requirements.

Correct answer: B. No

External access settings in Teams admin center control federation and communication with external organizations, not device permissions for guests. To prevent guest users from using cameras during meetings, meeting policies must be configured to restrict camera access for guests specifically. External access settings alone do not provide this granular control over device capabilities.

Why the other options are wrong

• A. External access settings do not control device permissions such as camera usage within meetings.

Correct answer: B. No

External sharing settings in Microsoft Teams admin center control whether external users can be invited to Teams and access to shared content, but they do not provide granular controls over specific device capabilities like cameras during meetings. Camera permissions for guests are managed through Guest access settings, not External sharing settings. Therefore, modifying only the External sharing settings would not meet the goal of preventing cameras for guest users.

Why the other options are wrong

• A. External sharing settings control access permissions and invitation policies rather than device-level capabilities like camera usage during meetings.

Correct answer: B. No

Adding a tab for the Sales site makes the content accessible from Teams but does not automatically create folders for new channels in the SharePoint site. The integration between Teams channels and SharePoint folders requires that the team be directly connected to the SharePoint site, not just adding a tab.

Why the other options are wrong

• A. This solution does not meet the goal because adding a tab does not establish the folder creation relationship required for new channels.

Correct answer: C, D. open and blocked ports; audio quality tests

The Network Testing Companion for Teams includes audio quality tests and open/blocked ports testing as part of its network readiness assessment. These two tests help identify network conditions and connectivity issues that could affect Teams performance. Trace route information is a general network diagnostic tool but not part of the Teams-specific Network Testing Companion. Video quality tests and QoS validation are important for Teams but are not included in this particular assessment tool.

Why the other options are wrong

• A. Trace route is a general network diagnostic tool, not part of the Network Testing Companion assessment.
• B. Video quality tests are not included in the Network Testing Companion assessment.
• E. QoS validation is not a specific test included in the Network Testing Companion assessment.

Correct answer: D. an app in Microsoft Intune

For Azure AD-joined and Intune-enrolled computers with standard users, deploying Teams through Microsoft Intune is the appropriate solution. Intune provides centralized app deployment and management for cloud-joined devices, allowing standard users to receive the application without local administrator rights.

Why the other options are wrong

• A. App registration is for application permissions and access, not for deploying client applications to endpoints.
• B. Domain-based GPOs apply to domain-joined devices; these computers are Azure AD-joined, not domain-joined.
• C. Azure App Service is for hosting web applications, not for deploying desktop clients to user devices.

Correct answer: D. Add personas.

In Microsoft Teams Network Planner, after creating a new network plan, the next step is to add personas. Personas represent user archetypes (such as office workers or remote workers) with different bandwidth requirements. These must be defined before configuring network sites, as they determine the networking requirements that will be calculated for each site.

Why the other options are wrong

• A. Network settings are configured after personas and sites are established.
• B. While network sites are added eventually, personas must be defined first to calculate site requirements.
• C. Reports are generated after the plan is fully configured with personas and sites.

Correct answer: A, B. Compliance; Insider Risk Management

Information barriers can be implemented through two licensing add-ons: Microsoft 365 Compliance (which includes information barriers functionality) or Insider Risk Management. Both provide the capability to restrict communication and collaboration between specified groups of users to prevent conflicts of interest.

Why the other options are wrong

• C. Microsoft Defender for Office 365 provides threat protection but does not include information barriers functionality.
• D. Communications Credits are for billing phone and conferencing services, not for information barriers.

Correct answer: A. data loss prevention (DLP) policy

A Data Loss Prevention (DLP) policy is configured to prevent sensitive information from being shared in Teams channels and private chats. DLP policies use pattern matching and classification to identify sensitive data like credit card numbers, social security numbers, or custom-defined terms and block their transmission. This protects against accidental disclosure of sensitive information to guest users or other unintended recipients within Teams communications.

Why the other options are wrong

• B. Messaging policy controls message features like editing and deletion permissions, not content restriction based on sensitivity.
• C. Information barrier policy restricts communication between specific users or groups but does not filter content within allowed communications.
• D. Sensitivity labels classify documents and content but do not actively prevent sharing of sensitive text in chat or channel messages.

Correct answer: D. Reports reader

The Reports reader role provides the minimum necessary permissions to view analytics and reports in the Teams admin center while adhering to the principle of least privilege. This role is specifically designed for read-only access to reporting data without granting broader administrative capabilities. Groups administrator and Skype for Business administrator roles grant unnecessary elevated permissions, while Global reader provides organization-wide read access beyond what is needed.

Why the other options are wrong

• A. Groups administrator has permissions far beyond viewing reports and violates least privilege.
• B. Skype for Business administrator is overly broad and not specifically designed for Teams reporting.
• C. Global reader grants read access across the entire Microsoft 365 organization, exceeding the least privilege requirement.

Correct answer: A. Microsoft Network Planer

Microsoft Network Planner is the dedicated tool for assessing bandwidth requirements and network readiness before deploying Microsoft Teams. It helps determine whether branch offices have sufficient bandwidth to support audio, video, and conferencing workloads. The Teams Call Quality Dashboard monitors existing call quality but requires Teams to already be deployed. Network Monitor is for troubleshooting existing traffic. Network Testing Companion is not a standard Microsoft planning tool.

Why the other options are wrong

• B. Microsoft Teams Call Quality Dashboard monitors quality of existing Teams calls, not pre-deployment bandwidth planning.
• C. Microsoft Network Monitor is used for troubleshooting network issues, not planning bandwidth requirements before deployment.
• D. Microsoft Network Testing Companion is not a standard Microsoft tool for bandwidth assessment and planning.

Correct answer: B. Reports reader

The Reports reader role provides read-only access to all Microsoft 365 reports, including Microsoft Teams user activity and device usage reports, while restricting the ability to make changes to any Microsoft 365 services.

Why the other options are wrong

• A. Teams Service Administrator has broad administrative permissions to change Teams settings and policies, exceeding the read-only requirement.
• C. Teams Communications Support Specialist is focused on support tasks and troubleshooting but is not the appropriate role for viewing all Teams reports.
• D. Message Center reader only provides access to Message Center communications, not to Teams usage and activity reports.

Correct answer: A, D. Communication Credits; Microsoft 365 Audio Conferencing

Audio Conferencing adds the capability for users to dial into meetings using toll-free and toll numbers. Communication Credits provide the financial mechanism to pay for toll-free minutes used during conferences. Together, these two add-on licenses enable users with E3 licenses to join scheduled meetings via toll-free phone numbers. The Phone System is for calling features, Domestic Calling Plan is for outbound calling, and Common Area Phone is for shared devices.

Why the other options are wrong

• B. Microsoft 365 Phone System - Virtual User is for dedicated calling capabilities, not conference dial-in.
• C. Domestic Calling Plan enables PSTN calling but not conference dial-in.
• E. Common Area Phone is a license type for shared conference phones, not for user dial-in capability.

Correct answer: C. Modify the Team discovery options for the Managers team.

The Team discovery options allow administrators to control whether a private team appears in the Suggested Teams list and search results. By modifying the Team discovery settings for the Managers team to hide it from suggestions, you ensure the team is not visible in the Suggested Teams list while still maintaining its private status for existing members.

Why the other options are wrong

• A. Member permissions control what actions members can perform within the team, not whether the team appears in the Suggested Teams list.
• B. App permission policies control which apps are available to users, not team visibility in suggestions.
• D. There is no Hide option for teams; team visibility is controlled through the Team discovery settings configuration.

Correct answer: C. Assign the Reports Reader role to the manager.

The Reports Reader role is designed specifically for viewing usage and analytics reports across Microsoft 365 services, including Teams usage reports. This role follows the principle of least privilege by granting only the minimal permissions needed to access reports without providing broader administrative capabilities. Teams Communications Administrator has broader permissions for Teams configuration, Security Administrator has extensive security-related permissions, and Compliance Manager has broader compliance management capabilities.

Why the other options are wrong

• A. Teams Communications Administrator has extensive Teams configuration and management permissions beyond just viewing reports.
• B. Security Administrator has broad security permissions across the entire organization, exceeding the need for report viewing.
• D. Compliance Manager role has compliance management permissions that exceed the requirement for viewing usage reports.

Correct answer: A. Teams Communication support specialist

The Teams Communication Support Specialist role provides read-only access to Teams analytics and reports in the Teams admin center while maintaining the principle of least privilege. This role is specifically designed for support staff who need to view diagnostic and reporting data without administrative permissions. Global Reader provides excessive permissions, Skype for Business Administrator is for legacy systems, and Global Administrator violates the least privilege principle.

Why the other options are wrong

• B. Skype for Business Administrator manages legacy Skype infrastructure, not Teams analytics.
• C. Global Reader grants broader permissions than necessary, violating least privilege.
• D. Global Administrator has excessive permissions far beyond viewing analytics and reports.

Correct answer: A. Yes

The Teams Administrator role includes permissions to manage Teams devices, including the ability to remotely restart Teams devices. This role provides the necessary device management capabilities required for remote device administration.

Correct answer: B. From PowerShell, run Set-CsPrivacyConfiguration -EnablePrivacyMode $true.

The Set-CsPrivacyConfiguration cmdlet with the -EnablePrivacyMode $true parameter restricts presence information visibility to only users on the individual's contact list. This is the correct PowerShell command to ensure that external partners can only see presence information if they are explicitly in the user's contacts.

Why the other options are wrong

• A. The AllowFederatedUsers parameter controls federation with external organizations, not presence visibility.
• C. The domain allow list controls which external domains can federate, not individual presence permissions.
• D. Azure AD guest access restrictions do not control Teams presence information visibility.

Correct answer: B. Create a new messaging policy.

Creating a new messaging policy is the first step to control specific messaging features for defined user groups. Since the requirement is to prevent only research department users from deleting messages, a new messaging policy should be created with message deletion disabled, then assigned to that department. Modifying the global messaging policy would affect all users organization-wide, which is not the requirement. Meeting settings and meeting policies control meeting features, not chat message deletion.

Why the other options are wrong

• A. Meeting settings control meeting features, not message deletion capabilities.
• C. Modifying the global policy would affect all users, not just the research department.
• D. Meeting policies govern meeting features, not chat message deletion.

Correct answer: B, C. Create a new meeting policy and set Who can bypass the lobby to Everyone; Apply the policy to the sales department users.

To apply a policy only to the sales department, you must create a new meeting policy separate from the global policy and configure it to allow everyone to bypass the lobby, then apply this custom policy specifically to the sales department users. This ensures the setting applies only to that group.

Why the other options are wrong

• A. Modifying the global policy would apply the change to all users, not just the sales department.
• D. Setting bypass to 'People in my organization' would not admit guest users by default; this only applies to internal users.

Correct answer: B. Modify the Email integration options in the Org-wide Teams settings in the Microsoft Teams admin center.

The Email integration options in Org-wide Teams settings allow administrators to configure which external email domains can send emails to team channels. This feature enables you to restrict email-to-channel posting to only the partner company's email domain, ensuring that only authorized external users can contribute to channels via email.

Why the other options are wrong

• A. Accepted Domains in Exchange Online is used for mail flow and routing configuration, not for controlling which external domains can email Teams channels.
• C. Guest access settings control guest participation in teams and channels, not email domain restrictions for channel communications.
• D. Organization options in Org-wide Teams settings configure general Teams features but do not provide email domain filtering for channel communications.

Correct answer: A. Islands

Islands mode lets users run Skype for Business and Teams side by side and use every Teams feature, which is the mode meant for evaluating Teams. Users with Enterprise Voice keep making and receiving PSTN calls in the Skype for Business client, so calling is not affected.

Why the other options are wrong

• B. Skype for Business with Teams Collaboration limits Teams to group collaboration, so users cannot fully evaluate Teams.
• C. Skype for Business only mode prevents users from using Teams, so no evaluation is possible.
• D. Meetings First moves only meetings to Teams and is meant for organizations not ready for calling, not for a full evaluation of Teams.

Correct answer: A, D. end-to-end encryption; custom meeting backgrounds

Teams for VDI has specific feature limitations. End-to-end encryption and custom meeting backgrounds are unavailable on VDI deployments due to architectural constraints. Background blur, live captions, and multi-window functionality are supported on Teams VDI clients.

Why the other options are wrong

• B. Background blur is available on Teams VDI clients.
• C. Live captions are available on Teams VDI clients.
• E. Multi-window functionality is available on Teams VDI clients.

Correct answer: D. The default Live events policy

The default Live events policy controls who can access live events, including settings for external user access. This policy allows administrators to permit external users without guest accounts to join live events. Configuring this policy directly addresses the requirement to enable external user participation.

Why the other options are wrong

• A. External Access Org-wide settings control federation and guest access for messaging and presence, not live event attendance.
• B. The Meeting policy governs meeting settings but does not specifically control live event external access permissions.
• C. Live events settings is a general reference; the specific configuration occurs through the live events policy.

Correct answer: C. Ensure that all users have both Microsoft Skype for Business and Microsoft Teams installed and are signed in to both applications.

In Islands mode, users run Teams and Skype for Business independently, causing chat messages to be delivered to whichever application the recipient is actively using. To ensure no messages are missed, users must be signed into both applications simultaneously so messages arrive in both clients regardless of which application the sender uses.

Why the other options are wrong

• A. Signing into only one application defeats the purpose of Islands mode and risks missing messages sent to the application not being used.
• B. Changing to Teams Only would force immediate migration but is not the solution during the gradual three-month migration period.
• D. Skype for Business with Teams collaboration mode does not ensure parity in Islands mode message delivery across both applications.

Correct answer: B. Configure Information Barrier policies.

Information Barrier policies restrict communication between specific groups of users. By creating an Information Barrier policy for the Research team that prevents them from communicating with other departments, you ensure they can only collaborate within their own team. This feature requires Microsoft 365 E5 licenses and is specifically designed for departmental communication restrictions. Meeting policies control meeting behaviors, App Protection policies manage app security and compliance, and Conference Bridges manage meeting connectivity.

Why the other options are wrong

• A. Teams Meeting policies control meeting features and permissions but don't restrict cross-team communication.
• C. App Protection policies manage mobile app security and compliance, not team communication restrictions.
• D. Conference Bridges manage audio conferencing connectivity and don't restrict inter-team communication.

Correct answer: D. Clear the Microsoft Teams client cache on the mobile phone.

When a user's display name is changed in Azure AD or Microsoft 365, the Teams mobile app caches the old display name locally. Clearing the Microsoft Teams client cache on the mobile device forces the app to refresh and retrieve the updated display name from the server, resolving the issue of outdated caller information.

Why the other options are wrong

• A. Debug logs are diagnostic tools for troubleshooting technical issues, not for refreshing cached data.
• B. Sync-CsOnlineApplicationInstance manages application instances in Teams Phone System, not user display names.
• C. Self-help diagnostics in the Microsoft 365 admin center cannot clear mobile app caches.

Correct answer: C. the Teams settings

To configure which email domains can send messages to Teams channels, you must modify the Teams settings. Specifically, within Teams channel settings, you can configure email filtering to allow messages only from specified domains such as contoso.com and fabrikam.com. This is a Teams-specific configuration that controls channel email ingestion.

Why the other options are wrong

• A. Azure AD external collaboration settings manage guest access and B2B scenarios, not channel email domain filtering.
• B. Exchange Online accepted domains configure the organization's email domains but do not control Teams channel email permissions.
• D. Global teams policies manage general Teams behavior and features but do not provide granular email domain filtering for channels.

Correct answer: B. No

The Microsoft Teams admin center does not have a dedicated External collaboration settings section for controlling guest camera permissions. Guest camera restrictions during Teams meetings are managed through the global or custom meeting policies in the Teams admin center under the Meetings section, specifically through the audio and video settings within meeting policies. The naming of settings varies between admin centers, and External collaboration settings are not found in the Teams admin center.

Why the other options are wrong

• A. While the Teams admin center is the correct location, it does not have an 'External collaboration settings' section; camera restrictions are configured through meeting policies instead.

Correct answer: B, C. Create a new meeting policy and set Automatically admit users to Everyone; Apply the policy to the sales department users.

To ensure guests are automatically admitted only for the sales department, you must create a new meeting policy with the 'Automatically admit users' setting configured to 'Everyone,' then apply this policy specifically to the sales department users. Modifying the global policy would affect all users, not just the sales department.

Why the other options are wrong

• A. Modifying the global meeting policy would apply the setting to all users, not just the sales department.
• D. Setting to 'People in your organization' would not automatically admit guest users.

Correct answer: C. an eCDN provider

An eCDN (Enterprise Content Delivery Network) provider minimizes bandwidth consumption for large-scale live events by distributing content from edge nodes closer to viewers and optimizing delivery through the network. This is the recommended solution for Teams live events exceeding 5,000 participants.

Why the other options are wrong

• A. A Session Border Controller manages VoIP and media traffic but does not optimize bandwidth for video streaming at scale.
• B. A third-party encoder is used to encode video content but does not reduce bandwidth requirements for distribution to large audiences.
• D. Cloud Video Interop enables video conferencing interoperability but is not designed to minimize bandwidth for large-scale streaming events.

Correct answer: B. An Enterprise Content Delivery Network (eCDN) provider.

An Enterprise Content Delivery Network (eCDN) provider reduces bandwidth consumption during live events by caching and optimizing the distribution of video content across the network. eCDN solutions intercept video streams and deliver them efficiently through local network nodes, significantly decreasing internet bandwidth usage.

Why the other options are wrong

• A. Phone System is for voice calling, not video bandwidth optimization.
• C. Cloud Video Interop enables integration with third-party video systems, not bandwidth reduction.
• D. SIP providers manage voice protocol routing, not video content delivery.

Correct answer: A. The default Messaging policy only.

The default Messaging policy can be configured to prevent all users from editing sent messages while allowing deletion only for specific users. By setting the policy to prevent editing globally and configuring deletion settings appropriately, all requirements are met with a single policy. Teams messaging policies support role-based settings that distinguish between team owners and regular members without requiring separate policy assignments.

Why the other options are wrong

• B. One additional policy is unnecessary when the default policy can be configured to meet all requirements through appropriate settings.
• C. Two additional policies exceed the minimum required to implement the stated requirements.
• D. Meeting policies control meeting-related settings, not message deletion and editing permissions.

Correct answer: C. Teams Communications Support Engineer

The Teams Communications Support Engineer role is designed for technicians who need to troubleshoot call quality issues using the Call Quality Dashboard and advanced troubleshooting tools. This role provides the necessary permissions for monitoring and diagnosing communication problems while maintaining the principle of least privilege, unlike broader administrator roles.

Why the other options are wrong

• A. Teams Communications Support Specialist has more limited permissions and cannot use the full advanced troubleshooting toolset.
• B. Teams Communications Administrator has broader permissions than needed and violates the principle of least privilege.
• D. Teams Service Administrator is a full administrative role with excessive permissions beyond what is required for call quality troubleshooting.

Correct answer: A, D. From the Microsoft Teams admin center, set Insert Quality of Service (QoS) markers for real-time media traffic to On; From Group Policy Management, create a Group Policy Object (GPO) that contains the Policy-based QoS settings, and then link the GPO to the domain.

To ensure Teams media traffic is processed by QoS, you must enable QoS markers in the Teams admin center (Option A) so Teams tags traffic with appropriate markers, and create a Group Policy Object with Policy-based QoS settings (Option D) so the network devices can identify and prioritize the marked traffic accordingly. Both the Teams side and the network side must be configured for QoS to function properly.

Why the other options are wrong

• B. Selecting a certified audio device does not ensure media traffic is processed by the QoS solution.
• C. Set-CsQoEConfiguration manages Quality of Experience reporting, not QoS traffic marking and prioritization.
• E. Logging for device configuration profiles does not enable QoS processing of media traffic.

Correct answer: B. Microsoft Teams Rooms Premium

Microsoft Teams Rooms Premium is the comprehensive licensing solution that supports Microsoft Teams Rooms, Surface Hub, and collaboration bars while including managed services for firmware updates, application updates, and Microsoft monitoring and troubleshooting of both room systems and peripherals. This is the only license that meets all three stated requirements. Teams Rooms Standard provides basic functionality without managed updates and monitoring, while Advanced Communications and Business Voice are licensing products for different use cases.

Why the other options are wrong

• A. Advanced Communications does not include Teams Rooms support or managed device services.
• C. Teams Rooms Standard does not include the managed firmware and application updates or monitoring services that Microsoft provides.
• D. Microsoft 365 Business Voice is designed for voice and calling capabilities, not for Teams Rooms management.

Correct answer: B. the Organization profile tab in Org settings

The Organization profile tab in Org settings within the Microsoft 365 admin center is where you can confirm the geographic location and data residency of the Teams service workload for data at rest. This setting shows the primary data storage location for your organization's services.

Why the other options are wrong

• A. The Data sources tab in Search & intelligence is for configuring search-related data sources, not service workload locations.
• C. The Overview tab in Service health displays current service status and incidents, not data location information.
• D. The Security & privacy tab contains security policies and privacy settings but not service data location configuration.

Correct answer: A, D. Set the DisableRAILScreensharing registry key value to 1; Set the ShareClientDesktop registry key value to 1.

To restrict the WebRTC Redirector Service to only support application window sharing (not desktop/RAIL sharing), you must set DisableRAILScreensharing to 1 to disable remote desktop sharing, and set ShareClientDesktop to 0 to prevent desktop sharing. Together these settings allow only application window content sharing.

Why the other options are wrong

• B. UseHardwareEncoding controls encoding method, not sharing scope.
• C. ShareClientDesktop set to 0 is correct, but this alone is insufficient without also disabling RAIL screening.
• E. DisableRAILAppSharing would disable application window sharing, which is the opposite of the requirement.

Correct answer: B. a multitenant organization

A multitenant organization enables seamless collaboration across multiple Microsoft Entra ID instances within the same organization structure. It supports user search, free/busy status visibility for Teams meetings, and file collaboration on Teams files across divisions while maintaining separate identity systems.

Why the other options are wrong

• A. Guest access creates external user relationships but does not provide the integrated experience across divisions needed for free/busy status and seamless collaboration.
• C. Shared channels require users to be in the same tenant and do not support cross-tenant scenarios with separate Entra instances.
• D. External access is designed for cross-organization federation, not for divisions within the same company with separate tenants.

Correct answer: B. No

Placing group mailboxes on Litigation Hold does not prevent permanent deletion of private chats. Private chats are stored in individual user mailboxes, not in the group mailboxes used by Teams. To prevent deletion of User1's private chats, User1's personal mailbox must be placed on Litigation Hold, not the Teams group mailboxes.

Why the other options are wrong

• A. Group mailbox holds do not protect individual private chat messages stored in user mailboxes.

Correct answer: B. a sensitivity label in the Microsoft 365 Compliance admin center

Sensitivity labels in the Microsoft 365 Compliance admin center are used to classify and identify teams with sensitivity levels such as Highly Confidential. These labels appear in the Teams client and control encryption, access permissions, and team visibility based on the applied sensitivity level.

Why the other options are wrong

• A. Teams app setup policies control which apps are available to users, not team classification.
• C. Supervision policies monitor and manage communication compliance, not team sensitivity classification.
• D. Teams policies control meeting and messaging settings, not team sensitivity labeling.

Correct answer: C. From Microsoft OneDrive, set Limited-access user permission lockdown mode to Deactivate.

The 'Limited-access user permission lockdown mode' in OneDrive can restrict access to files for certain users. When this mode is set to Activate, it prevents users without direct permissions from accessing shared files. Deactivating this mode allows User1 to access the file shared through Teams.

Why the other options are wrong

• A. Teams file storage settings do not control individual file access permissions.
• B. SharePoint Sharing settings control tenant-level sharing policies, not individual file access.
• D. SharePoint Access control settings manage broad access policies, not individual user file permissions.

Correct answer: A. Yes

Creating a new team from an existing Office 365 group or team that is already connected to the Sales SharePoint site ensures that the team is linked to that site. When a team is properly connected to a SharePoint site, new channels automatically get corresponding folders created in the SharePoint document library, meeting the stated goal.

Why the other options are wrong

• B. This solution does meet the goal when the existing Office 365 group is properly configured with the Sales SharePoint site.

Correct answer: C. the Microsoft Teams client

Guest permissions for channel deletion are configured directly within the Microsoft Teams client through team settings and member permissions management. The Teams client provides the interface where team owners can adjust guest user capabilities and restrictions. The Microsoft Teams admin center manages organization-wide policies but not granular guest permissions per team. The Azure portal and Microsoft 365 security center do not contain Teams-specific guest permission controls.

Why the other options are wrong

• A. The Teams admin center manages org-wide policies, not individual team guest permissions.
• B. The Azure portal does not contain Teams guest permission management features.
• D. The Microsoft 365 security center focuses on security policies, not Teams guest permissions.

Correct answer: B. Advanced Threat Protection

Advanced Threat Protection (ATP), part of Microsoft Defender for Office 365, scans files for malware and prevents malicious content from being opened in Microsoft Teams. It provides real-time scanning and protection against malware-infected files across Teams channels for both internal users and guest accounts. Sensitivity labels classify and protect data but don't scan for malware. Protected Identity Management and Conditional Access policies control access but don't scan files for malware threats.

Why the other options are wrong

• A. Sensitivity labels classify data and apply protections based on content classification, not malware scanning.
• C. Protected Identity Management is not a standard Microsoft 365 security feature for malware protection.
• D. Conditional Access policies control who can access resources based on conditions, not scan files for malware.

Correct answer: B. No

The Grant-CsTeamsUpgradePolicy cmdlet is used to assign coexistence modes and upgrade policies to users, but it does not update the Microsoft Teams application itself or enable new features on VDI deployments. The MSI package deployed to VDI needs to be updated to a newer version to access new Teams features; policy assignment alone cannot resolve missing functionality in the application.

Why the other options are wrong

• A. Running the Grant-CsTeamsUpgradePolicy cmdlet only manages policy assignment and coexistence modes, not application updates or feature availability on VDI.

Correct answer: C, E. From the General Channel settings of Team1, set the channel moderation preference to Only owners can post messages; From the Team1 settings, set Show members the option to @team or @[team name] to Off.

To restrict posting in the General channel to only User1 and User2, you must set the channel moderation preference to 'Only owners can post messages' (option C). To prevent @mentions for org-wide team members, you must disable the '@team' mention capability by setting 'Show members the option to @team or @[team name]' to Off (option E). These two settings directly address both requirements.

Why the other options are wrong

• A. Clearing message edit options does not restrict who can create posts or control @mentions.
• B. This setting allows anyone to post with a warning, which contradicts the requirement that only owners can post.
• D. Disabling Fun stuff settings does not address post creation restrictions or @mention controls.

Correct answer: B. Microsoft Teams Call Quality Dashboard.

The Microsoft Teams Call Quality Dashboard (CQD) is the dedicated tool for analyzing network metrics during Teams calls, including packet loss, latency, jitter, and other quality indicators. It provides detailed telemetry data that allows administrators to assess call quality across different locations and network conditions.

Why the other options are wrong

• A. Microsoft Teams Usage Report provides statistics on user adoption and usage patterns, not detailed network quality metrics.
• C. Microsoft Teams Device Usage Report shows device types and adoption but does not include network quality metrics like packet loss.
• D. Microsoft Network Testing Companion is not an actual Microsoft tool for Teams call quality analysis.

Correct answer: C. Configure the Guest access settings in Org-wide settings.

Guest access settings in the Teams Admin Center allow you to configure specific capabilities for guest users, including whether they can use cameras during meetings. This setting applies only to guests while allowing internal users to retain their camera capabilities. External access settings control federation with other organizations, Teams settings control org-wide features for all users, and Meeting Policies apply to all meeting participants without distinguishing between guests and internal users.

Why the other options are wrong

• A. External access settings control federation with external organizations, not guest-specific camera permissions.
• B. Teams org-wide settings apply to all users globally and cannot differentiate between guests and internal users.
• D. Meeting Policy settings apply to all participants equally and cannot create different restrictions for guests versus internal users.

Correct answer: A. Yes

Using PowerShell cmdlets New-AzureADPolicy and Set-AzureADPolicy can be used to create and configure Azure AD policies that restrict guest collaboration to specific domains and control guest invitation behavior. These cmdlets allow administrators to implement B2B collaboration restrictions at the Azure AD level, which directly affects Teams guest access capabilities and meets both security policy requirements regarding domain restrictions and guest invitation prevention.

Why the other options are wrong

• B. PowerShell is a valid method for configuring Azure AD policies that control guest access restrictions at the directory level.

Correct answer: B. No

Modifying the global meeting policy does not address the security requirements. Guest access restrictions based on specific domains and guest invitation permissions are controlled through the Teams guest access settings and external collaboration settings in Azure Active Directory, not through the meeting policy. The meeting policy governs meeting-specific behaviors like recording and transcription, not guest authentication and invitation controls.

Why the other options are wrong

• A. The meeting policy does not contain settings for domain-based guest restrictions or guest invitation prevention.

Correct answer: D. Configure the Guest Access settings in the Microsoft Teams admin center.

Guest Access settings in the Microsoft Teams admin center control what guest users can do in Teams, including whether they can post messages to channels. Configuring these settings to allow guests to post messages to channels will enable the external contractor to post to the Design channel.

Why the other options are wrong

• A. Global Meeting policy controls meeting-specific features and does not affect channel messaging permissions.
• B. External collaboration settings in Azure AD manage whether external users can be invited, but not their specific permissions within Teams channels.
• C. The Default Teams App Permission policy controls which apps guests can use, not their ability to post messages in channels.

Correct answer: B. Teams Communications Administrator

The Teams Communications Administrator role has permissions to manage both meetings (meeting policies and configurations) and voice (calling policies, phone number inventory, and assignment). This role provides the specific capabilities needed without granting excessive permissions. Teams Communications Support Specialist has limited permissions focused on troubleshooting. Teams Communications Support Engineer is not a standard role. Teams Service Administrator has broader permissions than necessary, violating the principle of least privilege.

Why the other options are wrong

• A. Teams Communications Support Specialist has limited troubleshooting permissions and cannot manage meeting and voice policies.
• C. Teams Communications Support Engineer is not a recognized Teams administrator role.
• D. Teams Service Administrator has broader permissions than required, exceeding the principle of least privilege for this specific task.

Correct answer: A. Press the following key combination: Ctrl+Alt+Shift+1.

Pressing Ctrl+Alt+Shift+1 on the Teams desktop client generates debug logs that are saved locally on the user's computer. These logs can then be collected and analyzed to troubleshoot Teams client issues. Right-clicking the Teams icon doesn't provide a 'Get Logs' option in standard Teams versions, Windows Event Viewer application logs don't contain Teams-specific debug information, and Usage reports in the Teams admin center show aggregate usage data rather than individual client debug logs.

Why the other options are wrong

• B. The Teams icon context menu doesn't include a 'Get Logs' option for collecting debug logs.
• C. Windows Event Viewer application logs don't capture Teams client-specific debug information.
• D. Teams admin center usage reports show usage statistics and don't provide individual client debug logs.

Correct answer: A. group naming policy

A group naming policy is configured to block specific words from being used in the names of new teams and Microsoft 365 groups. This policy allows organizations to enforce naming conventions and prevent inappropriate or sensitive terminology from appearing in team names. The policy applies at the point of team creation and validation.

Why the other options are wrong

• B. Team templates policy controls the structure and pre-configured content of new teams, not naming restrictions.
• C. Communication compliance policy monitors team communications for policy violations but does not prevent team name creation.
• D. Terms of use policy applies to user acceptance agreements, not team naming restrictions.

Correct answer: C. Clear the Teams client cache.

Clearing the Teams client cache forces the application to refresh user profile information, display names, and profile photos from the server. This ensures that changes made to User1's profile are immediately reflected in the new Teams client without waiting for automatic cache expiration.

Why the other options are wrong

• A. The Microsoft Support and Recovery Assistant is used for troubleshooting issues, not for refreshing profile information.
• B. The self-help diagnostics tool is used for diagnosing problems, not for updating profile information.
• D. Clearing web browser cache does not affect the Teams client's profile information display.

Correct answer: A. Yes

Reinstalling a new Microsoft Teams MSI package will update the application to the latest version and ensure users have access to new features. The MSI package can be updated independently through reinstallation, which will bring the VDI environment current with the latest Teams features.

Why the other options are wrong

• B. Simply reinstalling the MSI package is a valid solution for updating Teams to include new features in a VDI environment.

Correct answer: A. Microsoft Network Monitor

Microsoft Network Monitor is a packet-level network monitoring tool that can capture and analyze network traffic to confirm that QoS policies are being applied correctly at branch offices. It allows you to inspect packet headers and verify that QoS markings are present in traffic from Teams. The Teams Device Usage Report and Call Quality Dashboard provide high-level metrics but cannot confirm QoS policy application at the packet level. Network Testing Companion is not a standard Microsoft tool for QoS verification.

Why the other options are wrong

• B. Microsoft Network Testing Companion is not a standard tool for verifying QoS implementation.
• C. Microsoft Teams Device Usage Report shows usage statistics but not QoS policy application details.
• D. Microsoft Teams Call Quality Dashboard provides call quality metrics but not specific QoS policy verification.

Correct answer: A. Teams Rooms Pro

Teams Rooms Pro is the appropriate license for meeting room devices that need to meet Intune device compliance, support Intelligent Speaker functionality, and support Operator Connect integration. Teams Rooms Pro includes all necessary management capabilities and feature support while being more cost-effective than E5 licenses when assigning to devices rather than users. Teams Rooms Basic and Teams Shared Device do not support these advanced features, and E3/E5 are user licenses, not device licenses.

Why the other options are wrong

• B. Microsoft 365 E5 is a user subscription license designed for individual users, not device licensing, making it cost-inefficient for meeting room equipment.
• C. Teams Shared Device license does not support Intelligent Speaker or meet the full compliance requirements specified.
• D. Microsoft 365 E3 is a user subscription and does not provide the necessary Teams Rooms features.
• E. Teams Rooms Basic does not support Intelligent Speaker or Operator Connect features required by the solution.

Correct answer: D. the Azure Active Directory admin center

The Azure Active Directory admin center is the correct tool to configure dynamic group membership based on department attributes. Dynamic groups automatically add new employees matching specified criteria (such as department) without manual intervention. Active Directory Users and Computers manages on-premises AD only and does not create dynamic groups. Azure AD Connect synchronizes data but does not configure group membership rules. The Microsoft 365 admin center does not provide dynamic group membership configuration capabilities.

Why the other options are wrong

• A. Active Directory Users and Computers manages on-premises AD and does not support dynamic group membership rules.
• B. The Microsoft 365 admin center lacks dynamic group membership configuration features.
• C. Azure AD Connect synchronizes on-premises AD to Azure AD but does not configure membership rules.