- December 21, 2024
- Pankaj Kumar
- 0

- MS-700 Assessment
- Microsoft Teams Administrator Assessment
Question 1
Your company uses Microsoft Teams for collaboration and communication.
You need to receive an alert when a user posts inappropriate messages or content to a team.
Which type of policy should you configure?
- communication compliance policy
- information barrier policy
- sensitivity label policy
- terms of use policy
Reveal Solution
Correct Answer: communication compliance policy
Explanation:
A communication compliance policy in Microsoft Teams is designed to help organizations detect, capture, and act on inappropriate messages or content shared in Teams (or other supported platforms). It enables monitoring of communication to ensure it complies with company policies, legal requirements, or regulatory standards.
Question 2
Your company uses Microsoft Teams for collaboration and communication.
You plan to deploy communication compliance policies.
Which three types of communication are supported by communication compliance?
- chat messages sent by guest users
- group chats
- Microsoft Teams Business Voice
- private Microsoft Teams channels
- public Microsoft Teams channels
Reveal Solution
Correct Answers:
- Chat messages sent by guest users
- Group chats
- Public Microsoft Teams channels
Explanation:
Communication compliance policies in Microsoft Teams allow you to monitor and analyze messages for compliance or regulatory purposes. Here’s how each option applies:
Chat messages sent by guest users – Communication compliance policies support monitoring messages from guest users who participate in your Teams environment.
Group chats – Group chats between users in Teams are supported and can be monitored for compliance.
Public Microsoft Teams channels – Messages in public channels are supported and can be monitored to ensure they align with organizational policies.
Question 3
Your company uses Microsoft Teams for collaboration and communication.
You have a team named Research that contains internal and external members.
A data loss prevention (DLP) policy named Policy1 is applied to the Research team. Policy1 blocks guest users from accessing sensitive data.
You receive a report that a guest user accessed a sensitive file stored in the Research team. You review Policy1 and validate that the policy is enabled and applied to only the Teams chat and channel messages location.
You need to ensure that guest users cannot access sensitive data from the Research team.
Which two configurations should you perform in Policy1?
- Add the Exchange email location.
- Add the OneDrive accounts location.
- Add the SharePoint sites location.
- Enable the policy tips option.
- Enable the Restrict Third Party Apps option.
Reveal Solution
Correct Answers:
- Add the SharePoint sites location.
- Add the OneDrive accounts location.
Explanation:
Data Loss Prevention (DLP) policies in Microsoft 365 help prevent the sharing of sensitive data. In Microsoft Teams, files shared in a team are stored in the associated SharePoint site, while files shared in private chats are stored in the user’s OneDrive for Business. Therefore, to block guest users from accessing sensitive data, you need to include both SharePoint sites and OneDrive accounts in the DLP policy locations.
Question 4
Your company has a Microsoft 365 infrastructure.
You need to ensure that content stored in the following locations can be retained:
- Microsoft SharePoint sites
- Microsoft OneDrive accounts
- Microsoft Teams channel messages
- Microsoft Teams chats
What is the minimum number of retention policies that you should create?
- 1
- 2
- 3
- 4
Reveal Solution
Correct Answers:
- 2
Explanation:
A single retention policy cannot cover all the specified locations because the underlying data architectures and retention mechanisms differ between services like SharePoint/OneDrive and Microsoft Teams. SharePoint and OneDrive use unified retention settings for file storage, while Microsoft Teams requires specific policies to manage chat and channel message data. Teams messages are stored in Exchange mailboxes and a separate backend, necessitating distinct retention settings from those used for SharePoint and OneDrive. Therefore, at least two policies are required to ensure proper coverage.
SharePoint sites and OneDrive accounts: These can be managed under a single retention policy since their data structures and retention settings are unified.
Microsoft Teams channel messages and chats: These can also be managed under a single retention policy because Teams retention policies allow combining channel messages and chat messages in one policy.
Question 5
Your company uses Microsoft Teams for collaboration and communication.
You need to ensure that users in a team named Department1 cannot use Microsoft Teams to communicate with users in a team named Department2.
Which type of policy should you configure?
- data loss prevention (DLP) policy
- information barrier policy
- network security group (NSG)
- permission policy
Reveal Solution
Correct Answers:
- information barrier policy
Explanation:
Information barrier policies in Microsoft Teams are designed to restrict communication and collaboration between specific groups of users. This is typically used to comply with regulatory or business requirements, such as preventing conflicts of interest or maintaining confidentiality between departments.
Question 6
Your company uses Microsoft Teams for collaboration and communication.
You need to ensure that users in a team named Department1 are prevented from using Microsoft Teams to communicate with users in a team named Department2.
You create two segments named Department1 and Department2.
Which cmdlet should you use next?
- New-InformationBarrierPolicy
- New-SupervisoryreviewPolicyV2
- Set-TeamChannel
- Set-TeamMemberSettings
Reveal Solution
Correct Answers:
New-InformationBarrierPolicy
Explanation:
After creating the segments (Department1 and Department2), the New-InformationBarrierPolicy
cmdlet is used to create an Information Barrier policy to prevent communication between those segments. Information Barriers are designed specifically to restrict interactions between defined user groups within Microsoft Teams or other Microsoft 365 services.
Question 7
Your company uses Microsoft Teams for collaboration and communication.
You need to apply a policy package to 500 users within the company.
Which cmdlet should you use?
- Grant-CsUserPolicyPackage
- New-CsGroupPolicyAssignment
- New-CsBatchPolicyPackageAssignmentOperation
- Update-CsCustomPolicyPackage
Reveal Solution
Correct Answers:
New-CsBatchPolicyPackageAssignmentOperation
Explanation:
The New-CsBatchPolicyPackageAssignmentOperation
cmdlet is used to assign policy packages to a large number of users in bulk (e.g., 500 users). This cmdlet allows you to apply a policy package to multiple users simultaneously, streamlining the process when dealing with a significant number of users.
Question 8
Your company uses Microsoft Teams.
A user named Admin1 plans to explore and test upcoming pre-release features in the Teams client app.
You need to ensure that Admin1 can switch to Teams public preview.
What should you configure?
- Team policies
- Teams settings
- Teams update policies
- Teams upgrade settings
Reveal Solution
Correct Answers:
- Teams update policies
Explanation:
To allow a user like Admin1 to switch to the Teams public preview, you need to configure Teams update policies. These policies control how and when users can access preview or production versions of the Teams client.
By enabling the Public Preview option in the update policy assigned to Admin1, the user will be able to switch to the public preview mode in the Teams client and test upcoming features.
Question 9
Your company uses Microsoft Teams for collaboration and communication.
You need to ensure that when a user creates a new Team, the following rules apply:
- The user’s department is automatically added to the end of the Team name.
- The Team name must not contain the words Project or Test.
What should you do?
- From Microsoft Entra admin center, create a Groups Naming policy.
- From Microsoft Entra admin center, modify the Tenant properties.
- From the Microsoft Teams admin center, modify a Team template.
- From the Microsoft Teams admin center, modify the Global (Org-wide default) Teams policy.
Reveal Solution
Correct Answers:
- From Microsoft Entra admin center, create a Groups Naming policy.
Explanation:
A Groups Naming policy in the Microsoft Entra admin center (formerly Azure AD) allows you to enforce naming conventions for Microsoft 365 Groups. Since Teams are backed by Microsoft 365 Groups, the naming policy will apply to Teams as well.
With a Groups Naming policy, you can:
- Automatically add attributes like a user’s department to the Team name.
- Block specific words (e.g., “Project” or “Test”) from being used in Team names.
Question 10
You are planning a Microsoft Teams implementation for a secondary school.
You need to apply the most common policy settings that relate to messaging and meeting options for a school scenario.
What should you configure?
- Microsoft Teams advisor
- Network Planner
- policy packages
- Team apps
Reveal Solution
Correct Answers:
- Policy packages
Explanation:
Policy packages in Microsoft Teams are pre-configured collections of settings tailored for specific scenarios, such as education or healthcare. For a secondary school, you can use the Education policy package, which includes recommended settings for messaging, meeting options, and other features suitable for a school environment.
This helps ensure that students, teachers, and staff have appropriate permissions and controls in place without manually configuring individual policies.
Question 11
Your company uses Microsoft Teams and has Guest access enabled.
You have a team named Project1.
You need to ensure that guest access to Project1 content expires automatically after 90 days.
What should you do?
- From Microsoft Teams admin center, configure External access settings.
- From Microsoft Teams admin center, configure Guest access settings.
- From Microsoft 365 admin center, configure Privileged access settings.
- From SharePoint admin center, configure External sharing settings.
Reveal Solution
Correct Answers:
- From Microsoft 365 admin center, configure Privileged access settings.
Explanation:
To ensure that guest access to content in Microsoft Teams (which is backed by SharePoint for file storage) expires automatically after 90 days, you should use the Privileged access settings in the Microsoft 365 admin center.
The Privileged access feature allows you to set up expiration for guest access, which can help control how long external users (guests) have access to your organization’s Teams content, including limiting access after a certain period, such as 90 days.
Question 12
You are a Microsoft Teams administrator for Adatum.com.
Adatum.com collaborates with several external partner organizations.
You need to ensure that all external users meet the following requirements when added as a member of a team:
- Screen sharing: Not enabled
- Edit sent messages: On
- Delete sent message: Off
What should you configure from the Microsoft Teams admin center?
- External access
- Guest access
- Teams polices
- Teams settings
Reveal Solution
Correct Answers:
- Guest access.
Explanation:
The settings for external users (guests) in Microsoft Teams, such as screen sharing, editing sent messages, and deleting sent messages, are managed under Guest access in the Microsoft Teams admin center.
Here’s how these settings align with your requirements:
- Screen sharing: Not enabled: You can control whether guests can share their screen in meetings or calls under guest access settings.
- Edit sent messages: On: This setting allows guests to edit their messages after sending them.
- Delete sent messages: Off: This setting ensures guests cannot delete messages after they’ve been sent.
Question 13
Your company uses Microsoft Teams and has Guest access enabled.
You have a team named Project1.
You need to ensure that all guest users sign in or provide a verification code when attempting to access Project1 content. Your solution must only affect the Project1 team.
What should you do?
- From Microsoft Teams admin center, create and assign an Enhanced encryption policy.
- From Microsoft Teams admin center, modify Guest permissions for Project1.
- From SharePoint Admin center, modify External sharing settings at the organization level.
- From SharePoint Admin center, modify External sharing settings for the Project1 site.
Reveal Solution
Correct Answers:
- From SharePoint Admin center, modify External sharing settings for the Project1 site.
Explanation:
When guest users are accessing content in Microsoft Teams, the content is stored in the associated SharePoint site. To ensure that all guest users are required to sign in or provide a verification code when accessing the content, you should configure External sharing settings in the SharePoint Admin center specifically for the Project1 site.
By modifying the external sharing settings for the specific Project1 site, you can enforce more restrictive access requirements for guest users, including requiring them to sign in or provide a verification code.
Question 14
You are a Microsoft Teams administrator for Adatum.com.
You need to ensure that Adatum.com users can only invite users from Contoso.com to be members of and collaborate in Teams.
What should you do?
- From the Microsoft Entra admin center, configure Conditional access.
- From the Microsoft Entra admin center, configure Hybrid management.
- From the Microsoft Teams admin center, modify External access settings.
- From the Microsoft Teams admin center, modify Guest access settings.
Reveal Solution
Correct Answers:
- From the Microsoft Teams admin center, modify Guest access settings.
Explanation:
To ensure that Adatum.com users can only invite users from Contoso.com to be members of and collaborate in Teams, you should configure the Guest access settings in the Microsoft Teams admin center.
By modifying the Guest access settings, you can control which external domains are allowed to collaborate in Teams. In this case, you can restrict guest access to only allow users from Contoso.com. This ensures that Adatum.com users can invite only those from the specified external domain (Contoso.com) to collaborate within Teams.
By modifying the external sharing settings for the specific Project1 site, you can enforce more restrictive access requirements for guest users, including requiring them to sign in or provide a verification code.
Question 15
Your company uses Microsoft Teams for collaboration and communication.
You configure the following External access settings:
- People in my organization can communicate with Teams users whose accounts aren’t managed by an organization: On
- Allow users in my organization to communicate with Skype users: On
- Allow only specific external domains: Adatum.com
Which statement accurately describes the state of the organization?
- All other domains besides adatum.com are blocked from communicating with the organization.
- Anonymous participants cannot join meetings.
- Users from adatum.com are assigned Microsoft 365 licenses.
- Users from adatum.com have access to teams and channels.
Reveal Solution
Correct Answers:
- All other domains besides adatum.com are blocked from communicating with the organization.
Explanation:
The External access settings you’ve configured allow communication with users from external domains, but you’ve also set a restriction to only allow communication with the domain Adatum.com. This means:
- “Allow only specific external domains: Adatum.com” limits external communication to only the Adatum.com domain, and all other external domains are blocked from communicating with your organization via Teams.
- This setting does not directly affect user licenses, team membership, or anonymous participation in meetings.
Question 16
Your company uses Microsoft Teams and has external collaboration settings and guest access enabled.
A team owner named User1 reports that she cannot invite guests from outside of the organization to her team. User1 reports that she can invite guests that have already been added to the organization by the Global Administrator.
You need to ensure that User1 can add users from outside of the organization to the team as guests.
What should you do?
- From the Microsoft Teams admin center, modify the External access settings.
- From the Microsoft Teams admin center, modify the Guest access settings.
- From the Microsoft 365 admin center, enable modern authentication.
- From the Microsoft 365 admin center, modify the Microsoft 365 Groups settings.
Reveal Solution
Correct Answers:
- From the Microsoft Teams admin center, modify the Guest access settings.
Explanation:
To ensure that User1 can add guests from outside the organization to the team, you need to configure the Guest access settings in the Microsoft Teams admin center. Guest access must be enabled for Team owners to invite external users as guests to a team.
- If guest access is disabled, even if external collaboration is allowed, the ability to invite external users (guests) to a team will be restricted.
Question 17
Your company uses Microsoft Teams for collaboration and communication.
You plan to remotely provision a new Teams device.
What should you do first?
- Configure a device tag.
- Generate a verification code.
- From the Microsoft Teams admin center, add the device IP address.
- From the Microsoft Teams admin center, add the device MAC address.
Reveal Solution
Correct Answers:
- Generate a verification code.
Explanation:
When provisioning a new Teams device remotely, the first step is typically to generate a verification code. This code is used during the setup process to authenticate the device and link it to your organization’s Microsoft Teams environment.
The verification code is a key part of the process for remotely provisioning and configuring Teams devices like desk phones, conference room devices, or other hardware. This code ensures that the device is properly registered and authorized for use within your organization.
Question 18
Your company uses Microsoft Teams for collaboration and communication.
You have a team named Team1.
You need to recommend a new channel for Team1 that has the following features:
- Permits guests to participate in the channel.
- Uses a dedicated SharePoint site.
- Can limit membership to a subset of Team1.
Which channel type should you recommend?
- Private channel
- Shared channel
- Standard channel
Reveal Solution
Correct Answers:
- Private channel
Explanation:
A Private channel in Microsoft Teams meets the following requirements:
- Permits guests to participate: Private channels allow you to add guests (external users) as members, which means they can participate in the channel.
- Uses a dedicated SharePoint site: Each private channel has its own SharePoint site collection for document storage, separate from the main team’s SharePoint site.
- Can limit membership to a subset of Team1: Private channels allow you to restrict membership, so only a specific group of Team1 members can access the private channel. This enables you to limit access to a subset of the team.
Question 19
Your company uses Microsoft Teams.
User1 plans to make an app named App1 available for all Teams users.
You need to ensure that User1 can review permissions and grant consent to App1 on behalf of all users in the organization. The solution must use the principle of least privilege.
Which role should you assign to User1?
- Billing Administrator
- Global Administrator
- Teams Administrator
- Teams Communication Administrator
Reveal Solution
Correct Answers:
- Teams Administrator
Explanation:
The Teams Administrator role is the most appropriate for User1 in this scenario. This role allows the user to manage Microsoft Teams settings, including app permissions and consent for apps that are deployed within the organization. It enables User1 to review permissions for the app (App1) and grant consent to it for all users in the organization, following the principle of least privilege.
Question 20
Your company uses Microsoft Teams.
You plan to use the Microsoft Teams admin center to identify apps that require a paid subscription.
What should you do from the Manage apps page?
- Review the Licenses column
- Review the Publishing status column
- Select Org-wide app settings
- Select the All subscriptions tab
Reveal Solution
Correct Answers:
- Review the Licenses column
Explanation:
The Licenses column in the Manage apps page of the Microsoft Teams admin center displays whether an app requires a paid subscription. This helps you identify which apps need a license for full functionality.
Question 21
Your company uses Microsoft Teams for collaboration and communication.
You integrate Microsoft Teams Phone and obtain 150 subscriber and service phone numbers to distribute throughout your organization.
To which three of the following resources can you assign a phone number? Each correct answer presents a complete solution.
- Call queue
- Conference bridge
- Microsoft 365 group
- Team
- User
Reveal Solution
Correct Answers:
- Call queue
- Conference bridge
- User
Explanation:
You can assign phone numbers to the following resources in Microsoft Teams Phone:
- Call queue: Phone numbers can be assigned to call queues to manage incoming calls for a group of users.
- Conference bridge: A conference bridge is used for managing dial-in meetings, and you can assign phone numbers to conference bridges to allow participants to join meetings by calling a phone number.
- User: Phone numbers can be assigned directly to individual users so they can make and receive calls in Microsoft Teams.
Question 22
Your company uses Microsoft Teams for collaboration and communication.
You integrate Microsoft Teams Phone and purchase the following Microsoft calling plan licenses:
- Domestic Calling Plan: 150 licenses
- Domestic and International Calling Plan: 50 licenses
How many subscriber phone numbers can you obtain for your organization?
- 150
- 175
- 200
- 230
Reveal Solution
Correct Answers:
- 230
Explanation:
The number of phone numbers for users (subscribers) is equal to the total number of Domestic Calling Plan and International Calling Plan licenses you have assigned multiplied by 1.1, plus 10 additional phone numbers. For example, if you have 50 users in total with a Domestic Calling Plan and/or International Calling Plan, you can acquire 65 phone numbers (50 x 1.1 + 10). Note that if you have a Pay-As-You-Go Calling Plan, you can only acquire 1 phone number per license assigned.
Question 23
Your company uses Microsoft Teams.
You integrate Microsoft Teams Phone.
You need to recommend a solution that enables users to connect from Teams to landline and mobile devices through the Public Switched Telephone Network (PSTN). The solution must meet the following requirements:
- Uses Microsoft-managed access to the PSTN
- Does not require a subscription to a local PSTN carrier.
What should you recommend?
- Calling Plans
- Direct Routing
- Microsoft Teams Rooms
- Operator Connect
Reveal Solution
Correct Answers:
- Calling Plans
Explanation:
Calling Plans is a Microsoft-managed solution that provides direct access to the Public Switched Telephone Network (PSTN) through Microsoft. It allows users to make and receive calls to landlines and mobile devices without needing to subscribe to a local PSTN carrier. This solution is fully integrated with Microsoft Teams, ensuring users can connect seamlessly to the PSTN using Microsoft-managed infrastructure.
Question 24
Your company uses Microsoft Teams for collaboration and communication.
You integrate Microsoft Teams Phone and create a Call queue named Queue1.
You need to ensure that Queue1 is assigned a phone number.
What should you do?
- Add a resource account that has an associated service number.
- Add a resource account that has an associated subscriber number.
- Associate a group as a call agent to Queue1.
- Associate a user as a call agent to Queue1.
Reveal Solution
Correct Answers:
- Add a resource account that has an associated service number.
Explanation:
To assign a phone number to a Call queue in Microsoft Teams, you need to create a resource account and assign a service number to that resource account. The service number is the number that will be associated with the call queue and will handle incoming calls.
- A resource account is a special type of account that can be assigned a phone number for services like call queues, auto attendants, or conference bridges.
- A service number is typically used for resources like call queues and auto attendants, whereas a subscriber number is used for individual users.
Question 25
Your company uses Microsoft Teams for collaboration and communication.
You integrate Microsoft Teams Phone and create an auto attendant named Attendant1.
You need to ensure that a caller can break out of the menu system at any time and speak to a specific person in the organization.
Which two settings should you configure for Attendant1?
- Call routing options
- Dial scope
- Greeting options
- Operator
Reveal Solution
Correct Answers:
- Call routing options
- Operator
Explanation:
To allow a caller to break out of the menu system at any time and speak to a specific person, you need to configure the following:
- Call routing options: This setting enables you to define how calls are routed within the auto attendant. You can set up options that allow callers to choose the option to speak with a specific person or operator. You would typically configure this to allow an “operator” or a specific number extension as an option in the menu.
- Operator: The operator setting is crucial because it specifies who the caller can be directed to if they choose the option to speak with a live person. You would typically set the operator as a user or a group that can handle these calls.