The world is a stage. We must seize all opportunities for career progression and to actualize our dream. So, you must seize ITCertMagic to undersell yourself in the future. ITCertMagic Microsoft AB-650 study guide will help you to overcome difficulties and to get the certification. We will help you to understand the laws of AB-650 Exam. ITCertMagic provides original questions and pdf real questions and answers. If you get the certification, you will rise to undreamed-of heights.
| Section | Objectives |
|---|---|
| Topic 1: Manage Microsoft 365 workloads and collaboration services | - Administer Microsoft Teams
|
| Topic 2: Manage Microsoft 365 security, compliance, and governance | - Implement compliance and data governance
|
| Topic 3: Administer Microsoft 365 Copilot and AI services | - Manage Microsoft 365 Copilot
|
| Topic 4: Manage Microsoft 365 tenant administration | - Configure and manage Microsoft 365 tenant settings
|
It is impossible to pass AB-650 exam without efforts and time, but our ITCertMagic team will try our best to reduce your burden when you are preparing for AB-650 exam. The normal model test and understandable answer analysis will make you secretly master the exam skills to pass AB-650 exam. In order to reduce more stress for you, we promise you if you fail the exam, what you need to do is to send your scanned unqualified transcripts to our email box. After confirmation, we will immediately refund all the money that you purchased the AB-650 Exam Materials. ITCertMagic is worthy your trust.
NEW QUESTION # 116
You have a Microsoft 365 E5 subscription that uses Microsoft Exchange. The subscription contains a mail- enabled security group named Group1 and a user named User1.
User1 has a mailbox named Mailbox1 that is 42 GB in size.
User1 is transferred to a new role and will no longer use Mailbox1.
You need to modify Mailbox1 to meet the following requirements:
Preserve access to historical email.
Enable the users in Group1 to open Mailbox1.
Enable the Group1 users to send email messages that appear to be sent from Mailbox1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer: A,E
Explanation:
Microsoft Exchange Online supports converting an existing user mailbox to a shared mailbox while retaining its historical email content. This is appropriate when the original user no longer needs direct access but other employees must continue using the mailbox.
Option C is correct because converting Mailbox1 into a shared mailbox preserves the existing email messages and enables delegated access for other users.
The mailbox contains 42 GB of data, which is below the standard 50 GB unlicensed shared mailbox limit.
Therefore, an additional mailbox license is not required solely because of its current size, provided no separately licensed features are necessary.
Option B is correct because Full Access permission allows Group1 members to open the mailbox and manage existing items. Send As permission enables them to send messages that appear to originate directly from Mailbox1.
Option E is incorrect because Send on Behalf permission displays the individual delegate ' s identity, whereas the requirement specifies that messages must appear to come from Mailbox1.
Option D is incorrect because Litigation Hold is designed for preservation and compliance purposes, not for providing collaborative mailbox access.
Option A is unnecessary for a standard shared mailbox of this size.
Therefore, converting the mailbox and granting Full Access and Send As permissions satisfies all three requirements.
Microsoft References:
https://learn.microsoft.com/microsoft-365/admin/email/convert-user-mailbox-to-shared-mailbox
https://learn.microsoft.com/en-us/exchange/collaboration/shared-mailboxes/create-shared-mailboxes
NEW QUESTION # 117
You have a Microsoft 365 subscription that uses sensitivity labels.
Your company has the following departments:
The legal department drafts contracts in Microsoft Word, stores the drafts in Microsoft SharePoint, and shares copies with external counsel. The content must retain encryption and content markings when downloaded or shared.
The research department collaborates by using a team in Microsoft Teams. The collaboration environment must control guest access and access from unmanaged devices.
You need to define the sensitivity label scope for each department.
What should you use for each department? To answer, drag the appropriate scopes to the correct departments.
Answer:
Explanation:
Explanation:
Legal: Files & other data assets; Research: Groups & sites
Microsoft Purview sensitivity labels support multiple scopes that determine which resources the labels can protect and which protection settings administrators can configure.
First selection: Files & other data assets.
The legal department requires document-level protection for Microsoft Word files stored in SharePoint and distributed to external counsel.
The Files & other data assets scope supports sensitivity labels that apply encryption and content markings directly to supported documents.
Because the protection is associated with the document itself, configured encryption and markings can remain with the file when it is downloaded or shared outside its original SharePoint location.
Second selection: Groups & sites.
The research department requires collaboration-level protection for a Microsoft Teams environment.
The Groups & sites scope supports sensitivity labels applied to Microsoft Teams, Microsoft 365 groups, and SharePoint sites. These labels can configure privacy settings, guest access restrictions, external sharing controls, and access restrictions for unmanaged devices.
The Emails scope is intended for email protection, while the Meetings scope controls supported meeting and chat protection capabilities.
Technical consideration: Groups & sites labels do not automatically encrypt every document stored within the associated container. Additionally, restrictions for unmanaged devices require the supporting Microsoft Entra Conditional Access configuration.
Therefore, Files & other data assets is appropriate for Legal, while Groups & sites is appropriate for Research.
Microsoft References:
https://learn.microsoft.com/en-us/purview/sensitivity-labels
https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites
NEW QUESTION # 118
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.
Users collaborate on files in Microsoft Teams. Files that are identified as malicious cannot be opened, moved, copied, and shared, but users can still save local copies.
You need to configure file-based protection for the collaboration workloads. The solution must meet the following requirements:
Apply malware protection to the files stored in Teams.
Prevent users from retaining local copies of files identified as malicious.
What should you do? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Explanation:
To apply malware protection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.; To prevent local copies: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.
Microsoft Defender for Office 365 provides Safe Attachments protection for files stored in SharePoint Online, OneDrive for Business, and Microsoft Teams. The feature identifies malicious files and restricts their availability across Microsoft 365 collaboration workloads.
First selection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.
Administrators must enable Safe Attachments protection for the collaboration workloads through the Microsoft Defender portal. This configuration enables malware detection and protection for supported files stored in these services.
Second selection: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.
By default, users cannot open, move, copy, or share files identified as malicious, but downloading may still be permitted. To prevent users from retaining local copies, administrators must enable the tenant-level download restriction by using SharePoint Online PowerShell:
Set-SPOTenant -DisallowInfectedFileDownload $true
This setting prevents ordinary users from downloading files that have been detected as infected.
The two configurations work together: Safe Attachments provides malware detection and file protection, while the SharePoint tenant setting closes the download restriction gap.
The configuration can be verified by checking the DisallowInfectedFileDownload property using Get- SPOTenant.
Microsoft References:
https://learn.microsoft.com/en-us/defender-office-365/safe-attachments-for-spo-odfb-teams-configure
NEW QUESTION # 119
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. Strict protection is enabled for all recipients.
The subscription contains a group named Group1 that contains all the mailboxes for your company ' s marketing department.
Several marketing department mailboxes recently sent high volumes of external email after a credential was compromised.
You need to enforce a lower external message limit for Group1. The solution must automatically restrict senders that reach the limit.
What should you do?
Answer: D
Explanation:
Microsoft Defender for Office 365 uses outbound anti-spam policies to control outgoing email volumes and restrict accounts that exceed configured sending limits.
Option E is correct because a custom outbound anti-spam policy can target Group1 without changing the sending limits for other departments.
Administrators can configure the policy through Microsoft Defender portal # Email & collaboration # Policies
& rules # Threat policies # Anti-spam # Create policy # Outbound.
Select Group1 under the sender conditions, configure a lower Set an external message limit, and select Restrict the user from sending mail as the action when the limit is exceeded. Microsoft will restrict affected senders until an administrator removes the restriction.
Options A and B are incorrect because Standard and Strict preset security policies do not include configurable outbound spam policies. Therefore, Strict protection being enabled for every recipient does not prevent a custom outbound policy from applying.
Option C is incorrect because inbound policies protect incoming email.
Option D is incorrect because the default outbound policy applies across the organization rather than specifically to Group1.
Technical distinction: Microsoft ' s external message limit is based on the number of external recipients per hour, not the number of individual emails sent.
Microsoft References:
* Microsoft Learn - Configure outbound spam policies
* Microsoft Learn - Preset security policies
Final answer: E. Create a custom anti-spam outbound policy.
NEW QUESTION # 120
You have a Microsoft 365 subscription.
Your company has two office branches in the same city. Both branches contain Windows devices that have Windows location services disabled by policy. Each branch uses a distinct IPv4 LAN subnet.
You plan to review Microsoft 365 network connectivity insights for each branch separately.
You need to configure network connectivity to ensure that assessment results are associated with the correct branch.
What should you do?
Answer: A
Explanation:
Microsoft 365 network connectivity insights help administrators evaluate how network configuration affects connectivity to Microsoft 365 services. Accurate office-location identification is essential for associating connectivity measurements with the appropriate branch.
Option C is correct because Microsoft 365 allows administrators to define office locations manually and associate each location with its corresponding local area network subnet ranges.
This configuration is particularly important when multiple branches exist in the same city. Because the branches have distinct IPv4 LAN subnets, Microsoft 365 can distinguish their connectivity measurements by using the configured subnet information.
Microsoft Learn explicitly supports the manual location configuration method when Windows Location Services is unavailable. Administrators can navigate to the Microsoft 365 admin center, access Network connectivity, and configure office locations with their respective LAN subnet information.
Option A is insufficient because simply running network tests does not establish the required persistent branch-specific subnet mapping.
Option B does not provide the local subnet information needed to distinguish branches reliably.
Option D conflicts with the stated requirement because Windows Location Services is disabled by policy.
Furthermore, automatic geographic location discovery may not distinguish multiple offices in the same city.
Therefore, manually configuring both locations and their LAN subnet ranges meets the requirement.
Microsoft References:
https://learn.microsoft.com/en-us/Microsoft-365/Enterprise/office-365-network-mac-perf-overview?view=o365-worldwide
NEW QUESTION # 121
......
Using our AB-650 practice engine may be the most important step for you to improve your strength. You know, like the butterfly effect, one of your choices may affect your life. And our AB-650 exam questions are definitely the exact effect that will change your life. In fact, our AB-650 Study Materials have been tested and proved to make it. Many of our customers gave our feedbacks to say that our AB-650 training guide helped them lead a better life and brighter future.
AB-650 Free Dumps: https://www.itcertmagic.com/Microsoft/real-AB-650-exam-prep-dumps.html