Free Microsoft AB-650 Exam Dumps Questions & Answers

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. Standard protection is enabled for all recipients.
The subscription contains a mail-enabled security group named Group1. Group1 contains users that require custom inbound anti-spam actions. A custom anti-spam inbound policy named Policy1 is applied to Group1 and has a priority value of 0.
You discover that email sent to the users in Group1 is evaluated by using the Standard preset security policy instead of Policy1.
You need to ensure that Policy1 is applied to Group1. All other recipients must continue to receive the Standard protection settings.
What should you do?

• A.  Disable Standard protection.
• B.  Add all other recipients to Policy1 as exceptions.
• C.  Set Policy1 to Priority1.
• D.  Add Group1 as an exception in the Standard protection settings.

You have a Microsoft Entra tenant that contains the groups shown in the following exhibit.
For each of the following statements, select the appropriate option in the answer area.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
You can add a Microsoft Entra cloud user to: Group1, Group2, and Group3; You can add Group5 to: Group1 and 3 only Microsoft Entra group membership is governed by group type, membership assignment method, and source of authority.
First selection: Group1, Group2, and Group3.
The exhibit identifies Group1 and Group2 as cloud-managed Microsoft 365 groups using assigned membership. Microsoft 365 groups support user membership regardless of whether the group ' s Security enabled property is set to Yes or No.
Group3 is a cloud-managed security group with assigned membership, so administrators can also add a Microsoft Entra user directly.
Group4 uses dynamic membership, meaning users are included automatically according to configured rules rather than manually assigned.
Group5 originates from Windows Server Active Directory. Its membership is managed by the authoritative on- premises directory.
Second selection: Group1 and Group3 only.
Microsoft Entra supports nesting security groups within other compatible security groups. Consequently, Group5 can be added as a member of Group3.
Microsoft 365 groups do not support groups as members, and dynamic group membership cannot be manually modified.
The first answer above reflects Microsoft ' s documented group membership behavior rather than simply reproducing the recording ' s selected response.
Microsoft References:
https://learn.microsoft.com/en-us/graph/api/group-post-members

You have a Microsoft 365 E5 subscription that has an accepted domain named contoso.com.
You need to ensure that the message headers of emails sent from Microsoft Exchange are signed digitally.
What should you configure?

• A.  DKIM
• B.  Microsoft Purview Message Encryption
• C.  DMARC
• D.  ARC

You have a Microsoft 365 subscription that contains a security group named Group1 and an organization-built custom agent named Agent1.
You need to prepare an agent pilot that meets the following requirements:
The users in Group1 must be able to use Agent1 and agents built by Microsoft.
Agents built by using external publishers must NOT be available to any users.
Users outside of Group1 must NOT be able to interact with any agents during the pilot.
Which two Agent settings should you configure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.  Agent Management Rules
• B.  User access
• C.  Allowed agent types
• D.  Policy template
• E.  Sharing

You have a Microsoft 365 subscription.
Your company has multiple branch offices, including a branch office named Branch1. The users in Branch1 connect to Microsoft 365 by using a corporate web proxy.
On the Network connectivity page in the Microsoft 365 admin center, Branch1 displays the following network insight:
"We're detecting WebSocket (WSS) connection failures to the domain: *.cloud.microsoft, which causes Copilot to not work correctly for your users." HTTPS access to Microsoft 365 apps from Branch1 succeeds.
You need to resolve the insight without changing connectivity for the other branch offices.
What should you configure?

• A.  the Branch1 web proxy policy to allow required protocols for the hosts in *.cloud.microsoft
• B.  the Branch1 DNS resolver policy to optimize regional name resolution for the hosts in *.cloud.microsoft
• C.  the Branch1 web proxy policy to exempt hosts in *.cloud.microsoft from TLS inspection
• D.  the Branch1 firewall policy to allow HTTPS connections for the hosts in *.cloud.microsoft