Microsoft AB-650 Exam Dumps - Actual Questions Answers

An administrator can create usernames that contain the: contoso221018.onmicrosoft.com, east.contoso221018.onmicrosoft.com, and contoso.com domains; Exchange Online can receive inbound email messages sent to the: contoso221018.onmicrosoft.com domain only

Microsoft 365 supports multiple verified domains within a tenant. These domains can be used for Microsoft Entra user principal names, while Exchange Online email routing depends on additional service configuration and DNS records.

The exhibit shows three domains with different status indicators: the default contoso221018.onmicrosoft.com domain is Healthy, contoso.com has Incomplete setup, and east.contoso221018.onmicrosoft.com has No services selected.

First selection: All three domains.

The intended interpretation is that the domains have been added to the tenant and are available for identity naming. A custom domain can be used for a user ' s sign-in name once domain ownership has been verified, even if other Microsoft 365 service configuration is incomplete.

Second selection: The default onmicrosoft.com domain only.

The default tenant domain provides Exchange Online ' s fallback email-routing namespace. In the exhibit, the custom domain has incomplete service configuration, while the additional subdomain has no services selected.

However, there is an important technical limitation: these administrative status indicators alone do not conclusively establish the live external MX records or every Exchange Online accepted-domain setting. Those configurations must be inspected to verify actual inbound mail routing.

The selections above represent the intended examination interpretation, not independent proof of the tenant ' s current DNS configuration.

Microsoft References:

https://learn.microsoft.com/en-us/microsoft-365/admin/setup/add-domain

https://learn.microsoft.com/en-us/microsoft-365/admin/setup/add-or-replace-your-onmicrosoftcom-domain

Microsoft 365 network connectivity insights help administrators evaluate how network configuration affects connectivity to Microsoft 365 services. Accurate office-location identification is essential for associating connectivity measurements with the appropriate branch.

Option C is correct because Microsoft 365 allows administrators to define office locations manually and associate each location with its corresponding local area network subnet ranges.

This configuration is particularly important when multiple branches exist in the same city. Because the branches have distinct IPv4 LAN subnets, Microsoft 365 can distinguish their connectivity measurements by using the configured subnet information.

Microsoft Learn explicitly supports the manual location configuration method when Windows Location Services is unavailable. Administrators can navigate to the Microsoft 365 admin center, access Network connectivity, and configure office locations with their respective LAN subnet information.

Option A is insufficient because simply running network tests does not establish the required persistent branch-specific subnet mapping.

Option B does not provide the local subnet information needed to distinguish branches reliably.

Option D conflicts with the stated requirement because Windows Location Services is disabled by policy. Furthermore, automatic geographic location discovery may not distinguish multiple offices in the same city.

Therefore, manually configuring both locations and their LAN subnet ranges meets the requirement.

Microsoft References:

https://learn.microsoft.com/en-us/Microsoft-365/Enterprise/office-365-network-mac-perf-overview?view=o365-worldwide

SharePoint Data Access Governance provides reporting capabilities that help administrators identify overshared sites, excessive permissions, and potentially risky content exposure without changing the existing SharePoint authorization configuration.

Option D is correct because Data Access Governance reports can identify sites that have broad access permissions, anonymous sharing links, and permissions granted to large organizational groups.

Administrators can access these reports through the SharePoint admin center under Reports and Data access governance.

The site permissions snapshot report provides visibility into permissioned users, guest access, broken permission inheritance, and sharing links.

Sharing links activity reports can also identify sites where users have created Anyone links, organization-wide links, or externally shared links.

These capabilities are especially important for Microsoft 365 Copilot because Copilot respects existing SharePoint permissions. Overshared content may therefore appear in responses provided to users who have access through excessively broad permissions.

Option A primarily measures site usage rather than evaluating permission exposure.

Option B focuses on classified content rather than analyzing SharePoint site permission structures.

Option C involves reviewing user access assignments, rather than identifying overshared sites across the SharePoint environment.

Option E supports compliance content searches but is not the dedicated solution for detecting broad site permissions.

Data Access Governance reports provide the required visibility without modifying permissions.

Microsoft References:

https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports

https://learn.microsoft.com/en-us/sharepoint/data-access-governance-site-permissions-report