EarnYourCert
Exams › MS-700 › Domain 1 of 4
MS-700 · Domain 1 of 4 · 40-45% of the exam

Configure and manage a Teams environment

Domain 1 of MS-700 accounts for 40-45% of the exam, the heaviest part of the syllabus. EarnYourCert has 201 original questions for this domain, all with explanations: 123 multiple choice, 51 yes/no and 27 completion or ordering items, like the real exam.

Practice domain 1 for free →No sign-up. Choose how many questions you want.

Domain 1 sample questions

8 questions from our 201-question bank for this domain. Try to answer before revealing the solution.

1. You need to verify that the correct network ports are open for Teams on the perimeter firewall. Which UDP ports does Teams require for real-time media traffic?

  1. UDP 3478-3481, which Teams uses for audio, video, and screen-sharing media traffic
  2. UDP 443 and 80, used for HTTPS signaling and Teams client update traffic
  3. UDP 1024-65535, required by Teams to establish any media session with TURN relays
  4. TCP 5060 and 5061, the standard SIP signaling ports for telephony systems
Show answer

Correct answer: A. Teams uses UDP ports 3478-3481 for all real-time media traffic. Port 443 TCP/UDP is used for signaling. SIP ports are for traditional telephony systems, not Teams natively.

2. You must require a compliant device and MFA for Teams access, but only from outside the corporate network. Which combination do you use?

  1. Conditional Access with a location condition and grant controls
  2. A sensitivity label published for the teams and sites outside the office
  3. An update policy that pins the client's release channel for remote users
  4. A retention policy targeting Teams chats and channels
Show answer

Correct answer: A. Conditional Access combines a location condition with grant controls (compliant device + MFA) for that scenario.

3. Audit asks who created, deleted, or changed team membership in the last 90 days. Where do you look?

  1. In the Microsoft Entra Conditional Access policies
  2. In the Microsoft Purview unified audit log
  3. In the Network Planner of the admin center
  4. In the Teams Call Quality Dashboard
Show answer

Correct answer: B. The unified audit log records events such as team creation, deletion, and membership changes for review.

4. Your organization has meeting rooms with Microsoft Teams Rooms devices. What is the main difference between Teams Rooms Basic and Teams Rooms Pro licenses?

  1. Teams Rooms Pro works on Android and Windows devices; Basic is only compatible with Windows
  2. Teams Rooms Pro includes Teams Phone licenses; Basic requires a separate license for PSTN calls
  3. Teams Rooms Pro supports up to 300 participants; Basic limits meetings to 100 participants
  4. Pro adds remote management, room analytics and meeting AI; Basic has core meetings
Show answer

Correct answer: D. Teams Rooms Pro adds remote device management, room usage analytics, meeting AI features, and advanced collaboration capabilities on top of the core meeting functionality provided by the Basic license.

5. Your organization wants Teams channel messages to have a minimum 7-year retention to comply with regulatory requirements. Which solution do you implement?

  1. Enable Teams archiving on all existing teams so messages are not automatically deleted
  2. A Microsoft Purview retention policy applied to Teams channel messages with a 7-year retention period
  3. An Exchange Online archive policy applied to Teams group mailboxes with 7-year retention
  4. Configure a Microsoft Purview retention label that users manually apply to important messages
Show answer

Correct answer: B. Microsoft Purview retention policies apply specifically to Teams channel messages and chats. They ensure messages are retained for the defined period (7 years) and cannot be deleted, even if the user or team is deleted.

6. Your organization wants that when Teams users in Islands mode chat with an external user from another Microsoft 365 tenant, the chat always starts from Teams and not Skype for Business. Which setting determines this behavior?

  1. The external tenant's federation policy, which determines whether communications reach Teams or Skype for Business
  2. The external recipient's coexistence mode: if the external is TeamsOnly, messages go to Teams; if SfB modes, they go to SfB
  3. The Islands user's preferred client setting, which determines which application they use for external chats
  4. The local tenant's external communication policy, which can force Teams as the client for external chats
Show answer

Correct answer: B. In Islands mode, the system uses the recipient's coexistence mode to determine which client receives messages. If the external is in TeamsOnly mode, messages go to Teams. If they're in a Skype for Business mode, messages go to the SfB client.

7. You want to fully prevent your users from chatting with personal (consumer) Teams accounts. Where do you configure this?

  1. In a sensitivity label published for the chats and channels
  2. In a retention policy applied to chats with external participants
  3. In the Network Planner section of the Teams admin center
  4. In external access of the Teams admin center (personal Teams accounts)
Show answer

Correct answer: D. Teams external access includes a specific control to allow or block chat with personal (consumer) Teams accounts.

8. You want to encrypt Teams calls between two users end-to-end so that even Microsoft cannot decrypt the content. What should you enable?

  1. Customer-managed key encryption (CMK) using the customer's Azure Key Vault keys for Teams media
  2. SRTP marking on Teams client media packets from the network QoS configuration
  3. TLS transport encryption on all SBC media streams via the trunk security profile
  4. End-to-end encryption (E2EE) for 1:1 Teams calls in the meeting encryption policy
Show answer

Correct answer: D. End-to-end encryption (E2EE) for 1:1 Teams calls ensures only the two participants can decrypt the content. It is activated via the meeting encryption policy and limits some features such as recording.

Other MS-700 domains