70-346日本語試験無料問題集「Microsoft Managing Office 365 Identities and Requirements (70-346日本語版) 認定」
正解：
Explanation
Box 1: Create a multi-factor authentication provider with the Per Enabled User usage model.
Box 2: Enable multi-factor authentication for all user accounts.
Box 3: Instruct users to use a mobile phone to complete the registration process.
Adding Multi-Factor Authentication to Azure Active Directory (for Office 365 users) Step 1: First we create the usage model of the MFA provider.
We should use PerEnabled User which is used for Office 365.
Note:
* Per Authentication - purchasing model that charges per authentication. Typically used for scenarios that use the Azure Multi-Factor Authentication in an application.
* Per Enabled User - purchasing model that charges per enabled user. Typically used for scenarios such as Office 365.
Step 2: Enable Multi-Factor Authentication for all your user accounts.
You need to enable multi-factor authentication on your Office 365 users.
Step 3: Have a user sign-in and complete the registration process.
The users can use their mobile phones to complete the auto-enrollment process.
Details: After being enrolled for multi-factor authentication, the next time a user signs in, they see a message asking them to set up their second authentication factor. Using the enrollment process the users will be able to specify your preferred method of verification.
The following methods exist: Mobile Phone Call, Mobile Phone Text Message, Office Phone Call, or Mobile App.
References:
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/multi-factor-authentication/multi-factor-authen
正解：
Explanation
The minimum forest functional level requirement for Office356 is Windows Server 2003.
The minimum domain controller requirement for office 356 is 32-bit Windows Server 2003 Standard Edition with Service Pack 1 (SP1). From the available options, the minimum requirement is met by Windows Server
2008 R2 Standard Edition.
References:
http://msdn.microsoft.com/en-us/library/azure/jj151831.aspx
正解：
Explanation
Password Write-Back
For each forest you have configured in Azure AD Sync, the account you have specified for a forest in the wizard must be given the "Reset-Password" and "Change Password" extended rights on the root object of each domain in the forest.
Permissions for password synchronization
If you want to enable password synchronization between your on-premises AD DS and your Azure Active Directory for your users, you need to grant the following permissions to the account that is used by Azure AD Sync to connect to your AD DS:
