You are designing network QoS for Microsoft Teams. You need to assign the standard Differentiated Services Code Point (DSCP) marking recommended by Microsoft for real-time audio media streams. Which DSCP decimal value should be stamped?
- DSCP 46 (Expedited Forwarding) (Correct)
- DSCP 0 (Best Effort)
- DSCP 10 (AF11)
- DSCP 24 (CS3)
Explanation: Microsoft strongly recommends DSCP value 46 (Expedited Forwarding - EF) for real-time audio streams, DSCP 34 (Assured Forwarding AF41) for interactive video streams, and DSCP 18 (AF21) for desktop/application sharing.
When calculating branch office WAN requirements, what is the maximum recommended one-way latency (RTT / 2) from a client network boundary to the Microsoft 365 network edge for high-quality audio?
- Less than 50 ms one-way latency (Correct)
- Less than 500 ms one-way latency
- Less than 10 ms round-trip time
- Exactly 1 second latency
Explanation: Microsoft targets a one-way latency of less than 50 milliseconds (or round-trip time under 100 ms) from customer premises to the Microsoft network edge for optimal voice performance.
You are deploying the Microsoft Teams Network Assessment Tool to test a branch office connection. Which metrics does this tool measure between client subnets and Microsoft cloud media relays?
- Packet loss, inter-packet jitter, round-trip latency, and UDP connectivity (Correct)
- Local hard drive fragmentation only
- Computer monitor refresh rate and HDMI sync
- Printer spooler response times
Explanation: The Network Assessment Tool measures packet loss rate, inter-packet jitter, round-trip latency, and verified connectivity to Microsoft media relay IP ranges over UDP.
Your organization has a multi-site branch WAN. You need to prevent Teams audio calls from saturating a low-bandwidth 2 Mbps MPLS circuit connecting a remote clinic. Which feature should you design?
- Call Admission Control (CAC) (Correct)
- Dynamic Emergency Calling
- Location-Based Routing
- Group Call Pickup
Explanation: Call Admission Control (CAC) determines whether a real-time media session can be established over bandwidth-constrained network links based on administrator-configured bandwidth policies.
In designing network topology in the Teams admin center, which hierarchy represents the correct containment relationship for network location entities?
- Network Region contains Network Sites, which contain Network Subnets (Correct)
- Network Subnets contain Network Regions and Sites
- Network Sites contain Regions and Active Directory forests
- All three entities exist independently without hierarchy
Explanation: Network Regions represent major geographic boundaries (e.g., North America); Network Sites are contained within regions (e.g., Chicago HQ); and Network Subnets are mapped inside specific sites.
You are architecting VPN connectivity for 10,000 remote workers. Security policy dictates all internet traffic must inspect via an on-premises proxy, but real-time voice latency must remain low. What is the recommended practice?
- VPN Split Tunneling exempting Teams Optimize endpoints (Correct)
- Forcing all UDP traffic through a legacy SSL proxy
- Disabling Wi-Fi and using cellular data only
- Blocking all TCP port 443 outbound connections
Explanation: Implement VPN Split Tunneling to exempt Microsoft 365 "Optimize" category endpoints (Teams audio, video, and signaling) from entering the VPN tunnel, sending them directly via local ISP breakout.
Which UDP port ranges are used by default for Microsoft Teams client outbound media transmission when implementing Quality of Service (QoS)?
- UDP 50000-50019 for audio, 50020-50039 for video, 50040-50059 for sharing (Correct)
- TCP ports 80 and 443 exclusively
- UDP ports 1024-1050 for all combined traffic
- TCP port 25 for real-time streaming
Explanation: Teams clients utilize UDP 50000-50019 for audio, UDP 50020-50039 for video, and UDP 50040-50059 for application and screen sharing.
You need to plan licensing for 200 frontline field technicians who only require Teams 1:1 calling, presence, chat, and shift tracking from mobile devices without full desktop Office apps. Which license fits best?
- Microsoft 365 F1 or F3 with Teams communication features (Correct)
- Microsoft 365 E5 with full desktop suite
- Exchange Online Plan 2 standalone
- Azure Virtual Desktop host licensing
Explanation: Microsoft 365 F1 or F3 combined with Teams Phone standard features provides frontline communication, presence, and chat without requiring enterprise desktop application licensing.
When designing an on-premises Session Border Controller (SBC) architecture for Direct Routing, which Transport Layer Security (TLS) cipher suite requirement is mandatory for the SIP signaling interface?
- TLS 1.2 with mutual authentication (mTLS) and approved cipher suites (Correct)
- Unencrypted cleartext HTTP on port 80
- SSL 3.0 with RC4 encryption
- Telnet session on port 23
Explanation: Microsoft Direct Routing requires TLS 1.2 with mutual authentication (mTLS) and supports specific cipher suites such as TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 or TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.
You are configuring network subnets for Location-Based Routing (LBR). What network attribute determines whether an endpoint is recognized as being on-site at a specific corporate branch location?
- Public egress IP address and internal subnet mapped to the Network Site (Correct)
- MAC address of the local Wi-Fi router
- Serial number of the client computer hard drive
- The department name in Entra ID user profile
Explanation: The endpoint public egress IP and internal IPv4/IPv6 subnet assigned to the client interface must match the configured subnet associated with a specific Network Site in the Teams network topology.
You are designing an emergency calling architecture for a corporate campus across three multi-story buildings. What technology maps a caller's wireless AP or Ethernet switch port to a dispatchable location?
- Dynamic Emergency Calling using network identifiers (BSSID, LLDP, Subnet) (Correct)
- Static phone number billing address only
- DNS round-robin host mapping
- Manual user address typing during emergency calls
Explanation: Dynamic Emergency Calling queries network topology components including Wi-Fi Access Point BSSIDs, LLDP switch chassis and port IDs, and IP subnets to resolve a precise civic address and room number.
Which tool in the Microsoft 365 Admin Center checks whether your local ISP network paths connect efficiently to Microsoft Global Network Points of Presence (PoPs)?
- Microsoft 365 Network Connectivity test tool (Correct)
- Windows Disk Management console
- Exchange message tracking logs
- Intune device compliance blade
Explanation: Microsoft 365 Network Connectivity test tool (nettest.onmicrosoft.com) measures throughput, DNS resolution, and peering distances to identify backhaul latency bottlenecks.
When sizing network bandwidth for audio calls, what is the typical bandwidth consumption of the Silk wideband audio codec used natively in Microsoft Teams?
- Dynamically scales between 24 Kbps and 36 Kbps for standard mono speech (Correct)
- Requires 5 Mbps continuous symmetric bandwidth
- Requires exactly 1 Gbps fiber connectivity
- Fixed at 8 Kbps G.729 bitrate
Explanation: The Silk wideband audio codec dynamically scales between 24 Kbps and 36 Kbps for standard monaural speech streams, providing high fidelity even under low bandwidth conditions.
You are planning PSTN connectivity. The enterprise operates in 15 countries with strict regulatory restrictions that prohibit storing telephony data or terminating trunk traffic outside national borders. Which model is required?
- Direct Routing using local in-country SBCs and local telco trunks (Correct)
- Microsoft Calling Plans hosted in the central US data center
- Audio Conferencing dial-in numbers only
- Consumer Skype federation
Explanation: Direct Routing using local in-country Session Border Controllers (SBCs) and local PSTN trunks keeps media and trunk termination within sovereign borders, satisfying telecom regulations.
What is the function of a Certified Direct Routing Survivable Branch Appliance (SBA)?
- Provides local PSTN calling survivability during WAN cloud outages (Correct)
- Formats local domain controller hard drives during emergencies
- Compresses video files uploaded to OneDrive
- Generates monthly billing invoices for executive staff
Explanation: An SBA is software embedded in a certified SBC that allows Teams users at a branch site to place and receive PSTN calls even during a wide area network (WAN) outage disconnecting them from Microsoft 365.
You need to assign the least privileged administrative role to an engineer who only needs to monitor Call Quality Dashboard (CQD) reports without access to user identifiers (EUII). Which role should you assign?
- Reports Reader (Correct)
- Global Administrator
- Teams Telephony Administrator
- User Administrator
Explanation: The Reports Reader role provides access to aggregated usage and quality reports without granting access to End-User Identifiable Information (EUII) or policy configuration capabilities.
When designing external communication, what is the default behavior of Teams External Access (Federation) prior to adding administrative restrictions?
- Open federation allowing communication with any external Teams domain (Correct)
- Completely blocked federation with zero external connectivity
- Allowed only with approved Microsoft partner domains
- Allowed only for users with Global Admin rights
Explanation: By default in Microsoft Teams, External Access is set to "Open federation," meaning users can communicate with users from any other external domain unless an administrator restricts it.
You are reviewing media traffic flows. When two Microsoft Teams desktop clients on the same local corporate LAN make a 1:1 voice call, how does the real-time media stream route?
- Direct point-to-point peer UDP stream over the local network using ICE (Correct)
- Hairpinned through a remote cloud relay in another continent
- Sent via email attachments back and forth
- Streamed through the primary domain controller SYSVOL share
Explanation: Using Interactive Connectivity Establishment (ICE), Teams clients attempt direct peer-to-peer point-to-point UDP streaming across the local subnet, falling back to cloud relays only if direct path fails.
What is the maximum packet loss percentage acceptable for real-time Teams audio before user experience noticeably degrades according to Microsoft service targets?
- Packet loss exceeding 1% to 2% over a 15-second interval (Correct)
- Packet loss exceeding 50%
- Zero packet loss is always considered poor
- Packet loss between 20% and 30%
Explanation: Microsoft defines the threshold for poor audio quality when packet loss exceeds 1% to 2% over a 15-second interval during a call.
You need to configure proxy bypass for Teams clients. Which proxy traversal mechanism should be avoided for real-time UDP audio/video media streams?
- SSL inspection / TLS termination and authenticated proxies for UDP traffic (Correct)
- Standard layer 3 network switches
- Direct internet access via local gateways
- Quality of Service DSCP header markings
Explanation: SSL inspection / TLS termination and authenticated proxy servers should never be used for Teams UDP media traffic; they inject severe latency, jitter, and break real-time streaming protocols.
When planning public IP addresses for an enterprise SBC connecting to Direct Routing, which public DNS requirement must be met for the SBC Fully Qualified Domain Name (FQDN)?
- Public DNS A record matching a public commercial certificate CN/SAN (Correct)
- Private non-routable .local DNS record
- Wildcard certificate from an untrusted internal CA
- Dynamic IP address assigned via consumer DHCP
Explanation: The SBC FQDN must have a public DNS A record matching the common name (CN) or Subject Alternative Name (SAN) of a commercial public certificate signed by a Microsoft-trusted Certificate Authority.
You are planning migration from Skype for Business Server to Teams. You want to decommission all on-premises servers. Which coexistence mode must all users achieve before server shutdown?
- TeamsOnly mode (Correct)
- Islands mode
- SkypeForBusinessOnly mode
- SkypeForBusinessWithTeamsCollab mode
Explanation: All users must be upgraded to TeamsOnly mode, which points all routing, calling, and scheduling to the Microsoft 365 cloud.
Which component handles media transcoding and conference mixing when multiple participants join a group video call in Microsoft Teams?
- Teams cloud-based Multipoint Conferencing Units (MCU) and Media Relays (Correct)
- The meeting organizer laptop hardware
- On-premises Exchange 2013 Hub Transport server
- The local Wi-Fi router
Explanation: Microsoft Teams cloud-based Audio/Video Multipoint Conferencing Units (MCU) and Media Relays handle stream mixing, multi-stream distribution, and transcoding.
You are configuring a custom meeting policy in the Teams admin center. You must ensure that participants cannot take control of another user's shared screen during a meeting. Which setting should you turn off?
- Allow participants to give or request control (Correct)
- Allow IP video
- Allow meeting chat
- Allow cloud recording
Explanation: Disabling "Allow an external participant to give or request control" and "Allow participants to give or request control" prevents desktop control handoffs.
Your executive board conducts quarterly shareholder webinars. You need to ensure attendee video and microphones are disabled by default and attendees cannot unmute themselves. Where is this managed during meeting creation?
- Set "Allow mic for attendees?" and "Allow camera for attendees?" to No (Correct)
- Disable external access tenant-wide
- Block outbound TCP port 443 on routers
- Delete attendee user accounts in Entra ID
Explanation: In meeting options and webinar settings, organizers can set "Allow mic for attendees?" and "Allow camera for attendees?" to "No".
You need to create a standardized meeting template that enforces end-to-end encryption (E2EE) and disables meeting chat for all financial advisory consultations. Which license provides custom meeting templates?
- Microsoft Teams Premium (Correct)
- Exchange Online Kiosk
- Microsoft 365 Audio Conferencing only
- Microsoft Entra ID Free
Explanation: Microsoft Teams Premium enables administrators to create customized meeting templates that lock specific security and audio/video settings in place.
In Microsoft Teams Town Halls, what is the maximum attendee capacity supported when using standard enterprise broadcast architecture?
- Up to 10,000 attendees standard (up to 20,000 with Teams Premium) (Correct)
- Exactly 250 attendees
- Up to 1,000,000 attendees
- Exactly 50 attendees
Explanation: Microsoft Teams Town Halls support up to 10,000 attendees standard, with support scaling up to 20,000 attendees with Microsoft Teams Premium features.
You want to prevent meeting participants from viewing the roster of other attendees during sensitive executive webinars. Which Teams Premium feature hides attendee identities?
- Hide attendee names in Teams Premium (Correct)
- Safe Attachments dynamic delivery
- Watermarking shared desktop screens
- BitLocker volume encryption
Explanation: The "Hide attendee names" feature available in Teams Premium hides participant names from the attendee list and chat in webinars and town halls.
Which protocol is used by Microsoft Teams live events and town halls to deliver scaled video streams over the internet to mass audiences?
- HTTP Live Streaming (HLS) / dynamic adaptive streaming via CDN (Correct)
- File Transfer Protocol (FTP) downloads
- SMTP email relays
- Direct peer-to-peer NetBIOS broadcasts
Explanation: Town halls and live events encode streams and distribute them using HTTP Live Streaming (HLS) or dynamic adaptive streaming over HTTP via Azure Content Delivery Networks (CDN).
To reduce WAN bottlenecking during large tenant-wide town hall broadcasts, what enterprise network streaming solution should you integrate with Teams?
- An Enterprise Content Delivery Network (eCDN) (Correct)
- DirectAccess server farm
- Point-to-Site SSTP VPN tunnels
- High-speed analog tape drives
Explanation: An Enterprise Content Delivery Network (eCDN), such as Microsoft Enterprise CDN, uses peer-to-peer peering to deliver live video streams across local office subnets without saturating egress pipes.
You need to assign a policy that prevents anonymous external participants from bypassing the meeting lobby under any circumstances. Which meeting policy setting must you configure?
- Set "Who can bypass the lobby" to "People in my organization" (Correct)
- Turn off meeting recording tenant-wide
- Disable VoIP calling in calling policies
- Block UDP ports 50000-50019
Explanation: Set "Who can bypass the lobby" to "People in my organization" or "People in my org and guests", ensuring anonymous callers remain in the lobby until manually admitted.
Where are video recordings of non-channel ad-hoc meetings stored when initiated by a user in Microsoft Teams?
- OneDrive for Business of the user who initiated the recording (Correct)
- Local hard drive of the organizer in C:\Temp
- Public Microsoft Stream video channel
- SYSVOL share on domain controllers
Explanation: Non-channel meeting recordings are stored in the OneDrive for Business account of the user who initiated the recording under the "Recordings" folder.
You are troubleshooting an issue where an organizer cannot enable live transcription in meetings. Which policy setting in Teams Meeting Policies controls this capability?
- Recording & transcription: Transcription set to On (Correct)
- Allow PowerPoint Live set to Off
- External Access set to Blocked
- Audio Conferencing dial-in PIN disabled
Explanation: In Teams meeting policies under Recording & transcription, the "Transcription" setting must be toggled to "On" for the meeting organizer.
You need to ensure that meeting recordings expire and are deleted automatically after 60 days unless manually extended by the owner. Where is this default expiration period configured?
- Default expiration time setting in Teams Meeting Policies (Correct)
- Windows Task Scheduler on client laptops
- Exchange Online anti-spam inbound rule
- Intune device compliance retirement rule
Explanation: In the Microsoft Teams admin center under Meetings > Meeting policies, administrators configure the "Default expiration time" (e.g., 60 days) for meeting recordings.
What is the requirement to configure end-to-end encryption (E2EE) for 1:1 Teams voice and video calls?
- Enable Enhanced encryption policies and have both users toggle E2EE in client settings (Correct)
- Assign a Global Administrator role to both users
- Connect both computers with a physical crossover cable
- Disable network firewalls on client workstations
Explanation: The administrator must enable "Enhanced encryption policies" in the Teams admin center and assign the policy to users; both participants must then enable E2EE in their Teams client settings.
An organization wants to configure custom meeting backgrounds that all employees can use during video calls. Where does an administrator upload tenant-wide meeting backgrounds?
- Meetings > Meeting policies > Meeting background images in Teams admin center (Correct)
- SharePoint modern page templates designer
- Microsoft Entra Company branding for web login
- Exchange Outlook Web App policy
Explanation: In the Teams admin center under Meetings > Meeting policies > Meeting background images, administrators can upload custom corporate virtual background pictures.
You want to restrict attendees from using the chat pane during a recurring team meeting once the meeting has concluded. What setting should the organizer configure in meeting options?
- Set "Allow meeting chat" to "In-meeting only" (Correct)
- Set meeting lobby bypass to Everyone
- Disable video cameras for all presenters
- Remove all attendees from the calendar invite
Explanation: In meeting options, set "Allow meeting chat" to "In-meeting only", which permits chat solely while the meeting session is actively live and disables it afterwards.
What is the role of Green Room in Microsoft Teams webinars and town halls?
- A dedicated virtual staging room for presenters before broadcasting live (Correct)
- An automated video filter that turns background imagery green
- A public chat room accessible by external customers
- An energy-saving monitor sleep state
Explanation: The Green Room provides a dedicated virtual holding space where organizers and presenters can talk, test audio/video, and coordinate privately before starting the public broadcast.
You need to assign the Audio Conferencing dial-in bridge telephone number to a new conference bridge in the Teams admin center. Which role can manage bridge settings?
- Teams Telephony Administrator or Teams Administrator (Correct)
- Billing Administrator
- Helpdesk Administrator
- Security Reader
Explanation: The Teams Telephony Administrator or Teams Administrator role can manage audio conferencing bridge numbers, greeting languages, and dial-in PINs.
When configuring Audio Conferencing dial-out policies, how can you prevent meeting organizers from placing toll calls to international destinations during a conference?
- Assign an Outbound Calling Restriction Policy restricting international dial-out (Correct)
- Block TCP port 5061 on network firewalls
- Revoke Audio Conferencing licenses from organizers
- Disable meeting lobby bypass for everyone
Explanation: Assign an Outbound Calling Restriction Policy or modify Dial-out from meetings settings in the admin center to allow "Don't allow" or "Domestic / within the same country" only.
How do you enable language interpretation in a Teams meeting so multi-lingual attendees can listen to real-time audio channels translated by interpreters?
- Enable Language interpretation under Meeting options and assign interpreters (Correct)
- Install translation plugins on every attendee smartphone
- Configure an Exchange transport rule matching foreign characters
- Force all attendees to use Microsoft Edge browser
Explanation: The meeting organizer enables "Language interpretation" under Meeting options, adds designated interpreter user accounts, and selects source and target language channels.
You are deploying Microsoft Calling Plans. You need to assign an available geographic telephone number to a user in the Dallas office. Which PowerShell cmdlet assigns the number and sets the assignment type?
- Set-CsPhoneNumberAssignment (Correct)
- New-CsOnlineTelephoneNumber
- Set-MailboxRegionalConfiguration
- Grant-CsVoicePolicy
Explanation: Set-CsPhoneNumberAssignment -Identity user@contoso.com -PhoneNumber "+12145550100" -PhoneNumberType CallingPlan sets the user phone number assignment.
When configuring Direct Routing, what fully qualified domain name (FQDN) can be used for the Session Border Controller (SBC)?
- An FQDN using a domain verified in your Microsoft 365 tenant (e.g., sbc1.contoso.com) (Correct)
- A default *.onmicrosoft.com domain name
- An unroutable private .local internal address
- A raw IPv4 address without DNS names
Explanation: The SBC FQDN must use a domain suffix that is registered and verified as a custom domain in your Microsoft 365 tenant (e.g., sbc1.contoso.com). Default *.onmicrosoft.com domains cannot be used.
Which PowerShell cmdlet registers a new Session Border Controller (SBC) gateway with Microsoft Teams Direct Routing?
- New-CsOnlinePSTNGateway (Correct)
- Set-CsTeamsClientConfiguration
- Add-UnifiedGroupLink
- Enable-ExchangeVoiceRouting
Explanation: New-CsOnlinePSTNGateway creates and registers an SBC configuration profile including FQDN, SIP signaling port, and TLS options.
In Microsoft Teams Direct Routing, what is the purpose of enabling Media Bypass on the PSTN gateway configuration?
- Enables media to flow directly between client and SBC without cloud relay hops (Correct)
- Allows anonymous external callers to bypass voicemail
- Forces all audio calls through an on-premises fax machine
- Encrypts user hard drives using AES-256 BitLocker
Explanation: Media Bypass enables audio traffic to flow directly between the client endpoint and the Session Border Controller without traversing Microsoft media relays, reducing latency and packet hops.
You are configuring outbound voice routing in Direct Routing. Which element links a Voice Routing Policy to a specific Voice Route?
- PSTN Usages (Correct)
- Administrative Units
- Group Naming Policies
- Conditional Access grant controls
Explanation: PSTN Usages act as the logical bridge connecting Voice Routing Policies (assigned to users) with Voice Routes (which define number regex matching patterns and target SBC gateways).
You need to translate user-dialed 4-digit extensions (e.g., 2001) into full E.164 telephone numbers (+12065552001) before routing calls to the PSTN. What should you configure?
- Dial Plans with Normalization Rules using regular expressions (Correct)
- Exchange mail flow transport rules
- Call Quality Dashboard filters
- Intune device configuration profiles
Explanation: Dial Plans (Normalization Rules) use regular expressions to normalize dialed strings into the international E.164 telephone format required by Teams Phone.
An administrator needs to configure an Auto Attendant that operates with different menu options during regular business hours versus after hours. Where is this schedule defined?
- Business Hours schedules under Call flow in Auto Attendant setup (Correct)
- Windows Control Panel Clock settings
- Active Directory Schema Master properties
- DNS SRV record time-to-live (TTL)
Explanation: In the Auto Attendant configuration under Call flow, administrators define Business Hours schedules and configure dedicated after-hours call routing destinations.
You are configuring a Teams Call Queue for technical support. You want incoming calls to be offered to agents who have been idle the longest since their last answered call. Which routing method fits?
- Longest Idle routing (Correct)
- Serial routing
- Round robin routing
- Broadcast routing
Explanation: Longest Idle routing distributes calls to the agent who has been in an available state and idle for the longest duration since concluding their last call.
What is the purpose of enabling "Presence-based routing" in a Teams Call Queue?
- Rings queue calls only to agents whose presence status is Available (Correct)
- Allows agents to answer calls from personal home landlines
- Deletes voicemails left by callers after hours
- Translates spoken English calls to German text
Explanation: Presence-based routing ensures incoming calls are routed only to queue agents whose Teams presence state is Available, avoiding agents who are Busy, In a Call, or Away.