Use the following questions to test your knowledge on this chapter. You can find the answers in Chapter 22, Assessment Answers.

1. You are the SharePoint administrator for your organization. You have been asked to configure external sharing so that SharePoint sites can be shared externally with specific users, but OneDrive for Business sites cannot be externally shared. What options should you select?
   1. SharePoint sharing slider: Anyone; OneDrive sharing slider: Anyone
   2. SharePoint sharing slider: New and existing guests; OneDrive sharing slider: Existing guests only
   3. SharePoint sharing slider: Existing guests only; OneDrive sharing slider: Existing guests only
   4. SharePoint sharing slider: New and existing guests; OneDrive sharing slider: Only people in your organization
2. You need to prevent legacy applications from connecting to SharePoint online. What feature should you enable?
   1. Set the SharePoint sharing slider option to Only people in your organization.
   2. Set the Apps that don't use modern authentication option to Block access.
   3. Configure network locations.
   4. Use Set-SPOTenant -MinCompatibilityLevel to set the version to 14.
3. You want to enable multi-factor authentication for guest users for your tenant. You currently have 100 licenses of Azure AD Premium P1. What is the maximum number of external users that you can apply a conditional access policy to?
   1. 20
   2. 50
   3. 100
   4. 500

4. You are the SharePoint administrator for your organization. The marketing department has instructed you to allow external guests working on an ad campaign to edit documents. What two things could you do to complete this task?
   1. Add the external guests to the Members SharePoint group.
   2. Assign a license to the external guests.
   3. Modify the permissions of the Visitors SharePoint group to Edit.
   4. Enable multi-factor authentication.
5. You need to restrict your SharePoint Online organization to only allow access from your corporate network locations. What settings should you modify to achieve this?
   1. Add your internal IP addresses to the Network location settings.
   2. Add your public IP addresses to the Network location settings.
   3. Configure Azure AD hybrid join.
   4. Set the Apps that don't use modern authentication option to Block access.
6. You are the SharePoint administrator for your organization. The security team has asked you to limit the inactivity period for SharePoint online sessions to 30 minutes. What settings should you modify to achieve this?
   1. Enable multi-factor authentication for all users, including guests and members.
   2. Under Network location settings, enter your public IP address ranges.
   3. Under Idle session sign-out, set the Sign out users after value to 30 minutes.
   4. Under Idle session sign-out, set the Give users this much notice before signing them out value to 30 minutes.
7. The security team has asked you to configure the default sharing links for SharePoint to a more restrictive default option. What should you do?
   1. Configure the default sharing link permission to View.
   2. Configure the default sharing link permission to Edit.
   3. Configure the default sharing link permission to Update.
   4. Configure the default sharing link permission to None.

8. The security team has asked you to prevent guest users from forwarding invitations to other users. What should you do?
   1. Configure the Guests must sign in using the same account to which sharing invitations are sent option.
   2. Set the External sharing option for File and folder links to Only people in your organization.
   3. Configure domain sharing restrictions.
   4. Configure the default sharing link permission to View.
   5. Click Add domains.
   6. Click Allow only specific domains and add contoso.com.
   7. Click Block specific domains and add contoso.com.
   8. Under Advanced settings for external sharing, select Limit external sharing by domain.
9. You are the SharePoint administrator for your organization. The security team has asked you to prevent users from sending sharing requests to recipients in the contoso.com domain. What three activities should you do in order?
   1. Click Add domains.
   2. Under Advanced settings for external sharing, select Limit external sharing by domain.
   3. Click Block specific domains and add contoso.com.
   4. Click Allow only specific domains and add contoso.com.
10. You have recently entered into a partnership with Fabrikam, and you need to enable file collaboration between your organizations. Users report that they are unable to share files externally from any site. What should you do?
    1. Configure the external sharing settings for the tenant to allow Existing guests.
    2. Configure the external sharing settings for the tenant to allow New and existing guests.
    3. Configure the external sharing settings for the site to allow New and existing guests.
    4. Configure the external sharing settings for the site to allow Existing guests.