RENEWAL ASSESSMENT FOR MICROSOFT
CERTIFIED CERTIFICATION EVALUATION
2026 TEST PAPER QUESTIONS AND
SOLUTIONS
●● Sender Policy Framework (SPF).
Answer: A TXT record in Domain DNS to validate outbound emails sent
from your domain. Helps to prevent spoofing and spamming.
●● Domain Keys Identified Mail (DKIM).
Answer: Adds a digital signature to the message header of emails to
ensure that destination email systems trust messages sent outbound from
your domain. Helps to prevent spoofing and spamming.
●● Microsoft Purview Audit Logs.
Answer: Unified audit log. Can view user and admin activity in the
organization. Thousands of users and admin activities performed are
logged here and stored for 90 days.
●● eDiscovery Manager Role Group.
Answer: Has both Compliance Search and Hold roles. Can be used to
put a mailbox on Hold.
, ●● Records Management Role Group.
Answer: Used to manage and dispose of record content.
●● Security Operator Role Group.
Answer: Can manage alerts and can view reports and security features
settings.
●● User offboarding steps.
Answer: Block user sign-in
Convert to shared mailbox
Shared mailbox delegation or email forwarding
OneDrive access to another user
Remove license
●● Service Support Administrator.
Answer: Can open and manage service requests, manage the message
center, and monitor service health. It cannot reset passwords for any
other users.
●● Global Admin.
Answer: Has all rights across Microsoft 365 services.
●● Password Administrator.
CERTIFIED CERTIFICATION EVALUATION
2026 TEST PAPER QUESTIONS AND
SOLUTIONS
●● Sender Policy Framework (SPF).
Answer: A TXT record in Domain DNS to validate outbound emails sent
from your domain. Helps to prevent spoofing and spamming.
●● Domain Keys Identified Mail (DKIM).
Answer: Adds a digital signature to the message header of emails to
ensure that destination email systems trust messages sent outbound from
your domain. Helps to prevent spoofing and spamming.
●● Microsoft Purview Audit Logs.
Answer: Unified audit log. Can view user and admin activity in the
organization. Thousands of users and admin activities performed are
logged here and stored for 90 days.
●● eDiscovery Manager Role Group.
Answer: Has both Compliance Search and Hold roles. Can be used to
put a mailbox on Hold.
, ●● Records Management Role Group.
Answer: Used to manage and dispose of record content.
●● Security Operator Role Group.
Answer: Can manage alerts and can view reports and security features
settings.
●● User offboarding steps.
Answer: Block user sign-in
Convert to shared mailbox
Shared mailbox delegation or email forwarding
OneDrive access to another user
Remove license
●● Service Support Administrator.
Answer: Can open and manage service requests, manage the message
center, and monitor service health. It cannot reset passwords for any
other users.
●● Global Admin.
Answer: Has all rights across Microsoft 365 services.
●● Password Administrator.
