MS-700: Microsoft Teams Administrator Practice Exam

What the MS-700 exam covers

• Configure and Manage Teams149 questions
• Manage Chat, Calling, and Meetings138 questions
• Manage Teams and App Policies126 questions
• Monitor, Report, and Manage Compliance135 questions

Free MS-700 sample questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 548.

1. Question 1Configure and Manage Teams

   Where do you manage org-wide Teams settings, policies, and users?

   • AA printer console
   • BAzure DNS
   • CThe BIOS
   • DThe Microsoft Teams admin centerCorrect
   ✓ Correct answer: D

   The Microsoft Teams admin center (https://admin.teams.microsoft.com) is the centralized portal for managing all organization-wide Teams settings, including policies, user configurations, teams, channels, and app management. This is where administrators configure global settings, manage compliance, and oversee all Teams resources across the organization.

   Why the other options are wrong

   • AA printer console is incorrect because it is a hardware management interface unrelated to Teams administration.
   • BAzure DNS is incorrect because it manages DNS records and domain name resolution, not Teams configuration or user management.
   • CThe BIOS is incorrect because it manages low-level hardware settings and has no integration with cloud-based Teams services.
2. Question 2Manage Teams and App Policies

   What does a call queue provide?

   • Adistribution of inbound calls to a group of agents with hold music/routing optionsCorrect
   • BA storage tier
   • CA DNS zone
   • DA NAT rule
   ✓ Correct answer: A

   A call queue in Teams Phone is a resource account that distributes incoming calls across multiple agents or team members, providing an orderly mechanism for handling call volume. The queue can be configured with hold music, estimated wait time announcements, automatic call routing policies (longest idle agent, round-robin, or sequential), and agent availability settings. This feature is essential for contact centers and support teams that need to manage call distribution fairly while maintaining professional customer experience.

   Why the other options are wrong

   • BA storage tier is incorrect because storage tiers classify data retention and backup strategies; they do not involve call distribution.
   • CA DNS zone is incorrect because DNS zones manage domain namespace organization; they do not participate in call queue functionality.
   • DA NAT rule is incorrect because NAT rules perform network address translation for IP traffic; they do not distribute or route telephone calls.
3. Question 3Manage Teams and App Policies

   You must bulk-archive hundreds of completed project teams to free resources while preserving content for reference. Which approach is most efficient and least costly?

   • AArchive the teams (set them read-only) via the admin center or scripting with Set-TeamArchivedState rather than deleting or leaving them activeCorrect
   • BDelete every team and restore later if needed
   • CConvert each team to a distribution list manually
   • DLeave all teams fully active indefinitely
   ✓ Correct answer: A

   Archiving a team sets it to read-only, disables new message posting and channel creation, and removes it from the active team list while preserving all historical content such as chats, files, and channel conversations for reference. You can archive in bulk efficiently by scripting Set-TeamArchivedState, and archived teams remain searchable and restorable without the risk of losing data. This balances freeing administrative overhead against retaining content at minimal cost.

   Why the other options are wrong

   • BDelete every team and restore later if needed is incorrect because deletion removes content (recoverable only within the soft-delete window), and restoring hundreds of teams is operationally complex and risky compared to archiving.
   • CConvert each team to a distribution list manually is incorrect because distribution lists are email-only objects that cannot store SharePoint files, channels, or meeting history, so team content would not be preserved.
   • DLeave all teams fully active indefinitely is incorrect because keeping completed teams active consumes storage, clutters the team list, and increases sync and management overhead without any benefit.
4. Question 4Configure and Manage Teams

   You must restrict team creation to the IT and HR departments only, with the least administrative overhead. What is the best design?

   • ACreate a Conditional Access policy that blocks Teams for other users
   • BRestrict M365 Group creation in Entra ID to a single security group that nests the IT and HR groupsCorrect
   • CRemove the Teams license from everyone except IT and HR
   • DAssign the Global Administrator role to IT and HR users
   ✓ Correct answer: B

   Group creation restrictions in Entra ID (Azure AD) is the most direct and scalable method for controlling team provisioning. By assigning the Group.Unified.GroupAsOwner permission to only a single security group, and then nesting the IT and HR groups within that group, you allow only members of those departments to create new Teams. This is enforced at the M365 Group creation layer, which underlies Teams. This approach requires minimal ongoing administrative effort—admins simply manage group membership—and automatically applies to all new teams created by those users. It is the standard Microsoft-recommended approach for this exact scenario.

   Why the other options are wrong

   • ACreate a Conditional Access policy that blocks Teams for all users is incorrect because Conditional Access governs access to an application, not the ability to create groups; it would block team access entirely rather than creation.
   • CRemove the Teams license from everyone except IT and HR is incorrect because it eliminates Teams functionality for all other users and does not specifically prevent team creation for non-IT/HR users who do have a license.
   • DAssign the Global Administrator role to IT and HR users is incorrect because it grants excessive permissions beyond team creation, violating least privilege principles and introducing security risk.
5. Question 5Manage Chat, Calling, and Meetings

   A regulated user must always be placed in the meeting lobby when joining from outside the org, but the meeting organizer keeps changing lobby settings. How do you enforce this org-side?

   • AConfigure the automatically admit people setting in the Teams meeting policy assigned to the organizerCorrect
   • BBlock the user's DNS
   • CEdit each meeting invite manually
   • DRemove the user's Audio Conferencing license
   ✓ Correct answer: A

   Teams meeting policies include a setting called "Automatically admit people" which controls who is automatically admitted to a meeting and who must wait in the lobby. When you set this policy to "Only people in my organization" or similar restrictive option on the organizer's meeting policy, external participants (those from outside the organization) are automatically placed in the meeting lobby regardless of other meeting settings the organizer might change. This org-side policy enforcement ensures compliance even if the organizer tries to modify per-meeting lobby behavior.

   Why the other options are wrong

   • BBlock the user's DNS is incorrect because DNS blocking would prevent network access entirely, not control lobby behavior for regulated users.
   • CEdit each meeting invite manually is incorrect because manually editing individual meeting invites is not scalable and does not constitute organizational policy enforcement.
   • DRemove the user's Audio Conferencing license is incorrect because removing Audio Conferencing does not enforce lobby behavior and would disable the user's ability to dial into meetings.
6. Question 6Monitor, Report, and Manage Compliance

   A helpdesk engineer needs to see the network, devices, and connectivity for a single user's recent calls but should NOT change any settings. Which combination is appropriate?

   • AAssign the Teams Communications Support Specialist role and use per-user call analyticsCorrect
   • BAssign no role and read the DNS logs
   • CAssign SharePoint Administrator and open CQD
   • DAssign Global Administrator and edit the user's policies
   ✓ Correct answer: A

   The Teams Communications Support Specialist role provides exactly the minimum permissions needed for helpdesk support: read-only access to per-user call analytics to view network conditions, device specifications, connectivity details, participant information, and quality metrics for a specific user's recent calls, without any ability to modify settings, policies, or configurations. This combination ensures that the helpdesk engineer can diagnose issues thoroughly while maintaining strict role-based access control boundaries and preventing accidental or malicious configuration changes.

   Why the other options are wrong

   • BAssign no role and read the DNS logs is incorrect because without the Teams Communications Support Specialist or Communications Support Engineer role, the helpdesk engineer would lack access to call analytics data; additionally, DNS logs contain only name resolution queries, not call quality or connectivity information.
   • CAssign SharePoint Administrator and open CQD is incorrect because SharePoint Administrator role governs document libraries and sites, not Teams analytics; additionally, CQD shows aggregated org-wide data, not individual user call details needed for targeted troubleshooting.
   • DAssign Global Administrator and edit the user's policies is incorrect because Global Administrator violates least-privilege principles by granting unnecessary broad permissions, and the requirement explicitly states the engineer should NOT change any settings, making editing policies inappropriate.
7. Question 7Configure and Manage Teams

   Remote employees report consistently poor video quality with high jitter only when on the corporate VPN. On home networks quality is fine. What is the recommended fix?

   • AConfigure split tunneling so Teams media bypasses the VPN and uses the local internet pathCorrect
   • BForce all Teams media through the VPN with TCP only
   • CBlock UDP ports 3478-3481
   • DDisable QoS on all clients
   ✓ Correct answer: A

   Teams media streams (audio, video, and screen sharing) are optimized for real-time transport and are sensitive to latency and jitter. When all traffic is tunneled through a corporate VPN, media packets must follow the VPN's routing and QoS constraints, which are typically optimized for data throughput rather than low-latency real-time communication. By using split tunneling, media can take the direct local internet path, avoiding VPN-induced latency spikes and jitter. This approach aligns with Microsoft's best practices for Teams deployments, which recommend allowing critical media endpoints to bypass the VPN.

   Why the other options are wrong

   • BForce all Teams media through the VPN with TCP only is incorrect because TCP is a connection-oriented protocol with retransmission overhead that makes it unsuitable for real-time media; Teams media requires UDP for minimal latency.
   • CBlock UDP ports 3478-3481 is incorrect because these are the ports Teams Phone uses for media streams; blocking them would completely break audio and video functionality.
   • DDisable QoS on all clients is incorrect because QoS (Quality of Service) prioritizes media traffic when properly configured and is essential for maintaining call quality, especially on constrained links.
8. Question 8Manage Chat, Calling, and Meetings

   To stop your organization from federating (external access) with a specific external domain, what should you configure?

   • ACreate a call queue
   • Bblock the domain in the external access (federation) allow/block listCorrect
   • CAdd a DNS SPF record
   • DRemove the guest's license
   ✓ Correct answer: B

   Teams federation allow/block lists provide domain-level controls to selectively enable or disable federation with specific external organizations. Adding a domain to the block list prevents users in your organization from initiating or receiving Teams communications with users from that domain, even if those users are valid federated partners. The block list is evaluated at message and call initiation and silently prevents cross-organization communication.

   Why the other options are wrong

   • ACreating a call queue configures automatic call routing within your organization, not federation controls.
   • CAdding a DNS SPF record configures email authentication, not Teams federation.
   • DRemoving a guest's license affects license availability, not federation policies.
9. Question 9Manage Chat, Calling, and MeetingsSelect all that apply

   An administrator at Tailwind Traders is planning to use Teams calling plans. Which two of the following are requirements or features of this solution? (Choose two.)

   • Aoperator connectCorrect
   • BwebinarsCorrect
   • Cemergency calling
   • DCVI for Teams
   • Eplans calling Teams
   ✓ Correct answer: A, B

   Operator Connect lets a carrier provide and manage PSTN connectivity for Teams without a customer-run SBC, and webinars provide structured registration and presentation experiences for larger Teams events. Both are administered through the Microsoft Teams admin center and supporting Microsoft 365 portals, and they fit the scenario because they are the components an administrator actually provisions and governs for this solution. Selecting them aligns the configuration with the documented Teams capability rather than with renamed labels or unrelated features.

   Why the other options are wrong

   • CEmergency calling handles routing of emergency (911) calls with caller location information, which is a separate capability not part of this solution.
   • DCloud Video Interop (CVI) bridges legacy SIP/H.323 video room systems into Teams meetings, which is a separate capability not part of this solution.
   • EThe phrase 'plans calling Teams' is a scrambled label rather than a real, distinct feature, so it is not something an administrator configures here.
10. Question 10Manage Teams and App PoliciesSelect all that apply

    A consultant is reviewing the Bookings in Teams configuration at Adatum Corporation. Which two actions should be performed to optimize the implementation? (Choose two.)

    • ALOB app deployment
    • BPower Apps in Teams
    • CDisable Bookings in Teams monitoring
    • DPower Platform integrationCorrect
    • Eapp permission policiesCorrect
    ✓ Correct answer: D, E

    Bookings in Teams optimization requires Power Platform integration to enable custom business logic, automated appointment reminders, and integration with scheduling systems beyond Teams' native capabilities. App permission policies must be configured to ensure only designated staff can access booking calendars, modify appointments, and view customer information, maintaining data security and compliance. These two components address both functional extension and governance requirements.

    Why the other options are wrong

    • ALOB app deployment is incorrect because integrating legacy applications does not optimize Bookings functionality.
    • BPower Apps in Teams is incorrect because while Power Apps can enhance Bookings, it is not the primary optimization requirement.
    • CDisable Bookings in Teams monitoring is incorrect because monitoring tracks booking patterns, identifies scheduling bottlenecks, and measures resource utilization.

MS-700 practice exam FAQ