Free Install and Configure Cloud-Based Tools practice questions
10 free 220-1202 questions on Install and Configure Cloud-Based Tools, each with a full explanation — no account needed. This section sits in the Operating Systems part of the exam. Answer every question to see your score, then read the lessons below for anything you missed.
A user reports that their new laptop can send and receive email correctly, but messages placed in the Sent Items folder on their desktop do not appear on their smartphone. Both devices use the same email account. Which protocol was MOST likely configured on this account?
POP3 usually downloads mail to a single device and does not keep a synchronized mailbox view on the server, so items such as sent mail, folders, and read status often do not appear on a second device. This behavior fits single-device use and explains why the smartphone cannot see the Sent Items created on the laptop. IMAP keeps mail on the server and syncs the mailbox view across clients, so sent mail and folders would appear consistently on both devices. Exchange and Microsoft 365 accounts keep mail on the server and also sync mail, calendar, and contacts, providing strong multi-device consistency. SMTP is the outgoing transport protocol used to send messages between servers and from clients; it is not the incoming protocol that determines how a mailbox is stored or synced across devices. Because the symptom is a lack of synchronization between two devices sharing one account, POP3 is the protocol most consistent with the described behavior.
A technician is manually configuring the outgoing mail settings for a client so that the user can send email securely with authentication. Which port should the technician enter for SMTP submission?
Port 587 is the standard SMTP submission port used by mail clients for outgoing mail, and it supports STARTTLS encryption along with SMTP authentication. This is the port a technician should enter when setting up a client to send mail securely. Port 25 is the traditional server-to-server SMTP relay port and is frequently blocked by ISPs for client use, so it rarely belongs in a client setup. Port 110 is the legacy unencrypted POP3 incoming port and has nothing to do with sending mail. Port 993 is the secure IMAP incoming port used to retrieve mail over SSL/TLS, not to submit outgoing messages. Remembering the pattern helps: the low, original ports (25, 110, 143) are unencrypted, while 587 and the 9xx ports (993, 995) are the secure counterparts used in modern manual configurations.
A user's email client repeatedly displays 'Cannot verify server identity' and the sign-in loops even though the correct password is entered. Webmail on the same device works normally. Which item should the technician check FIRST?
A wrong date, time, or time zone on the device can break TLS certificate validation, producing errors like 'Cannot verify server identity' and confusing sign-in loops. Because certificates have valid-from and valid-to timestamps, an incorrect clock makes the client believe the certificate is invalid, so verifying the time and time zone is the correct first step. A mailbox quota problem would typically block new incoming mail and cause repeated prompts, but it does not produce a certificate-identity error. An incorrect outgoing SMTP port would affect the ability to send mail, not cause a server identity verification failure during sign-in. The display name and signature are cosmetic settings that have no effect on TLS handshakes or authentication. When the error appears 'random' and webmail works, the identity/certificate handshake is failing on the device, and time is the most common and fastest culprit to rule out before deeper troubleshooting.
A user can receive email without issues, but every attempt to send a message fails. Webmail from the same network can send successfully. Which is the MOST likely cause of the sending failure in the desktop client?
When receiving works but sending fails, the problem points to the outgoing (SMTP) configuration. Common causes include missing SMTP authentication, the wrong outgoing port, or an ISP blocking outbound mail on port 25; many providers require port 587 with TLS and authenticated SMTP. An incorrect incoming IMAP server name would affect the ability to receive messages, which is working fine in this scenario. A mailbox quota that is exceeded typically blocks incoming mail and causes repeated prompts, not a pure send failure. An expired TLS certificate would generally break the connection for both sending and receiving and usually present an identity or trust error rather than a clean send-only failure. Because webmail can send on the same network, the account and outbound path are functional, so the defect lies in the client's SMTP settings, making missing authentication or the wrong outgoing port the most likely explanation.
A remote employee frequently works on flights without internet access and complains that important documents in their cloud storage folder show only placeholder icons and won't open offline. Which setting should the technician change?
Files On-Demand style features store placeholders on disk until a file is opened, which saves space but requires connectivity to download the content on first access. For a user who works offline, marking the important folders as 'always keep on this device' forces the files to download and remain locally available, so they open without internet. Enabling known folder backup redirects Desktop, Documents, and Pictures into the cloud client but does not guarantee the files are downloaded locally rather than kept as placeholders. Moving the sync root to a deep custom path is discouraged because it can create long file-name problems and does not affect offline availability. Turning on selective sync for shared team drives controls which folders sync at all and is often used to reduce disk usage, but it does not resolve the placeholder-versus-local issue for the folders the user needs offline. The correct fix is to pin the needed content locally.
Two team members edited the same spreadsheet stored in a cloud sync folder while both were briefly offline. After reconnecting, the sync client created a second file with a device name appended to the file name. What is the BEST guidance for the users?
When two devices change the same file before sync completes, the client creates a conflicted copy, often labeled with a device name or timestamp. The correct approach is to compare the versions and keep the correct one, preserving any needed edits before removing the duplicate. Deleting both files in frustration risks permanent data loss, since both may contain unique changes, so that guidance is wrong. Renaming the sync root folder can trigger re-indexing or full re-downloads and does not resolve a content conflict between two edited copies. Disabling encryption has nothing to do with merging files and would weaken security while providing no benefit, since conflict files result from timing of edits, not from encryption. Teaching users to review conflicted copies and retain the accurate version prevents both data loss and repeat tickets.
A user says they can sign in to the Microsoft 365 web portal successfully, but their Outlook client shows no mailbox and email does not work. Sign-in and password are confirmed correct. Where should the technician focus?
When sign-in works but a specific service like email fails, licensing rises to the top of the suspect list. A synced account can authenticate to the portal yet still lack a mailbox if no license is assigned or if the license's Exchange Online service plan is disabled, so verifying that the license includes the email service is the correct focus. Resetting the password again would not help, because the user can already sign in, confirming the credentials are valid. Correcting the user principal name format addresses identity mismatches that cause sign-in failures, but sign-in is already working here. Re-running directory synchronization addresses situations where an account does not exist or does not match across directories; since the user authenticates successfully, the identity has clearly synced. The pattern 'I can log in but nothing works' consistently points to licensing or service plan settings rather than identity or authentication.
A new hire exists in the on-premises Active Directory but cannot sign in to any cloud services, and their account does not appear in the cloud directory. The onboarding was completed less than an hour ago. What is the MOST appropriate first action?
Directory synchronization is not always instant, so a newly created account may take time to appear in the cloud directory. When a ticket arrives immediately after onboarding, waiting and re-checking later is part of the correct process rather than a stall. Assigning a license directly to the on-prem account will not help because the cloud identity must exist and provision before services activate, and licenses are assigned in the cloud portal. Creating a separate cloud-only account is a poor choice because it introduces duplicate accounts, which cause sign-in confusion, licensing mistakes, and mailbox attachment problems once the synced account finally arrives. Resetting the Active Directory password does not address the timing issue, since the account simply has not synced yet, not a bad credential. Allowing sync to complete and re-verifying prevents unnecessary and potentially harmful changes.
An administrator manages licensing through role-based groups. After a user is moved out of the 'Accounting' group, they can still open a licensed app for a short time, but new actions begin to fail. What explains this behavior?
With group-based licensing, removing a user from a licensing group removes the license after a short delay, which creates a confusing window where the user can still open an app but new actions start to fail as the service deprovisions. This delayed removal directly matches the described symptom. An identity synchronization failure would typically prevent sign-in entirely or cause the account not to appear in the cloud, not produce a brief window of partial functionality after a group change. A UPN mismatch causes authentication problems where the user cannot sign in with the expected name, which is not what is happening here. The tenant running out of licenses would block new assignments to other users, but it does not explain a specific user losing access shortly after being removed from a group. Recognizing the delay in group-based license changes helps techs set correct expectations and avoid chasing phantom identity issues.
A project manager wants several teammates to edit a shared slide deck simultaneously, while a finance lead needs most staff to only view a budget spreadsheet. Which permission configuration correctly satisfies both requests?
Sharing permissions map to three levels: view allows read-only access, comment allows adding notes without changing content, and edit allows changing content including deletion. Since teammates must co-author the slide deck, they need edit access, and since most staff should only look at the budget spreadsheet, they need view access, making 'edit on the deck and view on the spreadsheet' correct. Granting view on the deck and edit on the spreadsheet reverses the requirements, blocking the collaborative editing on the deck and over-permitting staff on the budget. Granting comment on both would let reviewers add notes but would prevent the teammates from actually editing the slides, failing the project manager's need. Granting edit on both would over-share the budget spreadsheet, allowing any staff member to alter or delete financial data, which violates the finance lead's request and the principle of least privilege. Matching each level to the intended audience prevents accidental changes and access-control mistakes.
Study this section
Every lesson that covers Install and Configure Cloud-Based Tools on the 220-1202 exam.