Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 91:

  You need to ensure that a user named Allan Deyoung receives incident reports when email messages that contain data covered by the U.K. Data Protection Act are sent outside of your organization.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  1.

  In the Security and Compliance Center > left navigation > Data loss prevention > Policy > + Create a policy.

  2.

  Choose the U.K. Data Protection Act template > Next.

  3.

  Name the policy > Next.

  4.

  Choose All locations in Office 365 > Next.

  5.

  At the first Policy Settings step just accept the defaults,

  6.

  After clicking Next, you'll be presented with an additional Policy Settings page

  Deselect the Show policy tips to users and send them an email notification option.

  Select the Detect when content that's being shared contains option, and configure the number instances to be 10.

  Select the Send incident reports in email option.

  Select the Choose what to include in the report and who receives it link to add Allan Deyoung as a recipient.

  7.

  > Next

  8.

  Select the option to turn on the policy right away > Next.

  9.

  Click Create to finish creating the policy.

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlp-policy?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/what-the-dlp-policy-templates-include?view=o365-worldwide

• Question 92:

  You need to protect against phishing attacks. The solution must meet the following requirements:

  1.

  Phishing email messages must be quarantined if the messages are sent from a spoofed domain.

  2.

  As many phishing email messages as possible must be identified.

  The solution must apply to the current SMTP domain names and any domain names added later.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  1.

  After signing in to the Microsoft 365 admin center, select Security, Threat Management, Policy, then ATP Anti-phishing.

  2.

  Select Default Policy to refine it.

  3.

  In the Impersonation section, select Edit.

  4.

  Go to Add domains to protect and select the toggle to automatically include the domains you own.

  5.

  Go to Actions, open the drop-down If email is sent by an impersonated user, and choose the Quarantine message action. Open the drop-down If email is sent by an impersonated domain and choose the Quarantine message action.

  6.

  Select Turn on impersonation safety tips. Choose whether tips should be provided to users when the system detects impersonated users, domains, or unusual characters. Select Save.

  7.

  Select Mailbox intelligence and verify that it's turned on. This allows your email to be more efficient by learning usage patterns.

  8.

  Choose Add trusted senders and domains. Here you can add email addresses or domains that shouldn't be classified as an impersonation.

  9.

  Choose Review your settings, make sure everything is correct, select Save, then Close.

  Reference:

  https://support.office.com/en-us/article/protect-against-phishing-attempts-in-microsoft-365-86c425e1-1686-430a-9151-f7176cce4f2c#ID0EAABAAA=Try_it!

  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-anti-phishing-policies?view=o365-worldwide#example-anti-phishing-policy-to-protect-a-user-and-a-domain

• Question 93:

  You need to ensure that all links to malware.contoso.com within documents stored in Microsoft Office 365 are blocked when the documents are accessed from Office 365 ProPlus applications.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  1.

  After signing in to the Microsoft 365 admin center, navigate to Threat management, choose Policy > Safe Links.

  2.

  In the Policies that apply to the entire organization section, select Default, and then choose Edit (the Edit button resembles a pencil).

  3.

  In the Block the following URLs section, add the malware.contoso.com link.

  4.

  In the Settings that apply to content except email section, select all the options.

  5.

  Choose Save.

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-links-policies?view=o365-worldwide

• Question 94:

  You need to ensure that a user named Allan Deyoung uses multi-factor authentication (MFA) for all authentication requests.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  1.

  Open the Admin Center and go to Users > Active Users

  2.

  Open Multi-factor authentication

  Don't select any user yet, just open the Multi-factor authentication screen. You will find the button in the toolbar.

  

  3. Open the Service settings

  Before we start enabling MFA for the users, we first go through the service settings. The button to the settings screen doesn't stand out, but it's just below the title

  

  4. Setup MFA Office 365

  A few settings are important here:

  1.

  Make sure you check the App password. Otherwise, users can't authenticate in some applications (like the default mail app in Android).

  2.

  Also, take a look at the remember function. By default, it is set to 14 days.

  

  5. Enable MFA for Office 365 users

  After you have set the settings to your liking click on save and then on users (just below the title Multi-factor authentication).

  You see the list of your users again. Here you can select single or multiple users to enable MFA.

  At the moment you enable Office 365 MFA for a user it can get the setup screen as soon as the users browse to one of the Office 365 products.

  

  Reference: https://lazyadmin.nl/office-365/how-to-setup-mfa-in-office-365/

• Question 95:

  You need to prevent any email messages that contain data covered by the U.K. Data Protection Act from being sent to recipients outside of your organization, unless the messages are sent to an external domain named adatum.com.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  1.

  After signing into the Microsoft 365 admin center, navigate to Compliance Management in the Exchange Admin center.

  2.

  Click on “Data Loss Prevention” option.

  3.

  To add a new custom DLP policy, Click on (+) plus button to get the context menu

  4.

  Click on “New Custom DLP policy” option, a new window appears where you have to enter policy name, description, state and mode of the requirement details. Click on save button to create policy and continue…

  5.

  You will be back to the “Data Loss Prevention” screen with newly added policy information.

  6.

  Double click on the added row to open the policy details, click on rules option in left part of the screen as depicted

  7.

  Click on (+) plus button to add a new rule. Select the “Block messages with sensitive information” rule.

  8.

  On the following screen, we can add condition, action, exceptions, rule activation and deactivation dates

  

  9. Click on “Select Sensitive information Types” to specify the sensitive information details.

  

  10. Click on (+) plus button and add the following Sensitive information Types:

  U.K. National Insurance Number (NINO

  U.S. / U.K. Passport Number SWIFT Code

  11.

  Click on Ok

  12.

  Add an exception for recipients in the adatum.com domain

  13.

  Add recipients for incident reports and click ok

  14.

  Click save

  15.

  Click save

  Reference: https://events.collab365.community/configure-data-loss-prevention-policies-in-exchange-online-in-office-365/

• Question 96:

  You plan to create a script to automate user mailbox searches. The script will search the mailbox of a user named Allan Deyoung for messages that contain the word injunction.

  You need to create the search that will be included in the script.

  To complete this task, sign in to the Microsoft 365 admin center.

  Correct Answer: See explanation below.

  Step 1: Create a CSV file that contains information about the searches you want to run

  The comma separated value (CSV) file that you create in this step contains a row for each user that want to search. You can search the user's Exchange Online mailbox (which includes the archive mailbox, if it's enabled) and their OneDrive for Business site. Or you can search just the mailbox or the OneDrive for Business site. You can also search any site in your SharePoint Online organization. The script that you run in Step 3 will create a separate search for each row in the CSV file.

  1. Copy and paste the following text into a .txt file using NotePad. Save this file to a folder on your local computer. You'll save the other scripts to this folder as well.

  ExchangeLocation,SharePointLocation,ContentMatchQuery,StartDate,EndDate [email protected],https://contoso-my.sharepoint.com/personal/sarad_contoso_onmicrosoft_com,(lawsuit OR legal),1/1/2000,12/31/2005 [email protected],https://contoso-my.sharepoint.com/personal/sarad_contoso_onmicrosoft_com,(lawsuit OR legal),1/1/2006,12/31/2010 [email protected],https://contoso-my.sharepoint.com/personal/sarad_contoso_onmicrosoft_com,(lawsuit OR legal),1/1/2011,3/21/2016 ,https://contoso.sharepoint.com/sites/contoso,,,3/21/2016 ,https://contoso-my.sharepoint.com/personal/davidl_contoso_onmicrosoft_com,,1/1/2015, ,https://contoso-my.sharepoint.com/personal/janets_contoso_onmicrosoft_com,,1/1/2015,

  The first row, or header row, of the file lists the parameters that will be used by New-ComplianceSearch cmdlet to create a new Content Searches. Each parameter name is separated by a comma. Make sure there aren't any spaces in the header row. Each row under the header row represents the parameter values for each search. Be sure to replace the placeholder data in the CSV file with your actual data.

  2.

  Open the .txt file in Excel, and then use the information in the following table to edit the file with information for each search.

  3.

  Save the Excel file as a CSV file to a folder on your local computer. The script that you create in Step 3 will use the information in this CSV file to create the searches.

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-report-on-and-delete-multiple-content-searches?view=o365-worldwide

  Keyword queries and search conditions for Content Search https://docs.microsoft.com/en-us/microsoft-365/compliance/keyword-queries-and-search-conditions?view=o365-worldwide

• Question 97:

  You have a Microsoft 365 subscription.

  You need to recommend a passwordless authentication solution that uses biometric authentication.

  What should you include in the recommendation?

  A. Windows Hello for Business

  B. a smart card

  C. the Microsoft Authenticator app

  D. a PIN

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-overview

• Question 98:

  You have a Microsoft 365 tenant that is linked to a hybrid Azure Active Directory (Azure AD) tenant named contoso.com.

  You need to enable Azure AD Seamless Single Sign-On (Azure AD SSO) for contoso.com.

  What should you use?

  A. Azure AD Connect

  B. the Azure Active Directory admin center

  C. the Microsoft 365 Security admin center

  D. the Microsoft 365 admin center

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

• Question 99:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You need to ensure that User1, User2, and User3 can use self-service password reset (SSPR). The solution must not affect User4.

  Solution: You create a conditional access policy for User1, User2, and User3.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

• Question 100:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  The Azure Active Directory (Azure AD) Identity Protection risky users report identifies User1.

  For User1, you select Confirm user compromised.

  User1 can still sign in.

  You need to prevent User1 from signing in. The solution must minimize the impact on users at a lower risk level.

  Solution: From the Access settings, you select Block access for User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-investigate-risk