Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 121:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You need to identify which user can enable Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) roles. Which user should you identify?

  A. User1

  B. User2

  C. User3

  D. User4

  Correct Answer: B

  The Security Administrator and the Global Administrator can enable roles in the Microsoft Defender portal. Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/rbac

• Question 122:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription. Contoso.com contains the groups shown in the following table.

  

  You plan to create a supervision policy named Policy1.

  You need to identify which groups can be supervised by using Policy1.

  Which groups should you identify?

  A. Group1 and Group4 only

  B. Group1 only

  C. Group1, Group3, and Group4 only

  D. Group2 and Group3 only

  E. Group1, Group2, and Group3 only

  Correct Answer: E

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/configure-supervision-policies?view=o365-worldwide

• Question 123:

  Your network contains an on-premises Active Directory domain. The domain contains servers that run Windows Server and have advanced auditing enabled. The security logs of the servers are collected by using a third-party SIEM solution.

  You purchase a Microsoft 365 subscription and plan to deploy Azure Advanced Threat Protection (ATP) by using standalone sensors. You need to ensure that you can detect when sensitive groups are modified and when malicious services

  are created.

  What should you do?

  A. Configure Azure ATP notifications

  B. Configure Event Forwarding on the domain controllers

  C. Configure auditing in the Office 365 Security and Compliance center

  D. Modify the Domain synchronizer candidate settings on the Azure ATP sensors

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-event-forwarding

• Question 124:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription.

  All users in contoso.com use the Microsoft SharePoint Newsfeed. You need to ensure that all the users use the Yammer.com service.

  What should you do?

  A. From the Yammer admin center, modify the Usage Policy settings

  B. From the SharePoint admin center, modify the Enterprise Social Collaboration settings

  C. From the SharePoint admin center, modify the Connected Services settings

  D. From the Yammer admin center, modify the Configuration settings

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/yammer/integrate-yammer-with-other-apps/yammer-and-newsfeed

• Question 125:

  You have a Microsoft 365 subscription that contains a user named User1.

  You plan to use Compliance Manager.

  You need to ensure that User1 can assign Compliance Manager roles to users. The solution must use the principle of least privilege.

  Which role should you assign to User1?

  A. Compliance Manager Assessor

  B. Global Administrator

  C. Portal Admin

  D. Compliance Manager Administrator

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/working-with-compliance-manager? view=o365-worldwide

• Question 126:

  You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant that contains a user named User1.

  You have a Data Subject Request (DSR) case named Case1. You need to allow User1 to export the results of Case1. The solution must use the principle of least privilege.

  Which role should you assign to User1 for Case1?

  A. eDiscovery Manager

  B. Security Operator

  C. eDiscovery Administrator

  D. Global Reader

  Correct Answer: A

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-gdpr-data-subject-requests-with-the- dsr-case-tool?view=o365-worldwide#step-1-assign-ediscovery-permissions-to-potential-case-members

• Question 127:

  Your company has a Microsoft 365 subscription.

  The company does not permit users to enroll personal devices in mobile device management (MOM). Users in the sales department have personal iOS devices. You need to ensure that the sales department users can use the Microsoft

  Power Bl app from iOS devices to access the Power Bl data in your tenant. The users must be prevented from backing up the app's data to iCIoud.

  What should you create?

  A. a device compliance policy in Microsoft Endpoint Manager

  B. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a device state condition

  C. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a client apps condition

  D. an app protection policy in Microsoft Endpoint Manager

  Correct Answer: D

• Question 128:

  You have a Microsoft 365 subscription.

  You have a Data Subject Request (DSR) case named Case1. You need to ensure that Case1 includes all the email posted by the data subject to the Microsoft Exchange Online public folders.

  Which additional property should you include in the Content Search query?

  A. kind:externaldata

  B. itemclass:ipm.externaldata

  C. itemclass:ipm.post

  D. kind:email

  Correct Answer: C

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/manage-gdpr-data-subject-requests-with-the- dsrcase-tool?view=o365-worldwide

• Question 129:

  You have a Microsoft 365 tenant.

  You need to implement a policy to enforce the following requirements:

  If a user uses a Windows 10 device that is NOT hybrid Azure Active Directory (Azure AD) joined, the user must be allowed to connect to Microsoft SharePoint Online only from a web browser. I he user must be prevented from downloading

  files or syncing files from SharePoint Online.

  If a user uses a Windows 10 device that is hybrid Azure AD joined, the user must be able connect to SharePoint Online from any client application, download files, and sync files.

  What should you create?

  A. a conditional access policy in Azure AD that has Client apps conditions configured

  B. a compliance policy in Microsoft Endpoint Manager that has the Device Health settings configured

  C. a compliance policy in Microsoft Endpoint Manager that has the Device Properties settings configured

  D. a conditional access policy in Azure AD that has Session controls configured

  Correct Answer: D

  https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session

• Question 130:

  You have a Microsoft 365 subscription.

  You have a Microsoft SharePoint Online site named Site1.

  You have a Data Subject Request (DSR) case named Case1 that searches Site1.

  You create a new sensitive information type.

  You need to ensure that Case1 returns all the documents that contain the new sensitive information type.

  What should you do?

  A. From the Security and Compliance admin center, create a new Search by ID List.

  B. From Site1, modify the search dictionary.

  C. From the Security and Compliance admin center, create a new Guided search.

  D. From Site1, initiate a re-indexing of Site1.

  Correct Answer: C

  https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-dsr-office365#using-the-content-search-ediscovery-tool-to-respond-to-dsrs