Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 181:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You discover that all the users in the subscription can access Compliance Manager reports.

  The Compliance Manager Reader role is not assigned to any users.

  You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.

  Solution: You recommend removing User1 from the Compliance Manager Contributor role.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/working-with-compliance-manager

• Question 182:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You discover that all the users in the subscription can access Compliance Manager reports.

  The Compliance Manager Reader role is not assigned to any users.

  You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.

  Solution: You recommend assigning the Compliance Manager Reader role to User5.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/working-with-compliance-manager

• Question 183:

  You have a Microsoft 365 subscription.

  You enable auditing for the subscription.

  You plan to provide a user named Auditor with the ability to review audit logs.

  You add Auditor to the Global administrator role group.

  Several days later, you discover that Auditor disabled auditing.

  You remove Auditor from the Global administrator role group and enable auditing.

  You need to modify Auditor to meet the following requirements:

  1.

  Be prevented from disabling auditing

  2.

  Use the principle of least privilege

  3.

  Be able to review the audit log

  To which role group should you add Auditor?

  A. Security reader

  B. Compliance administrator

  C. Security operator

  D. Security administrator

  Correct Answer: C

  Roles with "View Only Audit Logs" are (there is no security reader):

  *

  Compliance Administrator

  *

  Compliance Data Administrator

  *

  Global Reader

  *

  Organization Management

  *

  Security Administrator

  *

  Security Operator https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center?

• Question 184:

  You have a Microsoft 365 subscription.

  You have a team named Team1 in Microsoft Teams.

  You plan to place all the content in Team1 on hold.

  You need to identify which mailbox and which Microsoft SharePoint site collection are associated to Team1.

  Which cmdlet should you use?

  A. Get-UnifiedGroup

  B. Get-MailUser

  C. Get-TeamMessagingSettings

  D. Get-TeamChannel

  Correct Answer: A

  https://docs.microsoft.com/en-us/powershell/module/exchange/get-unifiedgroup?view=exchange-ps

• Question 185:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You discover that all the users in the subscription can access Compliance Manager reports.

  The Compliance Manager Reader role is not assigned to any users.

  You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.

  Solution: You recommend modifying the licenses assigned to User5.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  We need to prevent User5 from accessing the compliance manager reports. Assigning Compliance Manager Reader role to User1 will prevent the User5 from accessing the reports.

  Reference:

  https://docs.microsoft.com/en-us/office365/securitycompliance/working-with-compliance-manager

• Question 186:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution,

  while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Microsoft 365 subscription.

  You have a user named User1. Several users have full access to the mailbox of User1.

  Some email messages sent to User1 appear to have been read and deleted before the user viewed them.

  When you search the audit log in Security and Compliance to identify who signed in to the mailbox of User1, the results are blank.

  You need to ensure that you can view future sign-ins to the mailbox of User1.

  You run the Set-MailboxFolderPermission -Identity "User1"

  -User [email protected] -AccessRights Owner command.

  Does that meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  References: https://docs.microsoft.com/en-us/powershell/module/exchange/mailboxes/set-mailbox?view=exchange-ps

• Question 187:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You discover that all the users in the subscription can access Compliance Manager reports.

  The Compliance Manager Reader role is not assigned to any users.

  You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports.

  Solution: You recommend assigning the Compliance Manager Reader role to User1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Compliance Manager uses a role-based access control (RBAC) permission model. Only users who are assigned a role may access Compliance Manager, and the actions allowed by each user are restricted by role type. https://learn.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-setup?view=o365-worldwide#set-user-permissions-and-assign-roles

• Question 188:

  You have a Microsoft 365 subscription. You need to ensure that users can apply retention labels to individual documents in their Microsoft SharePoint libraries.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the Cloud App Security admin center, create a file policy.

  B. From the SharePoint admin center, modify the Site Settings.

  C. From the SharePoint admin center, create a label.

  D. From the SharePoint admin center, modify the records management settings.

  E. From the Security admin center, publish a label.

  Correct Answer: CE

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/protect-sharepoint-online-files-with-office-365-labels-and-dlp

• Question 189:

  You recently created and published several labels policies in a Microsoft 365 subscription.

  You need to view which labels were applied by users manually and which labels were applied automatically.

  What should you do from the Microsoft 365 Compliance center?

  A. From Search and investigation, select Content search

  B. From Data governance, select Events

  C. From Search and investigation, select eDiscovery

  D. From Reports, select Dashboard

  Correct Answer: D

  https://docs.microsoft.com/en-us/microsoft-365/compliance/view-label-activity-for-documents

• Question 190:

  You have a Microsoft 365 subscription.

  A user reports that changes were made to several files in Microsoft OneDrive.

  You need to identify which files were modified by which users in the user's OneDrive.

  What should you do?

  A. From the Azure Active Directory admin center, open the audit log

  B. From the OneDrive admin center, select Device access

  C. From Security and Compliance, perform an eDiscovery search

  D. From Microsoft Cloud App Security, open the activity log

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/activity-filters