Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 261:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  €andquot;another hidden folder that's in every user or group mailbox to store "soft-deleted" items before they're permanently deleted.

  ג

  days to run. When these items have expired their retention period, they are moved to the SubstrateHolds folder

  

  You create an assessment named Assessment1 as shown in the following exhibit.

  

  Which users can update the title of Assessment1, and which users can add User5 to the Compliance Manager Readers role group? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Assigned Compliance manager contributor role to user (no other roles). Logged as user, created assessment, later changed the assessment name by selecting 3 dots in top right corner. Global Admin also can create an assessment and change name after.

• Question 262:

  HOTSPOT

  You have a Microsoft 365 subscription that uses Microsoft Teams and contains the users shown in the following table.

  

  You have the retention policies shown in the following table.

  

  The users perform the actions shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  It will be retained for seven years.

  Both Policy1 and Policy2 apply.

  If there is a conflict in how long to retain the same content, it is retained in the secured location for the longest retention period.

  Note: If you configure a Teams retention policy to retain chats or channel messages, users

  Box 2: No

  User2 creates the message in chat. Policy2 applies. The message will be retained for 5 years.

  Box 3: Yes

  After a retention policy is configured for chat and channel messages, a timer job from the Exchange service periodically evaluates items in the hidden mailbox folder where these Teams messages are stored. The timer job typically takes 1-7

  Messages remain in the SubstrateHolds folder for at least 1 day, and then if they're eligible for deletion, the timer job permanently deletes them the next time it runs.

  Reference:

  https://docs.microsoft.com/en-us/microsoftteams/retention-policies https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-teams

• Question 263:

  HOTSPOT

  You have a Microsoft SharePoint Online site named Site1 that contains the files shown in the following table.

  

  You have a data loss prevention (DLP) policy named DLP1 that has the advanced DLP rules shown in the following table.

  

  You apply DLP1 to Site1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  From the doc:

  https://learn.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy-tips?view=o365-worldwide

  It's possible for content to match several rules in a DLP policy, but only the policy tip from the most restrictive, highest-priority rule will be shown. For example, a policy tip from a rule that blocks access to content will be shown over a policy tip

  from a rule that simply sends a notification. This prevents people from seeing a cascade of policy tips.

• Question 264:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You need to delegate the following tasks:

  1.

  Create and manage data loss prevention (DLP) policies.

  2.

  Review classified content by using Content explorer.

  The solution must use the principle of least privilege.

  Which user should perform each task? To answer, drag the appropriate users to the correct tasks. Each user may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Create and manage DLP policies -> User1 Review classified content by using Content explorer -> User3 Information Protection Admin: Create, edit, and delete DLP policies, sensitivity labels and their policies, and all classifier types. Manage endpoint DLP settings and simulation mode for auto-labeling policies. Information Protection Investigators: Access and manage DLP alerts, activity explorer, and content explorer. View-only access to DLP policies, sensitivity labels and their policies, and all classifier types. Reference: https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions

• Question 265:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains two users named User1 and User2 and a Microsoft SharePoint Online site named Site1 as shown in the following exhibit.

  

  For Site1, the users are assigned the roles shown in the following table.

  

  You publish a retention label named Retention1 to Site1.

  To which files can the users apply Retention1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  As User1 is the owner of the Site1, they have full control over the site and its contents, including the ability to apply retention labels to any file in the site. Therefore, User1 can apply Retention1 to all the files in Site1, including File1.docx, File2.docx, and File3.docx.

  User2 is assigned the Member role in Site1, which gives them the ability to add, edit, and delete files in the site, as well as apply retention labels to files. Although File2.docx and File3.docx have DLP warning and blocked icons respectively, this does not prevent User2 from applying a retention label to these files. Therefore, User2 can apply Retention1 to all the files in Site1, including File1.docx, File2.docx, and File3.docx.

• Question 266:

  HOTSPOT

  You have a Microsoft E5 subscription that contains two users named User1 and User2.

  You have a Microsoft SharePoint site named Site1. Site1 stores files that contain IP addresses as shown in the following table.

  

  User1 is assigned the SharePoint admin role for Site1. User2 is a member of Site1. You create the data loss prevention (DLP) policy shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes Note: Key tasks of the SharePoint admin Here are some of the key tasks users can do when they are assigned to the SharePoint admin role:

  Create sites

  Delete sites

  Manage sharing settings at the organization level

  Add and remove site admins Manage site storage limits Box 2: No

  File1.text contains 3 IP addresses.

  Box 3: Yes

  File2.docx contains only 1 IP address.

• Question 267:

  HOTSPOT

  You have a Microsoft 365 E5 tenant that contains a published sensitivity label named Sensitivity1.

  You plan to create an Azure Active Directory group named Group1 and assign Sensitivity1 to Group1.

  How should you configure Group1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: EnableMIPLabels

  The sensitivity label option is only displayed for groups when all the following conditions are met:

  1.

  The feature is enabled, EnableMIPLabels is set to True in from the Azure AD PowerShell module.

  2.

  The group is a Microsoft 365 group.

  3.

  Etc.

  Box 2: Microsoft 365 Incorrect:

  * Not ClassificationList:

  Classic classifications are the old classifications you set up by defining values for the ClassificationList setting in Azure AD PowerShell. When this feature is enabled, those classifications will not be applied to groups.

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels

• Question 268:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You configure Microsoft Defender for Endpoint as shown in the following table.

  

  You onboard devices to Microsoft Defender for Endpoint as shown in the following table.

  

  Microsoft Defender for Endpoint contains the incidents shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  File1.exe on Device1 is suspicious. Device1 is in Group1. Group1 has automation level Full - remediate threats automatically.

  Note: Full automation (recommended) means remediation actions are taken automatically on artifacts determined to be malicious.

  Box 2: Yes

  File2 on Device2 is malicious. Device2 is in Group2. Group2 has automation level Semi - require approval for core folders.

  Note: Semi-automation means some remediation actions are taken automatically, but other remediation actions await approval before being taken.

  Semi - require approval for core folders remediation:

  With this level of semi-automation, approval is required for any remediation actions needed on files or executables that are in core folders. Core folders include operating system directories, such as the Windows (\windows\*).

  Remediation actions can be taken automatically on files or executables that are in other (non-core) folders.

  Box 3: No

  File3 on Device3 is malicious. Device3 is in Group3. Group3 has automation level Semi - require approval for all folders.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/automation-levels

• Question 269:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You plan to enable Microsoft Defender for Endpoint role-based access control (RBAC).

  You need to identify which users can enable RBAC in Microsoft Defender for Endpoint, and which users will lose access to Microsoft 365 Defender portal after RBAC in enabled.

  Which users should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 270:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  You need to create a conditional access policy named Policy1 that meets the following requirements:

  1.

  Enforces multi-factor authentication (MFA)

  2.

  Requires that users reauthenticate after eight hours

  Which settings should you configure in Policy1 for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: