Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 311:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. Azure AD Identity Protection alerts for contoso.com are configured as shown in the following exhibit.

  

  A user named User1 is configured to receive alerts from Azure AD Identity Protection. You create users in contoso.com as shown in the following table.

  

  The users perform the sign-ins shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  User1 will receive the two alerts classified as medium or higher. Sign-ins from infected device is classified as low. This risk detection identifies IP addresses, not user devices. If several devices are behind a single IP address, and only some

  are controlled by a bot network, sign-ins from other devices my trigger this event unnecessarily, which is why this risk detection is classified as Low.

  Box 2: No

  User2 will receive the two alerts classified as medium or higher. Email alerts are sent to all global admins, security admins and security readers Sign-ins from infected device is classified as low. This risk detection identifies IP addresses, not

  user devices. If several devices are behind a single IP address, and only some are controlled by a bot network, sign-ins from other devices my trigger this event unnecessarily, which is why this risk detection is classified as Low.

  Box 3: No

  User3 will not receive alters.

  Email alerts are sent to all global admins, security admins and security readers.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies

• Question 312:

  HOTSPOT

  You have a Microsoft 365 subscription that uses a default domain name of litwareinc.com.

  You configure the Sharing settings in Microsoft OneDrive as shown in the following exhibit.

  

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off

• Question 313:

  HOTSPOT

  You have a Microsoft 365 sensitivity label that is published to all the users in your Azure Active Directory (Azure AD) tenant as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels-office-apps?view=o365-worldwide#when-office-apps-apply-content-marking-and-encryption

• Question 314:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named Contoso.com that contains the users shown in the following table.

  

  The User Administrator role is configured in Azure AD Privileged Identity Management (PIM) as shown in the following exhibit.

  

  You make User4 eligible for the User Administrator role.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  When an activation is completed, Global Admins, Security Admins, and Privileged Role Admins receive a notification. When an activation is pending, only the Privileged Role Admin receives a notification.The last question is a request, not an activation.

• Question 315:

  HOTSPOT

  You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1. Site1 contains the folders shown in the following table.

  

  At 09:00, you create a Microsoft Cloud App Security policy named Policy1 as shown in the following exhibit.

  

  After you create Policy1, you upload files to Site1 as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/cloud-app-security/data-protection-policies

• Question 316:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  You register devices in contoso.com as shown in the following table.

  

  You create app protection policies in Intune as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Since Policy3 applies to iOS and Device1 is a Windows 10 device Policy3 does not apply.

  Since User2 is a member of Group2 and Policy2 apply to Windows 10 devices, Policy2 applies to User2 on Device1.

  User2 isn't a member of Group2 and since you need to have users as part of the protected group Policy4 does not apply to Device2 / User2.

  References:

  https://docs.microsoft.com/en-us/intune/apps/app-protection-policy

• Question 317:

  HOTSPOT

  You have a Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) deployment that has the custom network indicators turned on. Microsoft Defender ATP protects two computers that run Windows 10 as shown in the following table.

  

  Microsoft Defender ATP has the machine groups shown in the following table.

  

  From Microsoft Defender Security Center, you create the URLs/Domains indicators shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 318:

  HOTSPOT

  You have a Microsoft 365 subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.

  You need to recommend an Azure AD Privileged Identity Management (PIM) solution that meets the following requirements:

  1.

  Administrators must be notified when the Security administrator role is activated.

  2.

  Users assigned the Security administrator role must be removed from the role automatically if they do not sign in for 30 days.

  Which Azure AD PIM setting should you recommend configuring for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/bs-latn-ba/azure/active-directory/privileged-identity-management/pim-how-to-configure-security-alerts?tabs=new

  https://docs.microsoft.com/bs-latn-ba/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings?tabs=new

• Question 319:

  HOTSPOT

  You have a Microsoft 365 subscription that contains the users shown in the following table.

  

  You implement Azure Active Directory (Azure AD) Privileged Identity Management (PIM).

  From PIM, you review the Application Administrator role and discover the users shown in the following table.

  

  The Application Administrator role is configured to use the following settings in PIM:

  1.

  Maximum activation duration: 1 hour

  2.

  Notifications: Disable

  3.

  Incident/Request ticket: Disable

  4.

  Multi-Factor Authentication: Disable

  5.

  Require approval: Enable

  6.

  Selected approver: No results

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 320:

  HOTSPOT

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.

  Four Windows 10 devices are joined to the tenant as shown in the following table.

  

  On which devices can you use BitLocker To Go and on which devices can you turn on auto-unlock? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: