Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 321:

  HOTSPOT

  You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com.

  OneDrive stores files that are shared with external users. The files are configured as shown in the following table.

  

  You create a data loss prevention (DLP) policy that applies to the content stored in OneDrive accounts. The policy contains the following three rules:

  Rule1:

  7.

  Conditions: Label1, Detect content that's shared with people outside my organization

  8.

  Actions: Restrict access to the content for external users

  9.

  User notifications: Notify the user who last modified the content 10.User overrides: On 11.Priority: 0

  Rule2:

  12.Conditions: Label1 or Label2

  13.Actions: Restrict access to the content

  14.Priority: 1

  Rule3:

  15.Conditions: Label2, Detect content that's shared with people outside my organization

  16.Actions: Restrict access to the content for external users 17.User notifications: Notify the user who last modified the content 18.User overrides: On 19.Priority: 2

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  All of them will match Rule2 because it is the most restrictive.

  When content is evaluated against rules, the rules are processed in priority order. If content matches multiple rules, the rules are processed in priority order and the most restrictive action is enforced. For example, if content matches all of the

  following rules, Rule 3 is enforced because it's the highest priority, most restrictive rule:

  Rule 1: only notifies users

  Rule 2: notifies users, restricts access, and allows user overrides

  Rule 3: notifies users, restricts access, and does not allow user overrides

  Rule 4: only notifies users

  Rule 5: restricts access

  Rule 6: notifies users, restricts access, and does not allow user overrides

  Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-prevention-policies?view=o365-worldwide

• Question 322:

  HOTSPOT

  You have a Microsoft 365 subscription that include three users named User1, User2, and User3.

  A file named File1.docx is stored in Microsoft OneDrive. An automated process updates File1.docx every minute.

  You create an alert policy named Policy1 as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/alert-policies

• Question 323:

  HOTSPOT

  You have a Microsoft 365 subscription. Auditing is enabled.

  A user named User1 is a member of a dynamic security group named Group1.

  You discover that User1 is no longer a member of Group1.

  You need to search the audit log to identify why User1 was removed from Group1.

  Which two actions should you use in the search? To answer, select the appropriate activities in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/office365/securitycompliance/search-the-audit-log-in-security-and-compliance

• Question 324:

  HOTSPOT

  Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the groups shown in the following table.

  

  The domain is synced to a Microsoft Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table.

  

  You create an Azure Information Protection policy named Policy1.

  You need to apply Policy1.

  To which groups can you apply Policy1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 325:

  HOTSPOT

  You view Compliance Manager as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: perform an assessment You can start working with assessments and taking improvement actions to implement controls and improve your compliance score.

  Box 2: shows that actions are required to evaluate compliance

  Your compliance score measures your progress in completing recommended actions that help reduce risks around data protection and regulatory standards. It does not express an absolute measure of organizational compliance with regard

  to a particular standard or regulation.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-quickstart?view=o365-worldwide

  https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-faq?view=o365-worldwide

• Question 326:

  HOTSPOT

  You have a Microsoft 365 subscription. From the Security and Compliance admin center, you create the retention policies shown in the following table.

  

  Policy1 if configured as showing in the following exhibit.

  

  Policy2 is configured as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

  Principles of retention:

  -Retention wins over deletion

  -Longest retention period wins

  -Explicit inclusion wins over implicit inclusion

  -Shortest deletion period wins

  Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies?view=o365-worldwide#the-principles-of-retention-or-what-takes-precedence

  Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies?redirectSourcePath=%252fen-us%252farticle%252fOverview-of-retention-policies-5e377752-700d-4870-9b6d-12bfc12d2423#the-principles-of-retention-orwhat-takes-precedence

• Question 327:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You are creating a retention policy named Retention1 as shown in the following exhibit.

  

  You apply Retention1 to SharePoint sites and OneDrive accounts.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  1.- Retained

  2.- Can recover the file until the Recycle Bin retention period expired (93 days). Because the question says "the user", so the user can't recover a file from the "Preservation hold library". "If the content is modified or deleted during the retention period, a copy of the original content as it existed when the retention policy was assigned is created in the Preservation Hold library. There, the timer job identifies items whose retention period has expired. Those items are moved to the second-stage Recycle Bin, where they're permanently deleted at the end of 93 days. The second-stage Recycle Bin is not visible to end users (only the first-stage Recycle Bin is), but site collection admins can view and restore content from there." https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-sharepoint?view=o365-worldwide

• Question 328:

  HOTSPOT

  You have a Microsoft 365 subscription that uses a default name of litwareinc.com.

  You configure the Sharing settings in Microsoft OneDrive as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/onedrive/manage-sharing

• Question 329:

  HOTSPOT

  You have a Microsoft 365 subscription.

  You create a retention label named Label1 as shown in the following exhibit.

  

  You publish Label1 to SharePoint sites.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  1.

  never delete the file - because of: Use Label to classify content as "Record"

  2.

  be deleted automatically on March 15, 2021

  Explanation:

  Additionally, retention labels support records management for email and documents across Microsoft 365 apps and services. You can use a retention label to classify content as a record. When this happens, the label can't be changed or

  removed, and the content can't be edited or deleted.

  Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/labels?view=o365-worldwide

• Question 330:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  From Microsoft Azure Active Directory (Azure AD), you create a security group named Group1. You add 10 users to Group1.

  You need to apply app enforced restrictions to the members of Group1 when they connect to Microsoft Exchange Online from non-compliant devices, regardless of their location.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-conditional-access