Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 331:

  HOTSPOT

  You have a Microsoft 365 subscription.

  1.

  You identify the following data loss prevention (DLP) requirements:

  2.

  Send notifications to users if they attempt to send attachments that contain EU social security numbers

  3.

  Prevent any email messages that contain credit card numbers from being sent outside your organization

  4.

  Block the external sharing of Microsoft OneDrive content that contains EU passport numbers

  5.

  Send administrators email alerts if any rule matches occur.

  What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 332:

  HOTSPOT

  Your company has a Microsoft 365 subscription, a Microsoft Azure subscription, and an Azure Active Directory (Azure AD) tenant named contoso.com. The company has the offices shown in the following table.

  

  The tenant contains the users shown in the following table.

  

  You create the Microsoft Cloud App Security policy shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The IPs should be all the public IP addresses of your internal network, your branch offices, and your Wi-Fi roaming addresses. Ref# https://docs.microsoft.com/en-us/cloud-app-security/ip-tags

  10.10.0.0/24 is private IP space, people in the montreal access to system by 190.15.1.0/24 IP address space. So for CAS setting you must add its public IP address (If you add its private address it won't work).

• Question 333:

  HOTSPOT

  You have the Microsoft conditions shown in the following table.

  

  You have the Azure Information Protection labels shown in the following table.

  

  You have the Azure Information Protection policies shown in the following table.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

  https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-delete-reorder. "If you configure conditions for your labels that might apply to more than one label, you must order the labels from least sensitive to most sensitive.

  This ordering ensures that the most sensitive label is applied when the conditions are evaluated."

  so:

  1)Label 1 and Label 2 are triggered but Label 2 is the last in the policies so most sensitive so applied in priority, it wons over Label 1 so NO

  2)same, Label 2 wons so YES

  3)Label 2 is based on Condition 2 which is case sensitive so NO

• Question 334:

  HOTSPOT

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  You create and enforce an Azure AD Identity Protection sign-in risk policy that has the following settings:

  1.

  Assignments: Include Group1, Exclude Group2

  2.

  Conditions: Sign in risk of Low and above

  3.

  Access: Allow access, Require password multi-factor authentication

  You need to identify how the policy affects User1 and User2.

  What occurs when each user signs in from an anonymous IP address? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 335:

  HOTSPOT

  You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

  

  You create and enforce an Azure AD Identity Protection user risk policy that has the following settings:

  1.

  Assignments: Include Group1, Exclude Group2

  2.

  Conditions: Sign in risk of Low and above

  3.

  Access: Allow access, Require password change

  You need to identify how the policy affects User1 and User2.

  What occurs when User1 and User2 sign in from an unfamiliar location? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: User1 only

  The Azure AD Identity Protection user risk policy is excluded from Group2. Exclusion overrides inclusion. Therefore, the policy will not affect User2. Thus, only

  User 1 needs to change the Password.

  Box 2: User2 only

  MFA will be triggered for User 2.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies

• Question 336:

  HOTSPOT

  You have a Microsoft 365 E5 subscription.

  Users and device objects are added and removed daily. Users in the sales department frequently change their device.

  You need to create three following groups:

  

  The solution must minimize administrative effort.

  What is the minimum number of groups you should create for each type of membership? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Group 1 has to be assigned because you can't create a device group based on the device owners' attributes.

  Group 2 can be dynamic because a user does have a department attribute.

  Group 3 can be dynamic because a device does have a deviceownership attribute.

• Question 337:

  HOTSPOT

  You configure Microsoft Azure Active Directory (Azure AD) Connect as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-device-writeback

• Question 338:

  HOTSPOT

  You have a Microsoft 365 subscription that uses a default domain name of contoso.com.

  The multi-factor authentication (MFA) service settings are configured as shown in the exhibit. (Clock the Exhibit tab.)

  

  In contoso.com, you create the users shown in the following table.

  

  What is the effect of the configuration? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 339:

  HOTSPOT

  Your company has a Microsoft 365 subscription that contains the users shown in the following table.

  

  The company implements Windows Defender Advanced Threat Protection (Windows Defender ATP). Windows Defender ATP includes the roles shown in the following table: Windows Defender ATP contains the machine groups shown in the following table:

  

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Y - "Alerts investigation" permission required to run scans.

  N - "Alerts investigation" permission required to download investigation package.

  Y - At least "Active remediation actions" required to isolate device. Admin has full permissions and access to all machines regardless of group.

• Question 340:

  HOTSPOT

  You have a Microsoft 365 subscription that uses a default domain name of contoso.com. Microsoft Azure Active Directory (Azure AD) contains the users shown in the following table.

  

  Microsoft Intune has two devices enrolled as shown in the following table:

  

  Both devices have three apps named App1, App2, and App3 installed.

  You create an app protection policy named ProtectionPolicy1 that has the following settings:

  1.

  Protected apps: App1

  2.

  Exempt apps: App2

  3.

  Windows Information Protection mode: Block

  You apply ProtectionPolicy1 to Group1 and Group3. You exclude Group2 from ProtectionPolicy1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: