Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 351:

  DRAG DROP

  You have a Microsoft 365 tenant.

  User attributes are synced from your company's human resources (HR) system to Azure Active Directory (Azure AD).

  The company has four departments that each has its own Microsoft SharePoint Online site. Each site must be accessed only by the users from its respective department.

  You are designing an access management solution that has the following requirements:

  1.

  Users must be added automatically to the security group of their department.

  2.

  All security group owners must verify once quarterly that only the users in their department belong to their group.

  Which components should you recommend to meet the requirements? To answer, drag the appropriate components to the correct requirements. Each component may only be used once, more than once, or not at all. You may need to drag

  the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://cloudbuild.co.uk/tag/create-a-dynamic-security-group-in-azure-ad/

  https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

• Question 352:

  DRAG DROP You have an on-premises Hyper-V infrastructure that contains the following: An Active Directory domain

  A domain controller named Server1

  A member server named Server2

  A security policy specifies that Server1 cannot connect to the Internet. Server2 can connect to the Internet.

  You need to implement Azure Advanced Threat Protection (ATP) to monitor the security of the domain.

  What should you configure on each server? To answer, drag the appropriate components to the correct servers. Each component may only be used once, more than once, or not at all. You may need to drag the split bar between panes or

  scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 353:

  DRAG DROP

  You have a Microsoft 365 subscription.

  You need to include a custom sensitive information type in Data Subject Request (DSR) cases.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 354:

  DRAG DROP

  You have a Microsoft 365 subscription that uses an Azure Active Directory (Azure AD) tenant named contoso.com. All the devices in the tenant are managed by using Microsoft Intune.

  You purchase a cloud app named App1 that supports session controls.

  You need to ensure that access to App can be reviewed in real time.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/cloud-app-security/access-policy-aad

• Question 355:

  DRAG DROP

  You have a Microsoft 365 E5 subscription.

  All computers run Windows 10 and are onboarded to Windows Defender Advanced Threat Protection (Windows Defender ATP).

  You create a Windows Defender machine group named MachineGroup1.

  You need to enable delegation for the security settings of the computers in MachineGroup1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 356:

  You have a Microsoft 365 subscription.

  You have a site collection named SiteCollection1 that contains a site named Site2. Site2 contains a document library named Customers.

  Customers contains a document named Litware.docx. You need to remove Litware.docx permanently.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 357:

  You have a Microsoft 365 subscription. All users use Microsoft Exchange Online.

  Microsoft 365 is configured to use the default policy settings without any custom rules.

  You manage message hygiene.

  Where are suspicious email messages placed by default? To answer, drag the appropriate location to the correct message types. Each location may be used once, more than once, or not at all. You may need to drag the split bar between

  panes or scroll to view content.

  Select and Place:

  

  Correct Answer:

  

• Question 358:

  You have a Microsoft 365 subscription.

  A customer requests that you provide her with all documents that reference her by name.

  You need to provide the customer with a copy of the content.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr-dsr-office365

• Question 359:

  You need to recommend a solution for the user administrators that meets the security requirements for auditing. Which blade should you recommend using from the Azure Active Directory admin center?

  A. Sign-ins

  B. Azure AD Identity Protection

  C. Authentication methods

  D. Access review

  Correct Answer: A

  References: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

• Question 360:

  You need to recommend a solution that meets the technical and security requirements for sharing data with the partners. What should you include in the recommendation? (Choose two). Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Create an access review

  B. Assign the Global administrator role to User1

  C. Assign the Guest inviter role to User1

  D. Modify the External collaboration settings in the Azure Active Directory admin center

  Correct Answer: CD

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/delegate-invitations