Microsoft Microsoft Certifications MS-500 Questions & Answers

• Question 61:

  You have a Microsoft 365 subscription that contains 50 devices- The devices are enrolled in Microsoft Endpomt Manager and have Microsoft Defender for Endpoint enabled.

  You need to identify devices that have a pending offline scan.

  What should you do?

  A. From the Microsoft 365 Defender portal, review the Threat and Vulnerability Management dashboard.

  B. From the Microsoft 365 Defender portal, review the Threat analytics dashboard

  C. From the Microsoft Endpoint Manager admin center, review the Detected malware report

  D. From the Microsoft Endpoint Manager admin center, review the Antivirus agent status report.

  Correct Answer: A

• Question 62:

  You have Microsoft 365 subscription.

  You need to be notified by email whenever an administrator starts an ediscovery search What should you do from the Security and Compliance admin center?

  A. From Alerts, create an alert policy.

  B. From Search and investigation, create a guided search.

  C. From ediscovery orate an eDiscovery case

  D. From Reports, create a managed schedule

  Correct Answer: A

• Question 63:

  You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

  

  You need to prevent users in the finance department from sharing files with users in the research department. Which type of policy should you configure?

  A. Conditional Access

  B. insider risk management

  C. information barrier

  D. communication compliance

  Correct Answer: A

  Microsoft Purview Information Barriers (IB) is a compliance solution that allows you to restrict two-way communication and collaboration between groups and users in Microsoft Teams, SharePoint Online, and OneDrive for Business.

  Reference:

  https://docs.microsoft.com/en-us/microsoft-365/compliance/information-barriers

• Question 64:

  You have a Microsoft 365 E5 subscription that uses insider risk management and contains the users shown in the following table.

  

  Which users can use Content explorer?

  A. Admin1 and Admin2 only

  B. Admin4 only

  C. Admm2 and Admin3 only

  D. Admin1. Admin2. Admin3, and Admin4

  E. Admin1 and Admin4 only

  Correct Answer: E

  Referring to the "Enable permissions for insider risk management" section, you will see that Insider Risk Management and Insider Risk Management Investigator can "Access and view the Content Explorer." https://learn.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-configure?view=o365-worldwide#step-1-required-enable-permissions-for-insider-risk-management

• Question 65:

  You have a Microsoft 365 E5 subscription.

  You create a data loss prevention (OLP) policy and select Use Notifications to inform your users and help educate them on the proper use of sensitive info.

  Which apps will show the policy tip?

  A. Outlook on the web and Outlook Win32 only

  B. Outlook Win32 and Outlook for lOS and Android only Outlook Win32 only

  C. Outlook for iOS and Android only

  D. Outlook on the web, Outlook Win32, and Outlook for iOS and Android

  E. Outlook on the web only

  Correct Answer: A

  When you compose a new email in Outlook on the web and Outlook 2013 and later, you'll see a policy tip if you add content that matches a rule in a DLP policy, and that rule uses policy tips. The policy tip appears at the top of the message,

  above the recipients, while the message is being composed.

  Note: Outlook Mobile (iOS, Android)/Outlook Mac: DLP policy tips are not supported on Outlook mobile

  

  Support Matrix for DLP policy tips across Microsoft apps

  Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-policy-tips-reference https://docs.microsoft.com/en-us/microsoft-365/compliance/use-notifications-and-policy-tips

• Question 66:

  Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription.

  You plan to deploy a hybrid Azure Active Directory (Azure AD) tenant that has Azure AD Identity Protection risk policies enabled.

  You need to configure Azure AD Connect to support the planned deployment.

  Which Azure AD Connect authentication method should you select?

  A. Federation with AD FS

  B. Federation with PingFederate

  C. Password Hash Synchronization

  D. Pass-through authentication

  Correct Answer: C

  One of the protection risk policies is a “Use risk policy”. It will require a password change. For this to work in a hybrid environment: Make sure you have PHS, Password Writeback and SSPR enabled

• Question 67:

  Von haw a Microsoft 365 subscription.

  You need to ensure that users on manually designate which content will be subject to data toss prevention (DIP) polices?

  What should you create first?

  A. a retention label

  B. a custom sensitive information type

  C. a safe attachments policy

  D. a Data Subject Request (OSR)

  Correct Answer: D

• Question 68:

  You have a Microsoft 365 E5 subscription that uses Azure Active Directory (Azure AD) Privileged identity Management (PIM).

  A user named User! is eligible for the User Account Administrator role.

  You need User1 to request to activate the User Account Administrator role.

  From where should User1 request to activate the role?

  A. the My Access portal

  B. the Microsoft 365 Defender portal

  C. the Azure Active Directory admin center

  D. the Microsoft 365 admin center

  Correct Answer: C

  the Azure Active Directory admin center -> Azure portal ->Privileged Identity Management https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-activate-role

• Question 69:

  You have a Microsoft 365 E5 subscription that contains a user named User1.

  User1 needs to be able to create Data Subject Requests (DSRs) in the Microsoft 365 compliance center.

  To which role or role group should you add User1?

  A. the Compliance Data Administrator role

  B. the Data Investigator role

  C. the eDiscovery Manager role

  D. the Records Management role group

  Correct Answer: C

  https://learn.microsoft.com/en-us/compliance/regulatory/gdpr-manage-gdpr-data-subject-requests-with-the-dsr-case-tool

• Question 70:

  You have a Microsoft 165 ES subscription that contains users named User 1 and User2? You have the audit log retention requirements shown in the following table.

  

  You need to create audit retention policies to meet the requirements. The solution must minimize cost and the number of policies. What is the minimum number of audit retention policies that you should create?

  A. 1

  B. 2

  C. 3

  D. 4

  Correct Answer: C