[May-2024] MS-500 Exam Dumps, MS-500 Practice Test Questions [Q155-Q178]

ExamBoosts May 14, 2024 MS-500 > Microsoft 0

Rate this post

[May-2024] MS-500 Exam Dumps, MS-500 Practice Test Questions

Attested MS-500 Dumps PDF Resource [2024]

QUESTION 155
You have a Microsoft 365 subscription that contains a user named User.

You enroll devices in Microsoft Intune as shown in the following table.
Each device has two line of business apps named App1 and App2 installed.

You create application control policies targeted to all the app types in Microsoft Endpoint Manager as shown in the following table.

For each of the following statements, Select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

QUESTION 156
Microsoft 365 E5 licenses. You plan to implement an Advanced Threat Protection (ATP) anti-phishing policy. You need to enable mailbox intelligence for all users. What should you do first?

Configure attribute filtering in Microsoft Azure Active Directory Connect (Azure AD Connect).

Purchase the ATP add-on.

Select Directory extension attribute sync in Microsoft Azure Active Directory Connect {Azure AD Connect).

Migrate the on-premises mailboxes to Exchange Online.

References:
https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-anti-phishing-policies

QUESTION 157
You have a Microsoft 365 E5 tenant that contains three users named User1, User2, and User3.
You need to assign roles or role groups to the users as shown in the following table.

What should you use to assign a role or role group to each user? To answer, drag the appropriate tools to the correct roles or role groups. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/permissions-in-the-security-and-compliance-center?view=o365-worldwide

QUESTION 158
You have a Microsoft 365 subscription for a company named Contoso, Ltd. All data is in Microsoft 365.
Contoso works with a partner company named Litware, Inc. Litware has a Microsoft 365 subscription.
You need to allow users at Contoso to share files from Microsoft OneDrive to specific users at Litware.
Which two actions should you perform from the OneDrive admin center? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Increase the permission level for OneDrive External sharing

Modify the Links settings

Change the permissions for OneDrive External sharing to the least permissive level

Decrease the permission level for OneDrive External sharing

Modify the Device access settings

Modify the Sync settings

Explanation/Reference:
References:
https://docs.microsoft.com/en-us/sharepoint/turn-external-sharing-on-or-off

QUESTION 159
You have a Microsoft 365 E5 subscription.
Some users are required to use an authenticator app to access Microsoft SharePoint Online.
You need to view which users have used an authenticator app to access SharePoint Online. The solution must minimize costs.
What should you do?

From the Azure Active Directory admin center, view the sign-ins.

From the Security & Compliance admin center, download a report.

From the Enterprise applications blade of the Azure Active Directory admin center, view the audit logs.

From the Azure Active Directory admin center, view the authentication methods.

The user sign-ins report provides information on the sign-in pattern of a user, the number of users that have signed in over a week, and the status of these sign-ins.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. From the Enterprise applications blade of the Azure Active Directory admin center, view the sign-ins.
2. From the Azure Active Directory admin center, view the sign-ins.
Other incorrect answer options you may see on the exam include the following:
1. From Azure Log Analytics, query the logs.
2. From the Security & Compliance admin center, perform an audit log search.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

QUESTION 160
You have a Microsoft 365 subscription. From the Security & Compliance admin center, you create the retention policies shown in the following table.

Policy1 if configured as showing in the following exhibit.

Policy2 is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies?redirectSourcePath=%252fen-us%252farticle%252fOverview-of-retention-policies-5e377752-700d-4870-9b6d-12bfc12d2423#the-principles-of-retention-or-what-takes-precedence

QUESTION 161
Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.

You plan to implement Microsoft Defender for Identity for the domain. You install a Microsoft Defender for Identity standalone sensor on Server 1. You need to monitor the domain by using Microsoft Defender for Identity. What should you do?

Configure port mirroring for DCI.

Install the Microsoft Monitoring Agent on DC1.

Configure port mirroring for Server1.

Install the Microsoft Monitoring Agent on Server 1.

QUESTION 162
You configure Microsoft Azure Active Directory (Azure AD) Connect as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-device-writeback

QUESTION 163
You have a Microsoft 365 subscription.
A user reports that changes were made to several files in Microsoft OneDrive.
You need to identify which files were modified by which users in the user’s OneDrive.
What should you do?

From the Azure Active Directory admin center, open the audit log

From the OneDrive admin center, select

From Security & Compliance, perform an eDiscovery search

From Microsoft Cloud App Security, open the activity log

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/activity-filters

QUESTION 164
Your company has a Microsoft 365 E5 subscription that contains a user named User.
User1 leaves the company.
You need to identify all the personal data of User1 that is stored in the subscription.
What should you do in the Microsoft Purview compliance portal?

Create an eDscovery case.

Perform an audit.

Perform a content search.

Submit a Data Subject Request (DSR).

Find and export a user’s personal data to help you respond to data subject requests for the General Data Protection Regulation (GDPR).
https://learn.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center?view=o365-worldwide

QUESTION 165
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You enable Customer Lockbox.
Which users will be notified when a Microsoft support engineer requests access to the organization?

Admin1, Admin2. and Admin3

Admin2only

Admin2 and Admin3 only

Admin1 and Admin2 only

QUESTION 166
You have a Microsoft 365 tenant.
You create an attack surface reduction policy that uses an application control profile as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Explanation

Box 1: the member will receive a security warning.
Group1 is included in the policy so SmartScreen will be enabled. SmartScreen will display a warning.
Box 2: the site will open without warning.
Group2 is excluded from the policy so SmartScreen will not be enabled. Therefore, no warning will be displayed.

QUESTION 167
You have a Microsoft 365 subscription.
You enable auditing for the subscription.
You plan to provide a user named Auditor with the ability to review audit logs.
You add Auditor to the Global administrator role group.
Several days later, you discover that Auditor disabled auditing.
You remove Auditor from the Global administrator role group and enable auditing.
* Be prevented from disabling auditing
* Use the principle of least privilege
* Be able to review the audit log
To which role group should you add Auditor?

Security operator

Security reader

Security administrator

Compliance administrator

Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/permissions-in-the-security-and-compliance-cent

QUESTION 168
You have a Microsoft 365 subscription that uses a default domain name of contoso.com.
The multi-factorauthentication (MFA) service settings are configured as shown in the exhibit. (Clock theExhibittab.)

In contoso.com, you create the users shown in the following table.

What is the effect of the configuration? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.

Explanation

QUESTION 169
You have a Microsoft 365 subscription that contains the groups shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.

Explanation

QUESTION 170
You have a Microsoft 365 subscription that uses a default domain name of fabrikam.com.
You create a safe links policy, as shown in the following exhibit.

Which URL can a user safely access from Microsoft Word Online?

fabrikam.phishing.fabrikam.com

malware.fabrikam.com

fabrikam.contoso.com

www.malware.fabrikam.com

Explanation
References:
https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-a-custom-blocked-urls-list-wtih-atp

QUESTION 171
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You register devices in contoso.com as shown in the following table.

You create app protection policies in Intune as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation

References:
https://docs.microsoft.com/en-us/intune/apps/app-protection-policy

QUESTION 172
You have a Microsoft 365 tenant.
You create an attack surface reduction policy that uses an application control profile as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

QUESTION 173
You need to enable and configure Microsoft Defender ATP to meet the security requirements. What should you do?

Configure port mirroring

Create the ForceDefenderPassiveModeregistry setting

Download and install the Microsoft Monitoring Agent

Run WindowsDefenderATPOnboardingScript.cmd

Explanation/Reference:
Implement and manage threat protection
Question Set 2

QUESTION 174
You have a Microsoft 365 E5 subscription that contains 500 Windows 10 devices The subscription uses Microsoft Defender for Endpoint and is integrated with Microsoft Endpoint Manager. AJI the devices have Defender for Endpoint deployed.
You create a Conditional Access policy as shown in the following table.

You need to ensure that devices that have a machine risk score of high are blocked. What should you do in Microsoft Endpoint Manager?

Apply a security baseline to all the devices.

Apply an endpoint detection and response policy to the subscription.

Configure the Compliance policy settings.

Apply a compliance policy to all the devices.

QUESTION 175
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
Username and password

Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
admin@[email protected]
Microsoft 365 Password: #HSP.ug?$p6un
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support only:
Lab instance: 11122308

You need to ensure that all the email messages in the mailbox of a user named Allan Deyoung are retained for a period of 90 days, even if the messages are deleted.
To complete this task, sign in to the Microsoft 365 admin center.

See explanation below.
Explanation
1. Navigate to the Exchange Admin Center
2. Navigate to Compliance management > Retention tags, and then click Add +
3. Select the Applied automatically to entire mailbox (default) option.
4. The New retention tag page title and options will vary depending on the type of tag you selected. Complete the following fields:
Name: Enter a name for the retention tag.
Retention action: Select Delete and Allow Recovery option.
Retention period: Select When the item reaches the following age (in days) option.
Comment: User this optional field to enter any administrative notes or comments. The field isn’t displayed to users.
5. Navigate to Compliance management > Retention policies, and then click Add +
6. In New Retention Policy, complete the following fields:
Name: Enter a name for the retention policy.
Retention tags: Click Add + to select the tags you want to add to this retention policy.
After you create a retention policy, you must apply it.
1. Navigate to Recipients > Mailboxes.
2. In the list view, select the mailbox to which you want to apply the retention policy, and then click Edit.
3. In User Mailbox, click Mailbox features.
4. In the Retention policy list, select the policy you want to apply to the mailbox, and then click Save.
Reference:
https://docs.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/create-a-re
https://docs.microsoft.com/en-us/exchange/security-and-compliance/messaging-records-management/apply-reten

QUESTION 176
You need to implement a solution to manage when users select links in documents or email messages from Microsoft Office 365 ProPlus applications or Android devices. The solution must meet the following requirements:
* Block access to a domain named fabrikam.com
* Store information when the users select links to fabrikam.com
To complete this task, sign in to the Microsoft 365 portal.

You need to configure a Safe Links policy.
* Go to the Office 365 Security & Compliance admin center.
* Navigate to Threat Management > Policy > Safe Links.
* In the Policies that apply to the entire organization section, select Default, and then click the Edit icon.
* In the Block the following URLs section, type in *.fabrikam.com. This meets the first requirement in the question.
* In the Settings that apply to content except email section, untick the checkbox labelled Do not track when users click safe links. This meets the second requirement in the question.
* Click Save to save the changes.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safe-links-policies?view=

QUESTION 177
You have an Azure Sentinel workspace.
You configure a rule to generate Azure Sentinel alerts when Azure Active Directory (Azure AD) Identity Protection detects risky sign-ins. You develop an Azure Logic Apps solution to contact users and verify whether reported risky sign-ins are legitimate.
You need to configure the workspace to meet the following requirements:
Call the Azure logic app when an alert is triggered for a risky sign-in.
To the Azure Sentinel portal, add a custom dashboard that displays statistics for risky sign-ins that are detected and resolved.
What should you configure in Azure Sentinel to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

QUESTION 178
You are evaluating which devices are compliant in Intune.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.