Microsoft MS-500 Exam Questions Instant Access

Question 1

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

Username and password

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Microsoft 365 Username:

admin@LODSe00019@onmicrosoft.com

Microsoft 365 Password: #HSP.ug?$p6un

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support only:

Lab instance: 11122308

You need to ensure that a user named Allan Deyoung uses multi-factor authentication (MFA) for all authentication requests.

To complete this task, sign in to the Microsoft 365 admin center.

AExplanation:
1. Open the Admin Center and go to Users > Active Users
2. Open Multi-factor authentication
Don't select any user yet, just open the Multi-factor authentication screen. You will find the button in the toolbar.

3. Open the Service settings
Before we start enabling MFA for the users, we first go through the service settings. The button to the settings screen doesn't stand out, but it's just below the title

4. Setup MFA Office 365
A few settings are important here:
Make sure you check the App password. Otherwise, users can't authenticate in some applications (like the default mail app in Android).
Also, take a look at the remember function. By default, it is set to 14 days.

5. Enable MFA for Office 365 users
After you have set the settings to your liking click on save and then on users (just below the title Multi-factor authentication).
You see the list of your users again. Here you can select single or multiple users to enable MFA.
At the moment you enable Office 365 MFA for a user it can get the setup screen as soon as the users browse to one of the Office 365 products.

Answer : A

https://lazyadmin.nl/office-365/how-to-setup-mfa-in-office-365/

Question 2

You have a Microsoft 365 subscription that contains several Windows 10 devices. The devices are managed by using Microsoft Intune.

You need to enable Windows Defender Exploit Guard (Windows Defender EG) on the devices.

Which type of device configuration profile should you use?

AEndpoint protection

BDevice restrictions

CIdentity protection

DWindows Defender ATP

Answer : A

https://docs.microsoft.com/en-us/intune/endpoint-protection-windows-10

Question 3

You have an Azure Sentinel workspace that has an Azure Active Directory (Azure AD) connector and a

Microsoft Office 365 connector.

You need to assign built-in role-based access control (RBAC) roles to achieve the following tasks:

Create and run playbooks.

Manage incidents.

The solution must use the principle of least privilege.

Which two roles should you assign? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

AAutomation Operator

BAzure Sentinel responder

CAutomation Runbook Operator

DAzure Sentinel contributor

ELogic App contributor

Answer : D, E

https://docs.microsoft.com/en-us/azure/sentinel/roles

Question 4

You have a Microsoft 365 subscription that contains 50 devices- The devices are enrolled in Microsoft Endpomt Manager and have Microsoft Defender for Endpoint enabled. You need to identify devices that have a pending offline scan. What should you do?

AFrom the Microsoft 365 Defender portal, review the Threat & Vulnerability Management dashboard.

BFrom the Microsoft 365 Defender portal, review the Threat analytics dashboard

CFrom the Microsoft Endpoint Manager admin center, review the Detected malware report

DFrom the Microsoft Endpoint Manager admin center, review the Antivirus agent status report.

Answer : A

Question 5

Which IP address space should you include in the MFA configuration?

A131.107.83.0/28

B192.168.16.0/20

C172.16.0.0/24

D192.168.0.0/20

Answer : B

Question 6

You plan to add a file named ConfidentialHR.docx to a Microsoft SharePoint library.

You need to ensure that a user named Megan Bowen is notified when another user accesses ConfidentialHR.xlsx.

To complete this task, sign in to the Microsoft 365 portal.

AExplanation:
You need to configure an alert policy.
Go to the Security & Compliance Admin Center.
Navigate to Alerts > Alert Policies.
Click on + New alert policy to create a new policy.
Give the policy a name and select a severity level. For example: Medium.
In the Category section, select Information Governance and click Next.
In the Select an activity section, select Any file or folder activity.
Click Add a condition and select File name.
Type in the filename ConfidentialHR.xlsx and click Next.
In the email recipients section, add Megan Bowen and click Next.
Click Finish to create the alert policy.

Answer : A

Question 7

You have a Microsoft 365 subscription.

Some users access Microsoft SharePoint Online from unmanaged devices.

You need to prevent the users from downloading, printing, and syncing files.

What should you do?

ARun the Set-SPOTenant cmdlet and specify the -ConditionalAccessPolicy parameter.

BFrom the Security & Compliance admin center, create a data loss prevention (DLP) policy.

CFrom the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection sign-in risk policy

DFrom the Microsoft Azure portal, create an Azure Active Directory (Azure AD) conditional access policy

Answer : A

https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant?view=sharepoint-ps

https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices

Microsoft 365 Security Administration MS-500 Exam Questions