Pass4itsure share these resources with you. Both VCE and PDF dumps contain the latest Microsoft MS-500 exam questions, which will ensure your MS-500 exam 100% passed! You can get MS-500 VCE dumps and MS-500 PDF dumps from Pass4itsure. Please get the latest Pass4itsure MS-500 dumps here: https://www.pass4itsure.com/ms-500.html (173 QA Dumps).
[2020] Free Microsoft MS-500 pdf dumps download from Google Drive:
https://drive.google.com/file/d/1ILWG7rT-z-SVnFi6om6M9LigSAlRc3Su/view?usp=sharing
Exam MS-500: Microsoft 365 Security Administration: measures your ability to accomplish the following technical tasks: implement and manage identity and access; implement and manage threat protection; implement and manage information protection; and manage governance and compliance features in Microsoft 365.
13 Online MS-500 exam practice test questions and answers
QUESTION 1
You need to configure threat detection for Active Directory. The solution must meet the security requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
QUESTION 2
You have a Microsoft 365 subscription that includes a user named User1.
You have a conditional access policy that applies to Microsoft Exchange Online. The conditional access policy is
configured to use Conditional Access App Control.
You need to create a Microsoft Cloud App Security policy that blocks User1 from printing from Exchange Online.
Which type of Cloud App Security policy should you create?
A. an app permission policy
B. an activity policy
C. a Cloud Discovery anomaly detection policy
D. a session policy
Correct Answer: D
References: https://docs.microsoft.com/en-us/cloud-app-security/session-policy-aad
QUESTION 3
You have a Microsoft 365 subscription. From the Security and Compliance admin center, you create the retention
policies shown in the following table.
Policy2 is configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/retention-policies?redirectSourcePath=%252fen-us%252farticle%252fOverview-of-retention-policies-5e377752-700d-4870-9b6d-12bfc12d2423#the-principles-ofretention-orwhat-takes-precedence
QUESTION 4
You have a Microsoft 365 subscription.
You need to create data loss prevention (DLP) queries in Microsoft SharePoint Online to find sensitive data stored in
sites. Which type of site collection should you create first?
A. Records Center
B. Compliance Policy Center
C. eDiscovery Center
D. Enterprise Search Center
E. Document Center
Correct Answer: C
Reference: https://support.office.com/en-us/article/overview-of-data-loss-prevention-in-sharepoint-server-2016-80f907bbb944-448d-b83d-8fec4abcc24c
QUESTION 5
You configure Microsoft Azure Active Directory (Azure AD) Connect as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-device-writeback
QUESTION 6
Your company has a Microsoft 365 subscription, a Microsoft Azure subscription, and an Azure Active Directory (Azure
AD) tenant named contoso.com. The company has the offices shown in the following table.
You create the Microsoft Cloud App Security policy shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
QUESTION 7
You have a Microsoft 365 subscription.
You have a site collection named SiteCollection1 that contains a site named Site2. Site2 contains a document library
named Customers.
Customers contains a document named Litware.docx. You need to remove Litware.docx permanently.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
QUESTION 8
You have a Microsoft 365 subscription that uses a default domain name of contoso.com. Microsoft Azure Active
Directory (Azure AD) contains the users shown in the following table.
Both devices have three apps named App1, App2, and App3 installed. You create an app protection policy named
ProtectionPolicy1 that has the following settings: Protected apps: App1 Exempt apps: App2 Windows Information
Protection mode: Block
You apply ProtectionPolicy1 to Group1 and Group3. You exclude Group2 from ProtectionPolicy1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
QUESTION 9
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the groups
shown in the following table.
You create an Azure Information Protection policy named Policy1.
You need to apply Policy1.
To which groups can you apply Policy1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 10
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 subscription.
You have a user named User1. Several users have full access to the mailbox of User1.
Some email messages sent to User1 appear to have been read and deleted before the user viewed them.
When you search the audit log in Security and Compliance to identify who signed in to the mailbox of User1, the results
are blank.
You need to ensure that you can view future sign-ins to the mailbox of User1.
You run the Set-AdminAuditLogConfig -AdminAuditLogEnabled $true
-AdminAuditLogCmdlets *Mailbox*command.
Does that meet the goal?
A. Yes
B. No
Correct Answer: B
References: https://docs.microsoft.com/en-us/powershell/module/exchange/policy-and-compliance-audit/setadminauditlogconfig?view=exchange-ps
QUESTION 11
You have a Microsoft 365 subscription.
You identify the following data loss prevention (DLP) requirements: Send notifications to users if they attempt to send
attachments that contain EU social security numbers Prevent any email messages that contain credit card numbers
from being sent outside your organization Block the external sharing of Microsoft OneDrive content that contains EU
passport numbers Send administrators email alerts if any rule matches occur.
What is the minimum number of DLP policies and rules you must create to meet the requirements? To answer, select
the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 12
You have a Microsoft 365 subscription.
A customer requests that you provide her with all documents that reference her by name.
You need to provide the customer with a copy of the content.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to
the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/gdpr-dsr-office365
QUESTION 13
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 E5 subscription that is associated to a Microsoft Azure Active Directory (Azure AD) tenant
named contoso.com.
You use Active Directory Federation Services (AD FS) to federate on-premises Active Directory and the tenant. Azure
AD Connect has the following settings:
1.
Source Anchor: objectGUID
2.
Password Hash Synchronization: Disabled
3.
Password writeback: Disabled
4.
Directory extension attribute sync: Disabled
5.
Azure AD app and attribute filtering: Disabled
6.
Exchange hybrid deployment: Disabled
7.
User writeback: Disabled
You need to ensure that you can use leaked credentials detection in Azure AD Identity Protection.
Solution: You modify the Password Hash Synchronization settings.
Does that meet the goal?
A. Yes
B. No
Correct Answer: A
References: https://docs.microsoft.com/en-us/azure/security/azure-ad-secure-steps
Microsoft MS-500 pdf dumps download
| 100% free MS-500 pdf dumps |
| https://drive.google.com/file/d/1ILWG7rT-z-SVnFi6om6M9LigSAlRc3Su/view?usp=sharing |
Pass4itsure is the best learning materials and the best choice for you. Other brands started earlier, but the price is relatively expensive, and the problem is not the latest. Pass4itsure provides the latest real questions and answers at the lowest price to help you pass the Microsoft MS-500 exam.
Pass4itsure promo code 12% Off
Latest discount code “2020PASS” – Pass4itsure.
P.S.
Get the fully updated Microsoft MS-500 exam questions from Pass4itsure, and then start preparing for Microsoft MS-500. MS-500 dumps pdf is advanced research material, compiled and verified by industry experts. https://www.pass4itsure.com/ms-500.html real MS-500 exam dumps ensures that you can pass the exam on the first try.
