MS-500 Online Practice Questions and Answers

HOTSPOT

You have a Microsoft 365 tenant.

You create an attack surface reduction policy that uses an application control profile as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area:

SIMULATION

You discover that Microsoft SharePoint content is shared with users from multiple domains.

You need to allow sharing invitations to be sent only to users in an email domain named contoso.com.

To complete this task, sign in to the Microsoft 365 portal.

Your company has a Microsoft 365 subscription.

The company does not permit users to enroll personal devices in mobile device management (MDM).

Users in the sales department have personal iOS devices.

You need to ensure that the sales department users can use the Microsoft Power BI app from iOS devices to access the Power BI data in your tenant.

The users must be prevented from backing up the app's data to iCloud.

What should you create?

A. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a device state condition

B. an app protection policy in Microsoft Intune

C. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a client apps condition

D. a device compliance policy in Microsoft Intune

You have a Microsoft 365 subscription.

You have a Microsoft SharePoint Online site named Site1. The files in Site1 are protected by using Microsoft Azure Information Protection.

From the Security and Compliance admin center, you create a label that designates personal data.

You need to auto-apply the new label to all the content in Site1.

What should you do first?

A. From PowerShell, run Set-ManagedContentSettings.

B. From PowerShell, run Set-ComplianceTag.

C. From the Security and Compliance admin center, create a Data Subject Request (DSR).

D. Remove Azure Information Protection from the Site1 files.

You have a Microsoft 365 subscription.

You create a supervision policy named Policy1, and you designate a user named User1 as the reviewer.

What should User1 use to view supervised communications?

A. a team in Microsoft Teams

B. the Security and Compliance admin center / the Microsoft 365 Compliance center

C. Outlook on the web

D. the Exchange admin center

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table.

You Plan to use the encryption report in Microsoft Endpoint Manager to view devices that have encryption enabled. Which devices will be included in the encryption report?

A. Device1 only

B. Device1 and Device2 Only

C. Device1 and Device4 Only

D. Device1, Device2 and Device4 Only

E. Device1, Device2, Device 3 and Device 4

You have a Microsoft 365 subscription named contofco.com

You need to configure Microsoft OneDrive for Business external sharing to meet the following requirements:

Enable flic sharing for users that rave a Microsoft account Block file sharing for anonymous users.

What should you do?

A. From Advanced settings tor external sharing, select Allow or Nock sharing with people on specific domains and add contoso.com.

B. From the External sharing settings for OneDrive. select Existing external users.

C. From the External sharing settings for OneDrive, select New and existing external users.

D. From the External sharing settings for OneDrive. select Only people in your organization.

You configure several Microsoft Defender for Office 365 policies in a Microsoft 365 subscription.

You need to allow a user named User1 to view Microsoft Defender for Office 365 reports in the Threat management dashboard.

Which role provides User1 with the required role permissions?

A. Security reader

B. Compliance administrator

C. Information Protection administrator

D. Exchange administrator

What should User6 use to meet the technical requirements?

A. Supervision in the Security and Compliance admin center

B. Service requests in the Microsoft 365 admin center

C. Security and privacy in the Microsoft 365 admin center

D. Data subject requests in the Security and Compliance admin center

You need to recommend a solution for the user administrators that meets the security requirements for auditing. Which blade should you recommend using from the Azure Active Directory admin center?

A. Sign-ins

B. Azure AD Identity Protection

C. Authentication methods

D. Access review