MS-500 Exam Question 26
You have a Microsoft 365 subscription.
A security manager receives an email message every time a data loss prevention (DLP) policy match occurs.
You need to limit alert notifications to actionable DLP events.
What should you do?
A security manager receives an email message every time a data loss prevention (DLP) policy match occurs.
You need to limit alert notifications to actionable DLP events.
What should you do?
MS-500 Exam Question 27
An administrator configures Azure AD Privileged Identity Management as shown in the following exhibit.
What should you do to meet the security requirements?
What should you do to meet the security requirements?
MS-500 Exam Question 28
You have a Microsoft 365 subscription.
You create a retention label named Label1 as shown in the following exhibit.
You publish Label1 to SharePoint sites.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
You create a retention label named Label1 as shown in the following exhibit.
You publish Label1 to SharePoint sites.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
MS-500 Exam Question 29
Your company plans to merge with another company.
A user named Debra Berger is an executive at your company.
You need to provide Debra Berger with all the email content of a user named Alex Wilber that contains the wordmerger.
To complete this task, sign in to the Microsoft 365 portal.
See explanation below.
Explanation
You need to run a content search then export the results of the search.
Go to the Microsoft 365 Compliance admin center.
Navigate toContent Search section inthe left navigation pane.
Click on+ New Searchto create a new search.
In the Keywords box, type in 'merger'.
In theLocationssection, selectSpecific locationsthen click theModifylink.
Click on theChoose users, groups or teamslink.
Type Alex Wilberin the search field the select his account from the search results.
Click theChoosebutton to add the user then clickDone.
ClickSaveto close the locations pane.
ClickSave & runto run the search.
The next step is to export the results. Select thesearch then under Export results to a computer, click Start export.
On the Export the search results page, under Output options,selectAll items.
Under Export Exchange content as,selectOne PST file for each mailbox.
Click onStart export.When the export has finished, there will be an option to download the exported PST file.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/content-search?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide QUESTIONNO: 166 You have a Microsoft 365 subscription and a Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) subscription.
You have devices enrolled in Microsoft Endpoint Manager as shown in the following table:
You integrateMicrosoft Defender ATP and Endpoint Manager.
You plan to evaluate the Microsoft Defender ATP risk level for the devices.
You need to identify which devices can be evaluated.
Which devices should you identify?
A user named Debra Berger is an executive at your company.
You need to provide Debra Berger with all the email content of a user named Alex Wilber that contains the wordmerger.
To complete this task, sign in to the Microsoft 365 portal.
See explanation below.
Explanation
You need to run a content search then export the results of the search.
Go to the Microsoft 365 Compliance admin center.
Navigate toContent Search section inthe left navigation pane.
Click on+ New Searchto create a new search.
In the Keywords box, type in 'merger'.
In theLocationssection, selectSpecific locationsthen click theModifylink.
Click on theChoose users, groups or teamslink.
Type Alex Wilberin the search field the select his account from the search results.
Click theChoosebutton to add the user then clickDone.
ClickSaveto close the locations pane.
ClickSave & runto run the search.
The next step is to export the results. Select thesearch then under Export results to a computer, click Start export.
On the Export the search results page, under Output options,selectAll items.
Under Export Exchange content as,selectOne PST file for each mailbox.
Click onStart export.When the export has finished, there will be an option to download the exported PST file.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/content-search?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/export-search-results?view=o365-worldwide QUESTIONNO: 166 You have a Microsoft 365 subscription and a Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) subscription.
You have devices enrolled in Microsoft Endpoint Manager as shown in the following table:
You integrateMicrosoft Defender ATP and Endpoint Manager.
You plan to evaluate the Microsoft Defender ATP risk level for the devices.
You need to identify which devices can be evaluated.
Which devices should you identify?
MS-500 Exam Question 30
You have a Microsoft 365 subscription that uses a default domain name of contoso.com.
The multi-factor authentication (MFA) service settings are configured as shown in the exhibit. (Clock the Exhibit tab.)
In contoso.com, you create the users shown in the following table.
What is the effect of the configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
The multi-factor authentication (MFA) service settings are configured as shown in the exhibit. (Clock the Exhibit tab.)
In contoso.com, you create the users shown in the following table.
What is the effect of the configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
