MS-500 Exam Question 101

Your network contains an on-premises Active Directory domain. The domain contains servers that run Windows Server and have advanced auditing enabled.
The security logs of the servers are collected by using a third-party SIEM solution.
You purchase a Microsoft 365 subscription and plan to deploy Azure Advanced Threat Protection (ATP) by using standalone sensors.
You need to ensure that you can detect when sensitive groups are modified and when malicious services are created.
What should you do?
  • MS-500 Exam Question 102

    You have a Microsoft 365 E5 subscription that contains 100 users. Each user has a computer that runs Windows 10 and either an Android mobile device or an iOS mobile device. All the devices are registered with Azure AD.
    You enable passwordless authentication for all the users.
    You need to ensure that the users can sign in to the subscription by using passwordless authentication.
    What should you instruct the users to do on their mobile device first?
  • MS-500 Exam Question 103

    ------------------53
    You have a Microsoft 365 E5 subscription that contains a user named User1.
    The Azure Active Directory (Azure AD) Identity Protection risky users report identities User1.
    For User1, you select Confirm user compromised.
    User1 can still sign in.
    You need to prevent User1 from signing in. The solution must minimize the impact on users at a lower risk level.
    Solution: You configure the user risk policy to block access when the user risk level is high.
    Does this meet the goal?
  • MS-500 Exam Question 104

    You have a Microsoft 365 E5 tenant that contains three users named User1, User2, and User3.
    You need to assign roles or role groups to the users as shown in the following table.

    What should you use to assign a role or role group to each user? To answer, drag the appropriate tools to the correct roles or role groups. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
    NOTE: Each correct selection is worth one point.

    MS-500 Exam Question 105

    You have a Microsoft 365 subscription.
    You need to include a custom sensitive information type in Data Subject Request (DSR) cases.
    Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.