MS-500 Exam Question 156

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the groups shown in the following table.

The domain is synced to a Microsoft Azure Active Directory (Azure AD) tenant that contains the groups shown in the following table.

You create an Azure Information Protection policy named Policy1.
You need to apply Policy1.
To which groups can you apply Policy1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

MS-500 Exam Question 157

You have a Microsoft 365 subscription that includes a user named User1.
You have a conditional access policy that applies to Microsoft Exchange Online. The conditional access policy is configured to use Conditional Access App Control.
You need to create a Microsoft Cloud App Security policy that blocks User1 from printing from Exchange Online.
Which type of Cloud App Security policy should you create?
  • MS-500 Exam Question 158

    You have a hybrid Microsoft 365 environment. All computers run Windows 10 and are managed by using Microsoft Intune.
    You need to create a Microsoft Azure Active Directory (Azure AD) conditional access policy that will allow only Windows 10 computers marked as compliant to establish a VPN connection to the on-premises network.
    What should you do first?
  • MS-500 Exam Question 159

    You have a Microsoft 365 subscription that uses a default domain name of contoso.com.
    Microsoft Azure Active Directory (Azure AD) contains the users shown in the following table.

    Microsoft Intune has two devices enrolled as shown in the following table:

    Both devices have three apps named App1, App2, and App3 installed.
    You create an app protection policy named ProtectionPolicy1 that has the following settings:
    Protected apps: App1
    Exempt apps: App2
    Windows Information Protection mode: Block
    You apply ProtectionPolicy1 to Group1 and Group3. You exclude Group2 from ProtectionPolicy1.
    For each of the following statements, select Yes if the statement is true. Otherwise, select No.
    NOTE: Each correct selection is worth one point.

    MS-500 Exam Question 160

    You need to create Group2.
    What are two possible ways to create the group?