Microsoft MS-500 Microsoft 365 Security Administration Exam Practice Test Questions

• Question 1

  You need to create a policy that identifies content in Microsoft OneDrive that contains credit card numbers.To complete this task, sign in to the Microsoft 365 portal.

  • A . Explanation:
    You need to configure auto-labeling in 'simulation' mode. In the policy, you can select the 'Credit Card' sensitive info type.
    In theMicrosoft 365 compliance center, navigate to sensitivity labels:
    Solutions>Information protection
    Select theAuto-labeling (preview)tab.
    Select+ Create policy.
    For the pageChoose info you want this label applied to: Select one of the templates, such asFinancialorPrivacy. You can refine your search by using theShow options fordropdown. Or, selectCustom policyif the templates don't meet your requirements. SelectNext.
    For the pageName your auto-labeling policy: Provide a unique name, and optionally a description to help identify the automatically applied label, locations, and conditions that identify the content to label.
    For the pageChoose locations where you want to apply the label: Select OneDrive. Then selectNext.
    For theDefine policy settingspage: Keep the default ofFind content that containsto define rules that identify content to label across all your selected locations. The rules use conditions that include sensitive information types and sharing options. For sensitive information types, you can select both built-in and custom sensitive information types.
    Then selectNext.
    For theSet up rules to define what content is labeledpage: Select+ Create ruleand then selectNext.
    On theCreate rulepage, name and define your rule, using sensitive information types and then selectSave.
    Click Next.
    For theChoose a label to auto-applypage: Select+ Choose a label, select a label from theChoose a sensitivity labelpane, and then selectNext.
    For theDecide if you want to run policy simulation now or laterpage: SelectRun policy in simulation modeif you're ready to run the auto-labeling policy now, in simulation mode. Otherwise, selectLeave policy turned off. SelectNext.
    For theSummarypage: Review the configuration of your auto-labeling policy and make any changes that needed, and complete the wizard.
    

  Show Answer Answer: A Next

• Question 2

  You have a hybrid Microsoft 365 environment. All computers run Windows 10 and are managed by using Microsoft Intune.You need to create a Microsoft Azure Active Directory (Azure AD) conditional access policy that will allow only Windows 10 computers marked as compliant to establish a VPN connection to the on-premises network.What should you do first?

  • From the Azure Active Directory admin center, create a new certificate
  • Enable Application Proxy in Azure AD
  • From Active Directory Administrative Center, create a Dynamic Access Control policy
  • From the Azure Active Directory admin center, configure authentication methods

  Show Answer Answer: A Next

• Question 3

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an on-premises Active Directory domain named contoso.com.You install and run Azure AD Connect on a server named Server1 that runs Windows Server.You need to view Azure AD Connect events.You use the Security event log on Server1.Does that meet the goal?

  • Yes
  • No

  Show Answer Answer: B Next

• Question 4

  You have a Microsoft 365 subscription that includes a user named Admin1.You need to ensure that Admin1 can preserve all the mailbox content of users, including their deleted items.The solution must use the principle of least privilege.What should you do?

  • From the Microsoft 365 admin center, assign the Exchange administrator role to Admin1.
  • From the Exchange admin center, assign the Discovery Management admin role to Admin1.
  • From the Azure Active Directory admin center, assign the Service administrator role to Admin1.
  • From the Exchange admin center, assign the Recipient Management admin role to Admin1.

  Show Answer Answer: C Next

• Question 5

  Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.Username and passwordUse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password, place your cursor in the Enter password box and click on the password below.Microsoft 365 Username:admin@[email protected] 365 Password: #HSP.ug?$p6unIf the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support only:Lab instance: 11122308You need to prevent any email messages that contain data covered by the U.K. Data Protection Act from being sent to recipients outside of your organization, unless the messages are sent to an external domain named adatum.com.To complete this task, sign in to the Microsoft 365 admin center.(1) U. K. National Insurance Number (NINO(2) U. S. / U.K. Passport NumberSWIFT Code11. Click on Ok12. Add an exception for recipients in the adatum.com domain13. Add recipients for incident reports and click ok14. Click save15. Click save

  • Explanation: 1. After signing into the Microsoft 365 admin center, navigate to Compliance Management in the Exchange Admin center. 2. Click on ''Data Loss Prevention'' option. 3. To add a new custom DLP policy, Click on (+) plus button to get the context menu 4. Click on ''New Custom DLP policy'' option, a new window appears where you have to enter policy name, description, state and mode of the requirement details. Click on save button to create policy and continue... 5. You will be back to the ''Data Loss Prevention'' screen with newly added policy information. 6. Double click on the added row to open the policy details, click on rules option in left part of the screen as depicted 7. Click on (+) plus button to add a new rule. Select the ''Block messages with sensitive information'' rule. 8. On the following screen, we can add condition, action, exceptions, rule activation and deactivation dates 9. Click on ''Select Sensitive information Types'' to specify the sensitive information details. 10. Click on (+) plus button and add the following Sensitive information Types:
  • Explanation
  • Explanation
  • Explanation

  Show Answer Answer: A Next