Download Microsoft 365 Security Administration.ExpertNet.MS-500.2022-10-23.4e.98q.vcex

An administrator configures Azure AD Privileged Identity Management as shown in the following exhibit.

• A: Change the Assignment Type for Admin2 to Permanent
• B: From the Azure Active Directory admin center, assign the Exchange administrator role to Admin2
• C: From the Azure Active Directory admin center, remove the Exchange administrator role to Admin1
• D: Change the Assignment Type for Admin1 to Eligible

Correct Answer: D

You need to recommend a solution for the user administrators that meets the security requirements for auditing.
Which blade should you recommend using from the Azure Active Directory admin center?

• A: Sign-ins
• B: Azure AD Identity Protection
• C: Authentication methods
• D: Access review

Correct Answer: A

You need to create Group2.
What are two possible ways to create the group?

• A: an Office 365 group in the Microsoft 365 admin center
• B: a mail-enabled security group in the Microsoft 365 admin center
• C: a security group in the Microsoft 365 admin center
• D: a distribution list in the Microsoft 365 admin center
• E: a security group in the Azure AD admin center

Correct Answer: CE

How should you configure Group3? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer: Exam simulator is required

You need to create Group3.
What are two possible ways to create the group?

• A: an Office 365 group in the Microsoft 365 admin center
• B: a mail-enabled security group in the Microsoft 365 admin center
• C: a security group in the Microsoft 365 admin center
• D: a distribution list in the Microsoft 365 admin center
• E: a security group in the Azure AD admin center

Correct Answer: AD

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription that is associated to a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You use Active Directory Federation Services (AD FS) to federate on-premises Active Directory and the tenant.
Azure AD Connect has the following settings:
Source Anchor: objectGUID
Password Hash Synchronization: Disabled
Password writeback: Disabled
Directory extension attribute sync: Disabled 
Azure AD app and attribute filtering: Disabled 
Exchange hybrid deployment: Disabled
User writeback: Disabled  
You need to ensure that you can use leaked credentials detection in Azure AD Identity Protection.
Solution: You modify the Azure AD app and attribute filtering settings.
Does that meet the goal?

• A: Yes
• B: No

Correct Answer: B

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription that is associated to a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You use Active Directory Federation Services (AD FS) to federate on-premises Active Directory and the tenant.
Azure AD Connect has the following settings:
Source Anchor: objectGUID
Password Hash Synchronization: Disabled 
Password writeback: Disabled
Directory extension attribute sync: Disabled
Azure AD app and attribute filtering: Disabled
Exchange hybrid deployment: Disabled
User writeback: Disabled
You need to ensure that you can use leaked credentials detection in Azure AD Identity Protection.
Solution: You modify the Password Hash Synchronization settings.
Does that meet the goal?

• A: Yes
• B: No

Correct Answer: A

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Microsoft 365 E5 subscription that is associated to a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com.
You use Active Directory Federation Services (AD FS) to federate on-premises Active Directory and the tenant.
Azure AD Connect has the following settings:
Source Anchor: objectGUID
Password Hash Synchronization: Disabled
Password writeback: Disabled
Directory extension attribute sync: Disabled 
Azure AD app and attribute filtering: Disabled 
Exchange hybrid deployment: Disabled
User writeback: Disabled  
You need to ensure that you can use leaked credentials detection in Azure AD Identity Protection.
Solution: You modify the Source Anchor settings.
Does that meet the goal?

• A: Yes
• B: No

Correct Answer: B

You have a Microsoft 365 subscription that uses a default domain name of contoso.com.
The multi-factor authentication (MFA) service settings are configured as shown in the exhibit. (Click the Exhibit tab.)

• A:
• B:

Correct Answer: Exam simulator is required

You have a hybrid Microsoft 365 environment. All computers run Windows 10 and are managed by using Microsoft Intune.
You need to create a Microsoft Azure Active Directory (Azure AD) conditional access policy that will allow only
Windows 10 computers marked as compliant to establish a VPN connection to the on-premises network.
What should you do first?

• A: From the Azure Active Directory admin center, create a new certificate
• B: Enable Application Proxy in Azure AD
• C: From Active Directory Administrative Center, create a Dynamic Access Control policy
• D: From the Azure Active Directory admin center, configure authentication methods

Correct Answer: A