File Info
| Exam | Microsoft 365 Security Administration |
| Number | MS-500 |
| File Name | Microsoft.MS-500.Train4Sure.2020-02-20.72q.vcex |
| Size | 2 MB |
| Posted | Feb 20, 2020 |
| Download | Microsoft.MS-500.Train4Sure.2020-02-20.72q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
An administrator configures Azure AD Privileged Identity Management as shown in the following exhibit.
What should you do to meet the security requirements?
- Change the Assignment Type for Admin2 to Permanent
- From the Azure Active Directory admin center, assign the Exchange administrator role to Admin2
- From the Azure Active Directory admin center, remove the Exchange administrator role to Admin1
- Change the Assignment Type for Admin1 to Eligible
Correct answer: D
Question 2
You need to recommend a solution for the user administrators that meets the security requirements for auditing.
Which blade should you recommend using from the Azure Active Directory admin center?
- Sign-ins
- Azure AD Identity Protection
- Authentication methods
- Access review
Correct answer: A
Explanation:
References:https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins References:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins
Question 3
You need to recommend a solution to protect the sign-ins of Admin1 and Admin2.
What should you include in the recommendation?
- a device compliance policy
- an access review
- a user risk policy
- a sign-in risk policy
Correct answer: C
Explanation:
References:https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy
Question 4
You need to resolve the issue that targets the automated email messages to the IT team.
Which tool should you run first?
- Synchronization Service Manager
- Azure AD Connect wizard
- Synchronization Rules Editor
- IdFix
Correct answer: B
Explanation:
References:https://docs.microsoft.com/en-us/office365/enterprise/fix-problems-with-directory-synchronization References:
https://docs.microsoft.com/en-us/office365/enterprise/fix-problems-with-directory-synchronization
Question 5
You need to create Group2.
What are two possible ways to create the group?
- an Office 365 group in the Microsoft 365 admin center
- a mail-enabled security group in the Microsoft 365 admin center
- a security group in the Microsoft 365 admin center
- a distribution list in the Microsoft 365 admin center
- a security group in the Azure AD admin center
Correct answer: CE
Question 6
Which IP address space should you include in the Trusted IP MFA configuration?
- 131.107.83.0/28
- 192.168.16.0/20
- 172.16.0.0/24
- 192.168.0.0/20
Correct answer: B
Question 7
You need to create Group3
What are two possible ways to create the group?
- an Office 365 group in the Microsoft 365 admin center
- a mail-enabled security group in the Microsoft 365 admin center
- a security group in the Microsoft 365 admin center
- a distribution list in the Microsoft 365 admin center
- a security group in the Azure AD admin center
Correct answer: AD
Question 8
Which user passwords will User2 be prevented from resetting?
- User6 and User7
- User4 and User6
- User4 only
- User7 and User8
- User8 only
Correct answer: C
Question 9
You need to meet the technical requirements for User9. What should you do?
- Assign the Privileged administrator role to User9 and configure a mobile phone number for User9
- Assign the Compliance administrator role to User9 and configure a mobile phone number for User9
- Assign the Security administrator role to User9
- Assign the Global administrator role to User9
Correct answer: D
Question 10
Which role should you assign to User1?
- Global administrator
- User administrator
- Privileged role administrator
- Security administrator
Correct answer: C
