MS-500 Practice Test

MS-500 Practice Test practice questions, page 11 of 14, with answer review and explanations.

Question 51

You have a Microsoft 365 tenant that is linked to a hybrid Azure Active Directory (Azure AD) tenant named contoso.com. You need to enable Azure AD Seamless Single Sign-On (Azure AD SSO) for contoso.com. What should you use?

  1. Azure AD Connect
  2. the Microsoft 365 Defender portal
  3. the Microsoft 365 Security admin center
  4. the Microsoft 365 admin center

Question 52

You have a Microsoft 365 subscription. You need to recommend a passwordless authentication solution that uses biometric authentication. What should you include in the recommendation?

  1. Windows Hello for Business
  2. a smart card
  3. the Microsoft Authenticator app
  4. a PIN

Question 53

Your network contains an on-premises Active Directory domain and a Microsoft 365 subscription. You plan to deploy a hybrid Azure Active Directory (Azure AD) tenant that has Azure AD Identity Protection risk policies enabled. You need to configure Azure AD Connect to support the planned deployment. Which Azure AD Connect authentication method should you select?

  1. Federation with AD FS
  2. Federation with PingFederate
  3. Password Hash Synchronization
  4. Pass-through authentication

Question 54

You have several Conditional Access policies that block noncompliant devices from connecting to services. You need to identify which devices are blocked by which policies. What should you use?

  1. the Device compliance report in the Microsoft Endpoint Manager admin center
  2. the Device compliance trends report in the Microsoft Endpoint Manager admin center
  3. Activity log in the Cloud App Security portal
  4. the Conditional Access Insights and Reporting workbook in the Azure Active Directory admin center

Question 55

You have a Microsoft 365 subscription named contoso.com. You need to configure Microsoft OneDrive for Business external sharing to meet the following requirements: ✑ Enable file sharing for users that have a Microsoft account. ✑ Block file sharing for anonymous users. What should you do?

  1. From Advanced settings for external sharing, select Allow or block sharing with people on specific domains and add contoso.com.
  2. From the External sharing settings for OneDrive, select Only people in your organization.
  3. From the External sharing settings for OneDrive, select Existing external users.
  4. From the External sharing settings for OneDrive, select New and existing external users.