MS-500 Practice Test

MS-500 Practice Test practice questions, page 12 of 14, with answer review and explanations.

Question 56

You have a Microsoft 365 E5 tenant that contains three users named User1, User2, and User3. You need to assign roles or role groups to the users as shown in the following table. What should you use to assign a role or role group to each user? To answer, drag the appropriate tools to the correct roles or role groups. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Question 57

Your network contains an on-premises Active Directory domain named contoso.local that has a forest functional level of Windows Server 2008 R2. You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to install Azure AD Connect and enable single sign-on (SSO). You need to prepare the domain to support SSO. The solution must minimize administrative effort. What should you do?

  1. Raise the forest functional level to Windows Server 2016.
  2. Modify the UPN suffix of all domain users.
  3. Populate the mail attribute of all domain users.
  4. Rename the domain.

Question 58

You have a Microsoft 365 E5 subscription that contains the users shown in the following table. For contoso.com, you create a group naming policy that has the following configuration. - You plan to create the groups shown in the following table. Which users can be used to create each group? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 59

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You configure the Security Operator role in Azure AD Privileged Identity Management (PIM) as shown in the following exhibit. You add assignments to the Security Operator role as shown in the following table. Which users can activate the Security Operator role?

  1. User2 only
  2. User3 only
  3. User1 and User2 only
  4. User2 and User3 only
  5. User1, User2, and User3

Question 60

You have a Microsoft 365 tenant. You need to implement a policy to enforce the following requirements: ✑ If a user uses a Windows 10 device that is NOT hybrid Azure Active Directory (Azure AD) joined, the user must be allowed to connect to Microsoft SharePoint Online only from a web browser. The user must be prevented from downloading files or syncing files from SharePoint Online. ✑ If a user uses a Windows 10 device that is hybrid Azure AD joined, the user must be able connect to SharePoint Online from any client application, download files, and sync files. What should you create?

  1. a conditional access policy in Azure AD that has Client apps conditions configured
  2. a conditional access policy in Azure AD that has Session controls configured
  3. a compliance policy in Microsoft Endpoint Manager that has the Device Properties settings configured
  4. a compliance policy in Microsoft Endpoint Manager that has the Device Health settings configured