MS-500 Practice Test

MS-500 Practice Test practice questions, page 13 of 14, with answer review and explanations.

Question 61

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains two users named User1 and User2. You need to assign Role Based Access Control (RBAC) roles to User1 and User2 to meet the following requirements: ✑ Use the principle of least privilege. ✑ Enable User1 to view sync errors by using Azure AD Connect Health. ✑ Enable User2 to configure Azure Active Directory Connect Health Settings. Which two roles should you assign? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. The Monitoring Reader role in Azure AD Connect Health to User1
  2. The Security reader role in Azure AD to User1
  3. The Reports reader role in Azure AD to User1
  4. The Contributor role in Azure AD Connect Health to User2
  5. The Monitoring Contributor role in Azure AD Connect Health to User2
  6. The Security operator role in Azure AD to User2

Question 62

You have a Microsoft 365 subscription that contains a user named User1. You need to assign User1 permissions to search Microsoft Office 365 audit logs. What should you use?

  1. the Azure Active Directory admin center
  2. the Exchange admin center
  3. the Microsoft 365 Defender portal
  4. the Microsoft 365 Compliance center

Question 63

You have a Microsoft 365 tenant that has modern authentication enabled. You have Windows 10, MacOS, Android, and iOS devices that are managed by using Microsoft Endpoint Manager. Some users have older email client applications that use Basic authentication to connect to Microsoft Exchange Online. You need to implement a solution to meet the following security requirements: ✑ Allow users to connect to Exchange Online only by using email client applications that support modern authentication protocols based on OAuth 2.0. ✑ Block connections to Exchange Online by any email client applications that do NOT support modern authentication. What should you implement?

  1. a conditional access policy in Azure Active Directory (Azure AD)
  2. an application control profile in Microsoft Endpoint Manager
  3. a compliance policy in Microsoft Endpoint Manager
  4. an OAuth app policy in Microsoft Defender for Cloud Apps

Question 64

You have a Microsoft 365 E5 subscription linked to an Azure Active Directory (Azure AD) tenant. The tenant contains a user named User1 and multiple Windows 10 devices. The devices are Azure AD joined and protected by using BitLocker Drive Encryption (BitLocker). You need to ensure that User1 can perform the following actions: ✑ View BitLocker recovery keys. ✑ Configure the usage location for the users in the tenant. The solution must use the principle of least privilege. Which two roles should you assign to User1 in the Microsoft 365 admin center? To answer, select the appropriate roles in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 65

Your on-premises network contains an Active Directory domain that syncs to Azure Active Directory (Azure AD) by using Azure AD Connect. The functional level of the domain is Windows Server 2019. You need to deploy Windows Hello for Business. The solution must meet the following requirements: ✑ Ensure that users can access Microsoft 365 services and on-premises resources. ✑ Minimize administrative effort. How should you deploy Windows Hello for Business and which type of trust should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: