MS-500 Practice Test

Question 16

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an on-premises Active Directory domain named contoso.com. You install and run Azure AD Connect on a server named Server1 that runs Windows Server. You need to view Azure AD Connect events. Solution: You use the Directory Service event log on Server1. Does that meet the goal?

1. Yes
2. No

Question 17

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an on-premises Active Directory domain named contoso.com. You install and run Azure AD Connect on a server named Server1 that runs Windows Server. You need to view Azure AD Connect events. Solution: You use the System event log on Server1. Does that meet the goal?

1. Yes
2. No

Question 18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an on-premises Active Directory domain named contoso.com. You install and run Azure AD Connect on a server named Server1 that runs Windows Server. You need to view Azure AD Connect events. Solution: You use the Application event log on Server1. Does that meet the goal?

1. Yes
2. No

Question 19

You have a Microsoft 365 E5 subscription. Some users are required to use an authenticator app to access Microsoft SharePoint Online. You need to view which users have used an authenticator app to access SharePoint Online. The solution must minimize costs. What should you do?

1. From the Microsoft 365 Security admin center, download a report.
2. From Azure Log Analytics, query the logs.
3. From the Microsoft 365 Security admin center, perform an audit log search.
4. From the Enterprise applications blade of the Azure Active Directory admin center, view the sign-ins.

Question 20

You have a Microsoft 365 subscription that contains the users shown in the following table. You implement Azure Active Directory (Azure AD) Privileged Identity Management (PIM). From PIM, you review the Application Administrator role and discover the users shown in the following table. The Application Administrator role is configured to use the following settings in PIM: ✑ Activation maximum duration (hours): 1 hour ✑ Require justification on activation: No ✑ Require ticket information on activation: No ✑ On activation, require Azure MFA: No ✑ Require approval to activate: Yes ✑ Approvers: None For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: