MS-500 Practice Test

MS-500 Practice Test practice questions, page 7 of 14, with answer review and explanations.

Question 31

You have a Microsoft 365 subscription linked to an Azure Active Directory (Azure AD) tenant that contains a user named User1. You have a Data Subject Request (DSR) case named Case1. You need to allow User1 to export the results of Case1. The solution must use the principle of least privilege. Which role should you assign to User1 for Case1?

  1. eDiscovery Manager
  2. Security Operator
  3. eDiscovery Administrator
  4. Global Reader

Question 32

You have a Microsoft 365 subscription that contains the users shown in the following table. You create and enforce an Azure Active Directory (Azure AD) Identity Protection user risk policy that has the following settings: ✑ Assignments: Include Group1, Exclude Group2 ✑ User-risk: User risk level of Medium and above ✑ Access: Allow access, Require password change The users attempt to sign in. The risk level for each user is shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Question 33

You configure several Advanced Threat Protection (ATP) policies in a Microsoft 365 subscription. You need to allow a user named User1 to view ATP reports from the Threat management dashboard. Which role provides User1 with the required role permissions?

  1. Compliance administrator
  2. Security reader
  3. Message center reader
  4. Reports reader

Question 34

Your network contains an on-premises Active Directory domain that syncs to Azure Active Directory (Azure AD) as shown in the following exhibit. The synchronization schedule is configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area:

Question 35

You have a Microsoft 365 E5 subscription that contains the users shown in the following table. You plan to implement Azure Active Directory (Azure AD) Identity Protection. You need to identify which users can perform the following actions: ✑ Configure a user risk policy. ✑ View the risky users report. Which users should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: