MS-500 Test 1

Question 1

You're a subscriber to Microsoft 365.

You must recommend a biometric authentication method that does not require a password.

What should your advice include?

Accepted Answer

Windows Hello for Business

Answer

the Microsoft Authenticator app

Answer

a PIN

Answer

a smart card

Question 2

You have an on-premises Active Directory domain and a Microsoft 365 subscription on your network.

You want to set up a hybrid Azure Active Directory (Azure AD) tenancy with Azure Active Directory Identity Protection risk policies enabled.

To support the planned deployment, you must configure Azure AD Connect.

Which authentication mechanism for Azure AD Connect should you use?

Accepted Answer

Password Hash Synchronization

Answer

Federation with PingFederate

Answer

Pass-through authentication

Answer

Federation with AD FS

Question 3

You have a number of Conditional Access policies in place that prevent noncompliant devices from accessing services.
You'll need to figure out which policies are blocking particular devices.
What type of material should you use?

Accepted Answer

Sign-ins in the Azure Active Directory admin center

Answer

Activity log in the Cloud App Security admin center

Answer

Audit logs in the Azure Active Directory admin center

Answer

the Setting compliance report in the Microsoft Endpoint Manager admin center

Question 4

You're working in a Microsoft 365 hybrid environment. Microsoft Intune is used to manage all of the PCs, which run Windows 10.
Create a conditional access policy in Microsoft Azure Active Directory (Azure AD) that allows only Windows 10 computers marked as compliant to connect to the on-premises network through VPN.
What should you start with?

Accepted Answer

From the Azure Active Directory admin center, create a new certificate

Answer

From Active Directory Administrative Center, create a Dynamic Access Control policy

Answer

From the Azure Active Directory admin center, configure authentication methods

Answer

Enable Application Proxy in Azure AD

Question 5

You are a subscriber to Microsoft 365 E5.
You must guarantee that users with the Exchange administrator role have time-limited rights and must request authorization using multi-factor authentication (MFA).
What method should you employ in order to reach your objective?

Accepted Answer

Microsoft Azure Active Directory (Azure AD) Privileged Identity Management

Answer

Microsoft Azure AD group management

Answer

Security & Compliance permissions

Answer

Microsoft Office 365 user management

Question 6

You're a subscriber to Microsoft 365.
You can create a new user via the Microsoft 365 admin center.
You intend to give the user the Reports reader role.
The permissions of the Reports reader role must be viewed.
Which administrative center should you go with?

Accepted Answer

Azure Active Directory

Answer

Microsoft 365

Answer

Security & Compliance

Answer

Cloud App Security

Question 7

You have a Microsoft 365 tenancy named contoso.com that is linked to a hybrid Azure Active Directory (Azure AD) tenant.

For contoso.com, you must activate Azure AD Seamless Single Sign-On (Azure AD SSO).

What type of material should you use?

Accepted Answer

Azure AD Connect

Answer

the Azure Active Directory admin center

Answer

the Microsoft 365 admin center

Answer

the Microsoft 365 Security admin center

Question 8

Microsoft Azure Advanced Threat Protection is used by your organisation (ATP).
For an Azure ATP sensor named Sensor1, you enable the delayed release of updates. When will Sensor1 be updated after the Azure ATP cloud service is updated?

Accepted Answer

24 hours

Answer

1 hour

Answer

48 hours

Answer

12 hours

Question 9

Your Microsoft 365 environment is a mix of the two.
Microsoft Office 365 ProPlus is installed on all machines, which runs Windows 10 Enterprise. Every one of
Active Directory is installed on PCs.
Server1 is a Windows Server 2016 server that you have. The telemetry database is stored on Server 1. You must prohibit Microsoft from receiving personal information from telemetry data.
What's your plan?

Accepted Answer

Configure a registry on the computers

Answer

Configure a registry on Server1

Answer

On Server1, run readinessreportcreator.exe

Answer

On the computers, run tdadm.exe