MS-500 Test 2

Question 1

In a Microsoft 365 subscription, you can set up various Advanced Threat Protection (ATP) rules. In the Threat management dashboard, you must allow a user named User1 to see ATP reports.

Which role gives User1 the permissions he or she needs?

Accepted Answer

Security reader

Answer

The Security reader role in Microsoft 365 is specifically designed to allow users to view security-related reports and alerts, including those from Advanced Threat Protection (ATP). This role provides read-only access to security dashboards and reports without granting permissions to modify settings or take actions. It's ideal for users who need to monitor security posture without administrative privileges.

Question 2

You're a subscriber to Microsoft 365.

You must ensure that multi-factor authentication (MFA) is enabled by default for all users with the Exchange administrator role.

What method should you employ in order to reach your objective?

Accepted Answer

Microsoft Azure Active Directory (Azure AD) Privileged Identity Management

Answer

Azure AD Privileged Identity Management (PIM) is the correct tool to ensure that multi-factor authentication (MFA) is enabled by default for users with administrative roles like Exchange administrator. PIM allows administrators to enforce MFA for role activation, requiring users to complete an MFA challenge before they can assume a privileged role. This significantly strengthens the security of high-impact accounts.

Question 3

You must satisfy User9's technological criteria.

What are your options?

Accepted Answer

Assign the Global administrator role to User9

Answer

The Global administrator role in Microsoft 365 grants the highest level of permissions across all Microsoft 365 services and features. If User9 needs to satisfy broad technological requirements, implying extensive administrative control, assigning the Global administrator role would provide the necessary access. However, this role should be assigned with extreme caution due to its wide-ranging privileges.

Question 4

In the MFA configuration, which IP address space should you use?

Accepted Answer

192.168.16.0/20

Answer

When configuring trusted IPs for MFA, internal network ranges are often excluded from MFA prompts for convenience. The IP address space 192.168.16.0/20 is a private IP range commonly used for internal corporate networks. This range allows for a significant number of hosts (4096 addresses), making it suitable for defining a corporate network segment where MFA trusted IPs might be applied.

Question 5

You must offer a solution for the user administrators that satisfies the auditing security criteria.

Which blade from the Azure Active Directory admin center should you recommend?

Accepted Answer

Sign-ins

Answer

The 'Sign-ins' blade in the Azure Active Directory admin center is essential for auditing security criteria related to user administrators. It provides a comprehensive log of all sign-in activities, including successful and failed attempts, location, device information, and applied Conditional Access policies. This data is crucial for monitoring administrator activity, detecting suspicious behavior, and ensuring compliance with security policies.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Test 2