MS-500 Endpoint Security & Device Management 2

Question 1

Which Microsoft Defender for Endpoint feature continuously discovers software vulnerabilities and misconfigurations on enrolled devices and prioritizes them by risk?

Accepted Answer

Threat and Vulnerability Management (TVM)

Answer

Threat and Vulnerability Management (TVM) scans enrolled endpoints for vulnerabilities and misconfigurations, then prioritizes them using a risk-based score.

Question 2

Which Attack Surface Reduction (ASR) rule helps prevent Office applications, such as Word and Excel, from spawning potentially malicious child processes?

Accepted Answer

Block Office applications from creating child processes

Answer

The ASR rule 'Block Office applications from creating child processes' prevents Office apps from launching child processes, a common technique used by macro-based malware.

Question 3

In Microsoft Intune, what is the purpose of a Configuration Profile?

Accepted Answer

Applying device settings such as Wi-Fi, VPN, restrictions, and security baselines

Answer

Configuration Profiles push settings to devices, including Wi-Fi, VPN, email, restrictions, and security baselines, without requiring user interaction.

Question 4

Which Microsoft Defender for Endpoint feature uses AI to automatically investigate security alerts and take or recommend remediation actions to reduce the analyst workload?

Accepted Answer

Automated Investigation and Remediation (AIR)

Answer

Automated Investigation and Remediation (AIR) uses AI to automatically triage alerts, investigate the scope of a breach, and either auto-remediate or recommend actions.

Question 5

Which Android enrollment mode in Microsoft Intune creates a separate, encrypted work profile on a personally owned device to isolate corporate data from personal data?

Accepted Answer

Android Enterprise Work Profile (BYOD)

Answer

Android Enterprise Work Profile creates an isolated, encrypted container for corporate apps and data, leaving personal data outside IT management scope.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Endpoint Security & Device Management 2