MS-500 Professional Standards & Competencies 3

Question 1

An organization must demonstrate compliance with GDPR regarding data subject access requests. Which Microsoft 365 tool allows administrators to find and export personal data for a specific individual?

Accepted Answer

Data Subject Request (DSR) tool in Microsoft Purview

Answer

Microsoft Purview provides a Data Subject Request tool that allows administrators to search for and export personal data related to a specific individual across Microsoft 365 services.

Question 2

A security architect is implementing a Privileged Access Workstation (PAW) strategy. What is the primary security benefit of this approach?

Accepted Answer

Reduces the attack surface by isolating privileged tasks to a dedicated, hardened device

Answer

PAWs reduce the attack surface by ensuring that privileged credentials are only used on dedicated, hardened devices isolated from general internet browsing and email.

Question 3

According to Microsoft's recommended practices, how often should Global Administrator role assignments be reviewed in a production Microsoft 365 tenant?

Accepted Answer

Monthly or more frequently

Answer

Microsoft recommends reviewing Global Administrator assignments monthly or more frequently because this role has the highest level of privilege in the tenant.

Question 4

A security team is building a RACI matrix for Microsoft 365 security responsibilities. What does the 'A' (Accountable) designation mean in this context?

Accepted Answer

The person who approves decisions and is answerable for the outcome

Answer

In a RACI matrix, 'Accountable' designates the single person who is ultimately answerable for the correct completion of the task and has decision-making authority.

Question 5

When conducting a Microsoft 365 security assessment, an administrator uses Microsoft Secure Score. What best describes what a Secure Score improvement action represents?

Accepted Answer

A recommended security configuration change with an associated score impact

Answer

Secure Score improvement actions are prioritized security recommendations; each has an associated point value reflecting its relative security impact if implemented.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Professional Standards & Competencies 3