MS-500 Quality Control & Assurance 3

Question 1

An admin reviews the Microsoft Purview Compliance Manager and sees a control marked as 'Failed'. What does this status indicate?

Accepted Answer

The control's required actions have not been completed or evidence is missing

Answer

A 'Failed' status in Compliance Manager means the associated improvement actions have not been implemented or evidence has not been provided.

Question 2

A security team is performing quality assurance on their Microsoft Defender for Office 365 configuration. Which report shows the effectiveness of Safe Links over time?

Accepted Answer

URL protection report in the Defender portal

Answer

The URL protection report in Microsoft Defender for Office 365 shows click data, blocked URLs, and override activity for Safe Links.

Question 3

During a QA audit, an admin discovers that some high-risk sign-ins are not triggering Identity Protection alerts. What should the admin verify first?

Accepted Answer

That the risk-based Conditional Access policy is enabled and targeting the correct users

Answer

If risk-based alerts are not firing, the Conditional Access policy linked to sign-in risk may be misconfigured, disabled, or scoped to the wrong users.

Question 4

An admin wants to validate that eDiscovery searches are returning complete and accurate results for a legal hold. What action best supports result quality?

Accepted Answer

Run keyword statistics and preview results before exporting

Answer

Reviewing keyword statistics and previewing search results in eDiscovery ensures the query is correctly scoped before a full export.

Question 5

A compliance admin is configuring retention policies and wants to confirm the policy is working correctly. Which action verifies that content is being retained as expected?

Accepted Answer

Check the Preservation Hold library in SharePoint or the Recoverable Items folder in Exchange

Answer

Retained content is moved to the Preservation Hold library (SharePoint) or Recoverable Items (Exchange), confirming the policy is actively retaining data.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Quality Control & Assurance 3