MS-500 Risk Assessment & Management 3

Question 1

What is the primary purpose of a Risk Register in a Microsoft 365 security program?

Accepted Answer

Documenting identified risks, their likelihood, impact, and mitigation status

Answer

A Risk Register is a centralized document that catalogs identified risks along with their assessed likelihood, potential impact, owner, and current mitigation or acceptance status.

Question 2

In Microsoft Entra ID Protection, when a user risk is set to 'High', what automated response can be enforced via Conditional Access?

Accepted Answer

Require password change via self-service password reset

Answer

A high user risk Conditional Access policy can require users to perform a secure password change through SSPR before regaining access, remediating the risk.

Question 3

Which Microsoft 365 feature enables automated risk-based workflows such as notifying HR when an employee accesses unusual volumes of sensitive files before their resignation date?

Accepted Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Insider Risk Management uses HR connector data and policy templates like 'Data theft by departing users' to trigger alerts based on risk indicators.

Question 4

A security analyst wants to evaluate third-party risk from a vendor with access to a shared SharePoint site. Which principle guides the least-privilege access review for this scenario?

Accepted Answer

Zero Trust

Answer

Zero Trust's 'verify explicitly' and 'least privilege access' principles require continuously validating vendor permissions and limiting access to only what is necessary.

Question 5

In Compliance Manager, what does an 'improvement action' owned by Microsoft (as opposed to customer-owned) indicate?

Accepted Answer

Microsoft manages and is responsible for that control on behalf of all tenants

Answer

Microsoft-owned improvement actions are controls that Microsoft implements and manages in its infrastructure, contributing to your compliance score through the shared responsibility model.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Risk Assessment & Management 3