MS-500 Risk Assessment & Management 4

Question 1

A security team is prioritizing vulnerabilities found by Microsoft Defender Vulnerability Management. Which metric best quantifies exploitability risk for prioritization?

Accepted Answer

Exposure score combined with device criticality

Answer

Microsoft Defender Vulnerability Management's Exposure Score combines vulnerability severity with device criticality and exposure probability to prioritize which vulnerabilities pose the greatest organizational risk.

Question 2

What risk mitigation strategy is being applied when an organization accepts a known vulnerability because the cost of remediation exceeds the potential impact?

Accepted Answer

Risk acceptance

Answer

Risk acceptance is the deliberate decision to acknowledge a risk and take no further action because the remediation cost or operational impact outweighs the benefit of fixing it.

Question 3

In Microsoft Sentinel, which built-in feature automates risk scoring of incidents by correlating multiple low-severity alerts into a single high-priority incident?

Accepted Answer

Fusion detection

Answer

Fusion detection in Microsoft Sentinel uses machine learning to correlate multiple low-fidelity signals across kill chain stages into a single high-severity incident with a unified risk score.

Question 4

An organization enables Microsoft Purview Communication Compliance to reduce legal risk. Which scenario does this policy primarily address?

Accepted Answer

Detecting regulatory violations in email and Teams communications

Answer

Communication Compliance monitors Microsoft 365 communications for policy violations like harassment, sensitive data sharing, or financial regulatory non-compliance, reducing legal and reputational risk.

Question 5

Which Entra ID feature allows administrators to reduce risk by periodically verifying that guest users still require access to shared resources?

Accepted Answer

Access reviews in Entra ID Governance

Answer

Entra ID Governance Access Reviews periodically prompt resource owners or users to confirm ongoing need for access, automatically revoking access when reviews are not completed or denied.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Risk Assessment & Management 4