MS-500 Technology & Digital Applications 4

Question 1

What does the 'ZAP' (Zero-hour Auto Purge) feature do in Microsoft Defender for Office 365?

Accepted Answer

Retroactively removes malicious emails from user mailboxes after delivery

Answer

ZAP retroactively moves emails that are later identified as malicious out of user inboxes after delivery.

Question 2

An organization must ensure that all Teams meetings are recorded and retained for 90 days for compliance. Which Microsoft 365 service should be configured?

Accepted Answer

Microsoft Purview retention policy scoped to Teams meetings

Answer

A Microsoft Purview retention policy targeting Teams meeting recordings ensures recordings are kept for the specified 90-day period.

Question 3

Which type of Conditional Access grant control requires users to register and use a specific hardware token?

Accepted Answer

Require multifactor authentication with phishing-resistant methods (FIDO2 key)

Answer

Requiring phishing-resistant MFA in Conditional Access enforces hardware security key or passkey authentication.

Question 4

What is the primary function of Microsoft Defender for Cloud Apps (CASB)?

Accepted Answer

Providing visibility and control over third-party cloud applications used by employees

Answer

Microsoft Defender for Cloud Apps is a CASB that discovers shadow IT, enforces policies, and protects data in third-party SaaS apps.

Question 5

An admin is reviewing the Microsoft 365 audit log and sees the operation 'Set-Mailbox -LitigationHoldEnabled $true'. What does this indicate?

Accepted Answer

A mailbox was placed on litigation hold to preserve all content

Answer

The LitigationHoldEnabled parameter being set to true places a mailbox on litigation hold, preserving all content indefinitely.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Technology & Digital Applications 4