MS-500 Technology & Digital Applications 5

Question 1

Which Microsoft Purview capability allows legal teams to search across Exchange, SharePoint, Teams, and OneDrive for litigation purposes?

Accepted Answer

Content Search and eDiscovery

Answer

Microsoft Purview Content Search and eDiscovery tools enable legal teams to locate and export content across multiple M365 workloads.

Question 2

An organization wants to block all OAuth app consent by end users and require admin approval. What setting must be configured in Azure AD?

Accepted Answer

Configure user consent settings to require admin consent for all apps

Answer

Setting Azure AD user consent to require admin approval prevents users from granting OAuth permissions to third-party apps without oversight.

Question 3

What is the role of DKIM (DomainKeys Identified Mail) in Microsoft 365 email security?

Accepted Answer

Adds a cryptographic signature to outbound emails to verify the sending domain's authenticity

Answer

DKIM adds a digital signature to outgoing emails, allowing receiving servers to verify the message was sent from the legitimate domain.

Question 4

An admin needs to monitor when a user is assigned the Global Administrator role. Which tool provides real-time alerts for this?

Accepted Answer

Azure AD Privileged Identity Management (PIM) alerts and Microsoft 365 Defender incidents

Answer

PIM can send alerts when a user is assigned a privileged role permanently, and Defender incidents correlate identity changes with suspicious activity.

Question 5

Which policy type in Microsoft Endpoint Manager (Intune) enforces minimum OS version and password requirements before granting resource access?

Accepted Answer

Device compliance policy

Answer

Device compliance policies define health requirements such as minimum OS version and PIN complexity that devices must meet.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Technology & Digital Applications 5