← Back to exam page

MS-500 – Microsoft 365 Security Administration

Loading demo links...

Showing 10–12 of 20 questions

Question 10 (Mixed Questions)

You are configuring a 3rd party DLP solution for your organization. You need to give the DLP system the ability to decrypt any data item that has been protected by a AIP label. You want to solution to be operational immediately.

What should you do? (Choose three.)

Select all that apply, then click Submit answer.

  • ○

    Run the Enable-AipServiceSuperUserFeature PowerShell cmdlet

  • ○

    Run the Add-AipServiceSuperUser PowerShell cmdlet

  • ○

    Run the Set-AipServiceSuperUserGroup PowerShell cmdlet

  • ○

    Run the New-AzureADUser PowerShell cmdlet

  • ○

    Run the Add-AzureADGroupMember PowerShell cmdlet
Question 11 (New Update)

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Office 365 enabled.

You need to review the zero-hour auto purge (ZAP) configuration for the subscription.

Which two threat policies should you review? Each correct answer presents part of the solution

NOTE: Each correct selection is worth one point,

Select all that apply, then click Submit answer.

  • ○

    Safe links Built-in protection (Microsoft)

  • ○

    Office365 AntiPhish Default (Default)

  • ○

    Anti-spam outbound policy (Default)

  • ○

    Anti-malware (Default) Default

  • ○

    Anti-spam inbound policy

  • ○

    Safe attachments Built-in protection (Microsoft)
Question 12 (New Update)

You have an Azure Sentinel workspace that has an Azure Active Directory (Azure AD) connector and a

Microsoft Office 365 connector.

You need to assign built-in role-based access control (RBAC) roles to achieve the following tasks:

Create and run playbooks.

Manage incidents.

The solution must use the principle of least privilege.

Which two roles should you assign? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

  • ○

    Automation Operator
  • ○

    Azure Sentinel responder
  • ○

    Automation Runbook Operator
  • ○

    Azure Sentinel contributor
  • ○

    Logic App contributor