MS-500 Free Practice Test

You have a Microsoft 365 subscription that includes a user named Admin1.
You need to ensure that Admin1 can preserve all the mailbox content of users, including their deleted items.
The solution must use the principle of least privilege. What should you do?

1. A. From the Microsoft 365 admin center, assign the Exchange administrator role to Admin1.
2. B. From the Exchange admin center, assign the Discovery Management admin role to Admin1.
3. C. From the Azure Active Directory admin center, assign the Service administrator role to Admin1.
4. D. From the Exchange admin center, assign the Recipient Management admin role to Admin1.

Correct Answer: B

You create a label that encrypts email data. Users report that they cannot use the label in Outlook on the web to protect the email messages they send.
You need to ensure that the users can use the new label to protect their email. What should you do?

1. A. Modify the priority order of label policies
2. B. Wait six hours and ask the users to try again
3. C. Create a label policy
4. D. Create a new sensitive information type

Correct Answer: B

You have a Microsoft 365 subscription.
The Global administrator role is assigned to your user account. You have a user named Admin1. You create an eDiscovery case named Case1.
You need to ensure that Admin1 can view the results of Case1. What should you do first?

1. A. From the Azure Active Directory admin center, assign a role group to Admin1.
2. B. From the Microsoft 365 admin center, assign a role to Admin1.
3. C. From Security & Compliance admin center, assign a role group to Admin1.

Correct Answer: C
Reference:
https://docs.microsoft.com/en-us/office365/securitycompliance/assign-ediscovery-permissions

Your company has a Microsoft 365 subscription.
The company forbids users to enroll personal devices in mobile device management (MDM). Users in the sales department have personal iOS devices.
You need to ensure that the sales department users can use the Microsoft Power BI app from iOS devices to access the Power BI data in your tenant.
The users must be prevented from backing up the app’s data to iCloud. What should you create?

1. A. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a device state condition
2. B. an app protection policy in Microsoft Intune
3. C. a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a client apps condition
4. D. a device compliance policy in Microsoft Intune

Correct Answer: B

You create a data loss prevention (DLP) policy as shown in the following shown:

What is the effect of the policy when a user attempts to send an email messages that contains sensitive information?

1. A. The user receives a notification and can send the email message
2. B. The user receives a notification and cannot send the email message
3. C. The email message is sent without a notification
4. D. The email message is blocked silently

Correct Answer: A
https://docs.microsoft.com/en-us/office365/securitycompliance/data-loss-prevention-policies