🔔If you experience any difficulties before or after finalizing your order, please reach out to us through email at support@ciscoforall.com

MS-500 Microsoft 365 Security Administration

in Microsoft

Microsoft MS-500 Actual Exam Questions

Last updated on Oct 31, 2026.

352 Questions & Answers

Practice MS-500 questions and answers on Microsoft 365 identity, information protection, threat defense and compliance. Select Reveal Solution after choosing your answer.

Question #1 Topic: Exam A

An organization wants to require multifactor authentication for administrators accessing Microsoft 365. Which control should be configured?

  • A. Microsoft Entra Conditional Access
  • B. Retention labels
  • C. Exchange transport rules
  • D. SharePoint version history
Reveal Solution
Correct Answer: A
Conditional Access can enforce MFA for targeted users and cloud apps based on sign-in conditions.
Question #2 Topic: Exam A

A security team needs to detect suspicious sign-ins and investigate risk for a user account. Which capability provides this information?

  • A. Microsoft Entra ID Protection
  • B. Microsoft Lists
  • C. Exchange address books
  • D. SharePoint search
Reveal Solution
Correct Answer: A
Identity Protection detects risky sign-ins and users and supports investigation and remediation workflows.
Question #3 Topic: Exam A

You need to prevent users from sending sensitive credit card data outside the organization through Exchange Online. What should be configured?

  • A. A data loss prevention policy
  • B. A mailbox folder policy
  • C. A distribution group
  • D. A mail flow connector only
Reveal Solution
Correct Answer: A
DLP policies can detect sensitive information types and apply actions such as blocking or auditing messages.
Question #4 Topic: Exam A

A company wants to automatically apply protection to email containing confidential data. Which Microsoft 365 feature should be used?

  • A. Sensitivity labels with appropriate encryption settings
  • B. Safe Links only
  • C. Archive mailboxes
  • D. Shared mailboxes
Reveal Solution
Correct Answer: A
Sensitivity labels can classify content and apply protection such as encryption to email and documents.
Question #5 Topic: Exam A

Administrators want to reduce the attack surface by blocking legacy authentication for selected users. What is the recommended approach?

  • A. Conditional Access policy targeting legacy authentication clients
  • B. A retention policy
  • C. An Exchange room list
  • D. A SharePoint site template
Reveal Solution
Correct Answer: A
Conditional Access can block legacy authentication, which does not support modern authentication protections.

Cart (0)

  • Your cart is empty.