Microsoft MS-500 Actual Exam Questions
352 Questions & Answers
Practice MS-500 questions and answers on Microsoft 365 identity, information protection, threat defense and compliance. Select Reveal Solution after choosing your answer.
A security team needs to investigate and respond to threats across endpoints, identities and Microsoft 365 services. Which portal should it use?
Reveal Solution
Microsoft Defender XDR brings together incident investigation and response across supported security workloads.
You need to ensure that malicious URLs in email are checked when users click them. Which Microsoft Defender for Office 365 capability should be enabled?
Reveal Solution
Safe Links checks URLs at click time and can block known malicious destinations.
An organization wants to quarantine suspicious attachments and detonate them in a protected environment. Which feature provides this protection?
Reveal Solution
Safe Attachments analyzes attachments in a detonation environment and can quarantine malicious content.
Administrators need to review audit events for user and administrator activity in Microsoft 365. Which service should they use?
Reveal Solution
Microsoft Purview Audit records searchable events for supported Microsoft 365 activities.
A company must preserve relevant mailbox content for a legal investigation while allowing normal user access. Which capability should be configured?
Reveal Solution
An eDiscovery hold preserves relevant mailbox content for investigation while users continue working with their mailbox.
Get all 352 questions and answers in the Premium PDF.