Microsoft MS-500 Quiz 2 Topic 8 Questions 6-10

Question: 1

SIMULATION

You need to ensure that a user named Grady Archie can monitor the service health of your Microsoft 365 tenant. The solution must use the principle of least privilege.

To complete this task, sign in to the Microsoft 365 portal.

AYou need to assign the Service Administrator role to Grady Archie.
* In the Microsoft 365 Admin Center, type Grady Archie into the Search for users, groups, settings or tasks search box.
* Select the Grady Archie user account from the search results.
* In the Roles section of the user account properties, click the Edit link.
* Select the Customized Administrator option. This will display a list of admin roles.
* Click Save to save the changes.

BYou need to assign the Service Administrator role to Grady Archie.
* In the Microsoft 365 Admin Center, type Grady Archie into the Search for users, groups, settings or tasks search box.
* Select the Grady Archie user account from the search results.
* In the Roles section of the user account properties, click the Edit link.
* Select the Customized Administrator option. This will display a list of admin roles.
* Select the Service admin role.
* Click Save to save the changes.

Show Answer

Question: 2

SIMULATION

You need to implement a solution to manage when users select links in documents or email messages from Microsoft Office 365 ProPlus applications or Android devices. The solution must meet the following requirements:

* Block access to a domain named fabrikam.com

* Store information when the users select links to fabrikam.com

To complete this task, sign in to the Microsoft 365 portal.

AYou need to configure a Safe Links policy.
* Go to the Office 365 Security & Compliance admin center.
* Navigate to Threat Management > Policy > Safe Links.
* In the Policies that apply to the entire organization section, select Default, and then click the Edit icon.
* In the Block the following URLs section, type in *.fabrikam.com. This meets the first requirement in the question.
* In the Settings that apply to content except email section, untick the checkbox labelled Do not track when users click safe links. This meets the second requirement in the question.
* Click Save to save the changes.

BYou need to configure a Safe Links policy.
* Go to the Office 365 Security & Compliance admin center.
* Navigate to Threat Management > Policy > Safe Links.
* In the Policies that apply to the entire organization section, select Default, and then click the Edit icon.
* In the Block the following URLs section, type in *.fabrikam.com. This meets the first requirement in the question.
* Click Save to save the changes.

Show Answer

Question: 3

SIMULATION

You need to configure your organization to automatically quarantine all phishing email messages.

To complete this task, sign in to the Microsoft 365 portal.

You need to edit the Anti-Phishing policy.

A Go to the Office 365 Security & Compliance admin center.
Navigate to Threat Management > Policy > ATP Anti-Phishing.
Click on Default Policy.
In the Impersonation section, click Edit.
Go to the Actions section.
In the If email is sent by an impersonated user: box, select Quarantine the message from the drop-down list.
In the If email is sent by an impersonated domain: box, select Quarantine the message from the drop-down list.
Click Save to save the changes.
Click Close to close the anti-phishing policy window.

B Go to the Office 365 Security & Compliance admin center.
Navigate to Threat Management > Policy > ATP Anti-Phishing.
Click on Default Policy.
In the Impersonation section, click Edit.
Go to the Actions section.
In the If email is sent by an impersonated user: box, select Quarantine the message from the drop-down list.
In the If email is sent by an impersonated domain: box, select Quarantine the message from the drop-down list.
Click Save to save the changes.
Click Close to close the anti-phishing policy window.

Show Answer

Question: 4

SIMULATION

You discover that Microsoft SharePoint content is shared with users from multiple domains.

You need to allow sharing invitations to be sent only to users in an email domain named contoso.com.

To complete this task, sign in to the Microsoft 365 portal.

AYou need to configure the Sharing options in the SharePoint admin center.
* Go to the SharePoint admin Center.
* Navigate to Policies > Sharing.
* In the External Sharing section, click on More external sharing settings.
* Tick the Limit external sharing by domain checkbox.
* Click Save to save the changes.
B.

AYou need to configure the Sharing options in the SharePoint admin center.
* Go to the SharePoint admin Center.
* Navigate to Policies > Sharing.
* In the External Sharing section, click on More external sharing settings.
* Select the Allow only specific domains option and type in the domain contoso.com.
* Click Save to save the changes.

CA. You need to configure the Sharing options in the SharePoint admin center.
* Go to the SharePoint admin Center.
* Navigate to Policies > Sharing.
* In the External Sharing section, click on More external sharing settings.
* Tick the Limit external sharing by domain checkbox.
* Click the Add domains button.
* Select the Allow only specific domains option and type in the domain contoso.com.
* Click Save to save the changes.

Show Answer

Question: 5

SIMULATION

You need to ensure that administrators can publish a label that adds a footer to email messages and documents.

To complete this task, sign in to the Microsoft Office 365 portal.

AYou need to configure a Sensitivity label.
* Go to the Security & Compliance Admin Center.
* Navigate to Classification > Sensitivity labels.
* Click on + Create a label to create a new label.
* Give the label a name and description then click Next.
* Leave the Encryption option as None and click Next.
* On the Content Marking page, tick the checkbox Add a footer.
* Click the Customize Text link and add the footer text and click Save (for the question, it doesn't matter what text you add).
* Click Next.
* Leave the Auto-labeling for Office apps off and click Next.
* Click the Submit button to save your changes.
* The label is now ready to be published. Click the Done button to exit the page and create the label.

BYou need to configure a Sensitivity label.
* Go to the Security & Compliance Admin Center.
* Navigate to Classification > Sensitivity labels.
* Click on + Create a label to create a new label.
* Click the Customize Text link and add the footer text and click Save (for the question, it doesn't matter what text you add).
* Click Next.
* Leave the Auto-labeling for Office apps off and click Next.
* Click the Submit button to save your changes.
* The label is now ready to be published. Click the Done button to exit the page and create the label.

Show Answer

Microsoft MS-500 Quiz:2 Topic:8 Questions:6-10