Book Image

Microsoft 365 Security Administration: MS-500 Exam Guide

By : Peter Rising
Book Image

Microsoft 365 Security Administration: MS-500 Exam Guide

By: Peter Rising

Overview of this book

The Microsoft 365 Security Administration (MS-500) exam is designed to measure your ability to perform technical tasks such as managing, implementing, and monitoring security and compliance solutions for Microsoft 365 environments. This book starts by showing you how to configure and administer identity and access within Microsoft 365. You will learn about hybrid identity, authentication methods, and conditional access policies with Microsoft Intune. Next, the book shows you how RBAC and Azure AD Identity Protection can be used to help you detect risks and secure information in your organization. You will also explore concepts, such as Advanced Threat Protection, Windows Defender ATP, and Threat Intelligence. As you progress, you will learn about additional tools and techniques to configure and manage Microsoft 365, including Azure Information Protection, Data Loss Prevention, and Cloud App Discovery and Security. The book also ensures you are well prepared to take the exam by giving you the opportunity to work through a mock paper, topic summaries, illustrations that briefly review key points, and real-world scenarios. By the end of this Microsoft 365 book, you will be able to apply your skills in the real world, while also being well prepared to achieve Microsoft certification.
Table of Contents (29 chapters)
1
Section 1: Configuring and Administering Identity and Access in Microsoft 365
7
Section 2: Implementing and Managing Threat Protection
13
Section 3: Information Protection in Microsoft 365
18
Section 4: Data Governance and Compliance in Microsoft 365
24
Section 5: Mock Exam and Assessment
25
Chapter 20: Mock Exam
26
Chapter 21: Mock Exam Answers

Questions

  1. Which of the following subscriptions can't be used to automatically classify and protect content with Azure Information Protection?

    a. Azure Information Protection Premium P2

    b. EM+S E3

    c. EM+S E5

    d. Microsoft 365 E5

  2. You can activate AIP for your Microsoft 365 tenant using PowerShell.

    a. True

    b. False

  3. Which PowerShell module was replace by the newer AIPService module?

    a. AIP

    b. AADRM

    c. Activedirectory

    d. ADRMS

  4. Which of the following is not a visual marking setting available for an AIP label?

    a. Watermark

    b. Highlight

    c. Header

    d. Footer

  5. AIP labels can be published to the Microsoft 365 Security and Compliance Center using the Unified labeling feature.

    a. True

    b. False

  6. Which of the following commands is used to install the AIP Scanner?

    a. Import-AIPScanner

    b. Install-AIPScanner

    c. Set-AIPScanner

    d. Get-AIPScanner

  7. Which of the following two methods can be used to track and revoke content protected with AIP?

    a. The Azure Information Protection Scanner

    b. The Azure...