MS-500 Subscription Practice Questions
The free MS-500: Microsoft 365 Security Administration questions that deal with subscription, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #6
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription that contains the users shown in the following table. You discover that all the users in the subscription can access Compliance Manager reports. The Compliance Manager Reader role is not assigned to any users. You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports. Solution: You recommend assigning the Compliance Manager Reader role to User5. Does this meet the goal?

Correct answer: B
Explanation
All users can already see the reports because a broader role grants access; assigning the Compliance Manager Reader role to User5 adds permission rather than removing it, so User5 still has access.
Question #7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 subscription that contains the users shown in the following table. You discover that all the users in the subscription can access Compliance Manager reports. The Compliance Manager Reader role is not assigned to any users. You need to recommend a solution to prevent a user named User5 from accessing the Compliance Manager reports. Solution: You recommend assigning the Compliance Manager Reader role to User1. Does this meet the goal?

Correct answer: B
Explanation
Assigning a reader role to User1 does nothing to restrict User5, whose access comes from a broader role that must be removed or replaced.
Question #8
You have a Microsoft 365 subscription. You need to ensure that all users who are assigned the Exchange administrator role have multi-factor authentication (MFA) enabled by default. What should you use to achieve the goal?
Correct answer: B
Explanation
Privileged Identity Management role settings can require MFA on activation of the Exchange administrator role, so every holder of the role is covered by default.
Continue with MS-500: Microsoft 365 Security Administration
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in MS-500: Microsoft 365 Security Administration, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All MS-500: Microsoft 365 Security Administration practice questions →
