Weekend Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: cram70off

Microsoft Updated MS-500 Exam Questions and Answers by remi

Page: 2 / 12

Microsoft MS-500 Exam Overview :

Exam Name: Microsoft 365 Security Administration
Exam Code: MS-500 Dumps
Vendor: Microsoft Certification: Microsoft 365
Questions: 327 Q&A's Shared By: remi
Question 8

You have a Microsoft 365 tenant.

You need to retain Azure Active Directory (Azure AD) audit logs for two years. Administrators must be able to query the audit log information by using the Azure Active Directory admin center.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Questions 8

Options:

Discussion
Marley
Hey, I heard the good news. I passed the certification exam!
Jaxson Jan 25, 2026
Yes, I passed too! And I have to say, I couldn't have done it without Cramkey Dumps.
Lennox
Something Special that they provide a comprehensive overview of the exam content. They cover all the important topics and concepts, so you can be confident that you are well-prepared for the test.
Aiza Jan 25, 2026
That makes sense. What makes Cramkey Dumps different from other study materials?
Melody
My experience with Cramkey was great! I was surprised to see that many of the questions in my exam appeared in the Cramkey dumps.
Colby Jan 3, 2026
Yes, In fact, I got a score of above 85%. And I attribute a lot of my success to Cramkey's dumps.
Rae
I tried using Cramkey dumps for my recent certification exam and I found them to be more accurate and up-to-date compared to other dumps I've seen. Passed the exam with wonderful score.
Rayyan Jan 15, 2026
I see your point. Thanks for sharing your thoughts. I might give it a try for my next certification exam.
Question 9

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

Questions 9

You discover that several security alerts are visible from the Microsoft Defender for Identity portal.

You need to identify which users in contoso.com can close the security alerts.

Which users should you identify?

Options:

A.

User3 only

B.

User1 and User2 only

C.

User3 and User4 only

D.

User1 and User3 only

E.

User1 only

Discussion
Question 10

You have a Microsoft 365 subscription.

You need to enable auditing for all Microsoft Exchange Online users.

What should you do?

Options:

A.

From the Exchange admin center, create a journal rule

B.

Run the Set-MailboxDatabase cmdlet

C.

Run the Set-Mailbox cmdlet

D.

From the Exchange admin center, create a mail flow message trace rule.

Discussion
Question 11

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains two users named User1 and User2.

You need to assign Role Based Access Control (RBAC) roles to User1 and User2 to meet the following requirements:

  • Use the principle of least privilege
  • Enable User1 to view sync errors by using Azure AD Connect Health
  • Enable User2 to configure Azure Active Directory Connect Health Settings

Which two roles should you assign?

Options:

A.

The Monitoring Readers role in Azure AD Connect Health to User1

B.

The Security reader role in Azure AD to User 1

C.

The Reports reader role in Azure AD to User 1

D.

The Contributor role in Azure AD Connect Health to User 2

E.

The Monitoring Contributor role in Azure Connect Health to User 2

F.

The Security operator role in Azure AD to User2

Discussion
Page: 2 / 12

MS-500
PDF

$34.5  $114.99

MS-500 Testing Engine

$40.5  $134.99

MS-500 PDF + Testing Engine

$52.5  $174.99