QUESTION: 23 Exam Topic: Implement and manage identity and access questions

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

Username and password

Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.

Microsoft 365 Username:
admin@LODSe244001.onmicrosoft.com

Microsoft 365 Password: &=Q8v@2qGzYz
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:
Lab instance: 11032396

You need to ensure that each user can join up to five devices to Azure Active Directory (Azure AD).
To complete this task, sign in to the Microsoft Office 365 admin center.

See Explanation section for answer.

Answer(s): A

Explanation:

1. After signing into the Microsoft 365 admin center, click Admin centers > Azure Active Directory >Devices.
2. Navigate to Device Settings.
3. Set the Users may join devices to Azure AD setting to All.
4. Set the Additional local administrators on Azure AD joined devices setting to None.
5. Set the Users may register their devices with Azure AD setting to All.
6. Leave the Require Multi-Factor Auth to join devices setting on it default setting.
7. Set the Maximum number of devices setting to 5.
8. Set the Users may sync settings and app data across devices setting to All.
9. Click the Save button at the top left of the screen.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
https://docs.microsoft.com/en-us/microsoft-365/compliance/use-your-free-azure-ad-subscription-in-office-365?view=o365-worldwide

Reveal Solution Next Question

QUESTION: 24 Exam Topic: Implement and manage identity and access questions

SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

Username and password

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.

Microsoft 365 Username:
admin@LODSe244001.onmicrosoft.com

Microsoft 365 Password: &=Q8v@2qGzYz
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:
Lab instance: 11032396

You need to ensure that group owners renew their Office 365 groups every 180 days.
To complete this task, sign in to the Microsoft Office 365 admin center.

See Explanation section for answer.

Answer(s): A

Explanation:

Set group expiration
1. Open the Azure AD admin center with an account that is a global administrator in your Azure AD organization.
2. Select Groups, then select Expiration to open the expiration settings.

3. On the Expiration page, you can:
-Set the group lifetime in days. You could select one of the preset values, or a custom value (should be 31 days or more).
-Specify an email address where the renewal and expiration notifications should be sent when a group has no owner.
-Select which Office 365 groups expire. You can set expiration for:
-All Office 365 groups
-A list of Selected Office 365 groups
-None to restrict expiration for all groups
Save your settings when you're done by selecting Save.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-lifecycle

Reveal Solution Next Question

QUESTION: 25 Exam Topic: Implement and manage identity and access questions

You have several Conditional Access policies that block noncompliant devices from connecting to services. You need to identity which devices are blocked by which policies.
What should you use?

the Setting compliance report in the Microsoft Endpoint Manager admin center
Sign-ins in the Azure Active Directory admin center
Activity log in the Cloud App Security admin center
Audit logs in the Azure Active Directory admin center

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/troubleshoot-conditional-access

Reveal Solution Next Question

QUESTION: 26 Exam Topic: Implement and manage identity and access questions

SIMULATION
You need to ensure that unmanaged mobile devices are quarantined when the devices attempt to connect to Exchange Online.
To complete this task, sign in to the Microsoft 365 portal.

See Explanation section for answer.

Answer(s): A

Explanation:

You need to configure the Exchange ActiveSync Access Settings.

1. Go to the Exchange admin center.
2. Click on Mobile in the left navigation pane.
3. On the Mobile Device Access page, click the Edit button in the Exchange ActiveSync Access Settings
area.
4. Select the Quarantine option under When a mobile device that isn't managed by a rule or personal exemption connects to Exchange.
5. Optionally, you can configure notifications to be sent to administrators and a message to be sent to the mobile device user when a device is quarantined.
6. Click Save to save the changes.

Reveal Solution Next Question

Free MS-500 Exam Braindumps (page: 10)

QUESTION: 23 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference:

QUESTION: 24 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference:

QUESTION: 25 Exam Topic: Implement and manage identity and access questions

Reference:

QUESTION: 26 Exam Topic: Implement and manage identity and access questions

Explanation: