QUESTION: 83 Exam Topic: Implement and manage identity and access questions

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You plan to enable Microsoft Defender for Endpoint role-based access control (RBAC).
You need to identify which users can enable RBAC in Microsoft Defender for Endpoint, and which users will lose access to Microsoft 365 Defender portal after RBAC in enabled.

Which users should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: User1 and User2 only.
Which users can enable RBAC in Microsoft Defender for Endpoint?

When you first log in to the Microsoft 365 Defender portal, you're granted either full access or read only access. Full access rights are granted to users with Security Administrator or Global Administrator roles in Azure AD. Read only access is granted to users with a Security Reader role in Azure AD.

Box 2: User4 only.
Which users will lose access to Microsoft 365 Defender portal after RBAC in enabled?

Initially, only those with Azure AD Global Administrator or Security Administrator rights will be able to create and assign roles in the Microsoft 365 Defender portal, therefore, having the right groups ready in Azure AD is important.

The Security Reader will lose access. Security Operator and Application Administrator did not have access in the first place.

Reference:

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/rbac?view=o365-worldwide

Reveal Solution Next Question

QUESTION: 84 Exam Topic: Implement and manage identity and access questions

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

Azure AD Identity Protection detects that the account of User1 is at risk and generates an alert.
How many users will receive the alert?

Answer(s): C

Explanation:

Configure users at risk detected alerts
As an administrator, you can set:

The user risk level that triggers the generation of this email - By default, the risk level is set to “High” risk.
The recipients of this email - Users in the Global Administrator, Security Administrator, or Security Reader roles are automatically added to this list. We attempt to send emails to the first 20 members of each role. If a user is enrolled in PIM to elevate to one of these roles on demand, then they will only receive emails if they are elevated at the time the email is sent.

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-notifications

Reveal Solution Next Question

QUESTION: 85 Exam Topic: Implement and manage identity and access questions

HOTSPOT (Drag and Drop is not supported)
You have a Microsoft 365 E5 subscription that contains two groups named Group1 and Group2 and the users shown in the following table.

You have the Privileged Access settings configured as shown in the following exhibit.

You have a privileged access policy that has the following settings:
-Policy name: New Transport Rule
-Policy type: Task
-Policy scope: Exchange
-Approval Type: Manual
-Approver group: Group1

User1 requests access to the New Transport Rule policy for a duration of two hours.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: No
With privileged Access Management you can even prevent a Global Admin to make a specific task without approval.

Box 2: Yes

Note:
The default approval group is Group2. User2 is member of Group2.
The approver group for privileged access policy is Group1. User1 is member of Group1.

Box 3: No

Reference:

https://microsoftlearning.github.io/MS-500-Microsoft-365-Security/Instructions/Labs/MS500T00/LAB_AK_13_Lab1_Ex1_Privileged_Access.html

Reveal Solution Next Question

QUESTION: 86 Exam Topic: Implement and manage identity and access questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to ensure that User1 can review Conditional Access policies.

Solution: You assign User1 the Security Reader role.
Does that meet the goal?

Answer(s): A

Explanation:

Security Reader can read security information and reports in Azure AD and Office 365.

Can do:
* microsoft.directory/conditionalAccessPolicies/standard/read
Read conditional access for policies

* microsoft.directory/conditionalAccessPolicies/owners/read
Read the owners of conditional access policies

* microsoft.directory/conditionalAccessPolicies/policyAppliedTo/read
Read the "applied to" property for conditional access policies

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Reveal Solution Next Question

Free MS-500 Exam Braindumps (page: 25)

QUESTION: 83 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference:

QUESTION: 84 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference:

QUESTION: 85 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference:

QUESTION: 86 Exam Topic: Implement and manage identity and access questions

Explanation:

Reference: