[Retired Exam] Microsoft Practice Test MS-500: Microsoft 365 Security Administration

Implement and manage identity and access – 47 questions 

Plan and implement identity and access for Microsoft 365 hybrid environments 

• Choose an authentication method to connect to a hybrid environment 
• Plan and implement pass-through authentication and password hash sync 
• Plan and implement Azure AD synchronization for hybrid environments 
• Monitor and troubleshoot Azure AD Connect events 

Plan and implement identities in Azure AD 

• Implement Azure AD group membership 
• Implement password management, including self-service password reset and Azure AD Password Protection 
• Manage external identities in Azure AD and Microsoft 365 workloads 
• Plan and implement roles and role groups 
• Audit Azure AD 

Implement authentication methods 

• Implement multi-factor authentication (MFA) by using conditional access policies 
• Manage and monitor MFA 
• Plan and implement Windows Hello for Business, FIDO, and passwordless authentication 

Plan and implement conditional access 

• Plan and implement conditional access policies 
• Plan and implement device compliance policies 
• Test and troubleshoot conditional access policies 

Configure and manage identity governance 

• Implement Azure AD Privileged Identity Management  
• Implement and manage entitlement management 
• Implement and manage access reviews 

Implement Azure AD Identity Protection 

• Implement user risk policy 
• Implement sign-in risk policy 
• Configure Identity Protection alerts 
• Review and respond to risk events 

Implement and manage threat protection – 50 questions 

Secure identity by using Microsoft Defender for Identity 

• Plan a Microsoft Defender for Identity solution 
• Install and configure Microsoft Defender for Identity 
• Manage and monitor Microsoft Defender for Identity 
• Secure score  
• Analyze identity-related threats and risks identified in Microsoft 365 Defender 

Secure endpoints by using Microsoft Defender for Endpoint 

• Plan a Microsoft Defender for Endpoint solution 
• Implement Microsoft Defender for Endpoint 
• Manage and monitor Microsoft Defender for Endpoint 
• Analyze and remediate threats and risks to endpoints identified in Microsoft 365 Defender 

Secure endpoints by using Microsoft Endpoint Manager 

• Plan for device and application protection 
• Configure and manage Microsoft Defender Application Guard 
• Configure and manage Windows Defender Application Control 
• Configure and manage exploit protection 
• Configure and manage device encryption 
• Configure and manage application protection policies 
• Monitor and manage device security status using Microsoft Endpoint Manager admin center  
• Analyze and remediate threats and risks to endpoints identified in Microsoft Endpoint Manager 

Secure collaboration by using Microsoft Defender for Office 365 

• Plan a Microsoft Defender for Office 365 solution 
• Configure Microsoft Defender for Office 365  
• Monitor for threats by using Microsoft Defender for Office 365  
• Analyze and remediate threats and risks to collaboration workloads identified in Microsoft 365 Defender 
• Conduct simulated attacks by using Attack simulation training 

Detect and respond to threats in Microsoft 365 by using Microsoft Sentinel 

• Plan a Microsoft Sentinel solution for Microsoft 365 
• Implement and configure Microsoft Sentinel for Microsoft 365 
• Manage and monitor Microsoft 365 security by using Microsoft Sentinel 
• Respond to threats using built-in playbooks in Microsoft Sentinel 

Secure connections to cloud apps by using Microsoft Defender for Cloud Apps 

• Plan Microsoft Defender for Cloud Apps implementation 
• Configure Microsoft Defender for Cloud Apps 
• Manage cloud app discovery 
• Manage entries in the Microsoft Defender for Cloud Apps catalog 
• Manage apps in Microsoft Defender for Cloud Apps  
• Configure Microsoft Defender for Cloud Apps connectors and OAuth apps 
• Configure Microsoft Defender for Cloud Apps policies and templates 
• Analyze and remediate threats and risks relating to cloud app connections identified in Microsoft 365 Defender 
• Manage App governance in Microsoft Defender for Cloud Apps 

Implement and manage information protection – 31 questions 

Manage sensitive information 

• Plan a sensitivity label solution 
• Create and manage sensitive information types 
• Configure sensitivity labels and policies 
• Publish sensitivity labels to Microsoft 365 workloads 
• Monitor data classification and label usage by using Content explorer and Activity explorer 
• Apply labels to files and schematized data assets in Microsoft Purview Data Map 

Implement and manage Microsoft Purview Data Loss Prevention (DLP) 

• Plan a DLP solution 
• Create and manage DLP policies for Microsoft 365 workloads 
• Implement and manage Endpoint DLP 
• Monitor DLP 
• Respond to DLP alerts and notifications 

Plan and implement Microsoft Purview Data lifecycle management 

• Plan for data lifecycle management 
• Review and interpret data lifecycle management reports and dashboards 
• Configure retention labels, policies, and label policies 
• Plan and implement adaptive scopes  
• Configure retention in Microsoft 365 workloads 
• Find and recover deleted Office 365 data 

Manage compliance in Microsoft 365 – 32 questions 

Manage and analyze audit logs and reports in Microsoft Purview 

• Plan for auditing and reporting 
• Investigate compliance activities by using audit logs 
• Review and interpret compliance reports and dashboards 
• Configure alert policies 
• Configure audit retention policies 

Plan for, conduct, and manage eDiscovery cases 

• Recommend eDiscovery Standard or Premium 
• Plan for content search and eDiscovery 
• Delegate permissions to use search and discovery tools 
• Use search and investigation tools to discover and respond  
• Manage eDiscovery cases 

Manage regulatory and privacy requirements 

• Plan for regulatory compliance in Microsoft 365 
• Manage regulatory compliance in the Microsoft Purview Compliance Manager 
• Implement privacy risk management in Microsoft Priva 
• Implement and manage Subject Rights Requests in Microsoft Priva 

Manage insider risk solutions in Microsoft 365 

• Implement and manage Customer Lockbox 
• Implement and manage Communication compliance policies 
• Implement and manage Insider risk management policies 
• Implement and manage Information barrier policies 
• Implement and manage Privileged access management 

Notes: 

• The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam. 
• Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.