ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam
Go to Exam

Exam MS-500 topic 1 question 90 discussion

Actual exam question from Microsoft's MS-500
Question #: 90
Topic #: 1
[All MS-500 Questions]

You plan to deploy a new Microsoft 365 subscription that will contain 500 users.

You need to ensure that the following actions are performed when the users sign in to the subscription:

• Evaluate the users’ risk level based on their location and travel.
• Require high-risk users to sign in by using Azure Multi-Factor Authentication (Azure MFA).

The solution must minimize cost.

Which license should you assign to each user?

  • A. Enterprise Mobility + Security E3
  • B. Microsoft 365 Business Premium
  • C. Microsoft 365 E3
  • D. Microsoft 365 E5
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by smiff at April 11, 2023, 1:50 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
AVN1711
1 year, 9 months ago
Selected Answer: D
to have advanced user risk leveled capabilities you need to have Azure P2, which is included in M3656 E5 or E5 Security licenses, so the right answer is D. If I do remember right there is no Security E3 license, because of that answer - A. (Enterprise Mobility + Security E3) is incorrect
upvoted 1 times
...
Maxx4
2 years ago
Selected Answer: A
To ensure that users' risk levels are evaluated based on their location and travel, and to require high-risk users to sign in using Azure Multi-Factor Authentication (Azure MFA), while minimizing cost, you should assign each user the A. Enterprise Mobility + Security E3 license. The Enterprise Mobility + Security E3 license includes Azure Active Directory Identity Protection, which provides risk-based conditional access capabilities. It allows you to evaluate user risk levels based on factors like location and travel patterns. With this license, you can create conditional access policies to require Azure MFA for high-risk users while allowing low-risk users to sign in without additional authentication factors.
upvoted 1 times
Maxx4
2 years ago
The Microsoft 365 Business Premium (option B) license does not include Azure Active Directory Identity Protection or the advanced risk-based conditional access capabilities required for evaluating user risk levels and enforcing Azure MFA for high-risk users. The Microsoft 365 E3 (option C) and Microsoft 365 E5 (option D) licenses include Azure Active Directory Identity Protection and provide the necessary capabilities for evaluating user risk and enforcing Azure MFA. However, these licenses are more expensive than the Enterprise Mobility + Security E3 license, which can help minimize costs while still meeting the stated requirements. Therefore, to meet the requirements while minimizing cost, you should assign each user the Enterprise Mobility + Security E3 license (option A).
upvoted 1 times
...
...
DavidBM
2 years ago
Selected Answer: D
To evaluate the users’ risk level based on their location and travel and require high-risk users to sign in by using Azure Multi-Factor Authentication (Azure MFA), you should assign the Azure AD Premium P2 license to each user Azure AD Premium P2 provides risk-based Conditional Access policies that can be used to evaluate the risk level of a sign-in attempt based on the user’s location and travel Therefore, the answer is D. Microsoft 365 E5.
upvoted 1 times
...
dadmundur
2 years, 2 months ago
Risk based conditional access requires an Azure AD Premium P2 license. It is included with Microsoft 365 E5 or it can be purchased additionally via the "Enterprise Mobility + Security E5" package. "Organizations with Azure AD Premium P2 licenses can create Conditional Access policies incorporating Azure AD Identity Protection sign-in risk detections." https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk Microsoft 365 feature matrix: https://m365maps.com/matrix.htm
upvoted 2 times
...
AnonymousJhb
2 years, 2 months ago
Selected Answer: D
P2 https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-ad-multi-factor-authentication
upvoted 2 times
...
AnonymousJhb
2 years, 2 months ago
Selected Answer: D
D https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-licensing#available-versions-of-azure-ad-multi-factor-authentication
upvoted 1 times
...
V1nc3n7
2 years, 2 months ago
Selected Answer: D
D You need Azure AD P2 license with is included in M365 E5
upvoted 1 times
...
smiff
2 years, 2 months ago
D. That feature requires AADP P2 license.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel