exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 1 question 36 discussion

Actual exam question from Microsoft's MS-500
Question #: 36
Topic #: 1
[All MS-500 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You add internal as a blocked word in the group naming policy for contoso.com.
You add Contoso- as prefix in the group naming policy for contoso.com.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
User Admin and Global Admin are exempt from group password policies.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/solutions/groups-naming-policy?view=o365-worldwide

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
skalolaz
Highly Voted 4 years, 1 month ago
N, Y, Y? Groups admin is not an exempt.
upvoted 28 times
arunjana
4 years, 1 month ago
Makes sense. Below are the accounts that are exempted from policies - Global admin Partner Tier 1 Support Partner Tier 2 Support User account admin
upvoted 1 times
arunjana
4 years, 1 month ago
N,Y,Y should be the correct answers
upvoted 10 times
Tam0924
4 years, 1 month ago
Hi did we get the answer confirmed to be N,Y,Y
upvoted 6 times
...
...
...
Ocico
4 years, 1 month ago
but Distribution is not a block word, therefore its Y/Y/Y
upvoted 7 times
Ocico
4 years, 1 month ago
I am wrong. It will get the name contoso-distribution. sorry ;)
upvoted 5 times
Chrissie73
3 years, 1 month ago
YYY: You both are missing one thing. "To create a naming policy for distribution groups, see Create a distribution group naming policy." It is another kind of policy than described in the text. For that reason the policy for the prefix won't apply
upvoted 2 times
...
...
...
chickenroaster
2 years, 4 months ago
Some administrator roles are exempted from these policies, across all group workloads and endpoints, so that they can create groups using blocked words and with their own naming conventions. The following administrator roles are exempted from the group naming policy: Global Administrator User Administrator https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-naming-policy
upvoted 1 times
...
...
prats005
Highly Voted 3 years, 10 months ago
N Y Y Roles and permissions To configure naming policy, one of the following roles is required: Global Administrator Group Administrator Directory Writer Some administrator roles are exempted from these policies, across all group workloads and endpoints, so that they can create groups using blocked words and with their own naming conventions. The following administrator roles are exempted from the group naming policy: Global Administrator User Administrator
upvoted 17 times
...
AVN1711
Most Recent 1 year, 9 months ago
may be I loose something ? are the answers should be Y,Y,N ? or may be the order of questions was changed/updated recently? N for the question: Admin2 (user administrator) can create a security group named Contoso-internal (internal – blocked word)
upvoted 1 times
...
czaaa
1 year, 12 months ago
Custom blocked words You can enter a comma separated list of blocked words that will be blocked in group names and aliases. No sub-string searches are carried out; specifically, an exact match between the user entered name and the custom blocked words is required to trigger a failure. Things to look out for: The blocked words are case-insensitive. When a user enters a blocked word, the group client will show an error message with the blocked word. There are no character restrictions in the blocked words used. There is a limit of 5000 words that can be set as blocked words.
upvoted 1 times
...
pompes
2 years, 1 month ago
Agree with the answer it was on the exam
upvoted 2 times
...
Dhamus
2 years, 1 month ago
NO: The Group Administrator role is not exempt from the policy. YES and YES: The User Administrator is exempt from the directive so he can do whatever he wants.
upvoted 1 times
...
GatesBill
2 years, 2 months ago
Just tested the exact given scenario in a lab and these are the results: N (suffix/prefix warning) - Groups admins are not an exempt! Y Y
upvoted 2 times
...
naylinu
2 years, 4 months ago
Some administrators are exempted from these policies, across all group workloads and endpoints, so that they can create groups with these blocked words and with their desired naming conventions. The following are the list of administrator roles exempted from the group naming policy. Global admin Partner Tier 1 Support Partner Tier 2 Support User account admin
upvoted 1 times
...
hans333
2 years, 6 months ago
Created users with mentioned permissons in lab, also created Block Words and Group naming policy. Then tested, could create all 3 groups. so its YYY
upvoted 1 times
rick001
2 years, 4 months ago
TL;DR N,Y,Y On topic : How is that possible since Group Admin is not exempted. So you get <PREFIX>-Distribution.. not what the questions states. So i recreated this in a live environment on 31/01/2023 : 1. N - not exempted so you get prefix <group> as Group Admin. 2. Y - As User Admin you can bypass / overrule the policy. 3. Y - As User Admin you can bypass / overrule the policy. If you had 3. with GROUPS ADMIN then it would also be YES since it only applies to Microsoft 365 groups and not security (FYI)
upvoted 2 times
...
...
bac0n
2 years, 7 months ago
Given answer is wrong. It's NYY. Just tested in my lab.
upvoted 1 times
...
ccadenasa
2 years, 7 months ago
Disregard my first answer. The correct answer is No, Yes, Yes
upvoted 1 times
...
ccadenasa
2 years, 7 months ago
The answer is correct: Yes, Yes, Yes. Tested in my Lab > https://techcommunity.microsoft.com/t5/microsoft-365-groups/introducing-the-groups-admin-role/m-p/978995
upvoted 1 times
...
TweetleD
2 years, 7 months ago
Answer is wrong. Should be Yes Yes Yes because Distribution is not a blocked word and User Administrator is exempt from blocked words and can override
upvoted 2 times
...
pete26
2 years, 8 months ago
Valid on exam October 14, 2022
upvoted 3 times
CertRookie
2 years, 8 months ago
Which one is valid? The site answer Y/Y/Y or forum N/Y/Y?
upvoted 3 times
...
...
heshmat2022
2 years, 9 months ago
Admin override Some administrators are exempted from these policies, across all group workloads and endpoints, so that they can create groups with these blocked words and with their desired naming conventions. The following are the list of administrator roles exempted from the group naming policy. Global admin Partner Tier 1 Support Partner Tier 2 Support User account admin
upvoted 1 times
...
Trainee2244
2 years, 9 months ago
N,Y,Y Because the Groups Admin has to follow the Naming Policy, User Admin is excepted from any Naming Policy and Naming Policys are valid for M365 Groups only.
upvoted 2 times
...
NarenKA
2 years, 10 months ago
The Answer is: Y Y Y The following admin roles are exempt from the group naming policy: Global admin User account admin Partner Tier 1 Support Partner Tier 2 Support Therefore User1 and User2 don't need to follow the group naming policies
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...