exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 3 question 27 discussion

Actual exam question from Microsoft's MS-500
Question #: 27
Topic #: 3
[All MS-500 Questions]

You have a Microsoft 365 alert named Alert2 as shown in the following exhibit.

You need to manage the status of Alert2.
To which status can you change Alert2?

  • A. Active or Investigating only
  • B. Dismissed only
  • C. The status cannot be changed.
  • D. Investigating only
  • E. Investigating, Active, or Dismissed
Show Suggested Answer Hide Answer
Suggested Answer: E 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
goape
Highly Voted 2 years, 7 months ago
Selected Answer: C
Answer is C. Once the alert has been marked as Resolved, it cannot be changed.
upvoted 5 times
cld475
2 years, 6 months ago
That is not true, because I just went to the compliance center and clicked on some alert with the status resolved and then I clicked on "edit comment" and from there I can change the status to all the other three options. Just go and check for yourself. So the answer is E.
upvoted 9 times
wujekwifi
2 years ago
That's true.
upvoted 1 times
...
...
...
izgi43
Most Recent 1 year, 7 months ago
in exam SC-400 nov 9th
upvoted 1 times
...
JoeP1
2 years, 3 months ago
Selected Answer: E
The documentation no longer says Resolved alerts can no longer have their status changed. They now allow it, even though changes may have been prevented in the past.
upvoted 1 times
...
Dzuljzebari
2 years, 4 months ago
Selected Answer: E
Despite status showing resolved it still can be changed. Select alert > Under Alert status > Actions > select "Edit comments" > choose new status: Active, Investigating, Dismissed or Resolved. Alert status will change. Tested from https://compliance.microsoft.com/ admin portal.
upvoted 1 times
...
formazionehs
2 years, 5 months ago
Selected Answer: E
E is correct
upvoted 1 times
...
yaza85
2 years, 5 months ago
Selected Answer: E
E tested
upvoted 1 times
...
yaza85
2 years, 5 months ago
Selected Answer: E
Tested E
upvoted 2 times
...
rivetting
2 years, 6 months ago
Selected Answer: E
Tested, deff E
upvoted 1 times
...
mhh
2 years, 6 months ago
Selected Answer: E
E is correct, i tested it in my tenant.
upvoted 4 times
...
bac0n
2 years, 7 months ago
This is correct. Tested it in my tenant.
upvoted 1 times
...
xyz213
2 years, 9 months ago
After you investigate the alert, choose Manage alert to change the status (Active, Investigating, Dismissed, or Resolved). You can also add comments and assign the alert to someone in your organization. Answer is correct !
upvoted 2 times
CertRookie
2 years, 7 months ago
Answer is correct. https://learn.microsoft.com/en-us/microsoft-365/compliance/dlp-configure-view-alerts-policies?view=o365-worldwide#:~:text=After%20you%20investigate%20the%20alert%2C
upvoted 1 times
...
...
billo79152718
2 years, 9 months ago
I will go for B. Dismissed only
upvoted 4 times
Chris7910
2 years, 8 months ago
I would also go with B.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...