exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 7 question 3 discussion

Actual exam question from Microsoft's MS-500
Question #: 3
Topic #: 7
[All MS-500 Questions]

Which user passwords will User2 be prevented from resetting?

  • A. User6 and User7
  • B. User4 and User6
  • C. User4 only
  • D. User7 and User8
  • E. User8 only
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
InstantSoup
2 years ago
Test results on Dev Tenant: (Answers B & D combined) User6 Customer Lock box access approver‎: "‎You don't have appropriate permissions to reset this user's password because they have admin roles. Only global admins can do that." User7 "ReportsReader‎: ‎"You cannot reset the password for this user because they have admin roles, such as global, billing, Exchange, SharePoint, Compliance, or Skype for Business admin. Only global admins can do that." User8 UserAdmin‎: "‎You cannot reset the password for this user because they have admin roles, such as global, billing, Exchange, SharePoint, Compliance, or Skype for Business admin. Only global admins can do that." User4 Guest: The guest's password is managed in it's originating tenant. And FYI: ‎PasswordAdmin2‎ if you had second password administrator: "‎You don't have appropriate permissions to reset this user's password because they have admin roles. Only global admins can do that."
upvoted 2 times
...
Dzuljzebari
2 years, 4 months ago
Selected Answer: B
Did anyone spot a guest user 4? User 6 is also a privileged account. You can test yourself. Password admin can't reset password for Customer Lockbox Access Approver. For me the best answer is B, User 4 and User 6 as it has a higher matching score. The guest user password can't be changed by any of the roles since it is not authenticating against your tenant. Please correct me if I got it wrong.
upvoted 3 times
...
muc5
2 years, 7 months ago
Selected Answer: D
He can not reset Reports reader and User Admin according to this -> https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords
upvoted 4 times
AWpkl
2 years, 4 months ago
lockbox admin isn't on this chart, which is concerning, but there is no answer including all three and these two are certain so D is correct
upvoted 1 times
...
Unicorn02
2 years, 7 months ago
Agree here according to the table in the link
upvoted 1 times
...
...
RVR
2 years, 9 months ago
It should be 6 &8 , but that's not a given choice, so go with 8 I guess. Customer Lockbox access approver is an admin role
upvoted 1 times
sfeer
2 years, 6 months ago
Q: Can a regular user admins reset the password for members of Customer Lockbox access approver role? A: Only global admins can reset the passwords of people assigned to this role as it’s considered a privileged role. https://techcommunity.microsoft.com/t5/security-compliance-and-identity/customer-lockbox-approver-role-now-available/ba-p/223393 Correct answer is 8
upvoted 1 times
...
...
Dan91
2 years, 9 months ago
Customer LockBox Access Approver is classed as an admin account. Therefore, I think the answer should be 6, 7, 8. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#who-can-reset-passwords:~:text=can%20be%20reset-,Password%20Admin,-Helpdesk%20Admin
upvoted 3 times
rmac
2 years, 7 months ago
Agree. Tested in my lab.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...