Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 2 question 34 discussion

Actual exam question from Microsoft's MS-500

Question #: 34
Topic #: 2

You have a Microsoft 365 subscription that uses a default domain name of fabrikam.com.
You create a safe links policy, as shown in the following exhibit.

Which URL can a user safely access from Microsoft Word Online?

A. fabrikam.phishing.fabrikam.com
B. malware.fabrikam.com
C. fabrikam.contoso.com
D. www.malware.fabrikam.com

Show Suggested Answer

Suggested Answer: D 🗳️
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-global-settings-for-safe-links

by Bob27745 at Sept. 21, 2022, 8:12 p.m.

Comments

Submit Cancel

Bob27745

Highly Voted 2 years, 9 months ago

Valid on exam 9/21/2022

upvoted 11 times

...

geecr07

Most Recent 2 years, 1 month ago

Selected Answer: D

So why is the correct answer guys? Is a paint this exam :(

upvoted 1 times

...

thehighlandcow

2 years, 3 months ago

Still unsure on the answer, but based on my testing, the only entry allowed in the block URL list would be *.contoso.com. All other entries are invalid, test yourself. Also it no longer exists in the safe links policy, it's under Tenant allow/block list | URLs

upvoted 1 times

...

tecnicosoffshoretech

2 years, 4 months ago

Selected Answer: A

Missing or invalid domain values: contoso *.contoso.* *.com *.pdf The A entry is incorrect configured Entry: *.contoso.com Block match: www.contoso.com xyz.abc.contoso.com The D entry is blocked since everything on the left of * is blocked. Therefore the correct answer should be A

upvoted 2 times

tecnicosoffshoretech

2 years, 4 months ago

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/tenant-allow-block-list-urls-configure?view=o365-worldwide

upvoted 1 times

...

VJO

2 years, 7 months ago

Examples of invalid entries The following entries are invalid: Missing or invalid domain values: contoso *.contoso.* *.com *.pdf https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/allow-block-urls?view=o365-worldwide This article implies that *.phishing.*.* is an invalid entry since it is missing the required domain value of .com

upvoted 2 times

Ginaglia

2 years, 7 months ago

So the correct answer would be A? B and D look the same to me

upvoted 1 times

...

Chris7910

2 years, 9 months ago

Why is d correct? Is there any explanation?

upvoted 1 times

pete26

2 years, 9 months ago

Based on the way Blocked URLs are presented in the screenshot: malware.fabrikam.com will be blocked, but not www.malware.fabrikam.com. There is no ‘*’ in front of ‘malware’

upvoted 5 times

...