AZ-500 Exam Questions
627 real AZ-500 exam questions with expert-verified answers and explanations. Page 11 of 13.
- Question #516Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that uses Microsoft Defender for Cloud. You need to add a custom security recommendation to Defender for Cloud. The recommendation must be assigned t...
- Question #517Secure networking
You have an Azure subscription that contains the resources shown in the following table. You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region. Which res...
- Question #518Configure and manage virtual networking - specifically network security and connectivity optimization in Microsoft Azure (AZ-104: Implement and manage virtual networking)
Drag and Drop Question You have an Azure subscription that contains the resources shown in the following table. You need to configure network connectivity to meet the following req...
Azure Virtual NetworksService EndpointsNetwork Security GroupsAzure Storage Networking - Question #519Configure and manage virtual networking - specifically implementing private access to Azure PaaS services using Private Endpoints and understanding sub-resource targeting and network scope limitations (AZ-104 / AZ-700 Networking domain)
Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the followi...
Azure Private EndpointsAzure Storage NetworkingVirtual Network ConnectivityAzure Blob vs File Storage - Question #520Secure compute, storage, and databases
You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1. You have an Azure container registry that stores container images that were deplo...
- Question #521Secure compute, storage, and databases
You have an Azure subscription that contains an Azure Data Lake Storage account named sa1. You plan to deploy an app named App1 that will access sa1 and perform operations, includi...
- Question #522Secure identity and access
You have a Microsoft Entra tenant named contoso.com. You plan to collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. Fabrikam.com uses the...
Microsoft Entra B2BCross-tenant accessIdentity providersExternal identities - Question #523Secure identity and access
You have a Microsoft Entra tenant named contoso.com. You have a partner company that has a Microsoft Entra tenant named fabrikam.com. You need to ensure that when a user in fabrika...
- Question #524Implement and manage identity in Microsoft Entra ID - specifically configuring and managing multi-factor authentication (MFA) policies and understanding enforcement timelines (Microsoft SC-300 / AZ-104 / MS-102)
Drag and Drop Question You have a Microsoft Entra tenant. On January 1, you configure a multi-factor authentication (MFA) registration policy that has the following settings: - Ass...
Microsoft Entra IDMFA Registration PolicyIdentity ProtectionConditional Access - Question #525Secure compute, storage, and databases
You have a Microsoft Entra tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1. You discover that AKS1 cannot be accessed by using accounts from Contoso.com...
- Question #526Secure networking
SIMULATION You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01- Subnet0-NSG network security group (NSG) are stored in the logs1234578 Azure...
- Question #527Secure compute, storage, and databases
Hotspot Question You have an Azure key vault. You need to delegate administrative access to the key vault to meet the following requirements: - Provide a user named User1 with the...
Azure Key VaultAzure RBACAccess policiesCertificatesLeast privilege - Question #528Manage Azure Identities and Governance – Implement and manage Azure Policy to enforce organizational standards and assess compliance across Azure resources, including understanding policy scope inheritance (subscription and resource group levels) and allowed resource type restrictions.
Hotspot Question You have an Azure subscription named Sub1 that contains two resource groups named RGnet and NET. You have the Azure Policy definition shown in the following exhibi...
Azure PolicyResource GovernancePolicy Assignment ScopeResource Types - Question #529Secure compute, storage, and databases
You have an Azure subscription that contains the Azure App Service web apps shown in the following table. You upload a private key certificate named Cert1.pfx to App1. Which apps c...
- Question #530Secure networking
Hotspot Question You have an Azure subscription that contains an Azure firewall named AzFW1. AzFW1 has a firewall policy named FWPolicy1. You need to add rule collections to FWPoli...
Azure FirewallNetwork rulesApplication rulesFQDN filteringTraffic filtering - Question #531Configure and manage virtual networking - specifically Azure Bastion deployment, VNet peering requirements, and supported connection methods for secure VM access without public IP addresses.
Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the followi...
Azure BastionVirtual Network PeeringRemote AccessNetwork Connectivity - Question #532Secure identity and access
Hotspot Question You have a Microsoft Entra tenant that contains the groups shown in the following table. From the Azure portal, you configure a group expiration policy that has a...
Microsoft Entra IDGroup managementGroup expiration policySoft delete - Question #533Secure identity and access
You have a Microsoft Entra tenant that uses Microsoft Entra Permissions Management and contains the accounts shown in the following table: Which accounts will be listed as assigned...
- Question #534Secure identity and access
Hotspot Question You have a Microsoft Entra tenant that contains the user shown in the following table. You configure a Conditional Access policy that has the following settings: -...
Microsoft Entra IDConditional AccessMulti-factor authentication (MFA)Passwordless authentication - Question #535Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table. You create the virtual machines shown in the fo...
- Question #536Secure compute, storage, and databases
Hotspot Question You have an Azure subscription. You plan to deploy the virtual machines shown in the following table. You need to identify the virtual machines and operating syste...
Confidential Virtual MachinesTrusted Execution Environments (TEEs)Virtual machine securityHardware security - Question #537Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains the virtual machines shown in the following table. You are configuring Microsoft Defender for Servers. You plan to enable adaptive appl...
Microsoft Defender for CloudAdaptive Application ControlsVirtual Machine SecurityOS compatibility - Question #538
You have an Azure subscription. The subscription contains a virtual network named VNet1 that contains the subnets shown in the following table. The subscription contains the functi...
- Question #539
You have a Microsoft Entra tenant named contoso.com. You collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. You need to create an allow l...
- Question #541Configure and manage virtual networking - specifically securing access to Azure PaaS services using VNet service endpoints and service endpoint policies (AZ-104 / AZ-700 Networking domain)
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. You plan to use service endpoints and service endpoint policies. Which res...
Service EndpointsService Endpoint PoliciesAzure NetworkingVNet Security - Question #542
Hotspot Question You have an Azure App Service web app named App1 as shown in the following exhibit. Subnet 2 contains a virtual machine named VM1. Use the drop-down menus to selec...
- Question #543
Hotspot Question You have an Azure subscription that contains a virtual machine named VM1. You have a network security group (NSG) named NSG1 that is associated to the network inte...
- Question #544
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #545
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #546
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #547
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #548
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #549
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #551Secure compute, storage, and databases
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
Azure Storage EncryptionCustomer-Managed Keys (CMK)Encryption ScopesStorage Account Security - Question #552
Case Study 4 - Fabrikam, Inc Overview Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore. Existing...
- Question #553
Hotspot Question You have a Microsoft Entra tenant that contains a user named User and a group named Group1. Group1 has Membership type set to Assigned. You need to perform the fol...
- Question #554
You have a Microsoft Entra tenant that contains the resources shown in the following table. You need to create a user flow named B2X_1_Flow1 for external identities Which resource...
- Question #555
You have a Microsoft Entra tenant that contains a user named User1. You need to ensure that User1 can configure the Guest user access restrictions settings for contoso.com. The sol...
- Question #556
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant uses Microsoft Entra ID Protection. You have 2,000 users that are each assign...
- Question #557Secure identity and access
You have a Microsoft Entra tenant that contains a user named User1. You have an app registration named App1. For App1, you create an app role named Role1. You need to assign User1...
Microsoft Entra IDApp registrationsEnterprise applicationsApp rolesUser assignment - Question #558Secure networking
You have an Azure subscription that contains the resources shown in the following table. App1 uses Function1, SQL1, and storage1. You need to secure the traffic between App1, Funct...
- Question #559Secure compute, storage, and databases
You have an Azure subscription that contains the Azure App Service apps shown in the following table. You purchase custom SSL certificates from a trusted third-party authority. To...
- Question #560Secure compute, storage, and databases
You have an Azure subscription that contains an Azure SQL server named sqlsrv1 and an Azure SQL database named DB1. Sqlsrv1 is configured for Microsoft Entra authentication only. Y...
- Question #561Secure compute, storage, and databases
You have an Azure subscription that contains an Azure SQL database named SQL1. You need to configure SQL1 to use Always Encrypted. What should you use?
- Question #562Configure and manage Azure App Service - specifically securing web apps with SSL/TLS certificates and understanding App Service plan tier requirements
Drag and Drop Question You have an Azure subscription that contains the following Azure App Services app: - Name: WebApp1 - App Service plan: Free You need to configure WebApp1 to...
App Service Managed CertificateCustom DomainsApp Service PlansAzure App Service - Question #563Secure identity and access
You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.com. You register an application named App1 in contoso.com. You need to add a platform confi...
- Question #564Secure identity and access
Your network contains an on-premises Active Directory Domain Services (AD DS) domain. You have a Microsoft Entra tenant that syncs with the domain. You create an app registration n...
- Question #565Secure identity and access
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.com. In contoso.com, you register an app named App1. You need to perform th...
App registrationMicrosoft Entra IDPlatform configurationOptional claims - Question #566Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have an Azure subscription named Sub1 and use Microsoft Defender for Cloud. Sub1 contains a user named User1 and a resource group named RG1. RG1 contains a Log...
RBACLogic AppsSecurity automationMicrosoft Defender for Cloud - Question #567Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the groups shown in the following table. The tenant contains the use...
Azure SQL DatabaseMicrosoft Entra IDDatabase permissionsSchema alteration