AZ-500 Exam Questions
627 real AZ-500 exam questions with expert-verified answers and explanations. Page 12 of 13.
- Question #568Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #569Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #570Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #571Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #572Secure identity and access
You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read Virtual networks. Which property of the RBAC...
- Question #573Secure compute, storage, and databases
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether th...
- Question #574Secure compute, storage, and databases
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether th...
- Question #575Secure compute, storage, and databases
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether th...
- Question #576Secure identity and access
Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. In Microsoft Entra Privileged Identity Management, the Role settings for th...
Privileged Identity ManagementPIMRole activationMicrosoft Entra ID - Question #577Secure identity and access
Hotspot Question You have an Azure subscription. You have the following custom role-based access control (RBAC) role definition. For each of the following statements, select Yes if...
Custom RBAC rolesRole definitionAzure SQL DatabaseAzure Database for MariaDB - Question #578Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have a Microsoft 365 E5 subscription. You have an Azure subscription that uses Microsoft Defender for Cloud. You have an on-premises datacenter that contains the servers shown...
- Question #579Manage identity and access / Implement and manage Azure Key Vault (AZ-104 / AZ-500 - Manage Security Operations)
Hotspot Question You have an Azure key vault named sk2311 configured as shown in the following exhibit. Sk2311 contains the items shown in the following table. In sk2311, the follo...
Azure Key VaultSoft-DeleteKey Vault Access PoliciesData Recovery - Question #580Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You onboard Microsoft Sentinel. You connect Microsoft Sentinel to Microsoft Defender for Cloud. You need to automate the mitigation of incidents in Microsoft Sentinel. The solution...
- Question #581Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription. You plan to use Microsoft Defender for Cloud to provide AI security posture management capabilities. You need to recommend a Defender for Cloud plan...
- Question #582Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have a multi-cloud environment that contains the following resources: - An Azure subscription - A Google Cloud Platform (GCP) project - An Amazon Web Services (AWS) account You...
- Question #583Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains a Microsoft Sentinel workspace named Sentinel1. Sentinel1 is NOT onboarded to the Unified security operations platform in Microsoft 365...
- Question #584Secure identity and access
You have an Azure subscription named Sub1 and an Amazon Web Services (AWS) account named AWS1. You create a new user account in Azure named Admin1. You need to ensure that Admin1 c...
- Question #585Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains virtual machines. The subscription uses Microsoft Defender for Cloud with the Foundational Cloud Security Posture Management (CSPM) pla...
- Question #586Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription and an Amazon Web Services (AWS) account named AWS1. You need to add AWS1 to Microsoft Defender for Cloud. Which two deployment methods can you use t...
- Question #587Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have an on-premises server named Server1. You have an Azure subscription that contains a Microsoft Sentinel workspace named Sentinel1. You install the Windows...
Microsoft Sentinelon-premises monitoringAzure Connected Machine agentdata collection rules - Question #588Monitor and Maintain Azure Resources / Configure monitoring for identity and access - aligns with AZ-104 or SC-300 objectives covering Microsoft Entra diagnostic settings, destination limits, and retention configuration constraints.
Hotspot Question You have an Azure subscription that contains three storage account named storage1, storage2, and storage3, three Log Analytics workspaces named Analytics1, Analyti...
Microsoft Entra IDDiagnostic SettingsAzure MonitorLog Analytics - Question #589Manage security operations / Configure monitoring and logging in Azure, including Microsoft Entra diagnostic settings limitations and Log Analytics workspace data retention configuration
Hotspot Question You have an Azure subscription that uses Microsoft Defender for Cloud. Defender for Cloud has the security alerts shown in the following exhibit. Use the drop-down...
Microsoft Entra Diagnostic SettingsLog Analytics Workspace RetentionAzure MonitorMicrosoft Defender for Cloud - Question #590Secure compute, storage, and databases
You have an Azure subscription that contains an Azure App Services web app named WebApp1 and an Azure key vault named Vault1. Vault1 has the certificates shown in the following tab...
- Question #591Secure identity and access
You have an on-premises datacenter that contains multiple servers. You have an Azure subscription. You plan to onboard the on-premises servers to Microsoft Defender for Cloud by us...
Microsoft Entra identityScript authenticationAutomation identity - Question #592Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription. You need to ensure that you receive notifications regarding suspicious Azure DNS activity. Which Microsoft Defender plan for Cloud Workload Protecti...
- Question #593Secure compute, storage, and databases
You have an Azure key vault named Vault1 that stores the resources shown in the following table. Which resources support the creation of a rotation policy?
- Question #594Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have an Azure subscription named Sub1 that contains the resources shown in the following table. You need to enable Microsoft Defender for Cloud for storage acc...
Microsoft Defender for Cloudscopesubscription levelstorage securityVM security - Question #595Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have an Azure subscription. You configure Microsoft Sentinel to use multiple data sources. You need to create analytic rules that meet the following requiremen...
Microsoft Sentinelanalytic rulesthreat intelligencemachine learning analytics - Question #596Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that uses Microsoft Defender for Cloud. You have an Amazon Web Services (AWS) account. You need to ensure that when you deploy a new AWS Elastic Comp...
- Question #597Secure compute, storage, and databases
You have an X.509 certificate named cert1 that is managed by an external partner named Partner1. You build a web app named Web1 that will be deployed by using Azure Pipelines. Web1...
- Question #599Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that contains an Azure key vault named Vault1. On January 1, 2024, Vault1 stores the following secrets. All dates are in the mm/dd/y...
Azure Key Vaultsecret managementsecret lifecycleaccess policies - Question #600Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains an Azure App Service app named App1, an Azure container instance named AC1, and a storage account named storage1. AC1 hosts an app name...
- Question #601Secure compute, storage, and databases
You have an Azure subscription that contains a key vault and an Azure SQL server. You need to deploy an Azure SQL database that uses Transparent Data Encryption (TDE) and a custome...
- Question #602Secure compute, storage, and databases
You have an Azure subscription that contains an Azure SQL database named SQL1. SQL1 contains the columns shown in the following table. You configure SQL1 to use Always Encrypted. Y...
- Question #603Secure networking
Hotspot Question You have an Azure subscription that contains the application gateways shown in the following table. You need to configure settings to implement URL rewrite and pre...
Azure Application GatewayURL rewriteWeb Application FirewallSQL injection - Question #604Secure compute, storage, and databases
Hotspot Question Your on-premises network contains an Active Directory Domain Services (AD DS) domain and the devices shown in the following table. You have a hybrid Microsoft Entr...
Azure FilesSMB accesshybrid identityAzure AD DSrole-based access control - Question #605Secure networking
Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You need to create private endpoints for the target sub-resources o...
Azure Private EndpointAzure Storagenetwork securityprivate link - Question #606Secure networking
You have an Azure subscription that contains a virtual network named VNet1. The subscription contains an Azure App Service web app named App1. You have an Azure Front Door profile...
- Question #607Secure networking
Hotspot Question Your on-premises network is connected to an Azure subscription by using ExpressRoute. ExpressRoute has private peering configured. You plan to deploy an Azure web...
Azure App ServiceExpressRouteVirtual Network integrationprivate connectivitypricing tiers - Question #608Secure identity and access
Hotspot Question You have an on-premises network that contains the apps shown in the following table. You have a Microsoft Entra tenant. You plan to implement Microsoft Entra appli...
Microsoft Entra Application Proxyon-premises application accessprotocolssingle sign-on - Question #609Secure networking
You have an Azure subscription that contains an Azure App Services web app named WebApp1. WebApp1 is accessed by users in multiple Azure regions. You need to secure access to WebAp...
- Question #610Configure and manage virtual networks - specifically understanding the layered enforcement model of Azure Virtual Network Manager Security Admin Rules versus NSG rules, including rule priority, scope hierarchy (Management Group vs Subscription), and the interaction between multiple AVNM instances targeting the same resource.
Hotspot Question You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table. You create an Azure...
Azure Virtual Network ManagerSecurity Admin RulesNetwork Security GroupsTraffic Evaluation Order - Question #611Design and Implement Azure Networking - Configure and manage Azure Virtual Network Manager, including management scopes, network groups, and connectivity configurations (AZ-700 / AZ-104)
Hotspot Question You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown in the following table. You have an Azure Virtual Network Manager inst...
Azure Virtual Network ManagerNetwork GroupsSubscription ScopeConnectivity Management - Question #612Secure networking
You have an Azure subscription that contains an Azure API Management instance named ContosoAPI1. You need to configure SSL 3.0 support for ContosoAPI1. What should you do first in...
- Question #613Secure networking
You have an Azure subscription that contains a route table named RT1. RT1 includes a route that has the following configurations: - Name: Routed - IP address prefix: 192.168.0.0/24...
- Question #614Secure networking
You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown in the following table. You have an Azure Virtual Network Manager instance named AVNM1...
- Question #615Configure and manage virtual networking - specifically implementing and managing Azure route tables, custom routes, and subnet associations in Azure Network infrastructure (AZ-104 / AZ-700)
Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table. The virtual networks contain the subnets shown in the following tab...
Azure Route TablesUser Defined Routes (UDR)Virtual Network RoutingNetwork Virtual Appliance - Question #616Secure networking
Hotspot Question You have an Azure subscription that contains the Azure Firewall policies shown in the following table. The subscription contains the firewalls shown in the followi...
Azure FirewallAzure Firewall PolicyURL filteringIDPStraffic inspection - Question #617Secure networking
You have five datacenters across North America and Europe. You have an Azure subscription. You need to recommend a solution to provide connectivity between the datacenters and Azur...
- Question #618
Hotspot Question You plan to develop two apps that will be hosted in Azure. The apps must meet the monitoring requirements shown in the following table. What should you include in...