AZ-500 Exam Questions
627 real AZ-500 exam questions with expert-verified answers and explanations. Page 13 of 13.
- Question #619Monitor and Maintain Azure Resources / Implement Monitoring and Logging Solutions using Azure Monitor
Hotspot Question You have an Azure subscription. The subscription contains a Log Analytics workspace named WS1 that is accessible via a public endpoint. The subscription contains t...
Azure Monitor AgentData Collection RulesData Collection EndpointsLog Analytics Workspace - Question #620Secure networking
Hotspot Question You have an Azure subscription that contains a third-party ecommerce app named App1. You need to share the REST interface of App1 with external partners. The solut...
Azure API Managementrate limitinginbound policiesTLS 1.2 - Question #621Secure networking
You have an Azure subscription that contains a route table named RT1. RT1 includes a route that has the following configurations: - Name: RouteA - IP address prefix: 192.168.0.0/24...
route tablescustom routesnext hopIP address prefix conflicts - Question #622Secure networking
Hotspot Question You have an Azure subscription that contains a virtual network named VNet1. VNet1 has an IP address space of 10.0.0.0/16. You plan to configure a Bicep file to dep...
Azure FirewallFirewall Management NICsubnet namingsubnet sizing - Question #625Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains the virtual machines shown in the following table. You need to enable file integrity monitoring in Microsoft Defender for Cloud. Which...
file integrity monitoringDefender for ServersDefender for Cloudsupported platforms - Question #627Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
AKSAzure Container Registrymanaged identitycontainer security - Question #628Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
AKSAzure Container Registrymanaged identitycontainer security - Question #629Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
AKSAzure Container Registrymanaged identitycontainer security - Question #630Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains a virtual machine named VM1. You are creating a data collection rule (DCR) named DCR1 that will collect events from VM1. You need to en...
data collection rulesXPath queryWindows event filteringAzure Monitor - Question #631Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that contains an Azure key vault and an Azure SQL database named SQL1. You generate a key named Key1. You need to enable Transparent...
Transparent Data EncryptionAzure Key Vaultcustomer-managed keyskey permissions - Question #632Secure compute, storage, and databases
You have an Azure subscription. You plan to deploy an Azure SQL managed instance named AzSQL1. You need to recommend an encryption solution for AzSQL1. The solution must meet the f...
Always EncryptedSQL encryptionTDEdatabase administrator separation - Question #633Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization typ...
storage account authorizationAzure ADShared KeyShared Access Signature - Question #634Implement and manage storage (Configure Azure Files and Azure Blob Storage) - Microsoft AZ-104 Azure Administrator
Drag and Drop Question Your network contains an on-premises Active Directory domain named contoso.com. The domain contains a user named User1. You have an Azure subscription that i...
Azure FilesIdentity-based AccessActive Directory Domain ServicesAzure Storage Networking - Question #636Design and implement a package management strategy - Configure pipelines to cache dependencies to improve build performance using the Cache task with appropriate key expressions and target paths for NuGet packages.
Drag and Drop Question You use an Azure pipeline to build a .NET app that has NuGet dependencies. You need to ensure that the pipeline caches required NuGet packages. How should yo...
Azure PipelinesNuGet CachingPipeline Cache TaskBuild Optimization - Question #637Design and Implement Pipelines - specifically using Azure Pipelines templates (extends and includes) to enforce organizational standards and security requirements across CI/CD pipelines
Drag and Drop Question You have an Azure subscription. You have the standards shown in the following table. You plan to use Azure Pipelines to build and release web apps. You need...
Azure PipelinesPipeline TemplatesExtends TemplatesDevSecOps - Question #639Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have a management group named MG1 that contains an Azure subscription named Sub1. Sub1 contains the resources shown in the following table. You need to protect...
Microsoft Defender for CloudDefender for ServersDefender for Key VaultAzure resource protection - Question #642Secure networking
Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether th...
virtual machinesnetwork security groupsVM configurationnetwork security - Question #643Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription named Sub1 that contains a resource group named RG1. RG1 contains an Azure logic app named App1. You need to ensure that a user named User1 can add A...
Microsoft SentinelplaybooksLogic App OperatorRBAC least privilege - Question #644Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that contains a Microsoft Sentinel workspace. You need to automate incident synchronization between Microsoft Sentinel and a third-party IT service m...
Microsoft SentinelplaybooksITSM integrationincident automation - Question #645Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that is protected by using Microsoft Defender for Cloud. You plan to upgrade from Foundational Cloud Security Posture Management (CSPM) to Defender C...
Defender CSPMMicrosoft cloud security benchmarkCSPM upgradesecurity policies - Question #646Secure networking
Hotspot Question You have an Azure subscription. You plan to deploy an internet-facing app named App1 across three Azure regions. You need to recommend a secure public access solut...
Azure Front DoorApplication GatewaySSL OffloadingGlobal Load Balancing - Question #647Secure networking
Hotspot Question You have an Azure subscription that contains the virtual networks shown in the following table: The subscription contains the resources shown in the following tabl...
Azure DDoS ProtectionVirtual NetworksPublic IP AddressesRegionality - Question #648Secure networking
You have an Azure subscription that contains the resources shown in the following table. You need to integrate PE1 with NSG1 to manage network security for storage1. What should yo...
private endpointsNSG integrationnetwork policiesstorage networking - Question #649Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question You have an Azure subscription that contains a storage account named storage1. The storage1 account contains an Azure Blob Storage container named blob1 and an Azu...
Microsoft Defender for StorageAzure Blob StorageAzure FilesSecurity Monitoring - Question #650Secure compute, storage, and databases
Hotspot Question You have a Microsoft Entra tenant that is linked to two Azure subscriptions as shown in the following table. In Sub2, you plan to create a virtual machine named VM...
encryption at hostAzure PowerShellprovider feature registrationVM disk encryption - Question #651Secure networking
You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production....
AKS ingress controllerTLS terminationreverse proxyKubernetes networking - Question #652Design and Implement Azure Kubernetes Service (AKS) Networking - Configure network models including Azure CNI, Azure CNI Overlay, and kubenet for AKS clusters and node pools.
Drag and Drop Question You need to deploy an Azure Kubernetes Service (AKS) cluster that will contain an initial node pool named Pool1 for general workloads and an additional node...
Azure Kubernetes ServiceAKS NetworkingAzure CNINode Pools