AZ-500 Exam Questions
626 real AZ-500 exam questions with expert-verified answers and explanations. Page 7 of 13.
- Question #314Secure identity and access
You have been tasked with configuring an access review, which you plan to assigned to a new collection of reviews. You also have to make sure that the reviews can be reviewed by re...
- Question #315Secure identity and access
Your company recently created an Azure subscription. You have, subsequently, been tasked with making sure that you are able to secure Azure AD roles by making use of Azure Active D...
- Question #316Secure identity and access
You need to consider the underlined segment to establish whether it is accurate. You have been tasked with creating a different subscription for each of your company's divisions. H...
- Question #317Secure compute, storage, and databases
Your company has an Azure Container Registry. You have been tasked with assigning a user a role that allows for the uploading of images to the Azure Container Registry. The role as...
- Question #318Secure identity and access
Your company has an Azure Container Registry. You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The rol...
Azure Container RegistryRBACLeast PrivilegeIdentity and Access Management - Question #319Secure networking
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #320Secure networking
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #321Secure networking
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #322Secure compute, storage, and databases
You make use of Azure Resource Manager templates to deploy Azure virtual machines. You have been tasked with making sure that Windows features that are not in use, are automaticall...
- Question #323Secure compute, storage, and databases
Your company's Azure subscription includes Windows Server 2016 Azure virtual machines. You are informed that every virtual machine must have a custom antimalware virtual machine ex...
- Question #324Secure identity and access
Your company makes use of Azure Active Directory (Azure AD) in a hybrid configuration. All users are making use of hybrid Azure AD joined Windows 10 computers. You manage an Azure...
- Question #325Secure compute, storage, and databases
You have been tasked with enabling Advanced Threat Protection for an Azure SQL Database server. Advanced Threat Protection must be configured to identify all types of threat detect...
- Question #326Secure identity and access
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #327Secure compute, storage, and databases
Your company has an Azure subscription that includes two virtual machines, named VirMac1 and VirMac2, which both have a status of Stopped (Deallocated). The virtual machines belong...
- Question #328Secure identity and access
You have been tasked with delegate administrative access to your company's Azure key vault. You have to make sure that a specific user can set advanced access policies for the key...
- Question #329Secure identity and access
You have been tasked with delegate administrative access to your company's Azure key vault. You have to make sure that a specific user is able to add and delete certificates in the...
- Question #330Secure compute, storage, and databases
You have an Azure virtual machine that runs Windows Server R2. You plan to deploy and configure an Azure Key vault, and enable Azure Disk Encryption for the virtual machine. Which...
- Question #331Secure compute, storage, and databases
You have an Azure virtual machine that runs Ubuntu 16.04-DAILY-LTS. You plan to deploy and configure an Azure Key vault, and enable Azure Disk Encryption for the virtual machine. W...
- Question #332Secure networking
You need to consider the underlined segment to establish whether it is accurate. You have configured an Azure Kubernetes Service (AKS) cluster in your testing environment. You are...
- Question #333Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You want to gather logs from a large number of Windows Server 2016 computers using Azure Log Analytics. You are configuring an Azure Resource Manager template to deploy the Microso...
Log AnalyticsMicrosoft Monitoring Agent (MMA)ARM TemplatesLog Collection - Question #334Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #335Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #336Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the...
- Question #337Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have a sneaking suspicion that there are users trying to sign in to resources which are inaccessible to them. You decide to create an Azure Log Analytics query to confirm your...
- Question #338Secure identity and access
Your company uses Azure DevOps with branch policies configured. Which of the following is TRUE with regards to branch policies? (Choose all that apply.)
- Question #339Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
After creating a new Azure subscription, you are tasked with making sure that custom alert rules can be created in Azure Security Center. You have created an Azure Storage account....
Microsoft Defender for CloudAzure Log AnalyticsCustom Alert RulesSecurity Monitoring - Question #340Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your company's Azure subscription includes an Azure Log Analytics workspace. Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server...
- Question #341Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Your company's Azure subscription includes a hundred virtual machines that have Azure Diagnostics enabled. You have been tasked with retrieving the identity of the user that remove...
- Question #342Secure compute, storage, and databases
Your company's Azure subscription includes a hundred virtual machines that have Azure Diagnostics enabled. You have been tasked with analyzing the security events of a Windows Serv...
- Question #343Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have been tasked with making sure that you are able to modify the operating system security configurations via Azure Security Center. To achieve your goal, you need to have the...
- Question #344Implement and manage network security - specifically configuring and understanding the behavior of Just-in-Time (JIT) VM access in Microsoft Defender for Cloud (Azure Security Center), including how JIT policies govern inbound access, port-specific rules, and how internal VNet traffic interacts with JIT controls.
Hotspot Question You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table. The subscription contains the...
Just-in-Time VM AccessAzure Security CenterNetwork SecurityVirtual Network Access Control - Question #345Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
You have an Azure subscription that uses Microsoft Defender for Cloud. The subscription contains an instance of Azure Database for PostgreSQL. You need to ensure that an email aler...
- Question #346Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
Hotspot Question Your company uses cloud-based resources from the following platforms: - Azure - Amazon Web Services (AWS) - Google Cloud Platform (GCP) You plan to implement Micro...
Microsoft Defender for CloudMulti-cloud securityContainer securityStorage security - Question #347Secure identity and access
You are in the process of configuring an Azure policy via the Azure portal. Your policy will include an effect that will need a managed identity for it to be assigned. Which of the...
- Question #348Secure compute, storage, and databases
You have been tasked with creating an Azure key vault using PowerShell. You have been informed that objects deleted from the key vault must be kept for a set period of 90 days. Whi...
- Question #349Secure networking
You have an on-premises network. You have an Azure subscription that contains the resources shown in the following table. You plan to deploy a Site-to-Site (S2S) VPN between the on...
- Question #350Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization typ...
Azure StorageAuthorizationShared KeyShared Access SignatureAzure Active Directory authentication - Question #351Secure compute, storage, and databases
You are troubleshooting a security issue for an Azure Storage account. You enable Azure Storage Analytics logs and archive It to a storage account. What should you use to retrieve...
- Question #353Secure compute, storage, and databases
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some q...
- Question #354Secure identity and access
You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant. The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of A...
- Question #355Secure identity and access
You have multiple development teams that will create apps in Azure. You plan to create a standard development environment that will be deployed for each team. You need to recommend...
- Question #356Secure compute, storage, and databases
Hotspot Question You have an Azure subscription that contains the following resources: - An Azure key vault - An Azure SQL database named Database1 - Two Azure App Service web apps...
Azure SQL DatabaseAlways EncryptedAzure Key VaultManaged identityAccess policies - Question #357Secure identity and access
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains two users named User1 and User2 and a registered app named App1. You create an app-specific role...
Azure ADApplication rolesUser assignmentSelf-service application accessEnterprise applications - Question #358
Case Study 3 - Fabrikam, Inc General Overview Fabrikam, Inc. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York. Fabrikam has IT,...
- Question #359Secure compute, storage, and databases
Case Study 3 - Fabrikam, Inc General Overview Fabrikam, Inc. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York. Fabrikam has IT,...
Azure Storage encryptionCustomer-managed keysAzure Key VaultKey rotation - Question #361
You have an Azure subscription that uses Azure Active Directory (Azure AD) Privileged Identity Management (PIM). A PIM user that is assigned the User Access Administrator role repo...
- Question #362
You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role. You purchase a cloud app named App1 and r...
- Question #363Manage Azure identities and governance - specifically implementing and managing role-based access control (RBAC) with custom roles and understanding permission scopes
Hotspot Question You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You create a custom RBAC role in Subscription1 by usin...
RBACCustom RolesAzure Identity and Access ManagementResource Permissions - Question #364
Hotspot Question You have an Azure subscription that contains the resources shown in the following table. The subscription is linked to an Azure Active Directory (Azure AD) tenant...
- Question #365
You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant. The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of A...