Skip to main content

AZ-500 Real Exam Questions

Microsoft Azure Security Technologies

632 questions available · Page 1 of 64

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Hotspot

HOTSPOT

You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

You have a storage account named contoso2024 that contains the following resources:

4. A container named Container1 that contains a file named File1
5. A file share named Share1 that contains a file named File2

You create a private endpoint for contoso2024 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Question 2 Multiple choice

You have an Azure subscription that contains an Azure key vault.

You create a storage account named storage1.

You plan to store data in the following storage1 services:

1. Azure Files
2. Azure Blob storage
3. Azure Table storage
4. Azure Queue storage

For which two services can you configure data encryption by using the keys stored in the key vault? Each correct answer presents a complete solution,

NOTE: Each correct selection is worth one point.

  1. A

    Blob storage

  2. B

    Table storage

  3. C

    Queue storage

  4. D

    Azure Files

Show answer and explanation

Correct answers: A, D

Question 3 Single choice

You have an Azure subscription.

You create a new virtual network named VNet1.

You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic.

What should you do?

  1. A

    Create an Azure App Service Hybrid Connection.

  2. B

    Configure regional virtual network integration.

  3. C

    Create an App Service Environment

  4. D

    Create an Azure application gateway.

Show answer and explanation

Correct answer: C

Explanation

Create an App Service Environment
An App Service Environment can host applications from only one customer, and they do so on one of their virtual networks. Customers have fine-grained control over inbound and outbound application network traffic.

There are no networking dependencies on the customer's virtual network. You can secure all inbound and outbound traffic and route outbound traffic as you want.

Note: Private virtual IP (VIP) addresses, available only in the internal VNet mode, are used to connect from within the network to API Management endpoints - gateways, the developer portal, and the management plane for direct API access. You can use them for setting up DNS records within the network.

Note 2: The App Service Environment feature is a deployment of Azure App Service into a single subnet on a virtual network. When you deploy an app into an App Service Environment, the app is exposed on the inbound address that's assigned to the App Service Environment. If your App Service Environment is deployed with an internal virtual IP (VIP) address, the inbound address for all the apps will be an address in the App Service Environment subnet. If your App Service Environment is deployed with an external VIP address, the inbound address will be an internet-addressable address, and your apps will be in a public Domain Name System.

Incorrect:
Not A: Hybrid Connections is both a service in Azure and a feature in Azure App Service. As a service, it has uses and capabilities beyond those that are used in App Service.

Within App Service, Hybrid Connections can be used to access application resources in any network that can make outbound calls to Azure over port 443.

References:
https://learn.microsoft.com/en-us/azure/app-service/environment/overview
https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-ip-addresses

Question 4 Hotspot

HOTSPOT

You have an Azure subscription that contains a web app named App1 and an Azure key vault named Vault1.

You need to configure App1 to store and access the secrets in Vault1.

How should you configure App1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Explanation

References:
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet

Question 5 Single choice

You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1.

You need to ensure that key1 is rotated every 90 days.

What should you do first?

  1. A

    Create a key rotation policy.

  2. B

    Modify the Access policies settings of Vault1.

  3. C

    Upgrade Vault1 to Key Vault Premium.

  4. D

    Recreate key1 as an EC key.

Show answer and explanation

Correct answer: A

Question 6 Single choice

You have an Azure subscription named Subscription1.

You deploy a Linux virtual machine named VM1 to Subscription1.

You need to monitor the metrics and the logs of VM1.

What should you use?

  1. A

    the AzurePerformanceDiagnostics extension

  2. B

    Azure HDInsight

  3. C

    Linux Diagnostic Extension (LAD) 3.0

  4. D

    Azure Analysis Services

Show answer and explanation

Correct answer: C

Explanation

AzurePerformanceDiagnostics extension can be installed only on Windows machine.

Linux Diagnostic Extension (LAD) 3.0 can be used to capture metric and logs from Linux VMs.

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/diagnostics-linux

Question 7 Single choice

You plan to deploy Azure container instances.

You have a containerized application that validates credit cards. The application is comprised of two containers: an application container and a validation container.

The application container is monitored by the validation container. The validation container performs security checks by making requests to the application container and waiting for responses after every transaction.

You need to ensure that the application container and the validation container are scheduled to be deployed together. The containers must communicate to each other only on ports that are not externally exposed.

What should you include in the deployment?

  1. A

    application security groups

  2. B

    network security groups (NSGs)

  3. C

    management groups

  4. D

    container groups

Show answer and explanation

Correct answer: D

Explanation

Azure Container Instances supports the deployment of multiple containers onto a single host using a container group. A container group is useful when building an application sidecar for logging, monitoring, or any other configuration where a service needs a second attached process.

References:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups

Question 8 Hotspot

HOTSPOT

You have a file named File1.yaml that contains the following contents.

You create an Azure container instance named container1 by using File1.yaml.

You need to identify where you can access the values of Variable1 and Variable2.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question diagram
Show answer and explanation
Correct answer diagram
Explanation

References:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-environment-variables

Question 9 Single choice

You have an Azure AD tenant that contains a user named User1.

You purchase an app named App1.

User1 needs to publish App1 by using Azure AD Application Proxy.

Which role should you assign to User1?

  1. A

    Cloud application administrator

  2. B

    Application administrator

  3. C

    Hybrid identity administrator

  4. D

    Cloud App Security Administrator

Show answer and explanation

Correct answer: B

Explanation

To add an on-premises application to Azure AD, you need:

A Microsoft Azure AD premium subscription
An application administrator account User identities must be synchronized from an on-premises directory or created directly within your Azure AD tenants. Identity synchronization allows Azure AD to pre-authenticate users before granting them access to App Proxy published applications and to have the necessary user identifier information to perform single sign-on (SSO).

References:
https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application

Question 10 Hotspot

HOTSPOT

You have an Azure SQL database named DB1 that contains a table named Tablet.

You need to configure DB1 to meet the following requirements:

Sensitive data in Table1 must be identified automatically.
Only the first character and last character of the sensitive data must be displayed in query results.

Which two features should you configure? To answer, select the features in the answer area.

NOTE: Each correct selection is worth one point.

stem image

Question diagram
Show answer and explanation
Correct answer diagram