Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 121:

  Your company's Azure subscription includes an Azure Log Analytics workspace.

  Your company has a hundred on-premises servers that run either Windows Server 2012 R2 or Windows Server 2016, and is linked to the Azure Log Analytics workspace. The Azure Log Analytics workspace is set up to gather performance counters associated with security from these linked servers.

  You have been tasked with configuring alerts according to the information gathered by the Azure Log Analytics workspace.

  You have to make sure that alert rules allow for dimensions, and that alert creation time should be kept to a minimum. Furthermore, a single alert notification must be created when the alert is created and when the alert is sorted out.

  You need to make use of the necessary signal type when creating the alert rules.

  Which of the following is the option you should use?

  A. You should make use of the Activity log signal type.
  B. You should make use of the Application Log signal type.
  C. You should make use of the Metric signal type.
  D. You should make use of the Audit Log signal type.
  C. You should make use of the Metric signal type.

  ---

  Explanation

  Metric alerts in Azure Monitor provide a way to get notified when one of your metrics cross a threshold. Metric alerts work on a range of multi-dimensional platform metrics, custom metrics, Application Insights standard and custom metrics.

  Note: Signals are emitted by the target resource and can be of several types. Metric, Activity log, Application Insights, and Log.

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-metric

• Question 122:

  HOTSPOT

  You are implementing an Azure Application Gateway web application firewall (WAF) named WAF1.

  You have the following Bicep code snippet.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 123:

  You need to delegate a user to implement the planned change for Defender for Cloud.

  The solution must follow the principle of least privilege.

  Which user should you choose?

  A. Admin1
  B. Admin2
  C. Admin3
  D. Admin4
  B. Admin2

• Question 124:

  SIMULATION

  You need to configure a virtual network named VNET2 to meet the following requirements:

  1. Administrators must be prevented from deleting VNET2 accidentally.

  2. Administrators must be able to add subnets to VNET2 regularly.

  To complete this task, sign in to the Azure portal and modify the Azure resources.

  A. See the explanation below.
  A. See the explanation below.

  ---

  Explanation

  Locking prevents other users in your organization from accidentally deleting or modifying critical resources, such as Azure subscription, resource group, or resource.

  Note: In Azure, the term resource refers to an entity managed by Azure. For example, virtual machines, virtual networks, and storage accounts are all referred to as Azure resources.

  1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET2. Alternatively, browse to Virtual Networks in the left navigation pane.

  2. In the Settings blade for virtual network VNET2, select Locks.

  

  3. To add a lock, select Add.

  

  4. For Lock type select Delete lock, and click OK

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

• Question 125:

  You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.

  You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.

  What should you create?

  A. an Azure AD user
  B. a secret in Azure Key Vault
  C. an Azure AD group
  D. a role assignment
  D. a role assignment

• Question 126:

  HOTSPOT

  You have a Microsoft Entra tenant that contains the users shown in the following table.

  

  You configure the Temporary Access Pass settings as shown in the following exhibit.

  

  You add the Temporary Access Pass authentication method to Admin2.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 127:

  You have an Azure subscription that uses Microsoft Defender for Cloud. You have accounts for the following cloud services:

  1. Alibaba Cloud

  2. Amazon Web Services (AWS)

  3. Google Cloud Platform (GCP)

  What can you add to Defender for Cloud?

  A. AWS only
  B. Alibaba Cloud and AWS only
  C. Alibaba Good and GCP only
  D. AWS and GCP only
  E. Alibaba Cloud, AWS. and GCP
  D. AWS and GCP only

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/multicloud

• Question 128:

  HOTSPOT

  You have an Azure subscription that contains the application gateways shown in the following table.

  

  You need to configure settings to implement URL rewrite and prevent SQL injection attacks.

  Which application gateways support each requirement? To answer, select the appropriate options in the answer area

  NOTE: Each correct selection is worth one point.

  

  

• Question 129:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com.

  You need to configure diagnostic settings for contoso.com. The solution must meet the following requirements:

  1. Retain logs for two years.

  2. Query logs by using the Kusto query language.

  3. Minimize administrative effort.

  Where should you store the logs?

  A. an Azure event hub
  B. an Azure Log Analytics workspace
  C. an Azure Storage account
  B. an Azure Log Analytics workspace

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

• Question 130:

  You have an Azure subscription that contains an Azure App Services web app named WebApp1. WebApp1 is accessed by users in multiple Azure regions.

  You need to secure access to WebApp1.

  The solution must meet the following requirements:

  1. Protect against common web vulnerabilities.

  2. Optimize the routing of traffic from different regions.

  What should you use?

  A. Azure Application Gateway
  B. Azure Content Delivery Network (CDN)
  C. Azure Firewall
  D. Azure Front Door Premium
  D. Azure Front Door Premium