Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 151:

  You have been tasked with delegate administrative access to your company's Azure key vault.

  You have to make sure that a specific user is able to add and delete certificates in the key vault. You also have to make sure that access is assigned based on the principle of least privilege.

  Which of the following options should you use to achieve your goal?

  A. A key vault access policy
  B. Azure policy
  C. Azure AD Privileged Identity Management (PIM)
  D. Azure DevOps
  A. A key vault access policy

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault

• Question 152:

  Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.

  After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not be allowed to sync to Azure AD.

  Which of the following actions should you take?

  A. You should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.
  B. You should configure a DNAT rule on the Firewall.
  C. You should configure a network traffic filtering rule on the Firewall.
  D. You should make use of Active Directory Users and Computers to create an attribute-based filtering rule.
  A. You should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.

  ---

  Explanation

  Use the Synchronization Rules Editor and write attribute-based filtering rule.

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-change-the-configuration

• Question 153:

  HOTSPOT

  You have an Azure key vault named sk2311 configured as shown in the following exhibit.

  

  Sk2311 contains the items shown in the following table.

  

  In sk2311, the following events occur in sequence:

  1. Item1 is deleted.

  2. Item2 and Policy1 ate deleted.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 154:

  You have an Azure subscription named Sub1 that has Security defaults disabled. The subscription contains the following users:

  1. Five users that have owner permissions for Sub1.

  2. Ten users that have owner permissions for Azure resources.

  None of the users have multi-factor authentication (MFA) enabled.

  Sub1 has the secure score as shown in the Secure Score exhibit. (Click the Secure Score tab.)

  

  You plan to enable MFA for the following users:

  1. Five users that have owner permission for Sub1.

  2. Five users that have owner permissions for Azure resources.

  By how many points will the secure score increase after you perform the planned changes?

  B. 5
  C. 7.5
  D. 10
  E. 14
  C. 7.5

• Question 155:

  HOTSPOT

  You have an Azure Sentinel workspace that has the following data connectors:

  1. Azure Active Directory Identity Protection

  2. Common Event Format (CEF)

  3. Azure Firewall

  You need to ensure that data is being ingested from each connector.

  From the Logs query window, which table should you query for each connector? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-ad-identity-protection

  https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-firewall

  https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources

• Question 156:

  Your company has an Azure Container Registry.

  You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The role assigned should not require more privileges than necessary.

  Which of the following is the role you should assign?

  A. Reader
  B. Contributor
  C. AcrDelete
  D. AcrPull
  D. AcrPull

  ---

  Explanation

  https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-roles

• Question 157:

  HOTSPOT

  You have an Azure App Service web app named App1 as shown in the following exhibit.

  

  Subnet 2 contains a virtual machine named VM1.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic

  NOTE: Each correct selection is worth one point.

  

  

• Question 158:

  You have an Azure subscription that contains a user named Admin1 and a virtual machine named VM1. VM1 runs Windows Server 2019 and was deployed by using an Azure Resource Manager template. VM1 is the member of a backend pool of a public Azure Basic Load Balancer.

  Admin1 reports that VM1 is listed as Unsupported on the Just in time VM access blade of Azure Security Center.

  You need to ensure that Admin1 can enable just in time (JIT) VM access for VM1.

  What should you do?

  A. Create and configure an additional public IP address for VM 1.
  B. Replace the Basic Load Balancer with an Azure Standard Load Balancer.
  C. Assign an Azure Active Directory Premium Plan 1 license to Admin1.
  D. Create and configure a network security group (NSG).
  D. Create and configure a network security group (NSG).

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time?tabs=jit-config-asc%2Cjit-request-asc

• Question 159:

  DRAG DROP

  You have an Azure subscription that contains 100 virtual machines. Azure Diagnostics is enabled on all the virtual machines.

  You are planning the monitoring of Azure services in the subscription.

  You need to retrieve the following details:

  1. Identify the user who deleted a virtual machine three weeks ago.

  2. Query the security events of a virtual machine that runs Windows Server 2016.

  What should you use in Azure Monitor? To answer, drag the appropriate configuration settings to the correct details. Each configuration setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  Box1: Activity log

  Azure activity logs provide insight into the operations that were performed on resources in your subscription. Activity logs were previously known as "audit logs" or "operational logs," because they report control-plane events for your subscriptions.

  Activity logs help you determine the "what, who, and when" for write operations (that is, PUT, POST, or DELETE).

  Box 2: Logs

  Log Integration collects Azure diagnostics from your Windows virtual machines, Azure activity logs, Azure Security Center alerts, and Azure resource provider logs. This integration provides a unified dashboard for all your assets, whether they're on-premises or in the cloud, so that you can aggregate, correlate, analyze, and alert for security events.

  References:

  https://docs.microsoft.com/en-us/azure/security/azure-log-audit

• Question 160:

  You have a web app named WebApp1.

  You create a web application firewall (WAF) policy named WAF1.

  You need to protect WebApp1 by using WAF1.

  What should you do first?

  A. Deploy an Azure Front Door.
  B. Add an extension to WebApp1.
  C. Deploy Azure Firewall.
  A. Deploy an Azure Front Door.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door