Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 161:

  SIMULATION

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: User1 [email protected]

  Azure Password: GpOAe4@lDg

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 28681041

  You need to email an alert to a user named [email protected] if the average CPU usage of a virtual machine named VM1 is greater than 70 percent for a period of 15 minutes.

  To complete this task, sign in to the Azure portal.

  A. Please check the answer in the explantion
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. Please check the answer in the explantion

  ---

  Explanation

  In the Azure portal, search for and select the virtual machine named VM1.

  In the left pane, select Alerts.

  Select New alert rule.

  In the New alert rule pane, enter the following information: In the Actions pane, select Add action group.

  In the Add action group pane, enter the following information:

  Select OK.

• Question 162:

  You have an Azure subscription that contains an Azure SQL server named sqlsrv1 and an Azure SQL database named DB1. Sqlsrv1 is configured for Microsoft Entra authentication only.

  You have the Microsoft Entra identities shown in the following table.

  

  Which users can create scoped credentials for DB1?

  A. User1 only
  B. User1 and User2 only
  C. User1, User2, and User3
  C. User1, User2, and User3

• Question 163:

  You have an Azure subscription.

  You plan to deploy Microsoft Defender External Attack Surface Management (Defender EASM) to identify and monitor externally facing assets.

  You create a new Defender EASM instance named EASM1.

  What should you do next?

  A. Create a custom attack surface.
  B. Add a Log Analytics workspace.
  C. Add a discovery group.
  D. Import seeds from an organization.
  D. Import seeds from an organization.

• Question 164:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant named contoso1812.onmicrosoft.com that contains the users shown in the following table.

  

  You create an Azure Information Protection label named Label1. The Protection settings for Label1 are configured as shown in the exhibit. (Click the Exhibit tab.)

  

  Label1 is applied to a file named File1.

  For each of the following statements, select Yes if the statement is true, Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 165:

  You have an Azure subscription that uses Microsoft Defender for Cloud.

  You have an Amazon Web Services (AWS) account.

  You need to add the AWS account to Defender for Cloud.

  What should you do first?

  A. From the Azure portal, add the AWS enterprise application.
  B. From the AWS account, enable a security hub.
  C. From Defender for Cloud, configure the Security solutions settings.
  D. From Defender for Cloud, configure the Environment settings.
  D. From Defender for Cloud, configure the Environment settings.

• Question 166:

  HOTSPOT

  You have an Azure subscription that contains a user named Admin1 and a resource group named RG1.

  In Azure Monitor, you create the alert rules shown in the following table.

  

  Admin1 performs the following actions on RG1:

  1. Adds a virtual network named VNET1

  2. Adds a Delete lock named Lock1

  Which rules will trigger an alert as a result of the actions of Admin1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 167:

  You have been tasked with making sure that you are able to modify the operating system security configurations via Azure Security Center.

  To achieve your goal, you need to have the correct pricing tier for Azure Security Center in place.

  Which of the following is the pricing tier required?

  A. Advanced
  B. Premium
  C. Standard
  D. Free
  C. Standard

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/security-center/security-center-pricing

• Question 168:

  HOTSPOT

  You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  

  

  ---

  User1 - has ownership at subscription level therefore has access to the control plane of the key vault but not to the data plane. therefore User1 can manage RBAC permissions but cannot create/access keys or secrets (unless bthey can grant themself 'Key Administrator' access and do this, which again does not show up in this RBACs listed so we cannot assume that)

  - Therefore User1 has not access to the keys or secrets in this vault

  User2 - Is a Key VAult Crypto officer for the KeyVault1. so according to this:

  https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli#azure-built-in-roles-for-key-vault-data-plane-operations

  , they can manage keys (but not access secrets or manage permissions)

  User3 - Is a Secrets officer for the KeyVault1 scope. they can access secrets data in this key vault

  User4 - Here's a tricky one. while they are indeed given 'Key Vault Administrator', notice the scope is set to "../KeyVault1/Keys/Key1". So they should only be able to work with that key.

• Question 169:

  You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1.

  You need to ensure that key1 is rotated every 90 days.

  What should you do first?

  A. Create a key rotation policy.
  B. Modify the Access policies settings of Vault1.
  C. Upgrade Vault1 to Key Vault Premium.
  D. Recreate key1 as an EC key.
  A. Create a key rotation policy.

• Question 170:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

  

  You create a custom RBAC role in Subscription1 by using the following JSON file.

  

  You assign Role1 to User1 on RG1.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftcompute