Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 211:

  You have an Azure subscription that contains an Azure SQL database named sql1.

  You plan to audit sql1.

  You need to configure the audit log destination. The solution must meet the following requirements:

  1. Support querying events by using the Kusto query language.

  2. Minimize administrative effort.

  What should you configure?

  A. an event hub
  B. a storage account
  C. a Log Analytics workspace
  C. a Log Analytics workspace

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/tutorial-log-analytics-wizard

• Question 212:

  HOTSPOT

  You have an Azure subscription.

  You have the following custom role-based access control (RBAC) role definition.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, Select No.

  NOTE; Each correct selection is worth one point.

  

  

• Question 213:

  You have an Azure Sentinel deployment.

  You need to create a scheduled query rule named Rule1.

  What should you use to define the query rule logic for Rule1?

  A. a Transact-SQL statement
  B. a JSON definition
  C. GraphQL
  D. a Kusto query
  D. a Kusto query

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom

• Question 214:

  HOTSPOT

  You have an Azure subscription that contains the following Azure firewall:

  1. Name: Fw1

  2. Azure region: UK West

  3. Private IP address: 10.1.3.4

  4. Public IP address: 23.236.62.147

  The subscription contains the virtual networks shown in the following table.

  

  The subscription contains the subnets shown in the following table.

  

  The subscription contains the routes shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 215:

  You have an Azure subscription.

  You need to ensure that you receive notifications regarding suspicious Azure DNS activity.

  Which Microsoft Defender plan for Cloud Workload Protection (CWP) should you enable?

  A. Storage
  B. Servers
  C. App Service
  D. APIs
  E. Resource Manager
  B. Servers

• Question 216:

  You have a web app hosted on an on-premises server that is accessed by using a URL of https://www.contoso.com.

  You plan to migrate the web app to Azure.

  You will continue to use https://www.contoso.com.

  You need to enable HTTPS for the Azure web app.

  What should you do first?

  A. Export the public key from the on-premises server and save the key as a P7b file.
  B. Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using TripleDES.
  C. Export the public key from the on-premises server and save the key as a CER file.
  D. Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using AES256.
  B. Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using TripleDES.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#private-certificate-requirements

• Question 217:

  DRAG DROP

  You have an Azure subscription named Sub1 that contains the storage accounts shown in the following table

  

  The storage3 storage account is encrypted by using customer-managed keys.

  YOU need to enable Microsoft Defender for storage to meet the following requirements:

  1. The storage1 and storage2 account must be include in the defender for storage requirement.

  2. The storage3 account must be exclude from the Defender for Storage protections.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and them in the correct order.

  Select and Place:

  

  

• Question 218:

  You have an Azure subscription that contains an Azure SQL database named SQL1 and an Azure key vault named KeyVault1.

  KeyVault1 stores the keys shown in the following table.

  

  You reed to configure Transparent Data Encryption (TDE).

  TDE will use a customer-managed key for SQL1?

  A. Key1. Key2 Key3. and Key4
  B. Key1 only
  C. Key2 only
  D. Key1 and key2 only
  E. Key2 and Key3 only
  D. Key1 and key2 only

  ---

  Explanation

  TDE protector can only be an asymmetric, RSA, or RSA HSM key. The supported key lengths are 2048 bytes and 3072 bytes.

  https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview?view=azuresql#requirements-for-configuring-tde-protector

• Question 219:

  HOTSPOT

  You have an Azure subscription that uses Microsoft Defender for Cloud.

  You plan to use the Secure Score Over Time workbook.

  You need to configure the Continuous export settings for the Defender for Cloud data.

  Which two settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 220:

  You have an Azure subscription that contains two virtual machines named VM1 and VM2 that run Windows Server 2019.

  You are implementing Update Management in Azure Automation.

  You plan to create a new update deployment named Update1.

  You need to ensure that Update! meets the following requirements:

  1. Automatically applies updates to VM1 and VM2.

  2. Automatically adds any new Windows Server 2019 virtual machines to Update1.

  What should you include in Update1?

  A. a security group that has a Membership type of Dynamic Device
  B. a security group that has a Membership type of Assigned
  C. a Kusto query language query
  D. a dynamic group query
  D. a dynamic group query