Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 321:

  You have a Microsoft 365 E5 subscription.

  You have an Azure subscription that uses Microsoft Defender for Cloud.

  You have an on-premises datacenter that contains the servers shown in the following table.

  You enable direct onboarding to Microsoft Defender for Cloud.

  Which servers will be onboarded to Defender for Cloud?

  A. Server1 only
  B. Server2 only
  C. Server3 only
  D. Server1 and Server3
  E. Servei2 and Servet3
  F. Server1, Server2, and Server3
  C. Server3 only

• Question 322:

  HOTSPOT

  You need to ensure that the Azure AD application registration and consent configurations meet the identity and access requirements.

  What should you use in the Azure portal? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-user-consent

• Question 323:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company has an Azure subscription that includes an Azure key vault. You have previously created a secret in the key vault.

  After an application developer registers an application in Azure Active Directory (Azure AD), you are instructed to make sure that the application is able to use the secret you created.

  Solution: You should create a key in Azure Key Vault.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 324:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Security Center for the centralized policy management of three Azure subscriptions.

  You use several policy definitions to manage the security of the subscriptions.

  You need to deploy the policy definitions as a group to all three subscriptions.

  Solution: You create a policy initiative and assignments that are scoped to resource groups.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  Instead use a management group.

  Management groups in Microsoft Azure solve the problem of needing to impose governance policy on more than one Azure subscription simultaneously.

  https://4sysops.com/archives/apply-governance-policy-to-multiple-azure-subscriptions-with-management-groups/

• Question 325:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

  

  You have an Azure subscription named Subscription2 that contains the following resources:

  1. An Azure Sentinel workspace

  2. An Azure Event Grid instance

  You need to ingest the CEF messages from the NVAs to Azure Sentinel.

  What should you configure for each subscription? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 326:

  You have a Microsoft Entra tenant that contains three users named User1, User2, and User3.

  You configure Microsoft Entra Password Protection as shown in the following exhibit.

  

  The users perform the following tasks:

  1. User1 attempts to reset her password to COntOsO

  2. User2 attempts to reset her password to F@brikamHQ

  3. User3 attempts to reset her password to PrOduct123.

  Which password reset attempts fail?

  A. User1 only
  B. User2only
  C. User3 only
  D. User1 and User3 only
  E. User1, User2, and User3
  E. User1, User2, and User3

• Question 327:

  HOTSPOT

  You need to create an Azure key vault. The solution must ensure that any object deleted from the key vault be retained for 90 days.

  How should you complete the command? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: -EnablePurgeProtection

  If specified, protection against immediate deletion is enabled for this vault; requires soft delete to be enabled as well.

  Box 2: -EnableSoftDelete

  Specifies that the soft-delete functionality is enabled for this key vault. When soft-delete is enabled, for a grace period, you can recover this key vault and its contents after it is deleted.

  References:

  https://docs.microsoft.com/en-us/powershell/module/azurerm.keyvault/new-azurermkeyvault

• Question 328:

  You have an Azure Active Directory (Azure AD) tenant.

  You need to prevent nonprivileged Azure AD users from creating service principals in Azure AD.

  What should you do in the Azure Active Directory admin center of the tenant?

  A. From the Properties Wade, set Enable Security defaults to Yes.
  B. From the Properties blade, set Access management fen Azure resources to No
  C. From the User settings blade, set Users can register applications to No
  D. From the User settings blade, set Restrict access to Azure AD administration portal to Yes.
  C. From the User settings blade, set Users can register applications to No

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/active-directory/roles/delegate-app-roles#to-disable-the-default-ability-to-create-application-registrations-or-consent-to-applications

  On the User settings page for your organization, set the Users can register applications setting to No. This will disable the default ability for users to create application registrations.

• Question 329:

  DRAG DROP

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to configure network connectivity to meet the following requirements:

  1. Communication from VM1 to storage1 must traverse an optimized Microsoft backbone network.

  2. All the outbound traffic from VM1 to the internet must be denied.

  3. The solution must minimize costs and administrative effort.

  What should you configure for VNet1 and NSG1? To answer, drag the appropriate components to the correct resources. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 330:

  Your company has an Azure subscription that includes two virtual machines, named VirMac1 and VirMac2, which both have a status of Stopped (Deallocated). The virtual machines belong to different resource groups, named ResGroup1 and ResGroup2.

  You have also created two Azure policies that are both configured with the virtualMachines resource type. The policy configured for ResGroup1 has a policy definition of Not allowed resource types, while the policy configured for ResGroup2 has a policy definition of Allowed resource types.

  You then create a Read-only resource lock on VirMac1, as well as a Read-only resource lock on ResGroup2.

  Which of the following is TRUE with regards to the scenario? (Choose all that apply.)

  A. You will be able to start VirMac1.
  B. You will NOT be able to start VirMac1.
  C. You will be able to create a virtual machine in ResGroup2.
  D. You will NOT be able to create a virtual machine in ResGroup2.
  B. You will NOT be able to start VirMac1.
  D. You will NOT be able to create a virtual machine in ResGroup2.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking