Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 361:

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

  

  You need to identify which initiatives and policies you can add to Subscription1 by using Azure Security Center.

  What should you identify?

  A. Policy1 and Policy2 only
  B. Initiative1 only
  C. Initiative1 and Initiative2 only
  D. Initiative1, Initiative2, Policy1, and Policy2
  C. Initiative1 and Initiative2 only

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/security-center/custom-security-policies

• Question 362:

  HOTSPOT

  You need to deploy Microsoft Antimalware to meet the platform protection requirements.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Scenario: Microsoft Antimalware must be installed on the virtual machines in RG1.

  RG1 is a resource group that contains Vnet1, VM0, and VM1.

  Box 1: DeployIfNotExists

  DeployIfNotExists executes a template deployment when the condition is met.

  Azure policy definition Antimalware

  Incorrect Answers:

  Append:

  Append is used to add additional fields to the requested resource during creation or update. A common example is adding tags on resources such as costCenter or specifying allowed IPs for a storage resource.

  Deny:

  Deny is used to prevent a resource request that doesn't match defined standards through a policy definition and fails the request.

  https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

• Question 363:

  You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant. The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of Azure AD Connect.

  You create a new Azure subscription.

  You discover that the synced on-premises user accounts cannot be assigned roles in the new subscription.

  You need to ensure that you can assign Azure and Microsoft 365 roles to the synced Azure AD user accounts.

  What should you do fist?

  A. Configure the Azure AD tenant used by the new subscription to use pass-through authentication.
  B. Configure the Azure AD tenant used by the new subscription to use federated authentication.
  C. Change the Azure AD tenant used by the new subscription.
  D. Configure a second instance of Azure AD Connect.
  C. Change the Azure AD tenant used by the new subscription.

  ---

  Explanation

  You create a new Azure subscription. Hence you need to assign. These questions something are tricky. Go over every answer and try to backtrack if it triggers an earlier statement.

• Question 364:

  SIMULATION

  You need to prevent HTTP connections to the rg1lod1234578n1 Azure Storage account.

  To complete this task, sign in to the Azure portal.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation

  The "Secure transfer required" feature is now supported in Azure Storage account. This feature enhances the security of your storage account by enforcing all requests to your account through a secure connection. This feature is disabled by default.

  1. In Azure Portal select you Azure Storage account rg1lod12345678n1.

  2. Select Configuration, and Secure Transfer required.

  

  https://techcommunity.microsoft.com/t5/Azure/quot-Secure-transfer-required-quot-is-available-in-Azure-Storage/m-p/82475

• Question 365:

  You have an on-premises network and an Azure subscription.

  You have the Microsoft SQL Server instances shown in the following table.

  

  You plan to implement Microsoft Defender for SQL.

  Which SQL Server instances will be protected by Microsoft Defender for SQL?

  A. sql1 and sql2 only
  B. sql1, sql2, and sql3 only
  C. sql1, sql2, and sql4 only
  D. sql1, sql2, sql3, and sql4
  D. sql1, sql2, sql3, and sql4

  ---

  Explanation

  Microsoft Defender for SQL protected versions:

  1. Azure SQL Managed Instance (sql1) 2. SQL on Azure virtual machines

  SQL Server on Windows Azure Virtual Machines (sql2) SQL Server on Linux Azure Virtual Machines including Red Hat Enterprise Linux (RHEL) 8 (sql3) 1. On-premises SQL servers on Windows machines without Azure Arc (sql4)

  2. Azure SQL single databases and elastic pools 3. SQL Server on Azure Arc-enabled servers

  4. Azure Synapse Analytics (formerly SQL DW) dedicated SQL pool

  https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-introduction

  https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/sql-server-on-azure-vm-iaas-what-is-overview

  https://docs.microsoft.com/en-us/azure/azure-sql/virtual-machines/linux/sql-server-on-linux-vm-what-is-iaas-overview

• Question 366:

  HOTSPOT

  You have an Azure subscription mat contains a resource group named RG1. RG1 contains a storage account named storage1.

  You have two custom Azure rotes named Role1 and Role2 that are scoped to RG1.

  The permissions for Role1 are shown in the following JSON code.

  

  The permissions for Role2 are shown in the following JSON code.

  

  You assign the roles to the users shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 367:

  You have a hybrid configuration of Azure Active Directory (Azure AD). You have an Azure SQL Database instance that is configured to support Azure AD authentication.

  Database developers must connect to the database instance and authenticate by using their on-premises Active Directory account.

  You need to ensure that developers can connect to the instance by using Microsoft SQL Server Management Studio. The solution must minimize authentication prompts.

  Which authentication method should you recommend?

  A. Active Directory - Password
  B. Active Directory - Universal with MFA support
  C. SQL Server Authentication
  D. Active Directory - Integrated
  D. Active Directory - Integrated

  ---

  Explanation

  Use Active Directory password authentication when connecting with an Azure AD principal name using the Azure AD managed domain.

  Use this method to authenticate to SQL DB/DW with Azure AD for native or federated Azure AD users. A native user is one explicitly created in Azure AD and being authenticated using user name and password, while a federated user is a Windows user whose domain is federated with Azure AD. The latter method (using user & password) can be used when a user wants to use their windows credential, but their local machine is not joined with the domain (for example, using a remote access). In this case, a Windows user can indicate their domain account and password and can authenticate to SQL DB/DW using federated credentials.

  Incorrect Answers:

  D: Use Active Directory integrated authentication if you are logged in to Windows using your Azure Active Directory credentials from a federated domain.

  References:

  https://docs.microsoft.com/en-us/azure/sql-database/sql-database-aad-authentication-configure

• Question 368:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1 and an Azure container registry named AZCR1.

  You need to ensure that AKS1 can deploy container images stored in AZCR1.

  Solution: You configure AKS1 to use a user-assigned managed identity and assign the Azure Kubernetes Service Cluster Admin Role to the managed identity.

  Does this meet the requirement?

  A. Yes
  B. No
  A. Yes

• Question 369:

  HOTSPOT

  You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.com. In contoso.com, you register an app named App1.

  You need to perform the following tasks for App1:

  1. Add and configure the Mobile and desktop applications platform.

  2. Add the ipaddr optional claim.

  Which two settings should you select for App1? To answer, select the appropriate settings in the answer area.

  NOTE; Each correct selection is worth one point.

  

  

• Question 370:

  You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region.

  Which Azure service should you use from the Azure portal to view service failure notications that can affect the availability of VM1?

  A. Azure Service Fabric
  B. Azure Monitor
  C. Azure virtual machines
  D. Azure Advisor
  B. Azure Monitor

  ---

  Explanation

  In the Azure virtual machines page in the Azure portal, there is a named Maintenance Status. This column will display service issues that could affect your virtual machine. A service failure is rare but host server maintenance that could affect your virtual machines is more common.

  Azure periodically updates its platform to improve the reliability, performance, and security of the host infrastructure for virtual machines. The purpose of these updates ranges from patching software components in the hosting environment to upgrading networking components or decommissioning hardware.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/maintenance-and-updates