Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 381:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You plan to enable Azure Defender for the subscription.

  Which resources can be protected by using Azure Defender?

  A. VM1, VNET1, storage1, and Vault1
  B. VM1, VNET1, and storage1 only
  C. VM1, storage1, and Vault1 only
  D. VM1 and VNET1 only
  E. VM1 and storage1 only
  C. VM1, storage1, and Vault1 only

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/security-center/azure-defender

• Question 382:

  HOTSPOT

  You have an Azure key vault named KeyVault1 that contains the items shown in the following table.

  

  In KeyVault1, the following events occur in sequence:

  1. Item1 is deleted.

  2. Item2 and Policy1 are deleted.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  
  

• Question 383:

  You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table.

  

  You create and assign the Azure policy shown in the following exhibit.

  

  What is the flow log status of NSG1 and NSG2 after the Azure policy is assigned?

  A. Flow logs will be enabled for NSG1 only.
  B. Flow logs will be enabled for NSG2 only.
  C. Flow logs will be enabled for NSG1 and NSG2.
  D. Flow logs will be disabled for NSG1 and NSG2.
  D. Flow logs will be disabled for NSG1 and NSG2.

• Question 384:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains the resources shown in the following table.

  

  User2 is the owner of Group2.

  The user and group settings for App1 are configured as shown in the following exhibit.

  

  You enable self-service application access for App1 as shown in the following exhibit.

  

  User3 is configured to approve access to Appl.

  You need to identify the owners of Group2 and the users of Appl.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-self-service-access

• Question 385:

  Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

  After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

  You have an Azure subscription that contains the resources shown in the following table.

  

  You have.

  The users shown in the following table.

  

  You create an Azure SQL managed instance named SQL1 and enable Microsoft Entra-only authentication. You need to ensure that both User1 and User2 are set as the Microsoft Entra admin for SQL1.

  Solution: You set MM as the Microsoft Entra admin for SQL1.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

• Question 386:

  DRAG DROP

  You create an Azure subscription with Azure AD Premium P2.

  You need to ensure that you can use Azure Active Directory (Azure AD) Privileged Identity Management (PIM) to secure Azure AD roles.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 387:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1 and an Azure container registry named AZCR1.

  You need to ensure that AKS1 can deploy container images stored in AZCR1.

  Solution: You assign the Kubernetes Agentless Operator role to the system-assigned managed identity of the agent pool for AKS1.

  Does this meet the requirement?

  A. Yes
  B. No
  B. No

• Question 388:

  HOTSPOT

  You are evaluating the security of the network communication between the virtual machines in Sub2.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  1 - No, as traffic would be sourced from internet since it is destined to the public IP address of VM2. 2 - Yes, as VM3 has no NSGs interfering and traffic is contained within the same vnet. 3 - No, as VM5 is in a separate vnet and there is no mention of any peering going on.

• Question 389:

  Your company makes use of Azure Active Directory (Azure AD) in a hybrid configuration. All users are making use of hybrid Azure AD joined Windows 10 computers.

  You manage an Azure SQL database that allows for Azure AD authentication.

  You need to make sure that database developers are able to connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.

  Which of the following is the authentication method the developers should use?

  A. Azure AD token.
  B. Azure Multi-Factor authentication.
  C. Active Directory integrated authentication.
  C. Active Directory integrated authentication.

  ---

  Explanation

  Azure AD can be the initial Azure AD managed domain. Azure AD can also be an on-premises Active Directory Domain Services that is federated with the Azure AD.

  Using an Azure AD identity to connect using SSMS or SSDT

  The following procedures show you how to connect to a SQL database with an Azure AD identity using SQL Server Management Studio or SQL Server Database Tools.

  Active Directory integrated authentication

  Use this method if you are logged in to Windows using your Azure Active Directory credentials from a federated domain.

  1. Start Management Studio or Data Tools and in the Connect to Server (or Connect to Database Engine) dialog box, in the Authentication box, select Active Directory - Integrated. No password is needed or can be entered because your existing credentials will be presented for the connection.

  

  2. Select the Options button, and on the Connection Properties page, in the Connect to database box, type the name of the user database you want to connect to. (The AD domain name or tenant ID" option is only supported for Universal with MFA connection options, otherwise it is greyed out.)

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/sql-database/sql-database-aad-authentication-configure.md

• Question 390:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.

  You have been tasked with integrating Active Directory and the Azure AD tenant. You intend to deploy Azure AD Connect.

  Your strategy for the integration must make sure that password policies and user logon limitations affect user accounts that are synced to the Azure AD tenant, and that the amount of necessary servers are reduced.

  Solution: You recommend the use of federation with Active Directory Federation Services (AD FS).

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  A federated authentication system relies on an external trusted system to authenticate users. Some companies want to reuse their existing federated system investment with their Azure AD hybrid identity solution. The maintenance and management of the federated system falls outside the control of Azure AD. It's up to the organization by using the federated system to make sure it's deployed securely and can handle the authentication load.

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta