Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 441:

  HOTSPOT

  You have a management group named MG1 that contains an Azure subscription and a resource group named RG1. RG1 contains a virtual machine named VM1. You have the custom Azure roles shown in the following table.

  

  The permissions for Role1 are shown in the following role definition file.

  

  The permissions for Role2 are shown in the following role definition file.

  

  You assign the roles to the users shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No

  NOTE: Each correct selection is worth one point.

  

  

• Question 442:

  Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant.

  You need to configure each subscription to have the same role assignments.

  What should you use?

  A. Azure Security Center
  B. Azure Policy
  C. Azure AD Privileged Identity Management (PIM)
  D. Azure Blueprints
  D. Azure Blueprints

  ---

  Explanation

  Just as a blueprint allows an engineer or an architect to sketch a project's design parameters, Azure Blueprints enables cloud architects and central information technology groups to define a repeatable set of Azure resources that implements and adheres to an organization's standards, patterns, and requirements.

  Blueprints are a declarative way to orchestrate the deployment of various resource templates and other artifacts such as:

  Role Assignments

  Policy Assignments

  Azure Resource Manager templates

  Resource Groups Reference:

  https://docs.microsoft.com/en-us/azure/governance/blueprints/overview

• Question 443:

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table.

  

  You create the virtual machines shown in the following table.

  

  You plan to configure just-in-time (JIT) VM access for the virtual machines. The solution must minimize administrative effort.

  For which virtual machines can you configure JIT VM access?

  A. VM1 only
  B. VM1 and VM2 only
  C. VM1 and VM3 only
  D. VM1, VM2, and VM3 only
  E. VM1, VM2, VM3, and VM4
  D. VM1, VM2, and VM3 only

• Question 444:

  DRAG DROP

  You need to configure SQLDB1 to meet the data and application requirements.

  To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  1. Go to Azure Sql Server:

  Add Active Directory Admin (Needs to be Global Administrator in Azure AD)

  - because this is the account that Azure SQL database is going to use to look up other users 2. Go to SSMS and connect to the Sql Server Active Directory-Password Authentication Login as Global Admin

  3. Add Azure AD users

  Create AD users in the database where the login needs to be allowed. Apparently the users confined to a database (and not the database server) are called contained users.

  So, the answer is:

  From the Azure portal, create an Azure AD administrator for LitwareSQLServer1

  Connect to SQLDB1 by using SSMS

  In SQLDB1, create contained database users

  The order makes sense, because to create a user in SQLDB1, you need to connect to it first using SSMS.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-sql

• Question 445:

  Note: This question is part of a series of questions that present the same scenario.

  Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system.

  Solution: You use the Azure portal.

  Does this meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  The Azure portal is a web-based, unied console that provides an alternative to command-line tools. With the Azure portal, you can manage your Azure subscription using a graphical user interface. You can build, manage, and monitor everything from simple web apps to complex cloud deployments. Create custom dashboards for an organized view of resources. Congure accessibility options for an optimal experience.

  Being web-based, the Azure portal can be run on a browser from a tablet that runs the Android operating system.

  References:

  https://docs.microsoft.com/en-us/azure/azure-portal/azure-portal-overview

• Question 446:

  HOTSPOT

  You plan to use Azure Sentinel to create an analytic rule that will detect suspicious threats and automate responses.

  Which components are required for the rule? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom

  https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

• Question 447:

  You have an Azure subscription that contains an Azure Container Registry named Registry1. The subscription uses the Standard use tier of Azure Security Center.

  You upload several container images to Register1.

  You discover that vulnerability security scans were not performed.

  You need to ensure that the images are scanned for vulnerabilities when they are uploaded to Registry1.

  What should you do?

  A. From the Azure portal modify the Pricing tier settings.
  B. From Azure CLI, lock the container images.
  C. Upload the container images by using AzCopy
  D. Push the container images to Registry1 by using Docker
  A. From the Azure portal modify the Pricing tier settings.

  ---

  Explanation

  https://charbelnemnom.com/scan-container-images-in-azure-container-registry-with-azure-security-center/

• Question 448:

  HOTSPOT

  You have an Azure subscription that contains the Azure Firewall policies shown in the following table.

  

  The subscription contains the firewalls shown in the following table.

  

  The subscription contains the virtual networks shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 449:

  You have been tasked with configuring an access review, which you plan to assigned to a new collection of reviews. You also have to make sure that the reviews can be reviewed by resource owners.

  You start by creating an access review program and an access review control.

  You now need to configure the Reviewers.

  Which of the following should you set Reviewers to?

  A. Selected users.
  B. Members (Self).
  C. Group Owners.
  D. Anyone.
  C. Group Owners.

  ---

  Explanation

  In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their own access. If the resource is a group, you can ask the group owners to review.

  

  https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

  https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-programs-controls

• Question 450:

  SIMULATION

  Use the following login credentials as needed:

  To enter your username, place your cursor in the Sign in box and click on the username below.

  To enter your password, place your cursor in the Enter password box and click on the password below.

  Azure Username: [email protected]

  Azure Password: Gp0Ae4@!Dg

  If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

  The following information is for technical support purposes only:

  Lab Instance: 28681041

  You need to configure Azure to allow RDP connections from the Internet to a virtual machine named VM1. The solution must minimize the attack surface of VM1.

  To complete this task, sign in to the Azure portal.

  A. See the explanation below
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the explanation below

  ---

  Explanation