Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 451:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company has Azure subscription linked to their Azure Active Directory (Azure AD) tenant.

  As a Global administrator for the tenant, part of your responsibilities involves managing Azure Security Center settings.

  You are currently preparing to create a custom sensitivity label.

  Solution: You start by creating a custom sensitive information type.

  Does the solution meet the goal?

  A. Yes
  B. No
  A. Yes

  ---

  Explanation

  https://docs.microsoft.com/en-us/office365/securitycompliance/customize-a-built-in-sensitive-information-type

• Question 452:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  VNet1 contains the subnets shown in the following table.

  

  You plan to use the Azure portal to deploy an Azure firewall named AzFW1 to VNet1.

  Which resource group and subnet can you use to deploy AzFW1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: RG3

  Resource Group

  The Firewall will be placed in VNet1.

  VNet1 is located in Central US.

  RG3 is also located in Central US.

  Box 2: AzureFirewallSubnet only Subnet

  Under Subnet name, select default and change it to AzureFirewallSubnet. The firewall will be in this subnet, and the subnet name must be AzureFirewallSubnet.

  https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

• Question 453:

  You have an Azure subscription that contains the Azure Log Analytics workspaces shown in the following table.

  

  You create the virtual machines shown in the following table.

  

  You plan to use Azure Sentinel to monitor Windows Defender Firewall on the virtual machines.

  Which virtual machines you can connect to Azure Sentinel?

  A. VM1 and VM3 only
  B. VM1 Only
  C. VM1 and VM2 only
  D. VM1, VM2, VM3 and VM4
  D. VM1, VM2, VM3 and VM4

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-firewall

• Question 454:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You use Azure Security Center for the centralized policy management of three Azure subscriptions.

  You use several policy definitions to manage the security of the subscriptions.

  You need to deploy the policy definitions as a group to all three subscriptions.

  Solution: You create a policy definition and assignments that are scoped to resource groups.

  Does this meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  References:

  https://4sysops.com/archives/apply-governance-policy-to-multiple-azure-subscriptions-with-management-groups/

• Question 455:

  HOTSPOT

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table.

  

  The subscription contains the virtual machines shown in the following table.

  

  VM3 contains a service that listens for connections on port 8080.

  For VM1, you configure just-in-time (JIT) VM access as shown in the following exhibit.

  

  For each of the following statement, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 456:

  You have an Azure subscription that contains a virtual network. The virtual network contains the subnets shown in the following table.

  

  The subscription contains the virtual machines shown in the following table.

  

  You enable just in time (JIT) VM access for all the virtual machines.

  You need to identify which virtual machines are protected by JIT.

  Which virtual machines should you identify?

  A. VM4 only
  B. VM1 and VM3 only
  C. VM1, VM3 and VM4 only
  D. VM1, VM2, VM3, and VM4
  C. VM1, VM3 and VM4 only

  ---

  Explanation

  An NSG needs to be enabled, either at the VM level or the subnet level.

  https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time

• Question 457:

  DRAG DROP

  You have an Azure subscription named Sub1. Sub1 contains an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to encrypt VM1 disks by using Azure Disk Encryption.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/encrypt-disks

• Question 458:

  You need to meet the technical requirements for VNetwork1.

  What should you do first?

  A. Create a new subnet on VNetwork1.
  B. Remove the NSGs from Subnet11 and Subnet13.
  C. Associate an NSG to Subnet12.
  D. Configure DDoS protection for VNetwork1.
  A. Create a new subnet on VNetwork1.

  ---

  Explanation

  From scenario: Deploy Azure Firewall to VNetwork1 in Sub2.

  Azure firewall needs a dedicated subnet named AzureFirewallSubnet.

  References:

  https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

• Question 459:

  HOTSPOT

  You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown in the following table.

  

  You have an Azure Virtual Network Manager instance that has the following settings:

  1. Name: NetMgr1

  2. Region: East US

  3. Features: Connectivity

  4. Management scope: Sub1

  For NetMgr1, you create the target network groups shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE; Each correct selection is worth one point.

  

  

• Question 460:

  Which Azure service provides a set of version control tools to manage code?

  A. Azure Repos
  B. Azure DevTest Labs
  C. Azure Storage
  D. Azure Cosmos DB
  A. Azure Repos

  ---

  Explanation

  Azure Repos is a set of version control tools that you can use to manage your code.

  Incorrect Answers:

  B: Azure DevTest Labs creates labs consisting of pre-congured bases or Azure Resource Manager templates. These have all the necessary tools and software that you can use to create environments.

  D: Azure Cosmos DB is Microsoft's globally distributed, multi-model database service.

  References:

  https://docs.microsoft.com/en-us/azure/devops/repos/get-started/what-is-repos?view=azure-devops