Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 41:

  You have an Azure Sentinel workspace.

  You need to create a playbook.

  Which two triggers will start the playbook? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. An Azure Sentinel scheduled query rule is executed.
  B. An Azure Sentinel data connector is added.
  C. An Azure Sentinel alert is generated.
  D. An Azure Sentinel hunting query result is returned.
  E. An Azure Sentinel incident is created.
  C. An Azure Sentinel alert is generated.
  E. An Azure Sentinel incident is created.

• Question 42:

  HOTSPOT

  To complete the sentence, select the appropriate option in the answer area.

  

  

  ---

  Azure Databricks is an Apache Spark-based analytics platform. The platform consists of several components including ~MLib TM. Mlib is a Machine Learning library consisting of common learning algorithms and utilities, including classication, regression, clustering, collaborative ltering, dimensionality reduction, as well as underlying optimization primitives.

  https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-databricks#apache-spark-based-analytics-platform

• Question 43:

  You have an Azure Storage account named storage1 that has a container named container1.

  You need to prevent the blobs in container1 from being modified.

  What should you do?

  A. From container1, change the access level.
  B. From container1 add an access policy.
  C. From container1, modify the Access Control (1AM) settings.
  D. From storage1 , enable soft delete for blobs.
  B. From container1 add an access policy.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage?tabs=azure-portal

• Question 44:

  You plan to implement JIT VM access.

  Which virtual machines will be supported?

  A. VM2, VM3, and VM4 only
  B. VM1, VM2, VM3, and VM4
  C. VM1 and VM3 only
  D. VM1 only
  A. VM2, VM3, and VM4 only

• Question 45:

  DRAG DROP

  You have an Azure subscription.

  You create an Azure Firewall policy that has the rules shown in the following table.

  

  In which order should the rules be processed? To answer, move all rules from the list of rules to the answer area and arrange them in the correct order.

  Select and Place:

  

  

• Question 46:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company has Azure subscription linked to their Azure Active Directory (Azure AD) tenant.

  As a Global administrator for the tenant, part of your responsibilities involves managing Azure Security Center settings.

  You are currently preparing to create a custom sensitivity label.

  Solution: You start by altering the pricing tier of the Security Center.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 47:

  HOTSPOT

  You need to delegate the creation of RG2 and the management of permissions for RG1.

  Which users can perform each task? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Admin3 only

  The Contributor role has the necessary write permissions to create the resource group.

  Box 2: Admin4 only

  You need Owner level access to be able to manage permissions. The Contributor role can do most things but cannot modify permissions on existing objects.

• Question 48:

  You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant and a user named User1.

  The App registrations settings for the tenant are configured as shown in the following exhibit.

  

  You plan to deploy an app named App1.

  You need to ensure that User1 can register App1 in Azure AD. The solution must use the principle of least privilege.

  Which role should you assign to User1?

  A. App Configuration Data Owner for the subscription
  B. Managed Application Contributor for the subscription
  C. Cloud application administrator in Azure AD
  D. Application developer in Azure AD.
  D. Application developer in Azure AD.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task

• Question 49:

  HOTSPOT

  You have a Microsoft Entra tenant that contains the users shown in the following table.

  

  From Microsoft Entra Privileged Identity Management (PIM), you configure the settings for the Security Administrator role as shown in the following exhibit.

  

  From PIM, you assign the Security Administrator role to the following groups:

  1. Group1: Active assignment type, permanently assigned

  2. Group2: Eligible assignment type, permanently eligible

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No - User1 is a member of Group1: that has Active assignment type, permanently assigned. Active assignments don't require the member to perform any activations to use the role. Members or owners assigned as active have the privileges assigned to the role at all times.

  Yes - No approval is required. There is no waiting.

  No - User3 is a member of Group1 and Group 2. Active assignments don't require the member to perform any activations to use the role.

  https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/groups-assign-member-owner

• Question 50:

  You have an Azure subscription that contains an Azure Data Lake Storage account named sa1.

  You plan to deploy an app named App1 that will access sa1 and perform operations, including Read, List, Create Directory, and Delete Directory.

  You need to ensure that App1 can connect securely to sa1 by using a private endpoint.

  What is the minimum number of private endpoints required for sa1?

  A. 1
  B. 2
  C. 3
  D. 4
  E. 5
  B. 2

  ---

  Explanation

  If you create a private endpoint for the Data Lake Storage Gen2 storage resource, then you should also create one for the Blob Storage resource. That's because operations that target the Data Lake Storage Gen2 endpoint might be redirected to the Blob endpoint. Similarly, if you add a private endpoint for Blob Storage only, and not for Data Lake Storage Gen2, some operations (such as Manage ACL, Create Directory, Delete Directory, etc.) will fail since the Gen2 APIs require a DFS private endpoint. By creating a private endpoint for both resources, you ensure that all operations can complete successfully.

  https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints