Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 561:

  You have an Azure resource group that contains 100 virtual machines.

  You have an initiative named Initiative1 that contains multiple policy definitions. Initiative1 is assigned to the resource group.

  You need to identify which resources do NOT match the policy definitions.

  What should you do?

  A. From Azure Security Center, view the Regulatory compliance assessment.
  B. From the Policy blade of the Azure Active Directory admin center, select Compliance.
  C. From Azure Security Center, view the Secure Score.
  D. From the Policy blade of the Azure Active Directory admin center, select Assignments.
  B. From the Policy blade of the Azure Active Directory admin center, select Compliance.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/governance/policy/how-to/get-compliance-data#portal

• Question 562:

  You have an Azure subscription named Sub1.

  In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1.

  You need to modify WF1 to send email messages to a distribution group named Alerts.

  What should you use to modify WF1?

  A. Azure Application Insights
  B. Azure Monitor
  C. Azure Logic Apps Designer
  D. Azure DevOps
  C. Azure Logic Apps Designer

  ---

  Explanation

  Configure email notifications for security alerts.

  By default, Microsoft Defender for Cloud emails subscription owners whenever a high-severity alert is triggered for their subscription. This page explains how to customize these notifications.'

  Workflow automation feature of Microsoft Defender for Cloud.

  This feature can trigger consumption logic apps on security alerts, recommendations, and changes to regulatory compliance. For example, you might want Defender for Cloud to email a specific user when an alert occurs.

  https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation

• Question 563:

  HOTSPOT

  You have an Azure subscription that contains a resource group named RG1. RG1 contains a storage account named storage1.

  that are scoped to RG1.

  The permissions for Role1 are shown in the following JSON code.

  

  The permissions for Role2 are shown in the following JSON code.

  

  You assign the roles to the users shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 564:

  You have an Azure subscription that contains an Azure API Management instance named ContosoAPI1.

  You need to configure SSL 3.0 support for ContosoAPI1.

  What should you do first in the Azure portal?

  A. From Certificates, add a certificate.
  B. From Protocols + ciphers, select a backend protocol.
  C. From APIs, add an API tag.
  D. From Pricing tier, change the pricing tier.
  B. From Protocols + ciphers, select a backend protocol.

• Question 565:

  HOTSPOT

  You have an Azure subscription named Sub1 and use Microsoft Defender for Cloud. Sub1 contains a user named User1 and a resource group named RG1. RG1 contains a Log Analytics workspace named Workspace1.

  You need to ensure that User1 can modify Azure Logic Apps workflows triggered in response to security incidents. The solution must follow the principle of least privilege. Which role should you assign to User1. and to which resource should you assign the role? To answer, select the appropriate options in the answer area.

  NOTE; Each correct selection is worth one point.

  

  

• Question 566:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.

  You have been tasked with integrating Active Directory and the Azure AD tenant. You intend to deploy Azure AD Connect.

  Your strategy for the integration must make sure that password policies and user logon limitations affect user accounts that are synced to the Azure AD tenant, and that the amount of necessary servers are reduced.

  Solution: You recommend the use of password hash synchronization and seamless SSO.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

• Question 567:

  SIMULATION

  You need to create a web app named Intranet12345678 and enable users to authenticate to the web app by using Azure Active Directory (Azure AD).

  To complete this task, sign in to the Azure portal.

  A. <pdf2txt-u> </pdf2txt-u><pdf2txt-u>See the explanation below.</pdf2txt-u>
  A. <pdf2txt-u> </pdf2txt-u><pdf2txt-u>See the explanation below.</pdf2txt-u>

  ---

  Explanation

  1. In the Azure portal, type App services in the search box and select App services from the search results.

  2. Click the Create app service button to create a new app service.

  3. In the Resource Group section, click the Create new link to create a new resource group.

  4. Give the resource group a name such as Intranet12345678RG and click OK.

  5. In the Instance Details section, enter Intranet12345678 in the Name field.

  6. In the Runtime stack field, select any runtime stack such as .NET Core 3.1.

  7. Click the Review + create button.

  8. Click the Create button to create the web app.

  9. Click the Go to resource button to open the properties of the new web app.

  10.In the Settings section, click on Authentication / Authorization. 11.Click the App Service Authentication slider to set it to On. 12.In the Action to take when request is not authentication box, select Log in with Azure Active Directory. 13.Click Save to save the changes.

• Question 568:

  You have the Azure virtual machines shown in the following table.

  

  For which virtual machine can you enable Update Management?

  A. VM2 and VM3 only
  B. VM2, VM3, and VM4 only
  C. VM1, VM2, and VM4 only
  D. VM1, VM2, VM3, and VM4
  E. VM1, VM2, and VM3 only
  C. VM1, VM2, and VM4 only

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/azure/automation/automation-update-management?toc=%2Fazure%2Fautomation

• Question 569:

  HOTSPOT

  You need to configure support for Microsoft Sentinel notebooks to meet the technical requirements.

  What is the minimum number of Azure container registries and Azure Machine Learning workspaces required?

  

  

  ---

  https://docs.microsoft.com/en-us/azure/sentinel/notebooks

• Question 570:

  You have Azure Resource Manager templates that you use to deploy Azure virtual machines.

  You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.

  What should you use?

  A. device configuration policies in Microsoft Intune
  B. an Azure Desired State Configuration (DSC) virtual machine extension
  C. application security groups
  D. Azure Logic Apps
  E. security policies in Azure Security Center
  F. device compliance policies in Microsoft Intune
  B. an Azure Desired State Configuration (DSC) virtual machine extension

  ---

  Explanation

  You can use Azure Automation State Configuration to manage Azure VMs (both Classic and Resource Manager), on-premises VMs, Linux machines, AWS VMs, and on-premises physical machines.

  Note: Azure Automation State Configuration provides a DSC pull server similar to the Windows Feature DSC-Service so that target nodes automatically receive configurations, conform to the desired state, and report back on their compliance. The built-in pull server in Azure Automation eliminates the need to set up and maintain your own pull server. Azure Automation can target virtual or physical Windows or Linux machines, in the cloud or on-premises.

  https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started