Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 581:

  You have an Azure subscription that contains the Azure App Service apps shown in the following table.

  

  You purchase custom SSL certificates from a trusted third-party authority.

  To which apps can you assign the custom SSL certificates?

  A. App4 only
  B. App3 and App4 only
  C. App2. App3. and App4 only
  D. App1. App2, App3. and App4
  B. App3 and App4 only

• Question 582:

  HOTSPOT

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  You need to configure authorization access.

  Which authorization types can you use for each storage account? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/storage/common/authorize-data-access

• Question 583:

  You need to ensure that User2 can implement PIM.

  What should you do first?

  A. Assign User2 the Global administrator role.
  B. Configure authentication methods for contoso.com.
  C. Configure the identity secure score for contoso.com.
  D. Enable multi-factor authentication (MFA) for User2.
  A. Assign User2 the Global administrator role.

  ---

  Explanation

  To start using PIM in your directory, you must first enable PIM.

  1. Sign in to the Azure portal as a Global Administrator of your directory.

  You must be a Global Administrator with an organizational account (for example, @yourdomain.com), not a Microsoft account (for example, @outlook.com), to enable PIM for a directory.

  Scenario: Technical requirements include: Enable Azure AD Privileged Identity Management (PIM) for contoso.com

  References:

  https://docs.microsoft.com/bs-latn-ba/azure/active-directory/privileged-identity-management/pim-getting-started

• Question 584:

  You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table:

  

  In Sub1, you create a virtual machine that has the following configurations:

  1. Name: VM1

  2. Size: DS2v2

  3. Resource group: RG1

  4. Region: West Europe

  5. Operating system: Windows Server 2016

  You plan to enable Azure Disk Encryption on VM1.

  In which key vaults can you store the encryption key for VM1?

  A. Vault1 or Vault3 only
  B. Vault1, Vault2, Vault3, or Vault4
  C. Vault1 only
  D. Vault1 or Vault2 only
  A. Vault1 or Vault3 only

  ---

  Explanation

  In order to make sure the encryption secrets don't cross regional boundaries, Azure Disk Encryption needs the Key Vault and the VMs to be co-located in the same region. Create and use a Key Vault that is in the same region as the VM to be encrypted.

  https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-prerequisites

• Question 585:

  DRAG DROP

  You have an Azure subscription.

  You plan to create a storage account.

  You need to use customer-managed keys to encrypt the tables in the storage account.

  From Azure Cloud Shell, which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

  Select and Place:

  

  

  ---

  https://docs.microsoft.com/en-us/azure/storage/common/customer-managed-keys-configure-key-vault?tabs=powershell

• Question 586:

  From Azure Security Center, you create a custom alert rule.

  You need to configure which users will receive an email message when the alert is triggered.

  What should you do?

  A. From Azure Monitor, create an action group.
  B. From Security Center, modify the Security policy settings of the Azure subscription.
  C. From Azure Active Directory (Azure AD), modify the members of the Security Reader role group.
  D. From Security Center, modify the alert rule.
  A. From Azure Monitor, create an action group.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

• Question 587:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

  

  The tenant contains the named locations shown in the following table.

  

  You create the conditional access policies for a cloud app named App1 as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 588:

  You have an Azure subscription that contains a storage account and an Azure web app named App1.

  App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings.

  You need to validate the name resolution to Cosmos1.

  Which DNS zone should you use?

  A. endpoint1.privatelink.documents.azure.com
  B. endpoint1.privatelink.blob.core.windows.net
  C. endpoint1.privatelink.azurewebsites.net
  D. endpoint1.privatelink.database.azure.com
  A. endpoint1.privatelink.documents.azure.com

  ---

  Explanation

  https://learn.microsoft.com/en-us/azure/cosmos-db/how-to-configure-private-endpoints

• Question 589:

  HOTSPOT

  You have an Azure subscription that contains a storage account named contoso2023.

  You need to perform the following tasks:

  1. Verify that identity-based authentication over SMB is enabled.

  2. Only grant users access to contoso2023 in the year 2023.

  Which two settings should you use? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

• Question 590:

  You have been tasked with applying conditional access policies for your company's current Azure Active Directory (Azure AD).

  The process involves assessing the risk events and risk levels.

  Which of the following is the risk level that should be configured for users that have leaked credentials?

  A. None
  B. Low
  C. Medium
  D. High
  D. High

  ---

  Explanation

  These six types of events are categorized in to 3 levels of risks - High, Medium &

  Low:

  

  http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access-policies/