Microsoft AZ-500 Online Practice Questions and Exam Preparation

Microsoft AZ-500 Online Questions & Answers

• Question 621:

  You have a Microsoft Entra tenant named contoso.com.

  You collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com.

  You need to create an allow list of cloud apps from fabrikam.com that can be used by the users in contoso.com.

  What should you do for contoso.

  com in the Microsoft Entra admin center?

  A. From Inbound access settings in Cross-tenant access settings, configure the B2B direct connect settings.
  B. From External collaboration settings, configure the Collaboration restrictions settings.
  C. From External collaboration settings, configure the Guest invite settings.
  D. From Outbound access settings in Cross-tenant access settings, con figure the B2B collaboration settings.
  A. From Inbound access settings in Cross-tenant access settings, configure the B2B direct connect settings.

• Question 622:

  HOTSPOT

  You have a file named File1.yaml that contains the following contents.

  

  You create an Azure container instance named container1 by using File1.yaml.

  You need to identify where you can access the values of <pdf2txt-u>Variable1</pdf2txt-u> and <pdf2txt-u>Variable2</pdf2txt-u>.

  What should you identify? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  https://docs.microsoft.com/en-us/azure/container-instances/container-instances-environment-variables

• Question 623:

  You have an Azure subscription that contains an app named App1. App1 has the app registration shown in the following table.

  

  You need to ensure that App1 can read all user calendars and create appointments. The solution must use the principle of least privilege.

  What should you do?

  A. Add a new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.
  B. Add a new Application API permission for Microsoft.Graph Calendars.ReadWrite.
  C. Select Grant admin consent.
  D. Add new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.Shared.
  B. Add a new Application API permission for Microsoft.Graph Calendars.ReadWrite.

  ---

  Explanation

  The question is about reading and writing ALL user calendars. Delegated permissions only works for the logged in user.

  https://docs.microsoft.com/en-us/graph/permissions-reference#application-permissions-8

• Question 624:

  HOTSPOT

  You have a management group named Group1 that contains an Azure subscription named sub1. Sub1 has a subscription ID of 11111111-1234-1234-1234-1111111111.

  You need to create a custom Azure role-based access control (RBAC) role that will delegate permissions to manage the tags on all the objects in Group1.

  What should you include in the role definition of Role1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Note: Assigning a custom RBAC role as the Management Group level is currently in preview only. So, for now the answer to the assignable scope is the subscription level.

  https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations

  https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles

  https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-5-assignable-scopes

• Question 625:

  You have an Azure Active Directory (Azure AD) tenant.

  You have the deleted objects shown in the following table.

  

  On May 4, 2020, you attempt to restore the deleted objects by using the Azure Active Directory admin center.

  Which two objects can you restore? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Group1
  B. Group2
  C. User2
  D. User1
  B. Group2
  C. User2

  ---

  Explanation

  Deleted users and deleted Office 365 groups are available for restore for 30 days.

  You cannot restore a deleted security group.

  https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-restore-deleted

• Question 626:

  You have a Azure subscription.

  You enable Azure Active Directory (Azure AD) Privileged identify (PIM). Your company's security policy for administrator accounts has the following conditions:

  1. The accounts must use multi-factor authentication (MFA).

  2. The account must use 20-character complex passwords.

  3. The passwords must be changed every 180 days.

  4. The account must be managed by using PIM.

  You receive alerts about administrator who have not changed their password during the last 90 days. You need to minimize the number of generated alerts.

  Which PIM alert should you modify?

  A. Roles don't require multi-factor authentication for activation.
  B. Administrator aren't using their privileged roles
  C. Roles are being assigned outside of Privileged identity Management
  D. Potential stale accounts in a privileged role.
  D. Potential stale accounts in a privileged role.

  ---

  Explanation

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-configure-security-alerts?tabs=new