You need to encrypt storage1 to meet the technical requirements.Which key vaults can you use?

KeyVault1, KeyVault2, and KeyVault3

You need to meet the identity and access requirements for Group1.What should you do?

Change the membership type of Group1 to Assigned. Create two groups that have dynamic memberships. Add the new groups to Group1.

Add a membership rule to Group1.

Delete Group1. Create a new group named Group1 that has a membership type of Microsoft 365. Add users and devices to the group.

Modify the membership rule of Group1.

Change the membership type of Group1 to Assigned. Create two groups that have dynamic memberships. Add the new groups to Group1.

From Azure Security Center, you need to deploy SecPol1.What should you do first?

Create an Azure Management group.

You need to ensure that users can access VM0. The solution must meet the platform protection requirements. What should you do?

On Firewall, configure a network traffic filtering rule.

Assign RT1 to AzureFirewallSubnet.

On Firewall, configure a DNAT rule.

You need to ensure that User2 can implement PIM.What should you do first?

Assign User2 the Global administrator role.

Configure authentication methods for contoso.com.

Configure the identity secure score for contoso.com.

Enable multi-factor authentication (MFA) for User2.

You need to configure WebApp1 to meet the data and application requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Set the Minimum TLS Version protocol setting to 1.2.

Turn on the HTTPS Only protocol setting.

Set the Minimum TLS Version protocol setting to 1.2.

Change the pricing tier of the App Service plan.

Turn on the Incoming client certificates protocol setting.

You need to meet the technical requirements for VNetwork1.What should you do first?

Create a new subnet on VNetwork1.

Remove the NSGs from Subnet11 and Subnet13.

Configure DDoS protection for VNetwork1.

You need to ensure that you can meet the security operations requirements. What should you do first?

Upgrade the pricing tier of Security Center to Standard.

Turn on Auto Provisioning in Security Center.

Integrate Security Center and Microsoft Cloud App Security.

Upgrade the pricing tier of Security Center to Standard.

Modify the Security Center workspace configuration.

Your company has an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. The company develops an application named App1. App1 is registered in Azure AD.You need to ensure that App1 can access secrets in Azure Key Vault on behalf of the application users. What should you configure?

a delegated permission without admin consent

an application permission without admin consent

a delegated permission without admin consent

a delegated permission that requires admin consent

an application permission that requires admin consent

You have an Azure subscription that contains an Azure key vault named Vault1.In Vault1, you create a secret named Secret1.An application developer registers an application in Azure Active Directory (Azure AD).You need to ensure that the application can use Secret1.What should you do?

In Azure Key Vault, create a key.

In Azure Key Vault, create an access policy.

In Azure AD, enable Azure AD Application Proxy.

You have an Azure SQL database.You implement Always Encrypted.You need to ensure that application developers can retrieve and decrypt data in the database.Which two pieces of information should you provide to the developers? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

a shared access signature (SAS)

You have a hybrid configuration of Azure Active Directory (Azure AD).All users have computers that run Windows 10 and are hybrid Azure AD joined.You have an Azure SQL database that is configured to support Azure AD authentication.Database developers must connect to the SQL database by using Microsoft SQL Server Management Studio (SSMS) and authenticate by using their on-premises Active Directory account. You need to tell the developers which authentication method to use to connect to the SQL database from SSMS. The solution must minimize authentication prompts. Which authentication method should you instruct the developers to use?

Active Directory - Universal with MFA support

You have an Azure SQL Database server named SQL1.You plan to turn on Advanced Threat Protection for SQL1 to detect all threat detection types.Which action will Advanced Threat Protection detect as a threat?

A user attempts to sign as select * from table1.

A user updates more than 50 percent of the records in a table.

A user attempts to sign as select * from table1.

A user is added to the db_owner database role.

A user deletes more than 100 records from the same table.

Microsoft AZ-500 Practice Test 1 - Free Online Exam Prep & Questions

HOTSPOT

You implement the planned changes for ASG1 and ASG2.

In which NSGs can you use ASG1, and the network interfaces of which virtual machines can you assign to ASG2?

Microsoft AZ-500 image Question 1 5789376 10022024015440000

Correct answer:

Microsoft AZ-500 image answer Question 1 5789376 10022024015440000

Show Case Study

Comment (0)

asked 02/10/2024

Robert Petty

58 questions

Microsoft AZ-500 Practice Test 1

Question

Microsoft AZ-500 Practice Tests

Practice Tests