You have an Azure AD tenant that contains the users shown in the following table. You need to ensure that the users cannot create app passwords. The solution must ensure that User1 can continue to use the Mail and Calendar app.What should you do?

Configure a multi-factor authentication (MFA) registration policy.

Assign User! the Authentication Policy Administrator role.

Enable Azure AD Password Protection.

Configure a multi-factor authentication (MFA) registration policy.

You have an Azure subscription.You plan to map an online infrastructure and perform vulnerability scanning for the following:• ASNs• Hostnames• IP addresses• SSL certificatesWhat should you use?

Microsoft Defender External Attack Surface Management (Defender EASM)

Microsoft Defender for Identity

Microsoft Defender for Endpoint

Microsoft Defender External Attack Surface Management (Defender EASM)

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azure DNS.You need to ensure that VM1 connects to storage1 by using a private IP address. The solution must minimize administrative effort.What should you do?

For storage1, create a new private endpoint.

For storage1, disable public network access.

Create an Azure Private DNS zone.

For storage1, create a new private endpoint.

You have an Azure subscription that uses Microsoft Defender for Cloud.You have an Amazon Web Service (AWS) account named AWS1 that is connected to defender for Cloud.You need to ensure that AWS foundational Security Best Practices. The solution must minimize administrate effort.What should do you in Defender for Cloud?

Assign a built-in compliance standard.

Create a new customer assessment.

Assign a built-in compliance standard.

You have an Azure subscription that contains an Azure Blob storage account bolb1.You need to configure attribute-based access control (ABAC) for blob1.Which attributes can you use in access conditions?

blob index tags and container names only

file extensions and container names only

blob index tags, file extensions, and container names

You have an Azure subscription that contains the resources show in the following table. Both VM1 and VM2 connect to VNET1 and are configured to use NSG1.You need to ensure that only VM1 and VM2 can access DB1.What should you do?

For NSG1, configure a rule that has a service tag.

Add the IP address range of VNET1 to the Firewall setting of DB1.

For NSG1, configure a rule that has a service tag.

Create an application security group.

Configure DB1 to allow access from only VNET1.

You have an Azure subscription that contains an Azure web app named 1 and a virtual machine named VM1. VM1 runs Microsoft SQL Server and is connected to a virtual network named VNet1.App1, VM1, and Vent are in the US Central Azure region.You need to ensure that App1 can connect to VM1. The solution must minimize costs.

regional virtual network integration

gateway-required virtual network integration

Azure Application Gateway integration

You have an Azure subscription that contains a storage account and an Azure web app named App1.App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings.You need to validate the name resolution to Cosmos1.Which DNS zone should you use?

Endpoint1. Privatelink,documents,azure,com

Endpoint1. Privatelink,blob,core,windows,net

Endpoint1. Privatelink,database,azure,com

Endpoint1. Privatelink,azurewebsites,net

Endpoint1. Privatelink,documents,azure,com

You have an Azure AD turned that contains a user named User1.You purchase an App named App1.User1 needs to publish App1 by using Azure AD Application Proxy.Which role should you assign to User1?

Cloud App Security Administrator

You have an Azure Active Directory (Azure AD) tenant.You need to prevent nonprivileged Azure AD users from creating service principals in Azure AD.What should you do in the Azure Active Directory admin center of the tenant?

From the User settings blade, set Users can register applications to No

From the Properties Wade, set Enable Security defaults to Yes.

From the Properties blade, set Access management fen Azure resources to No

From the User settings blade, set Users can register applications to No

From the User settings blade, set Restrict access to Azure AD administration portal to Yes.

You have an Azure subscription that contains a resource group named RG1 and the identities shown in the following table. You assign Group4 the Contributor role for RG1.Which identities can you add to Group4 as members?

User1, Group1, Group2, and Group3

You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1.You need to ensure that key1 is rotated every 90 days.What should you do first?

Modify the Access policies settings of Vault1.

Upgrade Vault1 to Key Vault Premium.

Microsoft AZ-500 Practice Test 10 - Free Online Exam Prep & Questions

You have an Azure subscription that contains a resource group named RG1 and a security group named ServerAdmins. RG1 contains 10 virtual machines, a virtual network named VNET1, and a network security group JNSG) named NSG1. ServerAdmins can access the virtual machines by using RDP.

You need to ensure that NSG1 only allows RDP connections to the virtual machines for a maximum of 60 minutes when a member of ServerAdmins requests access. What should you configure?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-500 Practice Test 10

Question

Microsoft AZ-500 Practice Tests

Practice Tests