You have an Azure subscription that is linked to an Azure AD tenant and contains the resources shown in the following table. Which resources can be assigned the Contributor role for VM1?

Group1, Managed1, VM1. and App1 only

You have an Azure subscription named Sub1. Sub1 contains a virtual network named VNet1 that contains one subnet named Subnet1.Subnet1 contains an Azure virtual machine named VM1 that runs Ubuntu Server 20.04.You create a service endpoint for Microsoft. Storage in Subnet1.You need to ensure that when you deploy Docker containers to VM1, the containers can access Azure Storage resources by using the service endpoint.What should you do on VM1 before you deploy the container?

Install the container network interface (CNI) plug-in.

Create an application security group and a network security group (NSG).

Install the container network interface (CNI) plug-in.

Edit the docker-compose.ym1 file.

You have an Azure subscription that uses Microsoft Defender for Cloud.You have an Amazon Web Services (AWS) account.You need to add the AWS account to Defender for Cloud.What should you do first?

From Defender for Cloud, configure the Environment settings.

From the Azure portal, add the AWS enterprise application.

From the AWS account, enable a security hub.

From Defender for Cloud, configure the Security solutions settings.

From Defender for Cloud, configure the Environment settings.

You have an Azure subscription that contains a virtual network named VNet1. The subscription contains an Azure App Service web app named App1.You have an Azure Front Door profile named AFD1 that has an Azure Web Application Firewall (WAF) policy.You need to ensure that all inbound traffic to App1 is filtered through AFD1.What should you do?

For App1, configure the HTTP headers filter settings.

For VNet1, configure network security group (NSG) rules.

For App1, configure the HTTP headers filter settings.

For App1, enable virtual network integration.

Configure Microsoft Entra application proxy.

You have an Azure subscription that contains a managed identity named Identity1 and the Azure key vaults shown in the following table. Key Vault1 contains an access policy that grants Identity1 the following key permissions:* Get* List* Wrap* UnwrapYou need to provide Identity1 with the same permissions for KeyVault2. The solution must use the principle of least privilege.Which role should you assign to Identity1?

Key Vault Crypto Service Encryption User

You have an Azure subscription that contains an Azure key vault named Vault1 and a virtual machine named VM1. VM1 has the Key Vault VM extension installed.For Vault1, you rotate the keys, secrets, and certificates.What will be updated automatically on VM1?

the secrets and certificates only

the keys, secrets, and certificates

You have a Microsoft Entra tenant that uses Microsoft Entra Permissions Management and contains the accounts shown in the following table: Which accounts will be listed as assigned to highly privileged roles on the Azure AD insights tab in the Entra Permissions Management portal?

Admin1. Admin2, and Admin3 only

Admin2. Admin3, and Admin4 only

Admin1. Admin2, Admin3. and Admin4

You have an Azure subscription named Subscription1 that is linked to a Microsoft Entra tenant named contoso.com and a resource group named RG1.You create a custom role named Role1 in contoso.com.Where can you use Role1 for permission delegation?

contoso.com. RG1. and Subscription!

contoso.com and Subscription 1 only

contoso.com. RG1. and Subscription!

You have an Azure subscription that contains a SQL Server on Azure Virtual Machines instance named SQt1 and a Microsoft Sentinel workspace named Sentinel1.You need to monitor security incidents on SQL1 by using Sentinel1.What should you do first?

On SQL1, enable SQL1 Server audit.

On SQL1. install the Connected Machine agent for Azure Arc-enabled servers.

From the Azure portal, create a Log Analytics workspace.

From Sentinel1, enable VM insights.

You have an Azure subscription that contains an Azure App Service app named App1, an Azure container instance named AC1. and a storage account named storage1. AC1 hosts an app named App2.Users send requests to App1 by using a URL of https:/app1.contoso.com/echo/resource-cache? param1 =sample. App1 calls App2. which retrieves data from storage1.You need to ensure that a security alert will be generated when connections are detected from anomalous IP addresses. Which Microsoft Defender for Cloud service should you use?

Microsoft Defender for App Service

Microsoft Defender for Containers

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1.You have an Azure container registry that stores container images that were deployed by using Azure DevOps Microsoft-hosted agents.You need to ensure that administrators can access AKS1 only from specific networks. The solution must minimize administrative effort.What should you configure for AKS1?

an Application Gateway Ingress Controller (AGIC)

Microsoft AZ-500 Practice Test 11 - Free Online Exam Prep & Questions

DRAG DROP

You have an Azure subscription.

You create an Azure Firewall policy that has the rules shown in the following table:

Microsoft AZ-500 image Question 131 87642 10022024015441000000

In which order should the rules be processed? To answer, move all rules from the list of rules to the answer area and arrange them in the correct order.

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-500 Practice Test 11

Question

Microsoft AZ-500 Practice Tests

Practice Tests