You have an Azure subscription named Sub1 that contains the resources shown in the following table. You need to ensure that you can provide VM1 with secure access to a database on SQL1 by using a contained database user.What should you do?

Enable a managed service identity on VM1.

Configure a service endpoint on SQL1.

You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table: In Sub1, you create a virtual machine that has the following configurations:Name: VM1Size: DS2v2Resource group: RG1Region: West EuropeOperating system: Windows Server 2016You plan to enable Azure Disk Encryption on VM1.In which key vaults can you store the encryption key for VM1?

Vault1, Vault2, Vault3, or Vault4

You have an Azure web app named webapp1.You need to configure continuous deployment for webapp1 by using an Azure Repo.What should you create first?

an Azure Application Insights service

You have an Azure web app named WebApp1.You upload a certificate to WebApp1.You need to make the certificate accessible to the app code of WebApp1.What should you do?

Add an app setting to the WebApp1 configuration.

Add a user-assigned managed identity to WebApp1.

Add an app setting to the WebApp1 configuration.

Enable system-assigned managed identity for the WebApp1.

Configure the TLS/SSL binding for WebApp1.

You have an Azure subscription that contains four Azure SQL managed instances.You need to evaluate the vulnerability of the managed instances to SQL injection attacks.What should you do first?

Create an Azure Sentinel workspace.

Add the SQL Health Check solution to Azure Monitor.

Create an Azure Advanced Threat Protection (ATP) instance.

You have an Azure subscription named Sub1. Sub1 contains a virtual network named VNet1 that contains one subnet named Subnet1. You create a service endpoint for Subnet1.Subnet1 contains an Azure virtual machine named VM1 that runs Ubuntu Server 18.04.You need to deploy Docker containers to VM1. The containers must be able to access Azure Storage resources and Azure SQL databases by using the service endpoint. What should you do on VM1 before you deploy the container?

Install the container network interface (CNI) plug-in.

Create an application security group and a network security group (NSG).

Edit the docker-compose.yml file.

Install the container network interface (CNI) plug-in.

You have Azure Resource Manager templates that you use to deploy Azure virtual machines.You need to disable unused Windows features automatically as instances of the virtual machines are provisioned. What should you use?

an Azure Desired State Configuration (DSC) virtual machine extension

device configuration policies in Microsoft Intune

an Azure Desired State Configuration (DSC) virtual machine extension

device compliance policies in Microsoft Intune

You are configuring an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry. You need to use the auto-generated service principal to authenticate to the Azure Container Registry. What should you create?

an Azure Active Directory (Azure AD) role assignment

an Azure Active Directory (Azure AD) group

an Azure Active Directory (Azure AD) role assignment

an Azure Active Directory (Azure AD) user

You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing.You need to implement application routing that will provide reverse proxy and TLS termination for AKS services by using a single IP address.What should you do?

Create an AKS Ingress controller.

Install the container network interface (CNI) plug-in.

Create an Azure Standard Load Balancer.

Create an Azure Basic Load Balancer.

Microsoft AZ-500 Practice Test 2 - Free Online Exam Prep & Questions

Question 1 / 40

DRAG DROP

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Subscription named Sub1. Sub1 contains an Azure virtual machine named VM1 that runs Windows Server 2016.

You need to encrypt VM1 disks by using Azure Disk Encryption.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.