You have Azure Resource Manager templates that you use to deploy Azure virtual machines.You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.What should you use?

Azure Automation State Configuration

device compliance policies in Microsoft Intune

Azure Automation State Configuration

You have an Azure Active Directory (Azure AD) tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1.You discover that AKS1 cannot be accessed by using accounts from Contoso.com.You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort.What should you do first?

From AKS1, upgrade the version of Kubernetes.

From Azure AD, implement Azure AD Premium.

From Azure AD, configure the User settings.

You have an Azure subscription that contains an Azure Container Registry named Registry1. Azure Defender is enabled in the subscription. You upload several container images to Register1.You discover that vulnerability security scans were not performed.You need to ensure that the container images are scanned for vulnerabilities when they are uploaded to Registry1.What should you do?

From the Azure portal modify the Pricing tier settings.

From Azure CLI, lock the container images.

Upload the container images by using AzCopy.

Push the container images to Registry1 by using Docker

You have a web app hosted on an on-premises server that is accessed by using a URL of https://www.contoso.com.You plan to migrate the web app to Azure. You will continue to use https://www.contoso.com.You need to enable HTTPS for the Azure web app.What should you do first?

Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using TripleDES.

Export the public key from the on-premises server and save the key as a P7b file.

Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using TripleDES.

Export the public key from the on-premises server and save the key as a CER file.

Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using AES256.

You have an Azure subscription that contains two virtual machines named VM1 and VM2 that run Windows Server 2019.You are implementing Update Management in Azure Automation.You plan to create a new update deployment named Update1.You need to ensure that Update1 meets the following requirements:Automatically applies updates to VM1 and VM2.Automatically adds any new Windows Server 2019 virtual machines to Update1.What should you include in Update1?

a security group that has a Membership type of Assigned

a security group that has a Membership type of Dynamic Device

You have multiple development teams that will create apps in Azure.You plan to create a standard development environment that will be deployed for each team.You need to recommend a solution that will enforce resource locks across the development environments and ensure that the locks are applied in a consistent manner.What should you include in the recommendation?

an Azure Resource Manager template

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to deploy Azure AD Connect and to integrate Active Directory and the Azure AD tenant.You need to recommend an integration solution that meets the following requirements:Ensures that password policies and user logon restrictions apply to user accounts that are synced to the tenant Minimizes the number of servers required for the solution. Which authentication method should you include in the recommendation?

password hash synchronization with seamless single sign-on (SSO)

federated identity with Active Directory Federation Services (AD FS)

password hash synchronization with seamless single sign-on (SSO)

pass-through authentication with seamless single sign-on (SSO)

Your network contains an on-premises Active Directory domain named corp.contoso.com.You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You sync all on-premises identities to Azure AD.You need to prevent users who have a givenName attribute that starts with TEST from being synced to Azure AD. The solution must minimize administrative effort. What should you use?

Active Directory Users and Computers

Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant.You need to configure each subscription to have the same role assignments.What should you use?

Azure AD Privileged Identity Management (PIM)

You have an Azure subscription.You create an Azure web app named Contoso1812 that uses an S1 App Service plan.You plan to create a CNAME DNS record for www.contoso.com that points to Contoso1812.You need to ensure that users can access Contoso1812 by using the https://www.contoso.com URL.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Upload a PFX file to Contoso1812.

Turn on the system-assigned managed identity for Contoso1812.

Scale out the App Service plan of Contoso1812.

Add a deployment slot to Contoso1812.

Scale up the App Service plan of Contoso1812.

Upload a PFX file to Contoso1812.

Your network contains an Active Directory forest named contoso.com. You have an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to configure synchronization by using the Express Settings installation option in Azure AD Connect.You need to identify which roles and groups are required to perform the planned configurations. The solution must use the principle of least privilege.Which two roles and groups should you identify? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

the Global administrator role in Azure AD

the Enterprise Admins group in Active Directory

the Domain Admins group in Active Directory

the Security administrator role in Azure AD

the Global administrator role in Azure AD

the User administrator role in Azure AD

the Enterprise Admins group in Active Directory

You have a hybrid configuration of Azure Active Directory (Azure AD) that has Single Sign-On (SSO) enabled. You have an Azure SQL Database instance that is configured to support Azure AD authentication.Database developers must connect to the database instance from the domain joined device and authenticate by using their on-premises Active Directory account.You need to ensure that developers can connect to the instance by using Microsoft SQL Server Management Studio. The solution must minimize authentication prompts.Which authentication method should you recommend?

Active Directory - Universal with MFA support

You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com.An administrator named Admin1 has access to the following identities:An OpenID-enabled user accountA Hotmail accountAn account in contoso.comAn account in an Azure AD tenant named fabrikam.comYou plan to use Azure Account Center to transfer the ownership of Sub1 to Admin1.To which accounts can you transfer the ownership of Sub1?

contoso.com and fabrikam.com only

contoso.com, fabrikam.com, and Hotmail only

contoso.com and fabrikam.com only

contoso.com, fabrikam.com, Hotmail, and OpenID-enabled user account

Microsoft AZ-500 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

You have an Azure subscription that contains a virtual network. The virtual network contains the subnets shown in the following table.

Microsoft AZ-500 image Question 48 87370 10022024015441000000

The subscription contains the virtual machines shown in the following table.

Microsoft AZ-500 image Question 48 87370 10022024015441000000

You enable just in time (JIT) VM access for all the virtual machines.

You need to identify which virtual machines are protected by JIT.

Which virtual machines should you identify?

VM4 only

VM1 and VM3 only

VM1, VM3 and VM4 only

VM1, VM2, VM3, and VM4

Comment (0)

Microsoft AZ-500 Practice Test 4

Question

Microsoft AZ-500 Practice Tests

Practice Tests