You have an Azure subscription that contains several Azure SQL databases and an Azure Sentinel workspace.You need to create a saved query in the workspace to find events reported by Azure Defender for SQL.What should you do?

From the Azure Sentinel workspace, create a Kusto Query Language query.

From Azure CLI run the Get-AzOperationalInsightsworkspace cmdlet.

From the Azure SQL Database query editor, create a Transact-SQL query.

From the Azure Sentinel workspace, create a Kusto Query Language query.

From Microsoft SQL Server Management Studio (SSMS), create a Transact-SQL query.

You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You need to identify which initiatives and policies you can add to Subscription1 by using Azure Security Center.What should you identify?

Initiative1, Initiative2, Policy1, and Policy2

Initiative1 and Initiative2 only

Initiative1, Initiative2, Policy1, and Policy2

You have an Azure resource group that contains 100 virtual machines.You have an initiative named Initiative1 that contains multiple policy definitions. Initiative1 is assigned to the resource group.You need to identify which resources do NOT match the policy definitions.What should you do?

From Azure Security Center, view the Regulatory compliance assessment.

From the Policy blade of the Azure Active Directory admin center, select Compliance.

From Azure Security Center, view the Secure Score.

From the Policy blade of the Azure Active Directory admin center, select Assignments.

You have an Azure subscription named Subscription1.You need to view which security settings are assigned to Subscription1 by default.Which Azure policy or initiative definition should you review?

the Enable Monitoring in Azure Security Center initiative definition

the Audit diagnostic setting policy definition

the Enable Monitoring in Azure Security Center initiative definition

the Enable Azure Monitor for VMs initiative definition

the Azure Monitor solution ‘Security and Audit’ must be deployed policy definition

You have an Azure environment.You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001 standards.What should you use?

Azure Active Directory (Azure AD) Identity Protection

Azure Advanced Threat Protection (ATP)

You have an Azure subscription that contains the resources shown in the following table. You plan to enable Azure Defender for the subscription.Which resources can be protected by using Azure Defender?

VM1, VNET1, storage1, and Vault1

You have an Azure subscription that contains a resource group named RG1 and a security group named ServerAdmins. RG1 contains 10 virtual machines, a virtual network named VNET1, and a network security group (NSG) named NSG1. ServerAdmins can access the virtual machines by using RDP.You need to ensure that NSG1 only allows RDP connections to the virtual machines for a maximum of 60 minutes when a member of ServerAdmins requests access.What should you configure?

a just in time (JIT) VM access policy in Azure Security Center

an Azure policy assigned to RG1

a just in time (JIT) VM access policy in Azure Security Center

an Azure Active Directory (Azure AD) Privileged Identity Management (PIM) role assignment

You have an Azure subscription named Subscription1 that contains a resource group named RG1 and the users shown in the following table. You perform the following tasks:Assign User1 the Network Contributor role for Subscription1.Assign User2 the Contributor role for RG1.To Subscription1 and RG1, you assign the following policy definition: External accounts with write permissions should be removed from your subscription.What is the Compliance State of the policy assignments?

The Compliance State of both policy assignments is Non-compliant.

The Compliance State of the policy assignment to Subscription1 is Compliant, and the Compliance State of the policy assignment to RG1 is Non-compliant.

The Compliance State of the policy assignment to Subscription1 is Non-compliant, and the Compliance State of the policy assignment to RG1 is Compliant.

The Compliance State of both policy assignments is Compliant.

You have 10 on-premises servers that run Windows Server 2019.You plan to implement Azure Security Center vulnerability scanning for the servers.What should you install on the servers first?

the Security Events data connector in Azure Sentinel

the Azure Arc enabled servers Connected Machine agent

the Microsoft Defender for Endpoint agent

the Security Events data connector in Azure Sentinel

the Microsoft Endpoint Configuration Manager client

You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role.You purchase a cloud app named App1 and register App1 in Azure AD.Admin1 reports that the option to enable token encryption for App1 is unavailable.You need to ensure that Admin1 can enable token encryption for App1 in the Azure portal.What should you do?

Add App1 as an enterprise application

Modify the API permissions of App1.

Add App1 as an enterprise application

Assign Admin1 the Cloud application administrator role.

You plan to deploy an app that will modify the properties of Azure Active Directory (Azure AD) users by using Microsoft Graph.You need to ensure that the app can access Azure AD.What should you configure first?

a custom role-based access control (RBAC) role

You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant. The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of Azure AD Connect.You create a new Azure subscription.You discover that the synced on-premises user accounts cannot be assigned roles in the new subscription. You need to ensure that you can assign Azure and Microsoft 365 roles to the synced Azure AD user accounts. What should you do fist?

Change the Azure AD tenant used by the new subscription.

Configure the Azure AD tenant used by the new subscription to use pass-through authentication.

Configure the Azure AD tenant used by the new subscription to use federated authentication.

Change the Azure AD tenant used by the new subscription.

Configure a second instance of Azure AD Connect.

You have an Azure subscription that contains an app named App1. App1 has the app registration shown in the following table. You need to ensure that App1 can read all user calendars and create appointments. The solution must use the principle of least privilege.What should you do?

Add a new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.

Add a new Application API permission for Microsoft.Graph Calendars.ReadWrite.

Add new Delegated API permission for Microsoft.Graph Calendars.ReadWrite.Shared.

You have an Azure subscription name Sub1 that contains an Azure Policy definition named Policy1. Policy1 has the following settings:Definition location: Tenant Root GroupCategory: MonitoringYou need to ensure that resources that are noncompliant with Policy1 are listed in the Azure Security Center dashboard. What should you do first?

Change the Category of Policy1 to Security Center.

Add Policy1 to a custom initiative.

Change the Definition location of Policy1 to Sub1.

Microsoft AZ-500 Practice Test 7 - Free Online Exam Prep & Questions

You have three on-premises servers named Server1, Server2, and Server3 that run Windows Server 2019. Server1 and Server2 and located on the Internal network. Server3 is located on the premises network. All servers have access to Azure.

From Azure Sentinel, you install a Windows firewall data connector.

You need to collect Microsoft Defender Firewall data from the servers for Azure Sentinel.

What should you do?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-500 Practice Test 7

Question

Microsoft AZ-500 Practice Tests

Practice Tests