You have an Azure Sentinel workspace.You need to create a playbook.Which two triggers will start the playbook? Each correct answer presents a complete solution, NOTE: Each correct selection is worth one point.

An Azure Sentinel alert is generated.

An Azure Sentinel incident is created.

An Azure Sentinel scheduled query rule is executed.

An Azure Sentinel data connector is added.

An Azure Sentinel alert is generated.

An Azure Sentinel hunting query result is returned.

An Azure Sentinel incident is created.

You have an Azure subscription that uses Microsoft Sentinel.You need to create a Microsoft Sentinel notebook that will use the Guided Investigation - Anomaly Lookup template. What should you create first?

an Azure Machine Learning workspace

You have an Azure subscription that contains the resources shown in the following Table.You plan to enable Microsoft Defender for Cloud for the subscription. Which resources can be protected by using Microsoft Defender for Cloud?

VM1.VNET1, storage1, and Vault1

You have an Azure subscription that contains an Azure SQL Database logic server named SQL1 and an Azure virtual machine named VM1. VM1 uses a private IP address only. The Firewall and virtual networks settings for SQL1 are shown in the following exhibit. You need to ensure that VM1 can connect to SQL1. The solution must use the principle of least privilege. What should you do?

Add an existing virtual network.

Set Connection Policy to Proxy.

Set Allow Azure services and resources to access this server to Yes.

You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table. You create the Azure policy shown in the following exhibit. You assign the policy to RG1.What will occur if you assign the policy to NSG1 and NSG2?

Flow logs will be enabled for NSG2 only

Flow logs will be enabled for NSG1 and NSG2.

Flow logs will be enabled for NSG2 only

Flow logs will be disabled for NSG1 and NSG2.

Flow logs will be enabled for NSG1 only.

You have 15 Azure virtual machines in a resource group named RG1.All virtual machines run identical applications.You need to prevent unauthorized applications and malware from running on the virtual machines.What should you do?

From Microsoft Defender for Cloud, configure adaptive application controls.

Configure Azure Active Directory (Azure AD) Identity Protection.

From Microsoft Defender for Cloud, configure adaptive application controls.

You have an Azure environment.You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001:2013 standards. What should you use?

Azure Active Directory (Azure AD) Identity Protection

Microsoft Defender for Identity

You have an Azure subscription that contains an Azure SQL database named DB1 in the East US Azure region. You create the storage accounts shown in the following table. You plan to enable auditing for DB1.Which storage accounts can you use as the auditing destination for DB1?

storage1, storage2 and storage3 only

You have an Azure Active Directory (Azure AD) tenant. The tenant contains users that are assigned Azure AD Premium Plan 2 licenses. You have an partner company that has a domain named The fabrikam.com domain contains a user named user'. User' has an email address of userl@tabrikam.com. You to provide User1 with to the resources in the tenant The solution must meet the following requirements:user1 must be able to sign in by using the userl@fabrikam.com credentials You must be able to grant User1 access to the resources in the tenant Administrative effort must be minimized.What should you do?

Create a user account for user1.

To the tenant add fabrikamcom as a custom domain

Set Enable guest self-service sign up via user flows to Yes for the tenant.

You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1 You need to ensure that the members of Group1 sign in by using passwordless authentication What should you do?

Configure the Microsoft Authenticator authentication method policy.

Configure the certificate-based authentication (CBA) policy.

Configure the sign-in risk policy.

Create a Conditional Access policy.

You have an Azure subscription that contains a web app named App1.Users must be able to select between a Google identity or a Microsoft identity when authenticating to App1. You need to add Google as an identity provider in Azure AD.Which two pieces of information should you configure? Each correct answer presents part of the solution. Each correct selection is worth one point

the endpoint URL Of an application

You have an Azure subscription that contains aYou need to grant user1 access to blob1. The solution must ensure that the access expires after six days. What should you use?

role-based access control (RBAC)

a shared access signature (SAS)

role-based access control (RBAC)

Microsoft AZ-500 Practice Test 8 - Free Online Exam Prep & Questions

HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following table.

Microsoft AZ-500 image Question 11 87522 10022024015441000000

You need to configure authorization access.

Which authorization types can you use for each storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-500 Practice Test 8

Question

Microsoft AZ-500 Practice Tests

Practice Tests