You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

From Advanced Threat Protection types, select SQL injection vulnerability.

Configure the Send scan report to setting.

Set Periodic recurring scans to ON.

Enable the Microsoft Defender for SQL plan.

You have an Azure AD tenant that contains 500 users and an administrative unit named AU1.From the Azure Active Directory admin center, you plan to add the users to AU1 by using Bulk add members. You need to create and upload a file for the bulk add.What should you include in the file?

Only the user principal name (UPN) and display name of each user

only the display name of each user

only the user principal name (UPN) of each user

only the object identifier of each user

only the user principal name (UPN) and object identifier of each user

Only the user principal name (UPN) and display name of each user

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege. What should you do?

Create a resource group and assign User1 to the Managed Identity Contributor role.

Create a management group and assign User1 the Managed Identity Operator role.

Create an organizational unit (OU) and assign User1 the User administrator Azure AD role.

Create management group and assign User1 the Hybrid Identity Administrator Azure AD role.

You have an Azure subscription.You create a new virtual network named VNet1.You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic. What should you do?

Create an Azure application gateway.

Create an Azure App Service Hybrid Connection.

Configure regional virtual network integration.

Create an App Service Environment

Create an Azure application gateway.

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFWLYou need to identify whether you can use the following features with AzFW1:• TLS inspection• Threat intelligence• The network intrusion detection and prevention systems (IDPS)What can you use?

TLS inspection, threat intelligence, and the IDPS

TLS inspection and the IDPS only

threat intelligence and the IDPS only

TLS inspection, threat intelligence, and the IDPS

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azure DNS.You need to ensure that VM1 connects to storage! by using a private IP address. The solution must minimize administrative effort. What should you do?

For storage1, create a new private endpoint.

For storage1, disable public network access.

Create an Azure Private DNS zone.

For storage1, create a new private endpoint.

You have an Azure subscription that contains a user named UseR1. You need to ensure that UseR1 can perform the following tasks:• Create groups.• Create access reviews for role-assignable groups.• Assign Azure AD roles to groups.The solution must use the principle of least privilege. Which role should you assign to User1?

Identity Governance Administrator

You have an Azure subscription that uses Microsoft Defender for Cloud. The subscription contains the Azure Policy definitions shown in the following table. Which definitions can be assigned as a security policy in Defender for Cloud?

Initiative1 and Initiative2 only

Policy1, Policy2, Initiative1, and Initiative2

You have an Azure subscription that uses Microsoft Defender for Cloud.You need to use Defender for Cloud to review regulatory compliance with the Azure CIS 1.4,0 standard. The solution must minimize administrative effort. What should you do first?

Manually add the Azure CIS 1.4.0 standard.

Disable one of the Out of the box standards.

Your on-premises network contains a Hyper-V virtual machine named VM1. You need to use Azure Arc to onboard VM1 to Microsoft Defender for Cloud. What should you install first?

the Azure Connected Machine agent

You have an Azure subscription. That contains the virtual machines shown in the following table. You need to enable file integrity monitoring in Microsoft Defender for Cloud. Which computers will support file integrity monitoring?

Computer1, Computed, and Computed

You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud. You have the management group hierarchy shown in the following exhibit. You create the definitions shown in the following table. You need to use Defender for Cloud to add a security policy. Which definitions can you use as a security policy?

Initiative1 and Initiative2 only

Initiative1, Initiative2, and Initiatives only

Policy1, Initiative1, Initiative2, and Initiative3

You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM).A user named User1 is eligible for the Billing administrator role.You need to ensure that the role can only be used for a maximum of two hours.What should you do?

Edit the role assignment settings.

Update the end date of the user assignment

Edit the role activation settings.

You have an Azure subscription that contains the resources shown in the following table.You need to configure storage1 to regenerate keys automatically every 90 days. Which cmdlet should you run?

Add-AsKeyVaultmanageStorageAccount

Add-A:StorogcAccountmanagementPolicyAction

Set-A;StorageAccountimanagementPolicy

Add-AsKeyVaultmanageStorageAccount

Microsoft AZ-500 Practice Test 9 - Free Online Exam Prep & Questions

You have an Azure subscription that contains an Azure key vault.

You need to configure maximum number of days for Which new keys are valid. The solution must minimize administrative effort. What should you use?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-500 Practice Test 9

Question

Microsoft AZ-500 Practice Tests

Practice Tests