ExamGecko
Login
Home / Microsoft / AZ-500 / List of questions
Ask Question

Microsoft AZ-500 Practice Test - Questions Answers, Page 20

List of questions

Question 191

Report
Export
Collapse

HOTSPOT

You have a management group named Group1 that contains an Azure subscription named sub1. Sub1 has a subscription ID of 11111111-1234-1234-1234-1111111111.

You need to create a custom Azure role-based access control (RBAC) role that will delegate permissions to manage the tags on all the objects in Group1.

What should you include in the role definition of Role1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 191 87304 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 191 87304 10022024015440000

Explanation:

Note: Assigning a custom RBAC role as the Management Group level is currently in preview only. So, for now the answer to the assignable scope is the subscription level.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal#step-5-assignable-scopes

asked 02/10/2024
Jeremy Cheeseborough
41 questions

Question 192

Report
Export
Collapse

HOTSPOT

You have an Azure subscription that contains the custom roles shown in the following table.

Microsoft AZ-500 image Question 58 87305 10022024015440000000

In the Azure portal, you plan to create new custom roles by cloning existing roles. The new roles will be configured as shown in the following table.

Microsoft AZ-500 image Question 58 87305 10022024015440000000

Which roles can you clone to create each new role? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 192 87305 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 192 87305 10022024015440000

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/roles/custom-create

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal

asked 02/10/2024
Malik Khabir
34 questions

Question 193

Report
Export
Collapse

HOTSPOT

You have an Azure subscription that contains the Azure Active Directory (Azure AD) resources shown in the following table.

Microsoft AZ-500 image Question 59 87306 10022024015440000000

You create the groups shown in the following table.

Microsoft AZ-500 image Question 59 87306 10022024015440000000

Which resources can you add to Group5 and Group6? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 193 87306 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 193 87306 10022024015440000
asked 02/10/2024
AJ Foraker
36 questions

Question 194

Report
Export
Collapse

HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains three security groups named Group1, Group2, and Group3 and the users shown in the following table.

Microsoft AZ-500 image Question 60 87307 10022024015440000000

Group3 is a member of Group2.

In contoso.com, you register an enterprise application named App1 that has the following settings:

Owners: User1

Users and groups: Group2

You configure the properties of App1 as shown in the following exhibit.

Microsoft AZ-500 image Question 60 87307 10022024015440000000

For each of the following statements, select Yes if the statement is true. Otherwise, select no.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 194 87307 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 194 87307 10022024015440000

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal

asked 02/10/2024
Elliott Fields
34 questions

Question 195

Report
Export
Collapse

You have an Azure subscription that contains the resources shown in the following table.

Microsoft AZ-500 image Question 61 87308 10022024015440000000

You need to ensure that ServerAdmins can perform the following tasks:

Create virtual machines in RG1 only.

Connect the virtual machines to the existing virtual networks in RG2 only.

The solution must use the principle of least privilege.

Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

a custom RBAC role for RG2
a custom RBAC role for RG2
the Network Contributor role for RG2
the Network Contributor role for RG2
the Contributor role for the subscription
the Contributor role for the subscription
a custom RBAC role for the subscription
a custom RBAC role for the subscription
the Network Contributor role for RG1
the Network Contributor role for RG1
the Virtual Machine Contributor role for RG1
the Virtual Machine Contributor role for RG1
Suggested answer: A, F

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

asked 02/10/2024
matteo vadagnini
46 questions

Question 196

Report
Export
Collapse

HOTSPOT

Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory (Azure AD).

The Azure AD tenant contains the users shown in the following table.

Microsoft AZ-500 image Question 62 87309 10022024015440000000

You configure the Authentication methods – Password Protection settings for adatum.com as shown in the following exhibit.

Microsoft AZ-500 image Question 62 87309 10022024015440000000

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 196 87309 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 196 87309 10022024015440000

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-premises-deploy

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-password-ban-bad

asked 02/10/2024
Christophe Troessaert
37 questions

Question 197

Report
Export
Collapse

HOTSPOT

Your company has an Azure subscription named Subscription1. Subscription1 is associated with the Azure Active Directory tenant that includes the users shown in the following table.

Microsoft AZ-500 image Question 63 87310 10022024015440000000

The company is sold to a new owner.

The company needs to transfer ownership of Subscription1.

Which user can transfer the ownership and which tool should the user use? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft AZ-500 image Question 197 87310 10022024015440000
Correct answer: Microsoft AZ-500 image answer Question 197 87310 10022024015440000

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/billing-subscription-transfer

asked 02/10/2024
KHALID ALSHAHRANI
46 questions

Question 198

Report
Export
Collapse

You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You are assigned the Global administrator role for the tenant. You are responsible for managing Azure Security Center settings. You need to create a custom sensitivity label.

What should you do first?

Create a custom sensitive information type.
Create a custom sensitive information type.
Elevate access for global administrators in Azure AD.
Elevate access for global administrators in Azure AD.
Upgrade the pricing tier of the Security Center to Standard.
Upgrade the pricing tier of the Security Center to Standard.
Enable integration with Microsoft Cloud App Security.
Enable integration with Microsoft Cloud App Security.
Suggested answer: A

Explanation:

First, you need to create a new sensitive information type because you can't directly modify the default rules. References: https://docs.microsoft.com/en-us/office365/securitycompliance/customize-a-built-in-sensitive-information-type

asked 02/10/2024
None None
40 questions

Question 199

Report
Export
Collapse

You have an Azure subscription named Sub1.

In Azure Security Center, you have a security playbook named Play1. Play1 is configured to send an email message to a user named User1. You need to modify Play1 to send email messages to a distribution group named Alerts.

What should you use to modify Play1?

Azure DevOps
Azure DevOps
Azure Application Insights
Azure Application Insights
Azure Monitor
Azure Monitor
Azure Logic Apps Designer
Azure Logic Apps Designer
Suggested answer: D

Explanation:

You can change an existing playbook in Security Center to add an action, or conditions. To do that you just need to click on the name of the playbook that you want to change, in the Playbooks tab, and Logic App Designer opens up. References: https://docs.microsoft.com/en-us/azure/security-center/security-center-playbooks

asked 02/10/2024
Rene Claassen
38 questions

Question 200

Report
Export
Collapse

You create a new Azure subscription.

You need to ensure that you can create custom alert rules in Azure Security Center.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Onboard Azure Active Directory (Azure AD) Identity Protection.
Onboard Azure Active Directory (Azure AD) Identity Protection.
Create an Azure Storage account.
Create an Azure Storage account.
Implement Azure Advisor recommendations.
Implement Azure Advisor recommendations.
Create an Azure Log Analytics workspace.
Create an Azure Log Analytics workspace.
Upgrade the pricing tier of Security Center to Standard.
Upgrade the pricing tier of Security Center to Standard.
Suggested answer: B, D

Explanation:

D: You need write permission in the workspace that you select to store your custom alert.

References: https://docs.microsoft.com/en-us/azure/security-center/security-center-custom-alert

asked 02/10/2024
Md Ali Uz Zaman
34 questions
Total 442 questions
Go to page: of 45
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Subscription. The subscription contains 50 virtual machines that run Windows Server 2012 R2 or Windows Server 2016. You need to deploy Microsoft Antimalware to the virtual machines. Solution: You add an extension to each virtual machine. Does this meet the goal?
Simulation LAB Task 1 You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources.
You have Azure Resource Manager templates that you use to deploy Azure virtual machines. You need to disable unused Windows features automatically as instances of the virtual machines are provisioned. What should you use?
You are configuring and securing a network environment. You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic. You need to ensure that all network traffic is routed through VM1. What should you configure?
HOTSPOT You have an Azure subscription that contains the resources shown in the following table. Transparent Data Encryption (TDE) is disabled on SQL1. You assign policies to the resource groups as shown in the following table. You plan to deploy Azure SQL databases by using an Azure Resource Manager (ARM) template. The databases will be configured as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
You have an Azure subscription that contains the Azure virtual machines shown in the following table. You create an MDM Security Baseline profile named Profile1. You need to identify to which virtual machines Profile1 can be applied. Which virtual machines should you identify?
HOTSPOT You have Azure virtual machines that have Update Management enabled. The virtual machines are configured as shown in the following table. You schedule two update deployments named Update1 and Update2. Update1 updates VM3. Update2 updates VM6. Which additional virtual machines can be updated by using Update1 and Update2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing. You need to implement application routing that will provide reverse proxy and TLS termination for AKS services by using a single IP address. What should you do?
HOTSPOT You have an Azure key vault. You need to delegate administrative access to the key vault to meet the following requirements: Provide a user named User1 with the ability to set advanced access policies for the key vault. Provide a user named User2 with the ability to add and delete certificates in the key vault. Use the principle of least privilege. What should you use to assign access to each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
HOTSPOT You have an Azure subscription that contains the following resources: An Azure key vault An Azure SQL database named Database1 Two Azure App Service web apps named AppSrv1 and AppSrv2 that are configured to use system-assigned managed identities and access Database1 You need to implement an encryption solution for Database1 that meets the following requirements: The data in a column named Discount in Database1 must be encrypted so that only AppSrv1 can decrypt the data. AppSrv1 and AppSrv2 must be authorized by using managed identities to obtain cryptographic keys. How should you configure the encryption settings for Database1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.