Home / Microsoft / AZ-500

Microsoft AZ-500 Practice Test - Questions Answers, Page 33

Question list

List of questions

Question 321

(0)

You have an Azure subscription that contains an Azure key vault. You need to configure maximum number of days for Which new keys are valid. The solution must minimize administrative effort. What sh

Question 322

(0)

You have an Azure key vault named Vault1 that stores the resources shown in the following table. Which resources support the creation of a rotation policy?

Question 323

(0)

You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should y

Question 324

(0)

You have an Azure AD tenant that contains 500 users and an administrative unit named AU1. From the Azure Active Directory admin center, you plan to add the users to AU1 by using Bulk add members. Y

Question 325

(0)

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege. What should you

Question 326

(0)

You have an on-premises network and an Azure subscription. You have the Microsoft SQL Server instances shown in the following table. You plan to implement Microsoft Defender for SQL. Which SQL

Question 327

(0)

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1. You deploy an Azure Synapse Analytics workspace named synapsews1 to a managed virtual network. Yo

Question 328

(0)

You have an Azure subscription. You create a new virtual network named VNet1. You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses

Question 329

(0)

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFWL You need to identify whether you can use the following features with AzFW1: • TLS inspection • Thre

Question 330

(0)

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azu

Question 321

You have an Azure subscription that contains an Azure key vault.

You need to configure maximum number of days for Which new keys are valid. The solution must minimize administrative effort. What should you use?

Key Vault properties

Azure Policy

Azure Purview

Azure Blueprints

Show Answer Comment (0)

Question 322

You have an Azure key vault named Vault1 that stores the resources shown in the following table.

Which resources support the creation of a rotation policy?

Key 1 only

Cert1 only

Key1 and Secret1 only

Key1 and Cert1 only

Secret1 and Cert1 only

Key1, Secret1, and Cert1

Show Answer Comment (0)

You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

From Advanced Threat Protection types, select SQL injection vulnerability.

Configure the Send scan report to setting.

Set Periodic recurring scans to ON.

Enable the Microsoft Defender for SQL plan.

Show Answer Comment (0)

Question 324

You have an Azure AD tenant that contains 500 users and an administrative unit named AU1.

From the Azure Active Directory admin center, you plan to add the users to AU1 by using Bulk add members. You need to create and upload a file for the bulk add.

What should you include in the file?

only the display name of each user

only the user principal name (UPN) of each user

only the object identifier of each user

only the user principal name (UPN) and object identifier of each user

Only the user principal name (UPN) and display name of each user

Show Answer Comment (0)

Question 325

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege. What should you do?

Create a resource group and assign User1 to the Managed Identity Contributor role.

Create a management group and assign User1 the Managed Identity Operator role.

Create an organizational unit (OU) and assign User1 the User administrator Azure AD role.

Create management group and assign User1 the Hybrid Identity Administrator Azure AD role.

Show Answer Comment (0)

Question 326

You have an on-premises network and an Azure subscription.

You have the Microsoft SQL Server instances shown in the following table.

You plan to implement Microsoft Defender for SQL.

Which SQL Server instances will be protected by Microsoft Defender for SQL?

sql1 and sql2 only

sql1, sql2, andsql3 only

sql1 sql2 and so.14 only

sql1, sql2, sql3, and sql4

Show Answer Comment (0)

Question 327

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1. You deploy an Azure Synapse Analytics workspace named synapsews1 to a managed virtual network. You need to enable access from synapsews1 to storage1. What should you configure?

a virtual network gateway

a network security group (NSG)

a private endpoint

peering

Show Answer Comment (0)

Question 328

You have an Azure subscription.

You create a new virtual network named VNet1.

You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic. What should you do?

Create an Azure App Service Hybrid Connection.

Configure regional virtual network integration.

Create an App Service Environment

Create an Azure application gateway.

Show Answer Comment (0)

Question 329

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFWL

You need to identify whether you can use the following features with AzFW1:

• TLS inspection

• Threat intelligence

• The network intrusion detection and prevention systems (IDPS)

What can you use?

TLS inspection only

threat intelligence only

TLS inspection and the IDPS only

threat intelligence and the IDPS only

TLS inspection, threat intelligence, and the IDPS

Show Answer Comment (0)

Question 330

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azure DNS.

You need to ensure that VM1 connects to storage! by using a private IP address. The solution must minimize administrative effort. What should you do?

For storage1, disable public network access.

Create an Azure Private DNS zone.

On VNet1. create a new subnet.

For storage1, create a new private endpoint.

Show Answer Comment (0)

Total 439 questions