Microsoft AZ-500 Practice Test - Questions Answers, Page 42

HOTSPOT

You have a Microsoft Entra tenant that contains the users shown in the following table.

You create and enforce a Microsoft Entra Identity Protection sign-in risk policy that has the following settings:

* Assignments: Include Group1, exclude Group2

* Conditions: Sign-in risk level: Low and above

* Access: Allow access, Require multi-factor authentication

You need to identify what occurs when the users sign in to Microsoft Entra ID.

What should you identify for each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have a Microsoft Entra tenant that contains a user named User1.

You plan to enable passwordless authentication for the tenant.

You need to ensure that User1 can enable the combined registration experience. The solution must use the principle of least privilege.

Which role should you assign to User1?

You have an Azure subscription that contains a virtual network named VNet1 VNet1 contains a single subnet. The subscription contains a virtual machine named VM1 that is connected to VNet1.

You plan to deploy an Azure SQL managed instance named SQL1.

You need to ensure that VM1 can access SQL1.

Which three components should you create? Each correct answer presents pan of the solution.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy a new Conditional Access policy named CAPolicy1.

You need to use the What If tool to evaluate how CAPolicy1 will affect uter1. The solution must minimize the impact of CAPolicy1 on the users.

To what should you set the Enable policy setting for CAPolicy1?

DRAG DROP

You have an Azure subscription that contains the resources shown in the following table.

You need to configure network connectivity to meet the following requirements:

* Communication from VM1 to storage' must traverse an optimized Microsoft backbone network.

* All the outbound traffic from VM1 to the internet must be denied.

* The solution must minimize costs and administrative effort

What should you configure for VNetl and NSG1? To answer, drag the appropriate components to the correct resources. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content

NOTE: Each correct selection is worth one point.

HOTSPOT

You have an Azure subscription that contains a storage account named contoso2023. You need to perform the following tasks:

* Verify that identity-based authentication over SMB is enabled.

* Only grant users access to contoso2023 in the year 2023.

Which two settings should you use? To answer, select the appropriate settings in the answer area NOTE: Each correct selection is worth one point.

HOTSPOT

You have an Azure Storage account that contains a blob container named container! and a client application named App1. You need to enable App1 access to container1 by using Microsoft Entra authentication. What should you do? lo answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.

HOTSPOT

You have an Azure subscription that contains an Azure key vault and an Azure SQL database named SQL1.

You generate a key named Key1.

You need to enable Transparent Data Encryption (TDE) for SQL1 by using Key1.

Which two settings should you modify for Key1? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription named Sub1 that has Security defaults disabled. The subscription contains the following users:

* Five users that have owner permissions for Sub1.

* Ten users that have owner permissions for Azure resources.

None of the users have multi-factor authentication (MFA) enabled.

Sub1 has the secure score as shown in the Secure Score exhibit. (Click the Secure Score tab.)

You plan to enable MFA for the following users:

* Five users that have owner permissions for Sub1.

* Five users that have owner permissions for Azure resources.

By how many points will the secure score increase after you perform the planned changes?