Microsoft AZ-500 Practice Test - Questions Answers, Page 45

You have an Azure subscription that contains the resources shown in the following table.

You need to configure AFW1 to only allow traffic from VM1 to storage accounts in the West US Azure region. The solution must minimize administrative effort.

What should you configure?

HOTSPOT

You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.com. In contoso.com, you register an app named App1. You need to perform the following tasks for App1:

* Add and configure the Mobile and desktop applications platform.

* Add the ipaddr optional claim.

Which two settings should you select for App1? To answer, select the appropriate settings in the answer area.

NOTE; Each correct selection is worth one point.

You have a Microsoft Entra tenant that contains a user named User1.

You have an app registration named App1.

For App1, you create an app role named Role1.

You need to assign User1 to Role1.

What should you use in the Azure portal?

HOTSPOT

You have an on-premises server named Server1.

You have an Azure subscription that contains a Microsoft Sentinel workspace named Sentinel 1.

You install the Windows Firewall solution in Sentinel1.

You need to use Microsoft Sentinel to monitor Windows Defender Firewall on Server1.

What should you install on Server1, and what should you create in the Azure subscription? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains an Azure App Services web app named WebApp1 and an Azure key vault named Vault1. Vault1 has the certificates shown in the following table.

You plan to implement TLS for WebApp1.

You need to add a certificate to WebApp1.

Which certificates from Vault1 can you add to WebApp1?

You have an on-premises datacenter that contains multiple servers.

You have an Azure subscription.

You plan to onboard the on-premises servers to Microsoft Defender for Cloud by using a script.

You need to create an identity to enable the script to run without prompting for Microsoft Entra credentials.

Which type of identity should you create?

You have an Azure subscription.

You need to ensure that you receive notifications regarding suspicious Azure DNS activity.

Which Microsoft Defender plan for Cloud Workload Protection (CWP) should you enable?

HOTSPOT

You have an Azure subscription.

You configure Microsoft Sentinel to use multiple data sources.

You need to create analytic rules that meet the following requirements:

* Rule 1: Automatically match Common Event Format (CEF) logs and syslog data with domain, IP address, and URL indicators.

* Rule 2: Use Microsoft proprietary algorithms.

Which type of detection should you use for each rule? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription.

You plan to deploy an Azure SQL managed instance named AzSQL1.

You need to recommend an encryption solution for AzSQL1.

The solution must meet the following requirements:

* The database engine must be prevented from performing key provisioning, data encryption, and decryption operations.

* Database administrators must be prevented from viewing the encrypted data in plain text.

What should you include in the recommendation?