Microsoft AZ-500 Practice Test - Questions Answers, Page 6

Answer: A

Explanation:

You need to configure the backup policy for the Azure SQL database.

1. In the Azure portal, type Azure SQL Database in the search box, select Azure SQL Database from the search results then select Homepage. Alternatively, browse to Azure SQL Database in the left navigation pane.

2. Select the server hosting the Homepage database and click on Manage backups.

3. Click on Configure policies.

4. Ensure that the Weekly Backups option is ticked.

5. Configure the How long would you like weekly backups to be retained option to 8 weeks.

6. Click Apply to save the changes.

Answer: A

Explanation:

You need to configure an option in the Advanced Access Policy of the key vault.

1. In the Azure portal, type Azure Key Vault in the search box, select Azure Key Vault from the search results then select the key vault named KV11597200. Alternatively, browse to Azure Key Vault in the left navigation pane.

2. In the properties of the key vault, click on Advanced Access Policies.

3. Tick the checkbox labelled Enable access to Azure Resource Manager for template deployment.

4. Click Save to save the changes.

Answer: A

Explanation:

You need to enable the Web Application Firewall on the Application Gateway.

1. In the Azure portal, type Application gateways in the search box, select Application gateways from the search results then select the gateway named Homepage-AGW. Alternatively, browse to Application Gateways in the left navigation pane.

2. In the properties of the application gateway, click on Web application firewall.

3. For the Tier setting, select WAF V2.

4. In the Firewall status section, click the slider to switch to Enabled.

5. In the Firewall mode section, click the slider to switch to Prevention.

6. Click Save to save the changes.

Answer: A

Explanation:

1. In the Azure portal, type App services in the search box and select App services from the search results. 2. Click the Create app service button to create a new app service.

3. In the Resource Group section, click the Create new link to create a new resource group.

4. Give the resource group a name such as Intranet11597200RG and click OK.

5. In the Instance Details section, enter Intranet11597200 in the Name field.

6. In the Runtime stack field, select any runtime stack such as .NET Core 3.1.

7. Click the Review + create button.

8. Click the Create button to create the web app.

9. Click the Go to resource button to open the properties of the new web app.

10. In the Settings section, click on Authentication / Authorization.

11. Click the App Service Authentication slider to set it to On.

12. In the Action to take when request is not authentication box, select Log in with Azure Active Directory. 13. Click Save to save the changes.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault

Answer: A

Explanation:

1. In the Azure portal, type SQL in the search box, select SQL databases from the search results then select SQLdb1. Alternatively, browse to SQL databases in the left navigation pane.

2. In the properties of SQLdb1, scroll down to the Security section and select Advanced data security.

3. Click on the Settings icon.

4. Tick the Enable Advanced Data Security at the database level checkbox.

5. Click Yes at the confirmation prompt.

6. In the Storage account select a storage account if one isn’t selected by default.

7. Under Advanced Threat Protection Settings, enter [email protected] in the Send alerts to box.

8. Click the Save button to save the changes.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/advanced-data-security

Answer: A

Explanation:

1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane.

2. In the Key Vault properties, scroll down to the Settings section and select Access Policies.

3. Select the Azure Disk Encryption for volume encryption

4. Click Save to save the changes.

Answer: A

Explanation:

You need to assign the user the Key Vault Secrets Officer role.

1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane.

2. In the key vault properties, select Access control (IAM).

3. In the Add a role assignment section, click the Add button.

4. In the Role box, select the Key Vault Secrets Officer role from the drop-down list.

5. In the Select box, start typing User2-11641655 and select User2-11641655 from the search results.

6. Click the Save button to save the changes.