Microsoft AZ-500 Practice Test - Questions Answers, Page 29

https://docs.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database?tabs=windowsclient%2Cdotnet

Box 1: Roles and administrators

Here you will find Role1 and be able to assign User1 to the role.

Box 2: Self Service

Under Self Service, there is an option to “Allow users to request access to this application”.

We have two different sets of required permissions. VM1 and VM2 have the same permission requirements. VM3 and VM4 have the same permission requirements.

A user-assigned managed identity can be assigned to one or many resources. By using user-assigned managed identities, we can create just two managed identities: one with the permission requirements for VM1 and VM2 and the other with the permission requirements for VM3 and VM4.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Answer: A

Explanation:

1. Sign in to the Azure portal.

2. Browse to Resource Groups.

3. Select the RG1lod12345678 resource group.

4. Select Access control (IAM).

5. Select Add > role assignment.

6. Select Virtual Machine Contributor (you can filter the list of available roles by typing ‘virtual’ in the search box) then click Next.

7. Select the +Select members option and select user2-12345678 then click the Select button.

8. Click the Review + assign button twice.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current

Answer: A

Explanation:

The first step is to create the Azure Active Directory tenant.

To create a new Azure AD directory named 28681041.onmicrosoft.com that contains a new user

named [email protected], you can follow these steps:

In the Azure portal, search for and select Azure Active Directory.

In the left pane, select Domains.

Select Add domain.

In the Add a custom domain pane, enter the following information:

Domain name: Enter the domain name you want to use. For example, 28681041.onmicrosoft.com.

Add domain: Select Add domain.

In the left pane, select Users.

Select New user.

In the New user pane, enter the following information:

User name: Enter the user name you want to use. For example, [email protected].

Name: Enter the name of the user.

Password: Enter a password for the user.

Groups: Select the groups you want the user to be a member of.

Select Create.

You can find more information on these topics in the following Microsoft documentation:

Add a custom domain name to Azure Active Directory

Create a new user in your organization - Azure Active Directory

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-access-create-new-tenant https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-directory

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

The key must be an asymmetric, RSA or RSA HSM key. The supported key lengths are 2048-bit and 3072-bit.

Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview

Answer: A

Explanation:

1. In the Azure portal, type App services in the search box and select App services from the search results. 2. Click the Create app service button to create a new app service.

3. In the Resource Group section, click the Create new link to create a new resource group.

4. Give the resource group a name such as Intranet12345678RG and click OK.

5. In the Instance Details section, enter Intranet12345678 in the Name field.

6. In the Runtime stack field, select any runtime stack such as .NET Core 3.1.

7. Click the Review + create button.

8. Click the Create button to create the web app.

9. Click the Go to resource button to open the properties of the new web app.

10.In the Settings section, click on Authentication / Authorization.

11.Click the App Service Authentication slider to set it to On.

12.In the Action to take when request is not authentication box, select Log in with Azure Active Directory. 13.Click Save to save the changes.

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles