AZ-500 Online Practice Questions and Answers

DRAG DROP

You have an Azure subscription named Sub1.

You have an Azure Active Directory (Azure AD) group named Group1 that contains all the members of your IT team.

You need to ensure that the members of Group1 can stop, start, and restart the Azure virtual machines in Sub1. The solution must use the principle of least privilege.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

HOTSPOT

You have an Azure subscription.

You need to create and deploy an Azure policy that meets the following requirements:

1.

When a new virtual machine is deployed, automatically install a custom security extension.

2.

Trigger an autogenerated remediation task for non-compliant virtual machines to install the extension.

What should you include in the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Hot Area:

HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has Azure Active Directory Premium Plan 1 licenses.

You need to create a group named Group1 that will be assigned the Global reader role.

Which portal should you use to create Group1, and which type of group should you create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

SIMULATION

You need to configure Azure to allow RDP connections from the Internet to a virtual machine named VM1. The solution must minimize the attack surface of VM1.

To complete this task, sign in to the Azure portal.

A. See the explanation below.

You have an Azure SQL Database server named SQL1.

You plan to turn on Advanced Threat Protection for SQL1 to detect all threat detection types.

Which action will Advanced Threat Protection detect as a threat?

A. A user updates more than 50 percent of the records in a table.

B. A user attempts to sign as select * from table1.

C. A user is added to the db_owner database role.

D. A user deletes more than 100 records from the same table.

From Azure Security Center, you enable Azure Container Registry vulnerability scanning of the images in Registry1. You perform the following actions:

1.

Push a Windows image named Image1 to Registry1.

2.

Push a Linux image named Image2 to Registry1.

3.

Push a Windows image named Image3 to Registry1.

4.

Modify Image1 and push the new image as Image4 to Registry1.

5.

Modify Image2 and push the new image as Image5 to Registry1.

Which two images will be scanned for vulnerabilities? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Image4

B. Image2

C. Image1

D. Image3

E. Image5

You have an Azure subscription that uses Microsoft Sentinel.

You need to create a Microsoft Sentinel notebook that will use the Guided Investigation - Anomaly Lookup template.

What should you create first?

A. an analytics rule

B. a Log Analytics workspace

C. an Azure Machine Learning workspace

D. a hunting query

You have an Azure AD tenant that contains a user named User1.

You purchase an app named App1.

User1 needs to publish App1 by using Azure AD Application Proxy.

Which role should you assign to User1?

A. Cloud application administrator

B. Application administrator

C. Hybrid identity administrator

D. Cloud App Security Administrator

You have an Azure environment.

You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001:2013 standards.

What should you use?

A. Azure Active Directory (Azure AD) Identity Protection

B. Microsoft Defender for Cloud

C. Microsoft Defender for Identity

D. Microsoft Sentinel