AZ-500 Free Practice Questions

Question 1

HOTSPOT - You have a Microsoft Entra tenant named contoso.com. You collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. Fabrikam.com has multi-factor authentication (MFA) enabled for all users. Contoso.com has the Cross-tenant access settings configured as shown in the Cross-tenant access settings exhibit. (Click the Cross-tenant access settings tab.) Contoso.com has the External collaboration settings configured as shown in the External collaboration settings exhibit. (Click the External collaboration settings tab.) You create a Conditional Access policy that has the following settings: • Name: CAPolicy1 • Assignments o Guest or external users: B2B collaboration guest users o Target resources - Include: All cloud apps • Access controls - Grant access • Require device to be marked as compliant • Require multi-factor authentication - Enable policy: On For each of the following statements, select Yes if the statement is true, otherwise select No. NOTE: Each correct section is worth one point.

Question 2

HOTSPOT - You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table. The subscription contains the virtual machines shown in the following table. VM3 contains a service that listens for connections on port 8080. For VM1, you configure just-in-time (JIT) VM access as shown in the following exhibit. For each of the following statement, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 3

HOTSPOT - You have an Azure App Service web app named App1 as shown in the following exhibit. Subnet 2 contains a virtual machine named VM1. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Question 4

You have an Azure subscription that contains the virtual machines shown in the following table. You are configuring Microsoft Defender for Servers. You plan to enable adaptive application controls to create an allowlist of known-safe apps on the virtual machines. Which virtual machines support the use of adaptive application controls?

Question 5

You have an Azure subscription. The subscription contains a virtual network named VNet1 that contains the subnets shown in the following table. The subscription contains the function apps shown in the following table. The outbound traffic of which app is controlled by using NSG1?

Question 6

HOTSPOT - Your company uses cloud-based resources from the following platforms: • Azure • Amazon Web Services (AWS) • Google Cloud Platform (GCP) You plan to implement Microsoft Defender for Cloud. On which platforms can you use Defender for Cloud to protect containers and storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 7

You have an Azure subscription that contains the resources shown in the following table. You plan to implement Microsoft Defender for Cloud. Which resources can be protected by using Defender for Cloud?

Question 8

HOTSPOT - You have an Azure subscription. You plan to deploy the virtual machines shown in the following table. You need to identify the virtual machines and operating systems that can be deployed as confidential virtual machines? Which Windows virtual machines and which Linux virtual machines should you identify?

Question 10

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You plan to use service endpoints and service endpoint policies. Which resources can be accessed by using a service endpoint, and which resources support service endpoint policies? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 11

HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table. NSG1 rules restrict access to the internet from Subnet3. The subscription contains the function apps shown in the following table. Virtual network integration has the default settings. You need to configure network access for App1 and App2 to meet the following requirements: • Deny inbound access to App1 from Subnet1 and allow inbound access from Subnet2. • Deny outbound access from App2 to the internet. What should you do for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.