AZ-500 Free Practice Questions — Page 10

Question 98

HOTSPOT - You have an Azure Subscription that is connected to an on-premises datacenter and contains the resources shown in the following table. You need to configure virtual network service endpoints for VNet1 and VNet2. The solution must meet the following requirements: • The virtual machines that connect to the subnet of VNet1 must access storage1, storage2, and Azure AD by using the Microsoft backbone network. • The virtual machines that connect to the subnet of VNet2 must access storage1 and KeyVault1 by using the Microsoft backbone network. • The virtual machines must use the Microsoft backbone network to communicate between VNet1 and VNet2. How many service endpoints should you configure for each virtual network? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 99

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You need to identify whether you can use the following features with AzFW1: • TLS inspection • Threat intelligence • The network intrusion detection and prevention systems (IDPS) What can you use?

Question 100

HOTSPOT - You have an Azure subscription that is linked to an Azure AD tenant and contains the virtual machines shown in the following table. The subnets of the virtual networks have the service endpoints shown in the following table. You create the resources shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 101

HOTSPOT - On Monday, you configure an email notification in Microsoft Defender for Cloud to notify about alerts that have a severity level of Low, Medium, or High. On Tuesday, Microsoft Defender for Cloud generates the security alerts shown in the following table. How many email notifications will receive on Tuesday? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 102

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. VNet1 contains the subnets shown in the following table. You plan to use the Azure portal to deploy an Azure firewall named AzFW1 to VNet1. Which resource group and subnet can you use to deploy AzFW1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 103

HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. Subnet1 and Subnet2 have a network security group (NSG). The NSG has an outbound rule that has the following configurations: • Port: Any • Source: Any • Priority: 100 • Action: Deny • Protocol: Any • Destination: Storage The subscription contains a storage account named storage1. You create a private endpoint named Private1 that has the following settings: • Resource type: Microsoft.Storage/storageAccounts • Resource: storage1 • Target sub-resource: blob • Virtual network: VNet1 • Subnet: Subnet1 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 104

You have an Azure subscription that contains the virtual machines shown in the following table. Which computers will support file integrity monitoring?

Question 105

DRAG DROP - You have an Azure subscription that contains a resource group named RG1 and an Azure policy named Policy1. You need to assign Policy1 to RG1. How should you complete the script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 106

DRAG DROP - You have an Azure subscription that contains an Azure web app named App1. You plan to configure a Conditional Access policy for App1. The solution must meet the following requirements: • Only allow access to App1 from Windows devices. • Only allow devices that are marked as compliant to access App1. Which Conditional Access policy settings should you configure? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 107

DRAG DROP - You have an Azure AD tenant and an application named App1. You need to ensure that App1 can use Microsoft Entra Verified ID to verify credentials. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.