AZ-500 Free Practice Questions — Page 13

Question 129

You have an Azure AD tenant. The tenant contains users that are assigned Azure AD Premium P2 licenses. You have a partner company that has a domain named fabrikam.com. The fabrikam.com domain contains a user named User1. User1 has an email address of You need to provide User1 with access to the resources in the tenant. The solution must meet the following requirements: • User1 must be able to sign in by using the credentials. • You must be able to grant User1 access to the resources in the tenant. • Administrative effort must be minimized. What should you do?

Question 130

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You perform the following tasks: • Create a managed identity named Managed1. • Create a Microsoft 365 group named Group1. • Register an enterprise application named App1. • Enable a system-assigned managed identity for VM1. You need to identify which service principals were created and which identities can be assigned the Reader role for RG1. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 132

SIMULATION - You need to ensure that the AzureBackupReport log for the Vault1 Recovery Services vault is stored in the WS12345678 Azure Log Analytics workspace. To complete this task, sign in to the Azure portal and modify the Azure resources.

Question 133

You have an Azure subscription that contains an Azure key vault. You need to configure the maximum number of days for which new keys are valid. The solution must minimize administrative effort. What should you use?

Question 134

You have an Azure subscription. You plan to deploy a new Conditional Access policy named CAPolicy1. You need to use the What if tool to evaluate how CAPolicy1 wall affect users. The solution must minimize the impact of CAPolicy1 on the users. To what should you set the Enable policy setting for CAPolicy1?

Question 135

HOTSPOT - You have an Azure Active directory tenant that syncs with an Active Directory Domain Services (AD DS) domain. You plan to create an Azure file share that will contain folders and files. Which identity store can you use to assign permissions to the Azure file share and folders within the share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 136

HOTSPOT - You have an Azure subscription that contains two users named User1 and User2 and the blob containers shown in the following table. Policy1 is configured as shown in the following exhibit. You assign the roles for storage1 as shown in the following table. The storage1 account has the following shared access signature (SAS) named SAS1: • Allowed services: Blob • Allowed resource types: Container • Allowed permissions: Read, Write, List, Add, Create • Blob versioning permissions: enables deletion of versions • Allowed blob index permissions: Read/Write • Starr and expiry date/time: o Start: 12/1/2021 o End: 12/31/2021 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 137

HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. VNET1, VNET2, and VNET3 are peered with each other. You perform the following actions: • Create two application security groups named ASG1 and ASG2 in the West US region. • Add the network interface of VM1 to ASG1. The network interfaces of which virtual machines can you add to ASG1 and ASG2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 138

HOTSPOT - You have an Azure SQL database named DB1 that contains a table named Tablet. You need to configure DB1 to meet the following requirements: • Sensitive data in Table1 must be identified automatically. • Only the first character and last character of the sensitive data must be displayed in query results. Which two features should you configure? To answer, select the features in the answer area. NOTE: Each correct selection is worth one point.

Question 139

HOTSPOT - Your on-premises network contains the servers shown in the following table. You have an Azure subscription that contains multiple virtual machines that run either Windows Server 2019 or SLES. You plan to implement adaptive application controls in Microsoft Defender for Cloud. Which operating systems and platforms can you monitor? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.