AZ-500 Free Practice Questions — Page 13

Question 128

HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You perform the following tasks: • Create a managed identity named Managed1. • Create a Microsoft 365 group named Group1. • Register an enterprise application named App1. • Enable a system-assigned managed identity for VM1. You need to identify which service principals were created and which identities can be assigned the Reader role for RG1. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 131

You have an Azure subscription that contains an Azure key vault. You need to configure the maximum number of days for which new keys are valid. The solution must minimize administrative effort. What should you use?

Question 132

You have an Azure subscription. You plan to deploy a new Conditional Access policy named CAPolicy1. You need to use the What if tool to evaluate how CAPolicy1 wall affect users. The solution must minimize the impact of CAPolicy1 on the users. To what should you set the Enable policy setting for CAPolicy1?

Question 133

HOTSPOT - You have an Azure Active directory tenant that syncs with an Active Directory Domain Services (AD DS) domain. You plan to create an Azure file share that will contain folders and files. Which identity store can you use to assign permissions to the Azure file share and folders within the share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 134

HOTSPOT - You have an Azure subscription that contains two users named User1 and User2 and the blob containers shown in the following table. Policy1 is configured as shown in the following exhibit. You assign the roles for storage1 as shown in the following table. The storage1 account has the following shared access signature (SAS) named SAS1: • Allowed services: Blob • Allowed resource types: Container • Allowed permissions: Read, Write, List, Add, Create • Blob versioning permissions: enables deletion of versions • Allowed blob index permissions: Read/Write • Starr and expiry date/time: o Start: 12/1/2021 o End: 12/31/2021 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 135

HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. VNET1, VNET2, and VNET3 are peered with each other. You perform the following actions: • Create two application security groups named ASG1 and ASG2 in the West US region. • Add the network interface of VM1 to ASG1. The network interfaces of which virtual machines can you add to ASG1 and ASG2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 136

HOTSPOT - You have an Azure SQL database named DB1 that contains a table named Tablet. You need to configure DB1 to meet the following requirements: • Sensitive data in Table1 must be identified automatically. • Only the first character and last character of the sensitive data must be displayed in query results. Which two features should you configure? To answer, select the features in the answer area. NOTE: Each correct selection is worth one point.

Question 137

HOTSPOT - Your on-premises network contains the servers shown in the following table. You have an Azure subscription that contains multiple virtual machines that run either Windows Server 2019 or SLES. You plan to implement adaptive application controls in Microsoft Defender for Cloud. Which operating systems and platforms can you monitor? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 138

HOTSPOT - You have an Azure subscription that contains the following Azure firewall: • Name: Fw1 • Azure region: UK West • Private IP address: 10.1.3.4 • Public IP address: 23.236.62.147 The subscription contains the virtual networks shown in the following table. The subscription contains the subnets shown in the following table. The subscription contains the routes shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 139

HOTSPOT - You have an Azure subscription that contains a storage account named contoso2023. You need to perform the following tasks: • Verify that identity-based authentication over SMB is enabled. • Only grant users access to contoso2023 in the year 2023. Which two settings should you use? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.