AZ-500 Free Practice Questions — Page 3

Question 22

HOTSPOT - You have an Azure subscription that contains a virtual machine named VM1. You have a network security group (NSG) named NSG1 that is associated to the network interface of VM1 and is configured as shown in the following exhibit. Just-in-time (JIT) VM access is enabled on VM1 and has the following configurations: • Management ports: 3389, 22 • Maximum time range: 3 hours • Allowed source IP addresses: Any You activate the JIT rule and connect to VM1 by using SSH. For each of the following statements, select Yes if the statement is true, otherwise select No. NOTE: Each correct selection is worth one point.

Question 23

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1. You have an Azure container registry that stores container images that were deployed by using Azure DevOps Microsoft-hosted agents. You need to ensure that administrators can access AKS1 only from specific networks. The solution must minimize administrative effort. What should you configure for AKS1?

Question 24

Your company has an Azure subscription named Sub1. You plan to create several security alerts by using Azure Monitor. You need to prepare Sub1 for the alerts. What should you create first?

Question 25

HOTSPOT - You have an Azure key vault. You need to delegate administrative access to the key vault to meet the following requirements: • Provide a user named User1 with the ability to set access policies for the key vault. • Provide a user named User2 with the ability to add and delete certificates in the key vault. • Use the principle of least privilege. What should you use to assign access to each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 26

HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the following table. All the virtual machines have only private IP addresses. You deploy Azure Bastion to VNet1 as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 27

You have an Azure subscription that contains the Azure App Service web apps shown in the following table. You upload a private key certificate named Cert1.pfx to App1. Which apps can use Cert1?

Question 28

HOTSPOT - You have an Azure subscription that contains an Azure firewall named AzFW1. AzFW1 has a firewall policy named FWPolicy1. You need to add rule collections to FWPolicy1 to meet the following requirements: • Allow traffic based on the FQDN of the destination. • Allow TCP traffic. Which types of rule collections should you add for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 29

HOTSPOT - You have an Azure subscription named Sub1 that contains two resource groups named RGnet and NET. You have the Azure Policy definition shown in the following exhibit. You assign the policy definition to Sub1 and NET. You plan to deploy the resources shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 30

You have a Microsoft Entra tenant named contoso.com. You plan to collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. Fabrikam.com uses the following identity providers: • Google Cloud Platform (GCP) • Microsoft accounts • Microsoft Entra ID You need to configure the Cross-tenant access settings for B2B collaboration. Which identity providers support cross-tenant access?

Question 31

DRAG DROP - You have a Microsoft Entra tenant. On January 1, you configure a multi-factor authentication (MFA) registration policy that has the following settings: • Assignments: All users • Require Microsoft Entra ID multifactor authentication registration: Enabled • Enforce policy: On On January 3, you create two new users named User1 and User2. On January 5, User1 authenticates to Microsoft Entra ID for the first time. On January 7, User2 authenticates to Microsoft Entra ID for the first time. On which date will User1 and User2 be forced to register for MFA? To answer, drag the appropriate dates to the correct users. Each date may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.