AZ-500 Free Practice Questions — Page 5

Question 42

DRAG DROP - You have an Azure subscription that contains an Azure web app named App1. You plan to configure a Conditional Access policy for App1. The solution must meet the following requirements: • Only allow access to App1 from Windows devices. • Only allow devices that are marked as compliant to access App1. Which Conditional Access policy settings should you configure? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 44

DRAG DROP - You have an Azure subscription that contains the resources shown in the following table. You need to configure network connectivity to meet the following requirements: • Communication from VM1 to storage1 must traverse an optimized Microsoft backbone network. • All the outbound traffic from VM1 to the internet must be denied. • The solution must minimize costs and administrative effort. What should you configure for VNet1 and NSG1? To answer, drag the appropriate components to the correct resources. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 45

You have an Azure AD tenant that contains the users shown in the following table. You need to ensure that the users cannot create app passwords. The solution must ensure that User1 can continue to use the Mail and Calendar app. What should you do?

Question 46

You have an Azure subscription named Sub1 that has Security defaults disabled. The subscription contains the following users: • Five users that have owner permissions for Sub1. • Ten users that have owner permissions for Azure resources. None of the users have multi-factor authentication (MFA) enabled. Sub1 has the secure score as shown in the Secure Score exhibit. (Click the Secure Score tab.) You plan to enable MFA for the following users: • Five users that have owner permission for Sub1. • Five users that have owner permissions for Azure resources. By how many points will the secure score increase after you perform the planned changes?

Question 47

HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table. NSG1 and NSG2 both have default rules only. The subscription contains the virtual machines shown in the following table. The subscription contains the web apps shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 48

HOTSPOT - You are implementing an Azure Application Gateway web application firewall (WAF) named WAF1. You have the following Bicep code snippet. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Question 49

DRAG DROP - You have an Azure subscription. You create an Azure Firewall policy that has the rules shown in the following table. In which order should the rules be processed? To answer, move all rules from the list of rules to the answer area and arrange them in the correct order.

Question 50

You have an Azure AD tenant. You need to ensure that users cannot create passwords containing a variation of the word contoso. What should you configure?

Question 52

Your network contains an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure AD tenant. You plan to implement single sign-on (SSO) for Azure AD resources. You need to configure an Intranet Zone setting for all users by using a Group Policy Object (GPO). Which setting should you configure?

Question 53

DRAG DROP - You have an Azure subscription named Sub1 that contains the storage accounts shown in the following table. The storage3 storage account is encrypted by using customer-managed keys. You need to enable Microsoft Defender for Storage to meet the following requirements: • The storage1 and storage2 accounts must be included in the Defender for Storage protections. • The storage3 account must be excluded from the Defender for Storage protections. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area.