Your company recently created an Azure subscription. You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM). Which of the following is the role you should assign to the user?

Correct Answer: The Global administrator role.

You have an Azure subscription that contains an Azure SQL database named SQL1 and an Azure key vault named KeyVault1. KeyVault1 stores the keys shown in the following table. You need to configure Transparent Data Encryption (TDE). TDE will use a customer-managed key for SQL1. Which keys can you use?

Correct Answer: Key1 and Key2 only

You need to meet the identity and access requirements for Group1. What should you do?

Correct Answer: Add a membership rule to Group1.

You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table. You create and assign the Azure policy shown in the following exhibit. What is the flow log status of NSG1 and NSG2 after the Azure policy is assigned?

Correct Answer: Flow logs will be disabled for NSG1 and NSG2.

You need to recommend which virtual machines to use to host App1. The solution must meet the technical requirements for KeyVault1. Which virtual machines should you use?

Correct Answer: VM1, VM2, VM3, and VM4

You need to ensure that User2 can implement PIM. What should you do first?

Correct Answer: Assign User2 the Global administrator role.

You need to ensure that you can meet the security operations requirements. What should you do first?

Correct Answer: Modify the Security Center workspace configuration.

You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

Correct Answer: Enable the Microsoft Defender for SQL plan.

You need to encrypt storage1 to meet the technical requirements. Which key vaults can you use?

Correct Answer: KeyVault1, KeyVault2, and KeyVault3

You need to ensure that users can access VM0. The solution must meet the platform protection requirements. What should you do?

Correct Answer: Move VM0 to Subnet1.

From Microsoft Defender for Cloud, you need to deploy SecPol1. What should you do first?

Correct Answer: Enable Microsoft Defender for Cloud.

You have an Azure Storage account named storage1 that has a container named container1. You need to prevent the blobs in container1 from being modified. What should you do?

Correct Answer: From container1, add an access policy.

Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to deploy Azure AD Connect and to integrate Active Directory and the Azure AD tenant. You need to recommend an integration solution that meets the following requirements: ✑ Ensures that password policies and user logon restrictions apply to user accounts that are synced to the tenant ✑ Minimizes the number of servers required for the solution. Which authentication method should you include in the recommendation?

Correct Answer: pass-through authentication with seamless single sign-on (SSO)

Your company has an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to create several security alerts by using Azure Monitor. You need to prepare the Azure subscription for the alerts. What should you create first?

Correct Answer: an Azure Log Analytics workspace

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azure DNS. You need to ensure that VM1 connects to storage1 by using a private IP address. The solution must minimize administrative effort. What should you do?

Correct Answer: For storage1, create a new private endpoint.

You plan to implement JIT VM access. Which virtual machines will be supported?

Correct Answer: VM2, VM3, and VM4 only

You need to meet the technical requirements for VNetwork1. What should you do first?

Correct Answer: Create a new subnet on VNetwork1.

Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name. After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not be allowed to sync to Azure AD. Which of the following actions should you take?

Correct Answer: You should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.

Your network contains an on-premises Active Directory domain named corp.contoso.com. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You sync all on-premises identities to Azure AD. You need to prevent users who have a givenName attribute that starts with TEST from being synced to Azure AD. The solution must minimize administrative effort. What should you use?

Correct Answer: Synchronization Rules Editor

You company has an Azure subscription named Sub1. Sub1 contains an Azure web app named WebApp1 that uses Azure Application Insights. WebApp1 requires users to authenticate by using OAuth 2.0 client secrets. Developers at the company plan to create a multi-step web test app that preforms synthetic transactions emulating user traffic to Web App1. You need to ensure that web tests can run unattended. What should you do first?

Correct Answer: Register the web test app in Azure AD.

You have an Azure SQL Database server named SQL1. For SQL1, you turn on Azure Defender for SQL to detect all threat detection types. Which action will Azure Defender for SQL detect as a threat?

Correct Answer: A user attempts to sign in as SELECT * FROM table1.

You have an Azure subscription that contains a web app named App1. App1 provides users with product images and videos. Users access App1 by using a URL of HTTPS://app1.contoso.com. You deploy two server pools named Pool1 and Pool2. Pool1 hosts product images. Pool2 hosts product videos. You need to optimize the performance of App1. The solution must meet the following requirements: • Minimize the performance impact of TLS connections on Pool1 and Pool2. • Route user requests to the server pools based on the requested URL path. What should you include in the solution?

Correct Answer: Azure Application Gateway

You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What should you use?

Correct Answer: Linux Diagnostic Extension (LAD) 3.0

Your company uses Azure DevOps. You need to recommend a method to validate whether the code meets the company's quality standards and code review standards. What should you recommend implementing in Azure DevOps?

Correct Answer: branch policies

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You need to identify whether you can use the following features with AzFW1: • TLS inspection • Threat intelligence • The network intrusion detection and prevention systems (IDPS) What can you use?

Correct Answer: threat intelligence only

You have an Azure Active Directory (Azure AD) tenant named contoso.com. You need to configure diagnostic settings for contoso.com. The solution must meet the following requirements: ✑ Retain logs for two years. ✑ Query logs by using the Kusto query language. ✑ Minimize administrative effort. Where should you store the logs?

Correct Answer: an Azure Log Analytics workspace

You have an Azure subscription that contains an Azure Blob storage account named blob1. You need to configure attribute-based access control (ABAC) for blob1. Which attributes can you use in access conditions?

Correct Answer: blob index tags and container names only

Your company recently created an Azure subscription. You have, subsequently, been tasked with making sure that you are able to secure Azure AD roles by making use of Azure Active Directory (Azure AD) Privileged Identity Management (PIM). Which of the following actions should you take FIRST?

Correct Answer: You should discover privileged roles.

You have an Azure web app named WebApp1. You upload a certificate to WebApp1. You need to make the certificate accessible to the app code of WebApp1. What should you do?

Correct Answer: Add an app setting to the WebApp1 configuration.

You have an Azure subscription that contains a storage account and an Azure web app named App1. App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings. You need to validate the name resolution to Cosmos1. Which DNS zone should you use?

Correct Answer: endpoint1.privatelink.documents.azure.com

You need to consider the underlined segment to establish whether it is accurate. You have been tasked with creating a different subscription for each of your company's divisions. However, the subscriptions will be linked to a single Azure Active Directory (Azure AD) tenant. You want to make sure that each subscription has identical role assignments. You make use of Azure AD Privileged Identity Management (PIM). Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

Correct Answer: Azure Blueprints

You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. An administrator named Admin1 has access to the following identities: ✑ An OpenID-enabled user account ✑ A Hotmail account ✑ An account in contoso.com ✑ An account in an Azure AD tenant named fabrikam.com You plan to use Azure Account Center to transfer the ownership of Sub1 to Admin1. To which accounts can you transfer the ownership of Sub1?

Correct Answer: contoso.com only

You have an Azure subscription that contains the virtual machines shown in the following table. All the virtual networks are peered. You deploy Azure Bastion to VNET2. Which virtual machines can be protected by the bastion host?

Correct Answer: VM1, VM2, VM3, and VM4

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Microsoft Azure Security Technologies

Protect Azure environments with advanced security technologies.

4.8★★★★★(287 ratings)

19,023 studentsIntermediate

Learn to secure Azure resources using identity protection, network security, threat protection, and governance controls. The exam helps you manage modern cloud security requirements in production environments. This certification is essential for security professionals working in Azure-heavy organizations. It demonstrates your ability to reduce risk while supporting cloud agility and compliance.

What you'll learn

Secure Azure identities- Configure network protections- Manage threat defense- Apply governance controls- Protect cloud workloads

AZ-500

Lectures3

Quizzes0

Duration30 week

Students19,023

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!