Question 1

You have the Azure resources shown in the following table.

You need to meet the following requirements:

✑ Internet-facing virtual machines must be protected by using network security groups (NSGs).

✑ All the virtual machines must have disk encryption enabled.

What is the minimum number of security policies that you should create in Microsoft Defender for Cloud?

Options :

A : 1

B : 2

C : 3

D : 4

Answer: B

Question 2

You have an Azure subscription that contains the resources shown in the following table.

You plan to deploy the virtual machines shown in the following table.

You need to assign managed identities to the virtual machines. The solution must meet the following requirements:

✑ Assign each virtual machine the required roles.

✑ Use the principle of least privilege.

What is the minimum number of managed identities required?

Options :

A : 1

B : 2

C : 3

D : 4

Answer: B

Question 3

You have an Azure subscription named Sub1 that contains an Azure Log Analytics workspace named LAW1.

You have 100 on-premises servers that run Windows Server 2012 R2 and Windows Server 2016. The servers connect to LAW1. LAW1 is configured to collect security-related performance counters from the connected servers.

You need to configure alerts based on the data collected by LAW1. The solution must meet the following requirements:

✑ Alert rules must support dimensions.

✑ The time it takes to generate an alert must be minimized.

✑ Alert notifications must be generated only once when the alert is generated and once when the alert is resolved.

Which signal type should you use when you create the alert rules?

Options :

A : Log

B : Log (Saved Query)

C : Metric

D : Activity Log

Answer: C

Question 4

You have an Azure subscription linked to an Azure AD tenant named contoso.com. Contoso.com contains a user named User1 and an Azure web app named App1.

You plan to enable User1 to perform the following tasks:

• Configure contoso.com to use Microsoft Entra Verified ID.

• Register App1 in contoso.com.

You need to identify which roles to assign to User1. The solution must use the principle of least privilege.

Which two roles should you identify? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options :

A : Authentication Policy Administrator

B : Authentication Administrator

C : Cloud App Security Administrator

D : Application Administrator

E : User Administrator

Answer: A,D

Question 5

You are tasked with ensuring that your organization's Azure resources are compliant with company standards. Using Azure services, which tool would allow you to evaluate the configuration settings of Azure resources against defined requirements?

Options :

A : Azure Blueprint

B : Azure Key Vault

C : Azure Policy

D : Azure Landing Zone

Answer: C

Higher Test Marks with Free Online AZ-500 Exam Practice

Buying Options: