Microsoft AZ-500 Exam Questions Instant Access

Question 1

You have an Azure subscription that contains an Azure SQL server named sqlsrv1 and an Azure SQL database named DB1. Sqlsrv1 is configured for Microsoft Entra authentication only.

You have the Microsoft Entra identities shown in the following table.

Which users can create scoped credentials for DB1?

AUser1 only

BUser1 and User2 only

CUser1, User2, and User3

Answer : C

Question 2

You have an Azure subscription that contains an Azure SQL database named SQL1 and an Azure key vault named KeyVault1. KeyVault1 stores the keys shown in the following table.

You reed to configure Transparent Data Encryption (TDE). TDE will use a customer-managed key for SQL1?

AKey1. Key2 Key3. and Key4

BKey1 only

CKey2 only

DKey1 and key2 only

EKey2 and Key3 only

Answer : E

Question 3

You have an on-premises network and an Azure subscription.

You have the Microsoft SQL Server instances shown in the following table.

You plan to implement Microsoft Defender for SQL.

Which SQL Server instances will be protected by Microsoft Defender for SQL?

Asql1 and sql2 only

Bsql1, sql2, andsql3 only

Csql1 sql2 and so.14 only

Dsql1, sql2, sql3, and sql4

Answer : D

Question 4

SIMULATION

Lab Task

Task 2

You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNETOI-Subnet0-NSG network security group (NSG) are stored in the Iogs31330471 Azure Storage account for 30 days.

Asee the task answer with step by step below

Answer : A

Enable diagnostic resource logging for the NSG. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to select theRule countercategory under Logs and choose theIogs31330471storage account as the destination.

Configure the retention policy for the storage account to keep the logs for 30 days. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to specify thedaysparameter as 30 for the Set-AzStorageServiceProperty cmdlet or the az storage logging update command.

View and analyze the logs in the storage account. You can use any tool that can read JSON files, such as Azure Storage Explorer or Visual Studio Code.You can also export the logs to any visualization tool, SIEM solution, or IDS of your choice

Question 5

You create a new Azure subscription.

You need to ensure that you can create custom alert rules in Azure Security Center.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

AOnboard Azure Active Directory (Azure AD) Identity Protection.

BCreate an Azure Storage account.

CImplement Azure Advisor recommendations.

DCreate an Azure Log Analytics workspace.

EUpgrade the pricing tier of Security Center to Standard.

Answer : D, E

D: You need write permission in the workspace that you select to store your custom alert.

https://docs.microsoft.com/en-us/azure/security-center/security-center-custom-alert

Question 6

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege.

What should you do?

ACreate a resource group and assign User1 to the Managed Identity Contributor role.

BCreate a management group and assign User1 the Managed Identity Operator role.

CCreate an organizational unit (OU) and assign User1 the User administrator Azure AD role.

DCreate management group and assign User1 the Hybrid Identity Administrator Azure AD role.

Answer : A

Question 7

You onboard Azure Sentinel. You connect Azure Sentinel to Azure Security Center.

You need to automate the mitigation of incidents in Azure Sentinel. The solution must minimize administrative effort.

What should you create?

Aan alert rule

Ba playbook

Ca function app

Da runbook

Answer : B

Microsoft Azure Security Technologies AZ-500 Exam Questions