Microsoft AZ-500 Exam Questions Instant Access

Question 1

You have an Azure subscription that contains an Azure SQL database named SQL1. You need to configure SQL1 to use Always Encrypted. What should you use?

ApgAdmin

Bthe Azure portal

CMySQL Workbench

DMicrosoft SQL Server Management Studio (SSMS)

Answer : D

Question 2

You have an Azure Active Din-dory (Azure AD) tenant named contoso.com that contains a user named User1.

You plan to publish several apps in the tenant.

You need to ensure that User1 can grant admin consent for the published apps.

Which two possible user roles can you assign to User! to achieve this goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

AApplication developer

BSecurity administrator

CApplication administrator

DUser administrator

ECloud application administrator

Answer : C, E

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent

Question 3

You have 10 on-premises servers that run Windows Server.

You plan to implement Microsoft Defender for Cloud vulnerability scanning for the servers. What should you install on the servers first?

Athe Microsoft Configuration Manager client

Bthe Security Events data connector in Microsoft Sentinel

Cthe Microsoft Defender for Endpoint agent

Dthe Azure Arc Connected Machine agent

Answer : D

Question 4

You have an Azure Sentinel deployment.

You need to create a scheduled query rule named Rule1.

What should you use to define the query rule logic for Rule1?

Aa Transact-SQL statement

Ba JSON definition

CGraphQL

Da Kusto query

Answer : C

https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom

Question 5

Your company recently created an Azure subscription.

You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM).

Which of the following is the role you should assign to the user?

AThe Global administrator role.

BThe Security administrator role.

CThe Password administrator role.

DThe Compliance administrator role.

Answer : A

To start using PIM in your directory, you must first enable PIM.

1. Sign in to the Azure portal as a Global Administrator of your directory.

You must be a Global Administrator with an organizational account (for example, @yourdomain.com), not a Microsoft account (for example, @outlook.com), to enable PIM for a directory.

Scenario: Technical requirements include: Enable Azure AD Privileged Identity Management (PIM) for contoso.com

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/privileged-identity-management/pim-getting-started

Question 6

You need to implement the planned change for VM1 to access storage1.

The solution must meet the technical requirements.

What should you do first?

AConfigure a system-assigned managed identity on VM1.

BConfigure federated identity credentials for ID1.

CAssign the Storage Blob Data Reader role to storage 1.

DAssign ID1 to VM1.

EAdd a role assignment condition to storage1.

Answer : A

Question 7

You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant.

From the Azure portal, you register an enterprise application.

Which additional resource will be created in Azure AD?

Aa service principal

Ban X.509 certificate

Ca managed identity

Da user account

Answer : A

https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added

Microsoft Azure Security Technologies AZ-500 Exam Questions