Microsoft AZ-500 Exam Questions Instant Access

Question 1

SIMULATION

Lab Task

Task 6

You need to configure a Microsoft SQL server named Web3l 330471 only to accept connections from the Subnet0 subnet on the VNET01 virtual network.

Asee the task answer with step by step below

Answer : A

Configure the firewall settings for the SQL server. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to add a firewall rule that allows inbound traffic from the IP address range of the Subnet0 subnet. You also need to disable the option to allow Azure services and resources to access this server.

Configure the network settings for the SQL server. You can use the Azure portal, Azure PowerShell, or the Azure CLI to do this. You need to enable service endpoints for SQL Server on the Subnet0 subnet. You also need to add a virtual network rule that links the SQL server to the Subnet0 subnet.

Configure the connection settings for the SQL server. You can use SQL Server Management Studio or Transact-SQL to do this. You need to enable remote server connections and specify a TCP port for listening. You also need to configure SQL Server Authentication or Azure Active Directory Authentication for connecting to the SQL server.

Question 2

You have an Azure subscription named Sub1.

In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1.

You need to modify WF1 to send email messages to a distribution group named Alerts.

What should you use to modify WF1?

AAzure Application Insights

BAzure Monitor

CAzure Logic Apps Designer

DAzure DevOps

Answer : C

https://docs.microsoft.com/en-us/azure/security-center/workflow-automation

https://docs.microsoft.com/en-us/learn/modules/resolve-threats-with-azure-security-center/6-exerciseconfigure-playbook

Question 3

You are securing access to the resources in an Azure subscription.

A new company policy states that all the Azure virtual machines in the subscription must use managed disks.

You need to prevent users from creating virtual machines that use unmanaged disks.

What should you use?

AAzure Monitor

BAzure Policy

CAzure Security Center

DAzure Service Health

Answer : B

Question 4

From Azure Security, you create a custom alert rule.

You need to configure which users will receive an email message when the alert is triggered.

What should you do?

AFrom Azure Monitor, create an action group.

BFrom Security Center, modify the Security policy settings of the Azure subscription.

CFrom Azure Active Directory (Azure AD). modify the members of the Security Reader role group.

DFrom Security Center, modify the alert rule.

Answer : A

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

Question 5

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1. You deploy an Azure Synapse Analytics workspace named synapsews1 to a managed virtual network. You need to enable access from synapsews1 to storage1. What should you configure?

Aa virtual network gateway

Ba network security group (NSG)

Ca private endpoint

Dpeering

Answer : C

Question 6

You have an Azure subscription named Sub1 that contains the resources shown in the following table.

You need to ensure that you can provide VM1 with secure access to a database on SQL1 by using a contained database user.

What should you do?

AEnable a managed service identity on VM1.

BCreate a secret in KV1.

CConfigure a service endpoint on SQL1.

DCreate a key in KV1.

Answer : A

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-sql

Question 7

You have an Azure web app named webapp1.

You need to configure continuous deployment for webapp1 by using an Azure Repo.

What should you create first?

Aan Azure Application Insights service

Ban Azure DevOps organizations

Can Azure Storage account

Dan Azure DevTest Labs lab

Answer : B

To use Azure Repos, make sure your Azure DevOps organization is linked to your Azure subscription.

https://docs.microsoft.com/en-us/azure/app-service/deploy-continuous-deployment

Microsoft Azure Security Technologies AZ-500 Exam Questions