Free Practice Questions for Microsoft AZ-500 Exam

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.You use Azure Security Center for the centralized policy management of three Azure subscriptions.You use several policy definitions to manage the security of the subscriptions.You need to deploy the policy definitions as a group to all three subscriptions.Solution: You create a policy initiative and assignments that are scoped to resource groups.Does this meet the goal?

• Yes
• No

You have an Azure subscription.You plan to create a workflow automation in Azure Security Center that will automatically remediate a security vulnerability.What should you create first?

• a managed identity
• an automation account
• an Azure function app
• an alert rule
• an Azure logic app

You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1You need to ensure that the members of Group1 sign in by using passwordless authenticationWhat should you do?

• Configure the Microsoft Authenticator authentication method policy.
• Configure the certificate-based authentication (CBA) policy.
• Configure the sign-in risk policy.
• Create a Conditional Access policy.

You have an Azure subscription.You create a new virtual network named VNet1.You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic.What should you do?

• Create an Azure App Service Hybrid Connection.
• Configure regional virtual network integration.
• Create an App Service Environment
• Create an Azure application gateway.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a hybrid configuration of Azure Active Directory (Azure AD).You have an Azure HDInsight cluster on a virtual network.You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials.You need to configure the environment to support the planned authentication.Solution: You deploy an Azure AD Application Proxy.Does this meet the goal?

• Yes
• No

You have an Azure subscription named Sub1.In Azure Security Center, you have a security playbook named Play1. Play1 is configured to send an email message to a user named User1.You need to modify Play1 to send email messages to a distribution group named Alerts.What should you use to modify Play1?

• Azure DevOps
• Azure Application Insights
• Azure Monitor
• Azure Logic Apps Designer

Lab TaskTask 7You need to ensure that connections through an Azure Application Gateway named Homepage-AGW are inspected for malicious requests.

• see the task answer with step by step below

You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. You review the Attack Surface Summary dashboard. You need to identify the following insights:* Deprecated technologies that are no longer supported* Infrastructure that will soon expireWhich section of the dashboard should you review?

• Securing the Cloud
• Sensitive Services
• attack surface composition
• Attack Surface Priorities

Lab Taskuse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password. place your cursor in the Enter password box and click on the password below.Azure Username: Userl [email protected] Password: GpOAe4@lDgIf the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 28681041Task 10You need to create a new Azure AD directory named 28681041.onmicrosoft.com. The new directory must contain a new user named [email protected].

• Check below steps in explanation for Task

Lab Taskuse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the username below.To enter your password. place your cursor in the Enter password box and click on the password below.Azure Username: Userl [email protected] Password: GpOAe4@lDgIf the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 28681041Task 9You need to ensure that the rg1lod28681041n1 Azure Storage account is encrypted by using a key stored in the KeyVault28681041 Azure key vault.

• Check below steps in explanation for Task