Microsoft AZ-500 Quiz:17 Topic:1 Questions:81-85

Free Practice Mock Questions Set 81-85 (Quiz # 17) for Microsoft AZ-500 Exam, according to official Microsoft Azure Security Technologies exam syllabus topic # 1

Question: 1

SINGLE CHOICES

You plan to use Azure Disk Encryption for several virtual machine disks.

You need to ensure that Azure Disk Encryption can retrieve secrets from the KeyVault11641655 Azure key vault.

To complete this task, sign in to the Azure portal and modify the Azure resources.

A1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane.
2. In the Key Vault properties, scroll down to the Settings section and select Access Policies.
3. Select the Azure Disk Encryption for volume encryption

4. Click Save to save the changes.

Show Answer

Question: 2

SINGLE CHOICES

You need to ensure that User2-11641655 has all the key permissions for KeyVault11641655.

To complete this task, sign in to the Azure portal and modify the Azure resources.

AYou need to assign the user the Key Vault Secrets Officer role.
In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault11641655. Alternatively, browse to Key Vaults in the left navigation pane.
In the key vault properties, select Access control (IAM).
In the Add a role assignment section, click the Add button.
In the Role box, select the Key Vault Secrets Officer role from the drop-down list.
In the Select box, start typing User2-11641655 and select User2-11641655 from the search results.
Click the Save button to save the changes.

Show Answer

Question: 3

SINGLE CHOICES

You have an azure active Directory (Azure AD) tenant that contains the resources shown in the following table.

q3_AZ-500

User2 is the owner of Group2.

AThe user and group settings for App1 are configured as shown in the following exhibit.

Show Answer

Question: 4

SINGLE CHOICES

You have an Azure subscription named Subcription1 that contains the resources shown in the following table.

q4_AZ-500

You have an Azure subscription named Subcription2 that contains the following resources:

AAn Azure Sentinel workspace
An Azure Event Grid instance
You need to ingest the CEF messages from the NVAs to Azure Sentinel.
NOTE: Each correct selection is worth one point.

Show Answer

Question: 5

SINGLE CHOICES

You need to create a new Azure Active Directory (Azure AD) directory named 10317806.onmicrosoft.com. The new directory must contain a user named user10317806 who is configured to sign in by using Azure Multi-Factor Authentication (MFA).

ATo create a new Azure AD tenant:
1. Browse to theAzure portaland sign in with an account that has an Azure subscription.
2. Select theplus icon (+)and search forAzure Active Directory.

3. SelectAzure Active Directoryin the search results.

4. SelectCreate.
5. Provide anOrganization name(10317806) and anInitial domain name (10317806). Then selectCreate. This will create the directory named
10317806.onmicrosoft.com.

6. After directory creation is complete, select the information box to manage your new directory.
To create the user:
1. In the Azure portal, make sure you are on the Azure Active Directory fly out.

If not, select the Azure Active Directory icon from the left services navigation.

2. UnderManage, selectUsers.

3. SelectAll usersand then select+ New user.
4. Provide aNameandUser name(user10317806) for the user. When you're done, selectCreate.
To enable MFA:
1. In the Azure portal, make sure you are on the Azure Active Directory fly out.

If not, select the Azure Active Directory icon from the left services navigation.

2. UnderManage, selectUsers.

3. Click on the Multi-Factor Authentication link.
4. Tick the checkbox next to the user's name and click the Enable link.

Show Answer

Quiz 13

Quiz 14

Quiz 15

Quiz 16

Quiz 17

Quiz 18

Quiz 19

Quiz 20

Quiz 21