Microsoft AZ-500 Quiz 3 Topic 4 Questions 11-15

Question: 1

You need to prevent administrators from performing accidental changes to the Homepage app service plan.

To complete this task, sign in to the Azure portal.

AExplanation:
You need to configure a 'lock' for the app service plan. A read-only lock ensures that no one can make changes to the app service plan without first deleting the lock.
In the Azure portal, type App Service Plans in the search box, select App Service Plans from the search results then select Homepage. Alternatively, browse to App Service Plans in the left navigation pane.
In the properties of the app service plan, click on Locks.
Click the Add button to add a new lock.
Enter a name in the Lock name field. It doesn't matter what name you provide for the exam.
For the Lock type, select Read-only.
Click OK to save the changes.

Show Answer

Question: 2

You need to ensure that a user named Danny11597200 can sign in to any SQL database on a Microsoft SQL server named web11597200 by using SQL Server Management Studio (SSMS) and Azure Active Directory (Azure AD) credentials.

To complete this task, sign in to the Azure portal.

AExplanation:
You need to provision an Azure AD Admin for the SQL Server.
In the Azure portal, type SQL Server in the search box, select SQL Server from the search results then select the server named web11597200. Alternatively, browse to SQL Server in the left navigation pane.
In the SQL Server properties page, click on Active Directory Admin.
Click the Set Admin button.
In the Add Admin window, search for and select Danny11597200.
Click the Select button to add Danny11597200.
Click the Save button to save the changes.

Show Answer

Question: 3

You need to configure a Microsoft SQL server named Web11597200 only to accept connections from the Subnet0 subnet on the VNET01 virtual network.

To complete this task, sign in to the Azure portal.

AExplanation:
You need to allow access to Azure services and configure a virtual network rule for the SQL Server.
In the Azure portal, type SQL Server in the search box, select SQL Server from the search results then select the server named web11597200. Alternatively, browse to SQL Server in the left navigation pane.
In the properties of the SQL Server, click Firewalls and virtual networks.
In the Virtual networks section, click on Add existing. This will open the Create/Update virtual network rule window.
Give the rule a name such as Allow_VNET01-Subnet0 (it doesn't matter what name you enter for the exam).
In the Virtual network box, select VNET01.
In the Subnet name box, select Subnet0.
Click the OK button to save the rule.
Back in the Firewall / Virtual Networks window, set the Allow access to Azure services option to On.

Show Answer

Question: 4

You need to ensure that web11597200 is protected from malware by using Microsoft Antimalware for Virtual Machines and is scanned every Friday at 01:00.

To complete this task, sign in to the Azure portal.

AExplanation:
You need to install and configure the Microsoft Antimalware extension on the virtual machine named web11597200.
In the Azure portal, type Virtual Machines in the search box, select Virtual Machines from the search results then select web11597200. Alternatively, browse to Virtual Machines in the left navigation pane.
In the properties of web11597200, click on Extensions.
Click the Add button to add an Extension.
Scroll down the list of extensions and select Microsoft Antimalware.
Click the Create button. This will open the settings pane for the Microsoft Antimalware Extension.
In the Scan day field, select Friday.
In the Scan time field, enter 60. The scan time is measured in minutes after midnight so 60 would be 01:00, 120 would be 02:00 etc.
Click the OK button to save the configuration and install the extension.

Show Answer

Question: 5

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: User1-10598168@ExamUsers.com

Azure Password: Ag1Bh9!#Bd

The following information is for technical support purposes only:

Lab Instance: 10598168

q5_AZ-500

You need to ensure that only devices connected to a 131.107.0.0/16 subnet can access data in the rg1lod10598168 Azure Storage account.

To complete this task, sign in to the Azure portal.

AExplanation:
Step 1:
1. In Azure portal go to the storage account you want to secure. Here: rg1lod10598168
2. Click on the settings menu called Firewalls and virtual networks.
3. To deny access by default, choose to allow access from Selected networks. To allow traffic from all networks, choose to allow access from All networks.
4. Click Save to apply your changes.
Step 2:
1. Go to the storage account you want to secure. Here: rg1lod10598168
2. Click on the settings menu called Firewalls and virtual networks.
3. Check that you've selected to allow access from Selected networks.
4. To grant access to a virtual network with a new network rule, under Virtual networks, click Add existing virtual network, select Virtual networks and Subnets options. Enter the 131.107.0.0/16 subnet and then click Add.
Note: When network rules are configured, only applications requesting data over the specified set of networks can access a storage account. You can limit access to your storage account to requests originating from specified IP addresses, IP ranges or from a list of subnets in an Azure Virtual Network (VNet).

Show Answer

Microsoft AZ-500 Quiz:3 Topic:4 Questions:11-15