AZ-500 sample questions

Question 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company’s Azure subscription is linked to their Azure Active Directory (Azure AD) tenant.

After an internally developed application is registered in Azure AD, you are tasked with making sure that the application has the ability to access Azure Key Vault secrets on application the users’ behalf.

Solution: You configure a delegated permission with admin consent.

Does the solution meet the goal?

Accepted Answer

No

Answer

Yes

Question 2

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has Azure subscription linked to their Azure Active Directory (Azure AD) tenant.

As a Global administrator for the tenant, part of your responsibilities involves managing Azure Security Center settings.

You are currently preparing to create a custom sensitivity label.

Solution: You start by altering the pricing tier of the Security Center.

Does the solution meet the goal?

Accepted Answer

No

Answer

Yes

Question 3

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company’s Azure subscription is linked to their Azure Active Directory (Azure AD) tenant.

After an internally developed application is registered in Azure AD, you are tasked with making sure that the application has the ability to access Azure Key Vault secrets on application the users’ behalf.

Solution: You configure a delegated permission with no admin consent.

Does the solution meet the goal?

Accepted Answer

Yes

Answer

No

Question 4

Your company has an Azure Container Registry.

You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The role assigned should not require more privileges than necessary.

Which of the following is the role you should assign?

Accepted Answer

AcrPull

Answer

Reader

Answer

Contributor

Answer

AcrDelete

Question 5

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has an Azure subscription that includes an Azure key vault. You have previously created a secret in the key vault.

After an application developer registers an application in Azure Active Directory (Azure AD), you are instructed to make sure that the application is able to use the secret you created.

Solution: You should create a DLP policy.

Does the solution meet the goal?

Accepted Answer

No

Answer

Yes

Question 6

Your company recently created an Azure subscription.

You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM).

Which of the following is the role you should assign to the user?

Accepted Answer

The Global administrator role.

Answer

The Security administrator role.

Answer

The Password administrator role.

Answer

The Compliance administrator role.

Question 7

You need to consider the underlined segment to establish whether it is accurate.

You have configured an Azure Kubernetes Service (AKS) cluster in your testing environment.

You are currently preparing to deploy the cluster to the production environment.

After disabling HTTP application routing, you want to replace it with an application routing solution that allows for reverse proxy and TLS termination for AKS services via a solitary IP address.

You must create an AKS Ingress controller.

Select “No adjustment required” if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.

Accepted Answer

No adjustment required.

Answer

A network security group.

Answer

An application security group.

Answer

An Azure Basic Load Balancer.

Question 8

Your company makes use of Azure Active Directory (Azure AD) in a hybrid configuration. All users are making use of hybrid Azure AD joined Windows 10 computers.

You manage an Azure SQL database that allows for Azure AD authentication.

You need to make sure that database developers are able to connect to the SQL database via Microsoft SQL Server Management Studio (SSMS). You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for authentication prompts to be kept to a minimum.

Which of the following is the authentication method the developers should use?

Accepted Answer

Active Directory integrated authentication.

Answer

Azure AD token.

Answer

Azure Multi-Factor authentication.

Question 9

You make use of Azure Resource Manager templates to deploy Azure virtual machines.

You have been tasked with making sure that Windows features that are not in use, are automatically inactivated when instances of the virtual machines are provisioned.

Which of the following actions should you take?

Accepted Answer

You should make use of Azure Automation State Configuration.

Answer

You should make use of Azure DevOps.

Answer

You should make use of network security groups (NSG).

Answer

You should make use of Azure Blueprints.

Question 10

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your Company’s Azure subscription includes a virtual network that has a single subnet configured.

You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed.

You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage resources and Azure SQL databases via the service endpoint.

You need to perform a task on the virtual machine prior to deploying containers.

Solution: You create an AKS Ingress controller.

Does the solution meet the goal?

Accepted Answer

No

Answer

Yes

Top vendors

Top exams

Free AZ-500 sample questions

Your company has an Azure Container Registry. You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The role assigned should not require more privileges than necessary. Which of the following is the role you should assign?

Your company recently created an Azure subscription. You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM). Which of the following is the role you should assign to the user?

You make use of Azure Resource Manager templates to deploy Azure virtual machines. You have been tasked with making sure that Windows features that are not in use, are automatically inactivated when instances of the virtual machines are provisioned. Which of the following actions should you take?

10 more free samples are waiting