2021 Microsoft Azure Security Engineer Associate AZ-500 Real Questions

1. AZ-500 Free Questions AZ-500 Free Questions Microsoft Azure Security Technologies Microsoft Azure Security Technologies https://www.passquestion.com/ https://www.passquestion.com/AZ-500 AZ-500.html .html

2. Question 1 Question 1 You have an app that uses an Azure SQL database. You have an app that uses an Azure SQL database. You need to be notified if a SQL injection attack is launched against the database. You need to be notified if a SQL injection attack is launched against the database. What should you do? What should you do? A.Modify the Diagnostics settings for the database. A.Modify the Diagnostics settings for the database. B.Deploy the SQL Health Check solution in Azure Monitor. B.Deploy the SQL Health Check solution in Azure Monitor. C.Enable Azure Defender for SQL for the database. C.Enable Azure Defender for SQL for the database. D.Enable server-level auditing for the database. D.Enable server-level auditing for the database. Answer : C Answer : C

3. Question 2 Question 2 You plan to deploy an app that will modify the properties of Azure Active Directory You plan to deploy an app that will modify the properties of Azure Active Directory (Azure AD) users by using Microsoft Graph. You need to ensure that the app can access (Azure AD) users by using Microsoft Graph. You need to ensure that the app can access Azure AD. What should you configure first? Azure AD. What should you configure first? A.a custom role-based access control (RBAQ role A.a custom role-based access control (RBAQ role B.an external identity B.an external identity C.an Azure AD Application Proxy C.an Azure AD Application Proxy D.an app registration D.an app registration Answer : B Answer : B

4. Question 3 Question 3 You have an Azure Active Directory (Azure AD) tenant. You have an Azure Active Directory (Azure AD) tenant. You need to prevent nonprivileged Azure AD users from creating service principals in Azure AD. You need to prevent nonprivileged Azure AD users from creating service principals in Azure AD. What should you do in the Azure Active Directory admin center of the tenant? What should you do in the Azure Active Directory admin center of the tenant? A.From the Properties Wade, set Enable Security defaults to Yes. A.From the Properties Wade, set Enable Security defaults to Yes. B.From the Properties blade, set Access management fen Azure resources to No B.From the Properties blade, set Access management fen Azure resources to No C.From the User settings blade, set Users can register applications to No C.From the User settings blade, set Users can register applications to No D.From the User settings blade, set Restrict access to Azure AD administration portal to Yes. D.From the User settings blade, set Restrict access to Azure AD administration portal to Yes. Answer : D Answer : D

5. Question 4 Question 4 You have an Azure subscription. You have an Azure subscription. You plan to create a workflow automation in Azure Security Center that will automatically remediate You plan to create a workflow automation in Azure Security Center that will automatically remediate a security vulnerability. a security vulnerability. What should you create first? What should you create first? A.a managed identity A.a managed identity B.an automation account B.an automation account C.an Azure function app C.an Azure function app D.an alert rule D.an alert rule E.an Azure logic app E.an Azure logic app Answer : B Answer : B

6. Question 5 Question 5 You have an Azure Sentinel deployment. You have an Azure Sentinel deployment. You need to create a scheduled query rule named Rule1. You need to create a scheduled query rule named Rule1. What should you use to define the query rule logic for Rule1? What should you use to define the query rule logic for Rule1? A.a Transact-SQL statement A.a Transact-SQL statement B.a JSON definition B.a JSON definition C.GraphQL C.GraphQL D.a Kusto query D.a Kusto query Answer : D Answer : D

7. Question 6 Question 6 Note: This question is part of a series of questions that present the same scenario. Each question in Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. questions will not appear in the review screen. You have an Azure subscription named Sub1. You have an Azure subscription named Sub1. You have an Azure Storage account named sa1 in a resource group named RG1. You have an Azure Storage account named sa1 in a resource group named RG1. Users and applications access the blob service and the file service in sa1 by using several shared Users and applications access the blob service and the file service in sa1 by using several shared access signatures (SASs) and stored access policies. access signatures (SASs) and stored access policies. You discover that unauthorized users accessed both the file service and the blob service. You discover that unauthorized users accessed both the file service and the blob service. You need to revoke all access to sa1. You need to revoke all access to sa1. Solution: You create a new stored access policy. Solution: You create a new stored access policy. Does this meet the goal? Does this meet the goal? A. Yes A. Yes B. No B. No Answer: B Answer: B

8. Question 7 Question 7 Your network contains an Active Directory forest named contoso.com. The forest contains a single Your network contains an Active Directory forest named contoso.com. The forest contains a single domain. domain. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. AD) tenant named contoso.com. You plan to deploy Azure AD Connect and to integrate Active Directory and the Azure AD tenant. You plan to deploy Azure AD Connect and to integrate Active Directory and the Azure AD tenant. You need to recommend an integration solution that meets the following requirements: You need to recommend an integration solution that meets the following requirements: ✑ ✑ Ensures that password policies and user logon restrictions apply to user accounts that are synced Ensures that password policies and user logon restrictions apply to user accounts that are synced to the tenant to the tenant ✑ ✑ Minimizes the number of servers required for the solution. Minimizes the number of servers required for the solution. Which authentication method should you include in the recommendation? Which authentication method should you include in the recommendation? A. federated identity with Active Directory Federation Services (AD FS) A. federated identity with Active Directory Federation Services (AD FS) B. password hash synchronization with seamless single sign-on (SSO) B. password hash synchronization with seamless single sign-on (SSO) C. pass-through authentication with seamless single sign-on (SSO) C. pass-through authentication with seamless single sign-on (SSO) Answer: B Answer: B

9. Question 8 Question 8 Your network contains an on-premises Active Directory domain named corp.contoso.com. Your network contains an on-premises Active Directory domain named corp.contoso.com. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. AD) tenant named contoso.com. You sync all on-premises identities to Azure AD. You sync all on-premises identities to Azure AD. You need to prevent users who have a givenName attribute that starts with TEST from being synced You need to prevent users who have a givenName attribute that starts with TEST from being synced to Azure AD. The solution must minimize administrative effort. to Azure AD. The solution must minimize administrative effort. What should you use? What should you use? A. Synchronization Rules Editor A. Synchronization Rules Editor B. Web Service Configuration Tool B. Web Service Configuration Tool C. the Azure AD Connect wizard C. the Azure AD Connect wizard D. Active Directory Users and Computers D. Active Directory Users and Computers Answer: A Answer: A

10. Question 9 Question 9 You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. AD) tenant named contoso.com. An administrator named Admin1 has access to the following identities: An administrator named Admin1 has access to the following identities: ✑ ✑ An OpenID-enabled user account An OpenID-enabled user account ✑ ✑ A Hotmail account A Hotmail account ✑ ✑ An account in contoso.com An account in contoso.com ✑ ✑ An account in an Azure AD tenant named fabrikam.com An account in an Azure AD tenant named fabrikam.com You plan to use Azure Account Center to transfer the ownership of Sub1 to Admin1. You plan to use Azure Account Center to transfer the ownership of Sub1 to Admin1. To which accounts can you transfer the ownership of Sub1? To which accounts can you transfer the ownership of Sub1? A. contoso.com only A. contoso.com only B. contoso.com, fabrikam.com, and Hotmail only B. contoso.com, fabrikam.com, and Hotmail only C. contoso.com and fabrikam.com only C. contoso.com and fabrikam.com only D. contoso.com, fabrikam.com, Hotmail, and OpenID-enabled user account D. contoso.com, fabrikam.com, Hotmail, and OpenID-enabled user account Answer: C Answer: C

11. Question 10 Question 10 Your company plans to create separate subscriptions for each department. Each subscription will be Your company plans to create separate subscriptions for each department. Each subscription will be associated to the same Azure Active Directory (Azure AD) tenant. associated to the same Azure Active Directory (Azure AD) tenant. You need to configure each subscription to have the same role assignments. You need to configure each subscription to have the same role assignments. What should you use? What should you use? A. Azure Security Center A. Azure Security Center B. Azure Policy B. Azure Policy C. Azure AD Privileged Identity Management (PIM) C. Azure AD Privileged Identity Management (PIM) D. Azure Blueprints D. Azure Blueprints Answer: D Answer: D