AZ-500 practice questions 261–270

1. Question 261 · 496 in bank

   You have an Azure subscription. You plan to map an online infrastructure and perform vulnerability scanning for the following: • ASNs • Hostnames • IP addresses • SSL certificates What should you use?

   • AMicrosoft Defender for Cloud
   • BMicrosoft Defender External Attack Surface Management (Defender EASM)
   • CMicrosoft Defender for Identity
   • DMicrosoft Defender for Endpoint

   Show answer

   Answer: B

   Explanation

   Defender EASM includes the discovery of the following kinds of assets: Domains Hostnames Web Pages IP Blocks IP Addresses ASNs SSL Certificates WHOIS Contacts https://learn.microsoft.com/en-us/azure/external-attack-surface-management/#discovery-and-inventory

   Source: Adapted from community discussion — Alexbz

   References

   • Microsoft Learn

   Next question

2. Question 262 · 496 in bank

   HOTSPOT - You have an Azure subscription that uses Microsoft Defender for Cloud. You plan to use the Secure Score Over Time workbook. You need to configure the Continuous export settings for the Defender for Cloud data. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   To use this Secure Score Over Time workbook, you'll need to configure continuous export to export data to a Log Analytics workspace: From Security Center's sidebar, select Pricing & settings. Select the specific subscription for which you want to configure the data export. From the sidebar of the settings page for that subscription, select Continuous Export. Set the export target to Log Analytics workspace. Select the following data types: Security recommendations and Secure Score. From the export frequency options, select Streaming and Snapshots. Select Save.

   Source: Adapted from community discussion — Self_Study

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 263 · 496 in bank

   You have an Azure subscription that uses Microsoft Defender for Cloud. You have an Amazon Web Services (AWS) account. You need to ensure that when you deploy a new AWS Elastic Compute Cloud (EC2) instance, the Microsoft Defender for Servers agent installs automatically. What should you configure first?

   • Athe classic cloud connector
   • Bthe Azure Monitor agent
   • Cthe Log Analytics agent
   • Dthe native cloud connector

   Show answer

   Answer: D

   Explanation

   D. To protect your AWS-based resources, you can connect an AWS account with either Native of Classic Cloud Connector. Native cloud connector is the recommended way and provides an agentless connection to your AWS account that can extend with Defender for Cloud's Defender plans to secure the AWS resources. https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws?pivots=env-settings

   Source: Adapted from community discussion — ppolychron

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 264 · 496 in bank

   SIMULATION - You need to email an alert to a user named admin1@contoso.com if the average CPU usage of a virtual machine named VM1 is greater than 70 percent for a period of 15 minutes. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Create an alert rule on a metric with the Azure portal 1. In the portal, locate the resource, here VM1, you are interested in monitoring and select it. 2. Select Alerts (Classic) under the MONITORING section. The text and icon may vary slightly for different resources. 3. Select the Add metric alert (classic) button and fill in the fields as per below, and click OK. Metric: CPU Percentage - Condition: Greater than - Period: Over last 15 minutes - Notify via: email - Additional administrator email(s): admin1@contoso.com Reference: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-insights-alerts-portal

   Source: Adapted from community discussion — OldJan

   

   Next question

5. Question 265 · 496 in bank

   HOTSPOT - You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. EAMS1 contains the inventory assets shown in the following table.

   

   Which assets are scanned daily, and which assets will display in the default dashboard charts? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer: VM1 only, VM1 only As per MS article... For instance, “Approved Inventory” assets are always represented in dashboard charts and are scanned daily to ensure data recency. All other kinds of assets are not included in dashboard charts by default; however, users can adjust their inventory filters to view assets in different states as needed.

   Source: Adapted from community discussion — tamilan_da

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 266 · 496 in bank

   You have an Azure subscription that uses Microsoft Defender for Cloud. You have an Amazon Web Services (AWS) account named AWS1 that is connected to Defender for Cloud. You need to ensure that AWS1 uses AWS Foundational Security Best Practices. The solution must minimize administrative effort. What should you do in Defender for Cloud?

   • AAssign a built-in compliance standard.
   • BCreate a new custom standard.
   • CAssign a built-in assessment.
   • DCreate a new custom assessment.

   Show answer

   Answer: A

   Explanation

   A. The regulatory compliance dashboard shows your compliance with built-in standards specific to AWS, including AWS CIS, AWS PCI DSS, and AWS Foundational Security Best Practices. https://learn.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-aws?pivots=env-settings

   Source: Adapted from community discussion — ppolychron

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 267 · 496 in bank

   HOTSPOT - You plan to deploy a custom policy initiative for Microsoft Defender for Cloud. You need to identify all the resource groups that have a Delete lock. How should you complete the policy definition? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • Microsoft Learn

   

   Next question

8. Question 268 · 496 in bank

   You are troubleshooting a security issue for an Azure Storage account. You enable Azure Storage Analytics logs and archive it to a storage account. What should you use to retrieve the diagnostics logs?

   • Athe Microsoft 365 Defender portal
   • BSQL query editor in Azure
   • CAzure Monitor
   • DAzure Storage Explorer

   Show answer

   Answer: D

   Next question

9. Question 269 · 496 in bank

   You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. You review the Attack Surface Summary dashboard. You need to identify the following insights: • Deprecated technologies that are no longer supported • Infrastructure that will soon expire Which section of the dashboard should you review?

   • ASecuring the Cloud
   • BSensitive Services
   • CAttack Surface Priorities
   • Dattack surface composition

   Show answer

   Answer: C

   References

   • Microsoft Learn

   Next question

10. Question 270 · 496 in bank

    You have an Azure subscription. You plan to deploy Microsoft Defender External Attack Surface Management (Defender EASM) to identify and monitor externally facing assets. You create a new Defender EASM instance named EASM1. What should you do next?

    • ACreate a custom attack surface.
    • BAdd a Log Analytics workspace.
    • CAdd a discovery group.
    • DImport seeds from an organization.

    Show answer

    Answer: D

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-500 practice, question 261. 496 questions available.