AZ-500 practice questions 391–400

1. Question 391 · 496 in bank

   You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table:

   

   In Sub1, you create a virtual machine that has the following configurations: ✑ Name: VM1 ✑ Size: DS2v2 ✑ Resource group: RG1 ✑ Region: West Europe ✑ Operating system: Windows Server 2016 You plan to enable Azure Disk Encryption on VM1. In which key vaults can you store the encryption key for VM1?

   • AVault1 or Vault3 only
   • BVault1, Vault2, Vault3, or Vault4
   • CVault1 only
   • DVault1 or Vault2 only

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault?tabs=azure-portal#create-a-key-vault To ensure that encryption secrets don't cross regional boundaries, you must create and use a key vault that's in the same region and tenant as the VMs to be encrypted.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 392 · 496 in bank

   HOTSPOT - You have an Azure subscription that contains a web app named App1 and an Azure key vault named Vault1. You need to configure App1 to store and access the secrets in Vault1. How should you configure App1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet

   Source: Adapted from community discussion — JakeCallham

   

   Next question

3. Question 393 · 496 in bank

   HOTSPOT - You have an Azure subscription that contains the resources shown in the following table.

   

   User1 is a member of Group1. Group1 and User2 are assigned the Key Vault Contributor role for Vault1. On January 1, 2019, you create a secret in Vault1. The secret is configured as shown in the exhibit. The date format YYYY-MM-DD is used on the exhibit. (Click the Exhibit tab.)

   

   User2 is assigned an access policy to Vault1. The policy has the following configurations: ✑ Key Management Operations: Get, List, and Restore ✑ Cryptographic Operations: Decrypt and Unwrap Key ✑ Secret Management Operations: Get, List, and Restore Group1 is assigned an access policy to Vault1. The policy has the following configurations: ✑ Key Management Operations: Get and Recover ✑ Secret Management Operations: List, Backup, and Recover For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Tested answers: 1) On Jan 1 2019 User 1 can view the password 1 - No (Error: Either this secret is disabled or you do not have the "Get" secret permission.) 2) On June 1 2019 User2 can view the password1 - YES 3) On June 1 2019 User1 can view the Password1 - No User 2 can see the Value no issues regardless of date because he has GET Secret Permission

   Source: Adapted from community discussion — dadageer

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 394 · 496 in bank

   HOTSPOT - You have an Azure Active Directory (Azure AD) tenant named contoso1812.onmicrosoft.com that contains the users shown in the following table.

   

   You create an Azure Information Protection label named Label1. The Protection settings for Label1 are configured as shown in the exhibit. (Click the Exhibit tab.)

   

   Label1 is applied to a file named File1. For each of the following statements, select Yes if the statement is true, Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Permissions level -Viewer : View, Open, Read; View Rights; Reply ; Reply All ; Allow Macros Viewer can't print. https://docs.microsoft.com/en-us/azure/information-protection/configure-usage-rights#rights-included-in-permissions-levels

   Source: Adapted from community discussion — [Removed]

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 395 · 496 in bank

   SIMULATION - You need to prevent HTTP connections to the rg1lod1234578n1 Azure Storage account. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The "Secure transfer required" feature is now supported in Azure Storage account. This feature enhances the security of your storage account by enforcing all requests to your account through a secure connection. This feature is disabled by default. 1. In Azure Portal select you Azure Storage account rg1lod12345678n1. 2. Select Configuration, and Secure Transfer required. Reference: https://techcommunity.microsoft.com/t5/Azure/quot-Secure-transfer-required-quot-is-available-in-Azure-Storage/m-p/82475

   Source: Adapted from community discussion — erffre

   References

   • Microsoft Learn

   

   Next question

6. Question 396 · 496 in bank

   DRAG DROP - Your network contains an on-premises Active Directory domain named contoso.com. The domain contains a user named User1. You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains an Azure Storage account named storage1. Storage1 contains an Azure file share named share1. Currently, the domain and the tenant are not integrated. You need to ensure that User1 can access share1 by using his domain credentials. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-enable

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 397 · 496 in bank

   SIMULATION - You need to ensure that the rg1lod1234578n1 Azure Storage account is encrypted by using a key stored in the KeyVault12345678 Azure key vault. To complete this task, sign in to the Azure portal.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Step 1: To enable customer-managed keys in the Azure portal, follow these steps: 1. Navigate to your storage account rg1lod1234578n1 2. On the Settings blade for the storage account, click Encryption. Select the Use your own key option, as shown in the following figure. Step 2: Specify a key from a key vault To specify a key from a key vault, first make sure that you have a key vault that contains a key. To specify a key from a key vault, follow these steps: 4. Choose the Select from Key Vault option. 5. Choose the key vault KeyVault1234578 containing the key you want to use. 6. Choose the key from the key vault. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-encryption-keys-portal

   Source: Adapted from community discussion — Custodian

   

   Next question

8. Question 398 · 496 in bank

   You have a web app named WebApp1. You create a web application firewall (WAF) policy named WAF1. You need to protect WebApp1 by using WAF1. What should you do first?

   • ADeploy an Azure Front Door.
   • BAdd an extension to WebApp1.
   • CDeploy Azure Firewall.

   Show answer

   Answer: A

   Explanation

   Supported service WAF can be deployed with Azure Application Gateway, Azure Front Door, and Azure Content Delivery Network (CDN) service from Microsoft. WAF on Azure CDN is currently under public preview. https://docs.microsoft.com/nl-nl/azure/web-application-firewall/overview

   Source: Adapted from community discussion — Exam_Master_Me

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 399 · 496 in bank

   You have an Azure subscription that contains an Azure SQL database named sql1. You plan to audit sql1. You need to configure the audit log destination. The solution must meet the following requirements: ✑ Support querying events by using the Kusto query language. ✑ Minimize administrative effort. What should you configure?

   • Aan event hub
   • Ba storage account
   • Ca Log Analytics workspace

   Show answer

   Answer: C

   References

   • Microsoft Learn

   Next question

10. Question 400 · 496 in bank

    DRAG DROP - You have an Azure subscription. You plan to create a storage account. You need to use customer-managed keys to encrypt the tables in the storage account. From Azure Cloud Shell, which three cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://docs.microsoft.com/en-us/azure/storage/common/customer-managed-keys-configure-key-vault?tabs=powershell

    Source: Adapted from community discussion — CeliaZhou

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-500 practice, question 391. 496 questions available.