AZ-500 practice questions 491–496

1. Question 491 · 496 in bank

   You have an Azure subscription that contains an Azure Blob storage account named blob1. You need to configure attribute-based access control (ABAC) for blob1. Which attributes can you use in access conditions?

   • Ablob index tags only
   • Bblob index tags and container names only
   • Cfile extensions and container names only
   • Dblob index tags, file extensions, and container names

   Show answer

   Answer: B

   Explanation

   Here are some of the blob storage attributes you can use in your conditions. Account name Blob index tags Blob path Blob prefix Container name Encryption scope name Is Current Version Is hierarchical namespace enabled Is private link Snapshot UTC now (the current date and time in Coordinated Universal Time) Version ID https://learn.microsoft.com/en-us/azure/role-based-access-control/conditions-overview

   Source: Adapted from community discussion — saturation97

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 492 · 496 in bank

   You have an Azure subscription that contains a storage account and an Azure web app named App1. App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings. You need to validate the name resolution to Cosmos1. Which DNS zone should you use?

   • Aendpoint1.privatelink.documents.azure.com
   • Bendpoint1.privatelink.blob.core.windows.net
   • Cendpoint1.privatelink.azurewebsites.net
   • Dendpoint1.privatelink.database.azure.com

   Show answer

   Answer: A

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 493 · 496 in bank

   Select 2

   You need to configure WebApp1 to meet the data and application requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AUpload a public certificate.
   • BTurn on the HTTPS Only protocol setting.
   • CSet the Minimum TLS Version protocol setting to 1.2.
   • DChange the pricing tier of the App Service plan.
   • ETurn on the Incoming client certificates protocol setting.

   Show answer

   Answer: BE

   Explanation

   B. Turn on the HTTPS Only protocol setting. (x) > To force 'mutual auth' you must turn off HTTP E. Turn on the Incoming client certificates protocol setting. (X) > must set it to 'Require'

   Source: Adapted from community discussion — thienvupt

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 494 · 496 in bank

   HOTSPOT - You need to create Role1 to meet the platform protection requirements. How should you complete the role definition of Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Scenario: A new custom RBAC role named Role1 must be used to delegate the administration of the managed disks in RG1. Role1 must be available only for RG1. Azure RBAC template managed disks "Microsoft.Storage/" Reference: https://blogs.msdn.microsoft.com/azureedu/2017/02/11/new-managed-disk-storage-option-for-your-azure-vms/ https://blogs.msdn.microsoft.com/azure4fun/2016/10/21/custom-azure-rbac-roles-and-how-to-extend-existing-role-definitions-scope/

   Source: Adapted from community discussion — PointsE

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 495 · 496 in bank

   DRAG DROP - You need to configure SQLDB1 to meet the data and application requirements. Which three actions should you recommend be performed in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-gb/azure/azure-sql/database/authentication-aad-overview

   Source: Adapted from community discussion — Sleazy

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 496 · 496 in bank

   You need to ensure that User2 can implement PIM. What should you do first?

   • AAssign User2 the Global administrator role.
   • BConfigure authentication methods for contoso.com.
   • CConfigure the identity secure score for contoso.com.
   • DEnable multi-factor authentication (MFA) for User2.

   Show answer

   Answer: A

   Explanation

   Global Administration rights required. I was thinking MFA, but then the question does not mention MFA, or MFA status it only mentions user 2 has Security Administrator Role. So obviously if User2 needs to implement PIM, PIM needs to be enabled, and it requires Global Administrator role.

   Source: Adapted from community discussion — kristiann21

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-500 practice, question 491. 496 questions available.