Microsoft's AZ-500 You have an Azure subscription that contains the resources shown in the following table.You plan to deploy an Azure Private Link service named APL1.Which resource should you reference during the creation of APL1.
#241
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains the subnets shown in the following table.The subscription contains an Azure web app named WebApp1 that has the following configurations:• Region: West US• Virtual network: VNet1• VNet integration: Enabled• Outbound subnet: Subnet11• Windows plan (West US): ASP1You plan to deploy an Azure web app named WebApp2 that will have the following settings:• Region: West US• VNet integration: Enabled• Windows plan (West US): ASP1To which subnets can you integrate WebApp2? E. Subnet11, Subnet12, or Subnet21
#242
Answer: D✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription.You need to deploy an Azure virtual WAN to meet the following requirements:• Create three secured virtual hubs located in the East US, West US, and North Europe Azure regions.• Ensure that security rules sync between the regions.What should you use?
#243
Answer: D✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains an Azure web app named App1 and a virtual machine named VM1. VM1 runs Microsoft SQL Server and is connected to a virtual network named VNet1. App1, VM1, and VNet1 are in the US Central Azure region.You need to ensure that App1 can connect to VM1. The solution must minimize costs.What should you include in the solution? E. NAT gateway integration
#244
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a single subnet. The subscription contains a virtual machine named VM1 that is connected to VNet1.You plan to deploy an Azure SQL managed instance named SQL1.You need to ensure that VM1 can access SQL1.Which three components should you create? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. E. a route table
#245
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains the resources shown in the following table.You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region.Which resources can you add to DDoS1? E. VNet1, VNet2, and WebApp1
#246
Answer: C✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an on-premises network.You have an Azure subscription that contains the resources shown in the following table.You plan to deploy a Site-to-Site (S2S) VPN between the on-premises network and VNet1.You need to recommend an Azure VPN Gateway SKU that meets the following requirements:• Supports 1-Gbps throughput• Minimizes costsWhat should you recommend?
#247
Answer: B✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to recommend which virtual machines to use to host App1. The solution must meet the technical requirements for KeyVault1.Which virtual machines should you use?
#248
Answer: B✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1.You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1.What should you do first?
#249
Answer: D✅ Correct❌ Incorrect
Microsoft's AZ-500 You are troubleshooting a security issue for an Azure Storage account.You enable Azure Storage Analytics logs and archive it to a storage account.What should you use to retrieve the diagnostics logs?
#250
Answer: C✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains an Azure Blob storage account named blob1.You need to configure attribute-based access control (ABAC) for blob1.Which attributes can you use in access conditions?
#251
Answer: B✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains a storage account and an Azure web app named App1.App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings.You need to validate the name resolution to Cosmos1.Which DNS zone should you use?
#252
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1.You have an Azure container registry that stores container images that were deployed by using Azure DevOps Microsoft-hosted agents.You need to ensure that administrators can access AKS1 only from specific networks. The solution must minimize administrative effort.What should you configure for AKS1?
#253
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that contains an Azure Data Lake Storage account named sa1.You plan to deploy an app named App1 that will access sa1 and perform operations, including Read, List, Create Directory, and Delete Directory.You need to ensure that App1 can connect securely to sa1 by using a private endpoint.What is the minimum number of private endpoints required for sa1? E. 5
#254
Answer: B✅ Correct❌ Incorrect
Microsoft's AZ-500 You have an Azure subscription that uses Microsoft Defender for Cloud. The subscription contains an instance of Azure Database for PostgreSQL.You need to ensure that an email alert is triggered when a suspected brute force attack on the database is detected. The solution must minimize administrative effort.What should you configure?
#255
Answer: C✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to configure WebApp1 to meet the data and application requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. E. Turn on the Incoming client certificates protocol setting.
#256
Answer: B✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to ensure that User2 can implement PIM.What should you do first?
#257
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to meet the technical requirements for the finance department users.Which CAPolicy1 settings should you modify?
#258
Answer: D✅ Correct❌ Incorrect
Microsoft's AZ-500 You plan to configure Azure Disk Encryption for VM4.Which key vault can you use to store the encryption key?
#259
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to encrypt storage1 to meet the technical requirements.Which key vaults can you use?
#260
Answer: D✅ Correct❌ Incorrect
Microsoft's AZ-500 You plan to implement JIT VM access.Which virtual machines will be supported?
#261
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to ensure that users can access VM0. The solution must meet the platform protection requirements.What should you do?
#262
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to meet the technical requirements for VNetwork1.What should you do first?
#263
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 From Microsoft Defender for Cloud, you need to deploy SecPol1.What should you do first?
#264
Answer: A✅ Correct❌ Incorrect
Microsoft's AZ-500 You need to ensure that you can meet the security operations requirements. What should you do first?