← Back to exam page

AZ-500 – Microsoft Azure Security Technologies

Loading demo links...

Showing 13–15 of 20 questions

Question 13 (New Update)

You have an Azure subscription that includes the resources listed in the following table.

NameTypeDescription
RG1Resource GroupUsed to store virtual machines
RG2Resource GroupUsed to store virtual networks
ServerAdminsSecurity GroupUsed to manage virtual machines

You need to allow ServerAdmins to perform the following task: Create a virtual machine in the existing virtual network located in RG2 only. The solution must adhere to the principle of least privilege.
Which two role-based access control (RBAC) roles should you assign to the ServerAdmins group? Each correct answer is part of the needed solution.
NOTE: Each correct selection is worth one point.

Select all that apply, then click Submit answer.

  • ○ the Contributor role for the subscription
  • ○ the Network Contributor role for RG2
  • ○ A custom RBAC role for the subscription
  • ○ a custom RBAC role for RG2
  • ○ the Network Contributor role for RG1.
  • ○ the Virtual Machine Contributor role for RG1.
Question 14 (Mixed Questions)

You have an Azure subscription that includes an Azure SQL database named SQL1 and an Azure Key Vault named KeyVault1. The Key Vault contains the following keys as shown in the table:

Key Vault Keys Table

Your task is to configure Transparent Data Encryption (TDE) for SQL1 using a customer-managed key. Which of the keys listed in KeyVault1 can be used for this purpose?

Select an option, then click Submit answer.

  • ○ Key2 only
  • ○ Key1 only
  • ○ Key2 and Key3 only
  • ○ Key1, Key2, Key3, and Key4
  • ○ Key1 and Key2 only
Question 15 (Mixed Questions)

Note: This question is part of a series concerning the same scenario. Each question in this series includes a distinct solution which may or may not fulfill the specified goals. Some sets of questions may contain more than one correct solution, whereas others might not have any correct solution.

Once you answer a question in this section, you cannot revisit it later. These questions therefore will not appear in the review screen.

Scenario: You have an Azure subscription containing 50 virtual machines running either Windows Server 2012 R2 or Windows Server 2016.

Objective: Deploy Microsoft Antimalware to these virtual machines.

Solution: You connect to each virtual machine individually and install it as a Windows feature.

Does this solution achieve the objective?

Select an option, then click Submit answer.

  • ○ Yes
  • ○ No