Quiz
Az-500
Dieses Quiz hat ein Zeitlimit und öffnet sich deshalb im gewohnten Player.
Fragen in diesem Quiz (40)
1Your company recently created an Azure subscription.
You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM).
Which of the following is the role you should assign to the user?- AThe Global administrator role.
- BThe Security administrator role.
- CThe Password administrator role.
- DThe Compliance administrator role.
2Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.
After syncing all on-premises identities to Azure AD, you are informed that users with a givenName attribute starting with LAB should not be allowed to sync to
Azure AD.
Which of the following actions should you take?- AYou should make use of the Synchronization Rules Editor to create an attribute-based filtering rule.
- BYou should configure a DNAT rule on the Firewall.
- CYou should configure a network traffic filtering rule on the Firewall.
- DYou should make use of Active Directory Users and Computers to create an attribute-based filtering rule.
3You have been tasked with applying conditional access policies for your company's current Azure Active Directory (Azure AD).
The process involves assessing the risk events and risk levels.
Which of the following is the risk level that should be configured for sign ins that originate from IP addresses with dubious activity?- ANone
- BLow
- CMedium
- DHigh
4Your company recently created an Azure subscription. You have, subsequently, been tasked with making sure that you are able to secure Azure AD roles by making use of Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
Which of the following actions should you take FIRST?- AYou should sign up Azure Active Directory (Azure AD) Privileged Identity Management (PIM) for Azure AD roles.
- BYou should consent to Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
- CYou should discover privileged roles.
- DYou should discover resources.
5You have been tasked with creating a different subscription for each of your company's divisions. However, the subscriptions will be linked to a single Azure Active
Directory (Azure AD) tenant.
You want to make sure that each subscription has identical role assignments.
You make use of Azure AD Privileged Identity Management (PIM).
Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.- ANo adjustment required
- BAzure Blueprints
- CConditional access policies
- DAzure DevOps
6Your company has an Azure Container Registry.
You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The role assigned should not require more privileges than necessary.
Which of the following is the role you should assign?- AReader
- BContributor
- CAcrDelete
- DAcrPull
7Your Company's Azure subscription includes a virtual network that has a single subnet configured.
You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed.
You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage resources and Azure
SQL databases via the service endpoint.
You need to perform a task on the virtual machine prior to deploying containers.
Solution: You create an application security group.
Does the solution meet the goal?- AYes
- BNo
8You make use of Azure Resource Manager templates to deploy Azure virtual machines.
You have been tasked with making sure that Windows features that are not in use, are automatically inactivated when instances of the virtual machines are provisioned.
Which of the following actions should you take?- AYou should make use of Azure DevOps.
- BYou should make use of Azure Automation State Configuration.
- CYou should make use of network security groups (NSG).
- DYou should make use of Azure Blueprints
9You have been tasked with delegate administrative access to your company's Azure key vault.
You have to make sure that a specific user can set advanced access policies for the key vault. You also have to make sure that access is assigned based on the principle of least privilege.
Which of the following options should you use to achieve your goal?- AAzure Information Protection
- BAzure AD Privileged Identity Management (PIM)
- CAzure DevOps
- DRBAC
10You have an Azure virtual machine that runs Windows Server R2.
You plan to deploy and configure an Azure Key vault, and enable Azure Disk Encryption for the virtual machine.
Which of the following is TRUE with regards to Azure Disk Encryption for a Windows VM?- AIt is supported for basic tier VMs.
- BIt is supported for standard tier VMs.
- CIt is supported for VMs configured with software-based RAID systems.
- DIt is supported for VMs configured with Storage Spaces Direct (S2D).
11Your company's Azure subscription includes a hundred virtual machines that have Azure Diagnostics enabled.
You have been tasked with retrieving the identity of the user that removed a virtual machine fifteen days ago. You have already accessed Azure Monitor.
Which of the following options should you use?- AApplication Log
- BMetrics
- CActivity Log
- DLogs
12Your company has an Azure SQL database that has Always Encrypted enabled.
You are required to make the relevant information available to application developers to allow them to access data in the database.
Which two of the following options should be made available? Answer by dragging the correct options from the list to the answer area.- AThe column encryption key
- BA DLP policy
- CA shared access signature (SAS)
- DA key vault access policy
- EThe column master key
13You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.
You create and enforce an Azure AD Identity Protection user risk policy that has the following settings:
✑ Assignment: Include Group1, Exclude Group2
✑ Conditions: Sign-in risk of Medium and above
✑ Access: Allow access, Require password change
Select the ones that are true
- AIf User1 signs in from an unfamiliar location, he must change his password
- BIf User2 signs in from an anonymous IP address, she must change her password
- CIf User3 signs in from a computer containing malware that is communicating with known bot servers, he must change his password
14You need to configure an access review. The review will be assigned to a new collection of reviews and reviewed by resource owners.
Which three actions should you perform in sequence?
Select the correct ones
- ACreate an access review program
- BCreate an access review control
- CSet Reviewers to Group owners
- DCreate an access review audit
- ESet reviewers to members
- FSet reviewers to selected users
15Your company has two offices in Seattle and New York. Each office connects to the Internet by using a NAT device. The offices use the IP addresses shown in the following table.
The company has an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.
The MFA service settings are configured as shown in the exhibit. (Click the Exhibit tab.)
Select the correct ones
- AIf User1 signs in to Azure from a device that uses an IP address of 134.18.14.10, User1 must be authenticated by using a phone
- BIf User2 signs in to Azure from a device in the Seattle office, User2 must be authenticated by using the Microsoft Authenticator app
- CIf User2 signs in to Azure from a device in the New York office, User2 must be authenticated by using a phone
16You have an Azure subscription.
You create an Azure web app named Contoso1812 that uses an S1 App Service plan.
You plan to -
create a CNAME DNS record for www.contoso.com that points to Contoso1812.
You need to ensure that users can access Contoso1812 by using the https://www.contoso.com URL.
Which two actions should you perform? Each correct answer presents part of the solution.- ATurn on the system-assigned managed identity for Contoso1812.
- BAdd a hostname to Contoso1812.
- CScale out the App Service plan of Contoso1812.
- DAdd a deployment slot to Contoso1812.
- EScale up the App Service plan of Contoso1812.
- FUpload a PFX file to Contoso1812.
17You have a hybrid configuration of Azure Active Directory (Azure AD).
You have an Azure HDInsight cluster on a virtual network.
You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials.
You need to configure the environment to support the planned authentication.
Solution: You deploy Azure Active Directory Domain Services (Azure AD DS) to the Azure subscription.
Does this meet the goal?- ARichtig
- BFalsch
18Your network contains an Active Directory forest named contoso.com. You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to configure synchronization by using the Express Settings installation option in Azure AD Connect.
You need to identify which roles and groups are required to perform the planned configuration. The solution must use the principle of least privilege.
Which two roles and groups should you identify? Each correct answer presents part of the solution.- Athe Domain Admins group in Active Directory
- Bthe Security administrator role in Azure AD
- Cthe Global administrator role in Azure AD
- Dthe User administrator role in Azure AD
- Ethe Enterprise Admins group in Active Directory
19You create an Azure subscription with Azure AD Premium P2.
You need to ensure that you can use Azure Active Directory (Azure AD) Privileged Identity Management (PIM) to secure Azure AD roles.
Which three actions should you perform in sequence?- AConsent to PIM
- BVerify your identity by using multi factor authentication
- CSign up PIM for Azure AD roles
- DDiscover privileged roles
- EDiscover resources
20You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.
User1 - group1
User2 - group2
User3 - group1 + group2
From Azure AD Privileged Identity Management (PIM), you configure the settings for the Security Administrator role as shown in the following exhibit.
From PIM, you assign the Security Administrator role to the following groups:
✑ Group1: Active assignment type, permanently assigned
✑ Group2: Eligible assignment type, permanently eligible
select the correct ones
- AUser1 can only activate the security administrator role in five hours
- BIf user2 activates the security administrator role, the user will be assigned the role immediately
- CUser3 can activate the security administrator role
21You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.
What should you create?- Aa secret in Azure Key Vault
- Ba role assignment
- Can Azure Active Directory (Azure AD) user
- Dan Azure Active Directory (Azure AD) group
22You have the Azure virtual machines shown in the following table.
For which virtual machines can you enable Update Management?
- AVM2 and VM3 only
- BVM2, VM3, and VM4 only
- CVM1, VM2, and VM4 only
- DVM1, VM2, VM3, and VM4
- EVM1, VM2, and VM3 only
23You have an Azure Container Registry named ContReg1 that contains a container image named image1.
You enable content trust for ContReg1.
After content trust is enabled, you push two images to ContReg1 as shown in the following table.
Which images are trusted images?
- Aimage1 and image2 only
- Bimage2 only
- Cimage1, image2, and image3
24You create resources in an Azure subscription as shown in the following table.
VNET1 contains two subnets named Subnet1 and Subnet2. Subnet1 has a network ID of 10.0.0.0/24. Subnet2 has a network ID of 10.1.1.0/24.
Contoso1901 is configured as shown in the exhibit. (Click the Exhibit tab.)
Select the correct ones
- AAn azure virtual machine on subnet1 can access data in contoso1901
- Ban azure virtual machine on subnet2 can access data in contoso1901
- Ca computer on the internet that has an ip address of 193.77.10.2 can access data in contoso1901
25You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016.
You need to implement a policy to ensure that each virtual machine has a custom antimalware virtual machine extension installed.
How should you complete the policy?
- AAppend/existenceCondition
- BDeny/resources
- CDeployIfNotExists/template
26You are configuring an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the auto-generated service principal to authenticate to the Azure Container Registry.
What should you create?- Aan Azure Active Directory (Azure AD) group
- Ban Azure Active Directory (Azure AD) role assignment
- Ca secret in Azure Key Vault
27You have an Azure subscription that contains the Azure virtual machines shown in the following table.
You create an MDM Security Baseline profile named Profile1.
You need to identify to which virtual machines Profile1 can be applied.
Which virtual machines should you identify?
- AVM1 only
- BVM1, VM2, and VM3 only
- CVM1 and VM3 only
- DVM1, VM2, VM3, and VM4
28You have an Azure virtual machine named VM1.
From Azure Security Center, you get the following high-severity recommendation: `Install endpoint protection solutions on virtual machine`.
You need to resolve the issue causing the high-severity recommendation.
What should you do?- AAdd the Microsoft Antimalware extension to VM1.
- BInstall Microsoft System Center Security Management Pack for Endpoint Protection on VM1.
- CAdd the Network Watcher Agent for Windows extension to VM1.
- DOnboard VM1 to Microsoft Defender for Endpoint.
29You have an Azure subscription that contains a virtual network. The virtual network contains the subnets shown in the following table.
The subscription contains the virtual machines shown in the following table.
You enable just in time (JIT) VM access for all the virtual machines.
You need to identify which virtual machines are protected by JIT.
Which virtual machines should you identify?
- AVM4 only
- BVM1 and VM3 only
- CVM1, VM3 and VM4 only
- DVM1, VM2, VM3, and VM4
30ou have an Azure subscription that contains the virtual machines shown in the following table.
Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured.
You have an Azure Storage account named storageacc1 that is configured as shown in the following exhibit.
select the correct ones
- AFrom vm1, you can upload a blob to storageacc1
- BFrom vm2, you can upload a blob to storageacc1
- CFrom vm3, you can upload a blob to storageacc1
31You are troubleshooting a security issue for an Azure Storage account.
You enable the diagnostic logs for the storage account.
What should you use to retrieve the diagnostics logs?- AAzure Storage Explorer
- BSQL query editor in Azure
- CFile Explorer in Windows
- DAzure Security Center
32You are configuring just in time (JIT) VM access to a Windows Server 2019 Azure virtual machine.
You need to grant users PowerShell access to the virtual machine by using JIT VM access.
What should you configure?- APerm read
- BPerm write
- C3389
- D5986
33You have an Azure Storage account named storage1 that has a container named container1.
You need to prevent the blobs in container1 from being modified.
What should you do?- AFrom container1, change the access level.
- BFrom container1, add an access policy.
- CFrom container1, modify the Access Control (IAM) settings.
- DFrom storage1, enable soft delete for blobs.
34Your company has an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to create several security alerts by using Azure Monitor.
You need to prepare the Azure subscription for the alerts.
What should you create first?- Aan Azure Storage account
- Ban Azure Log Analytics workspace
- Can Azure event hub
- Dan Azure Automation account
35You company has an Azure subscription named Sub1. Sub1 contains an Azure web app named WebApp1 that uses Azure Application Insights. WebApp1 requires users to authenticate by using OAuth 2.0 client secrets.
Developers at the company plan to create a multi-step web test app that preforms synthetic transactions emulating user traffic to Web App1.
You need to ensure that web tests can run unattended.
What should you do first?- AIn Microsoft Visual Studio, modify the .webtest file.
- BUpload the .webtest file to Application Insights.
- CRegister the web test app in Azure AD.
- DAdd a plug-in to the web test app.
36You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?- Athe AzurePerformanceDiagnostics extension
- BAzure HDInsight
- CLinux Diagnostic Extension (LAD) 3.0
- DAzure Analysis Services
37You onboard Azure Sentinel. You connect Azure Sentinel to Azure Security Center.
You need to automate the mitigation of incidents in Azure Sentinel. The solution must minimize administrative effort.
What should you create?- Aan alert rule
- Ba playbook
- Ca function app
- Da runbook
38You are troubleshooting a security issue for an Azure Storage account.
You enable the diagnostic logs for the storage account.
What should you use to retrieve the diagnostics logs?- Athe Security & Compliance admin center
- BAzure Security Center
- CAzure Cosmos DB explorer
- DAzCopy
39You plan to create an Azure Kubernetes Service (AKS) cluster in an Azure subscription.
The manifest of the registered server application is shown in the following exhibit.
You need to ensure that the AKS cluster and Azure Active Directory (Azure AD) are integrated.
Which property should you modify in the manifest?
- AaccessTokenAcceptedVersion
- BkeyCredentials
- CgroupMembershipClaims
- DacceptMappedClaims
40You have the Azure virtual networks shown in the following table.
You have the Azure virtual machines shown in the following table.
The firewalls on all the virtual machines allow ping traffic.
NSG1 is configured as shown in the following exhibit.
select the correct ones
- Avm1 can ping vm3 sucessfully
- Bvm2 can ping vm4 sucessfully
- Cvm3 can be accessed by using RDP from the internet
Informationen
- Beschreibung
- Curso Técnico Superior Profissional Informática Quiz am Az-500, erstellt von Luciano Rodrigues am 07/01/2022.
- Autor
- Luciano Rodrigues
- Sprache
- English
- Aufrufe
- 71
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz