Pass the Microsoft Azure Security Engineer Associate AZ-500 Questions and answers with CertsForce

Viewing page 3 out of 4 pages
Viewing questions 21-30 out of questions
Questions # 21:

You need to implement the planned change for WAF1.

The solution must minimize administrative effort

What should you do?

Options:

A.

Create an Azure policy.


B.

Modify the Azure-managed DRS.


C.

Add a custom rule.


D.

Modify the Bot Manager 1.1 rule set.


Expert Solution
Questions # 22:

You need to delegate a user to implement the planned change for Defender for Cloud.

The solution must follow the principle of least privilege.

Which user should you choose?

Options:

A.

Admin1


B.

Admin2


C.

Admin3


D.

Admin4


Expert Solution
Questions # 23:

You need to perform the planned changes for OU2 and User1.

Which tools should you use? To answer, drag the appropriate tools to the correct resources. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Question # 23


Expert Solution
Questions # 24:

You need to meet the technical requirements for the finance department users.

Which CAPolicy1 settings should you modify?

Options:

A.

Cloud apps or actions


B.

Conditions


C.

Grant


D.

Session


Expert Solution
Questions # 25:

You need to encrypt storage1 to meet the technical requirements. Which key vaults can you use?

Options:

A.

KeyVault1 only


B.

KeyVault2 and KeyVault3 only


C.

KeyVault1 and KeyVault3 only


D.

KeyVault1 KeyVault2 and KeyVault3


Expert Solution
Questions # 26:

You plan to configure Azure Disk Encryption for VM4. Which key vault can you use to store the encryption key?

Options:

A.

KeyVault1


B.

KeyVault3


C.

KeyVault2


Expert Solution
Questions # 27:

From Azure Security Center, you need to deploy SecPol1.

What should you do first?

Options:

A.

Enable Azure Defender.


B.

Create an Azure Management group.


C.

Create an initiative.


D.

Configure continuous export.


Expert Solution
Questions # 28:

You need to configure support for Azure Sentinel notebooks to meet the technical requirements.

What is the minimum number of Azure container registries and Azure Machine Learning workspaces required?

Question # 28


Expert Solution
Questions # 29:

You plan to implement JIT VM access. Which virtual machines will be supported?

Options:

A.

VM1 and VM3 only


B.

VM1. VM2. VM3, and VM4


C.

VM2, VM3, and VM4 only


D.

VM1 only


Expert Solution
Questions # 30:

You implement the planned changes for ASG1 and ASG2.

In which NSGs can you use ASG1. and the network interfaces of which virtual machines can you assign to ASG2?

Question # 30


Expert Solution
Viewing page 3 out of 4 pages
Viewing questions 21-30 out of questions