AZ-500 — questions

You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table. You create and assign the Azure policy shown in the following exhibit. What is the flow log status of NSG1 and NSG2 after the Azure policy is assigned?

You have an Azure subscription that contains a storage account named storage1 and a virtual machine named VM1. VM1 is connected to a virtual network named VNet1 that contains one subnet and uses Azure DNS. You need to ensure that VM1 connects to storage1 by using a private IP address. The solution must minimize administrative effort. What should you do?

You have an Azure subscription that contains a web app named App1. App1 provides users with product images and videos. Users access App1 by using a URL of HTTPS://app1.contoso.com. You deploy two server pools named Pool1 and Pool2. Pool1 hosts product images. Pool2 hosts product videos. You need to optimize the performance of App1. The solution must meet the following requirements: • Minimize the performance impact of TLS connections on Pool1 and Pool2. • Route user requests to the server pools based on the requested URL path. What should you include in the solution?

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You need to identify whether you can use the following features with AzFW1: • TLS inspection • Threat intelligence • The network intrusion detection and prevention systems (IDPS) What can you use?

You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Private Link service named APL1. Which resource should you reference during the creation of APL1.

You have an Azure subscription that contains the subnets shown in the following table. The subscription contains an Azure web app named WebApp1 that has the following configurations: • Region: West US • Virtual network: VNet1 • VNet integration: Enabled • Outbound subnet: Subnet11 • Windows plan (West US): ASP1 You plan to deploy an Azure web app named WebApp2 that will have the following settings: • Region: West US • VNet integration: Enabled • Windows plan (West US): ASP1 To which subnets can you integrate WebApp2?

You have an Azure subscription. You need to deploy an Azure virtual WAN to meet the following requirements: • Create three secured virtual hubs located in the East US, West US, and North Europe Azure regions. • Ensure that security rules sync between the regions. What should you use?

You have an Azure subscription that contains an Azure web app named App1 and a virtual machine named VM1. VM1 runs Microsoft SQL Server and is connected to a virtual network named VNet1. App1, VM1, and VNet1 are in the US Central Azure region. You need to ensure that App1 can connect to VM1. The solution must minimize costs. What should you include in the solution?

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a single subnet. The subscription contains a virtual machine named VM1 that is connected to VNet1. You plan to deploy an Azure SQL managed instance named SQL1. You need to ensure that VM1 can access SQL1. Which three components should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the resources shown in the following table. You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region. Which resources can you add to DDoS1?

You have an on-premises network. You have an Azure subscription that contains the resources shown in the following table. You plan to deploy a Site-to-Site (S2S) VPN between the on-premises network and VNet1. You need to recommend an Azure VPN Gateway SKU that meets the following requirements: • Supports 1-Gbps throughput • Minimizes costs What should you recommend?

You need to recommend which virtual machines to use to host App1. The solution must meet the technical requirements for KeyVault1. Which virtual machines should you use?

You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

You are troubleshooting a security issue for an Azure Storage account. You enable Azure Storage Analytics logs and archive it to a storage account. What should you use to retrieve the diagnostics logs?

You have an Azure subscription that contains an Azure Blob storage account named blob1. You need to configure attribute-based access control (ABAC) for blob1. Which attributes can you use in access conditions?

You have an Azure subscription that contains a storage account and an Azure web app named App1. App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings. You need to validate the name resolution to Cosmos1. Which DNS zone should you use?

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named AKS1. You have an Azure container registry that stores container images that were deployed by using Azure DevOps Microsoft-hosted agents. You need to ensure that administrators can access AKS1 only from specific networks. The solution must minimize administrative effort. What should you configure for AKS1?

You have an Azure subscription that contains an Azure Data Lake Storage account named sa1. You plan to deploy an app named App1 that will access sa1 and perform operations, including Read, List, Create Directory, and Delete Directory. You need to ensure that App1 can connect securely to sa1 by using a private endpoint. What is the minimum number of private endpoints required for sa1?

You have an Azure subscription that uses Microsoft Defender for Cloud. The subscription contains an instance of Azure Database for PostgreSQL. You need to ensure that an email alert is triggered when a suspected brute force attack on the database is detected. The solution must minimize administrative effort. What should you configure?

You need to configure WebApp1 to meet the data and application requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.