Question # 1 You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.
What should you create? A. an Azure AD userB. a secret in Azure Key VaultC. an Azure AD groupD. a role assignment
Click for Answer
D. a role assignment
Question # 2 You have an Azure Container Registry named ContReg1 that contains a container image named image1.
You enable content trust for ContReg1.
After content trust is enabled, you push two images to ContReg1 as shown in the following table.
Which images are trusted images? A. image1 and image2 onlyB. image2 onlyC. image1, image2, and image3
Click for Answer
B. image2 only
Answer Description Explanation:
Azure Container Registry implements Docker's content trust model, enabling pushing and pulling of signed images.
To push a trusted image tag to your container registry, enable content trust and push the image with docker push.
To work with trusted images, both image publishers and consumers need to enable content trust for their Docker clients. As a publisher, you can sign the images you push to a content trust-enabled registry.
[Reference:, https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust, , , , , , , , , ]
Question # 3 You plan to configure Azure Disk Encryption for VM4. Which key vault can you use to store the encryption key? A. KeyVault1B. KeyVault3C. KeyVault2
Click for Answer
A. KeyVault1
Answer Description Explanation:
The key vault needs to be in the same subscription and same region as the VM.
VM4 is in West US. KeyVault1 is the only key vault in the same region as the VM.
[Reference:, https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault, , , , ]
Question # 4 You have the Azure resource shown in the following table.
You need to meet the following requirements:
* Internet-facing virtual machines must be protected by using network security groups (NSGs).
* All the virtual machines must have disk encryption enabled.
What is the minimum number of security that you should create in Azure Security Center? A. 1B. 2C. 3D. 4
Click for Answer
D. 4
Question # 5 You need to create Role1 to meet the platform protection requirements.
How should you complete the role definition of Role1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer Description Explanation:
1) Microsoft.Compute/
2) disks
3) /subscrption/{subscriptionId}/resourceGroups/{Resource Group Id}
A new custom RBAC role named Role1 must be used to delegate the administration of the managed disks in Resource Group1. Role1 must be available only for Resource Group1.
Question # 6 You have an Azure environment.
You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001
standards. What should you use? A. Azure SentinelB. Azure Active Directory (Azure AD) Identity ProtectionC. Azure Security CenterD. Azure Advanced Threat Protection (ATP)
Click for Answer
C. Azure Security Center
Answer Description Explanation:
[Reference:, https://docs.microsoft.com/en-us/azure/security-center/security-center-compliance-dashboard, , , , ]
Question # 7 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You use Azure Security Center for the centralized policy management of three Azure subscriptions.
You use several policy definitions to manage the security of the subscriptions.
You need to deploy the policy definitions as a group to all three subscriptions.
Solution: You create an initiative and an assignment that is scoped to a management group.
Does this meet the goal? A. YesB. No
Click for Answer
A. Yes
Answer Description Explanation:
References:
https://docs.microsoft.com/e n-us/azure/governance/policy/overview
Question # 8 You need to ensure that the Azure AD application registration and consent configurations meet the identity and access requirements.
What should you use in the Azure portal? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer Description Explanation:
[Reference:, https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/configure-user-consent, , ]
Up-to-Date
We always provide up-to-date AZ-500 exam dumps to our clients. Keep checking website for updates and download.
Excellence
Quality and excellence of our Microsoft Azure Security Technologies practice questions are above customers expectations. Contact live chat to know more.
Success
Your SUCCESS is assured with the AZ-500 exam questions of passin1day.com. Just Buy, Prepare and PASS!
Quality
All our braindumps are verified with their correct answers. Download Azure Security Engineer Associate Practice tests in a printable PDF format.
Basic
$80
Any 3 Exams of Your Choice
3 Exams PDF + Online Test Engine
Buy Now
Premium
$100
Any 4 Exams of Your Choice
4 Exams PDF + Online Test Engine
Buy Now
Gold
$125
Any 5 Exams of Your Choice
5 Exams PDF + Online Test Engine
Buy Now
Passin1Day has a big success story in last 12 years with a long list of satisfied customers.
We are UK based company, selling AZ-500 practice test questions answers. We have a team of 34 people in Research, Writing, QA, Sales, Support and Marketing departments and helping people get success in their life.
We dont have a single unsatisfied Microsoft customer in this time. Our customers are our asset and precious to us more than their money.
AZ-500 Dumps
We have recently updated Microsoft AZ-500 dumps study guide. You can use our Azure Security Engineer Associate braindumps and pass your exam in just 24 hours. Our Microsoft Azure Security Technologies real exam contains latest questions. We are providing Microsoft AZ-500 dumps with updates for 3 months. You can purchase in advance and start studying. Whenever Microsoft update Microsoft Azure Security Technologies exam, we also update our file with new questions. Passin1day is here to provide real AZ-500 exam questions to people who find it difficult to pass exam
Azure Security Engineer Associate can advance your marketability and prove to be a key to differentiating you from those who have no certification and Passin1day is there to help you pass exam with AZ-500 dumps. Microsoft Certifications demonstrate your competence and make your discerning employers recognize that Microsoft Azure Security Technologies certified employees are more valuable to their organizations and customers. We have helped thousands of customers so far in achieving their goals. Our excellent comprehensive Microsoft exam dumps will enable you to pass your certification Azure Security Engineer Associate exam in just a single try. Passin1day is offering AZ-500 braindumps which are accurate and of high-quality verified by the IT professionals. Candidates can instantly download Azure Security Engineer Associate dumps and access them at any device after purchase. Online Microsoft Azure Security Technologies practice tests are planned and designed to prepare you completely for the real Microsoft exam condition. Free AZ-500 dumps demos can be available on customer’s demand to check before placing an order.
What Our Customers Say
Jeff Brown
Thanks you so much passin1day.com team for all the help that you have provided me in my Microsoft exam. I will use your dumps for next certification as well.
Mareena Frederick
You guys are awesome. Even 1 day is too much. I prepared my exam in just 3 hours with your AZ-500 exam dumps and passed it in first attempt :)
Ralph Donald
I am the fully satisfied customer of passin1day.com. I have passed my exam using your Microsoft Azure Security Technologies braindumps in first attempt. You guys are the secret behind my success ;)
Lilly Solomon
I was so depressed when I get failed in my Cisco exam but thanks GOD you guys exist and helped me in passing my exams. I am nothing without you.