Question # 1 You have an Azure environment.
You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001
standards. What should you use? A. Azure SentinelB. Azure Active Directory (Azure AD) Identity ProtectionC. Azure Security CenterD. Azure Advanced Threat Protection (ATP)
Click for Answer
C. Azure Security Center
Answer Description Explanation:
[Reference:, https://docs.microsoft.com/en-us/azure/security-center/security-center-compliance-dashboard, , , , ]
Question # 2 You have an Azure subscription that contains a user named User1. You need to ensure that User1 can create managed identities. The solution must use the principle of least privilege.
What should you do? A. Create a resource group and assign User1 to the Managed Identity Contributor role.B. Create a management group and assign User1 the Managed Identity Operator role.C. Create an organizational unit (OU) and assign User1 the User administrator Azure AD role.D. Create management group and assign User1 the Hybrid Identity Administrator Azure AD role.
Click for Answer
A. Create a resource group and assign User1 to the Managed Identity Contributor role.
Question # 3 You have an Azure subscription named Sub1.
In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1.
You need to modify WF1 to send email messages to a distribution group named Alerts.
What should you use to modify WF1? A. Azure Application InsightsB. Azure MonitorC. Azure Logic Apps DesignerD. Azure DevOps
Click for Answer
C. Azure Logic Apps Designer
Answer Description Explanation:
[Reference:, https://docs.microsoft.com/en-us/azure/security-center/workflow-automation, https://docs.microsoft.com/en-us/learn/modules/resolve-threats-with-azure-security-center/6-exerciseconfigure-playbook, , , ]
Question # 4 You have an Azure subscription. That contains the virtual machines shown in the following table.
You need to enable file integrity monitoring in Microsoft Defender for Cloud. Which computers will support file integrity monitoring? A. Computed onlyB. Computer 1 and Computer2 onlyC. Computed and Computed onlyD. Computer1, Computer2, and Computer3
Click for Answer
D. Computer1, Computer2, and Computer3
Question # 5 You plan to configure Azure Disk Encryption for VM4. Which key vault can you use to store the encryption key? A. KeyVault1B. KeyVault3C. KeyVault2
Click for Answer
A. KeyVault1
Answer Description Explanation:
The key vault needs to be in the same subscription and same region as the VM.
VM4 is in West US. KeyVault1 is the only key vault in the same region as the VM.
[Reference:, https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-key-vault, , , , ]
Question # 6 You have an Azure Container Registry named ContReg1 that contains a container image named image1.
You enable content trust for ContReg1.
After content trust is enabled, you push two images to ContReg1 as shown in the following table.
Which images are trusted images? A. image1 and image2 onlyB. image2 onlyC. image1, image2, and image3
Click for Answer
B. image2 only
Answer Description Explanation:
Azure Container Registry implements Docker's content trust model, enabling pushing and pulling of signed images.
To push a trusted image tag to your container registry, enable content trust and push the image with docker push.
To work with trusted images, both image publishers and consumers need to enable content trust for their Docker clients. As a publisher, you can sign the images you push to a content trust-enabled registry.
[Reference:, https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust, , , , , , , , , ]
Question # 7 You are evaluating the security of the network communication between the virtual machines in Sub2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer Description Yes,
Yes
No
Question # 8 You need to ensure that User2 can implement PIM.
What should you do first? A. Assign User2 the Global administrator role.B. Configure authentication methods for contoso.com.C. Configure the identity secure score for contoso.com.D. Enable multi-factor authentication (MFA) for User2.
Click for Answer
D. Enable multi-factor authentication (MFA) for User2.
Answer Description Explanation:
To start using PIM in your directory, you must first enable PIM.
1. Sign in to the Azure portal as a Global Administrator of your directory.
You must be a Global Administrator with an organizational account (for example, @yourdomain.com), not a Microsoft account (for example, @outlook.com), to enable PIM for a directory.
Scenario: Technical requirements include: Enable Azure AD Privileged Identity Management (PIM) for contoso.com
References:
https://docs.microsoft.com/bs-latn-ba/azure/active-directory/privileged-identity-management/pim-getting-started
Up-to-Date
We always provide up-to-date AZ-500 exam dumps to our clients. Keep checking website for updates and download.
Excellence
Quality and excellence of our Microsoft Azure Security Technologies practice questions are above customers expectations. Contact live chat to know more.
Success
Your SUCCESS is assured with the AZ-500 exam questions of passin1day.com. Just Buy, Prepare and PASS!
Quality
All our braindumps are verified with their correct answers. Download Azure Security Engineer Associate Practice tests in a printable PDF format.
Basic
$80
Any 3 Exams of Your Choice
3 Exams PDF + Online Test Engine
Buy Now
Premium
$100
Any 4 Exams of Your Choice
4 Exams PDF + Online Test Engine
Buy Now
Gold
$125
Any 5 Exams of Your Choice
5 Exams PDF + Online Test Engine
Buy Now
Passin1Day has a big success story in last 12 years with a long list of satisfied customers.
We are UK based company, selling AZ-500 practice test questions answers. We have a team of 34 people in Research, Writing, QA, Sales, Support and Marketing departments and helping people get success in their life.
We dont have a single unsatisfied Microsoft customer in this time. Our customers are our asset and precious to us more than their money.
AZ-500 Dumps
We have recently updated Microsoft AZ-500 dumps study guide. You can use our Azure Security Engineer Associate braindumps and pass your exam in just 24 hours. Our Microsoft Azure Security Technologies real exam contains latest questions. We are providing Microsoft AZ-500 dumps with updates for 3 months. You can purchase in advance and start studying. Whenever Microsoft update Microsoft Azure Security Technologies exam, we also update our file with new questions. Passin1day is here to provide real AZ-500 exam questions to people who find it difficult to pass exam
Azure Security Engineer Associate can advance your marketability and prove to be a key to differentiating you from those who have no certification and Passin1day is there to help you pass exam with AZ-500 dumps. Microsoft Certifications demonstrate your competence and make your discerning employers recognize that Microsoft Azure Security Technologies certified employees are more valuable to their organizations and customers. We have helped thousands of customers so far in achieving their goals. Our excellent comprehensive Microsoft exam dumps will enable you to pass your certification Azure Security Engineer Associate exam in just a single try. Passin1day is offering AZ-500 braindumps which are accurate and of high-quality verified by the IT professionals. Candidates can instantly download Azure Security Engineer Associate dumps and access them at any device after purchase. Online Microsoft Azure Security Technologies practice tests are planned and designed to prepare you completely for the real Microsoft exam condition. Free AZ-500 dumps demos can be available on customer’s demand to check before placing an order.
What Our Customers Say
Jeff Brown
Thanks you so much passin1day.com team for all the help that you have provided me in my Microsoft exam. I will use your dumps for next certification as well.
Mareena Frederick
You guys are awesome. Even 1 day is too much. I prepared my exam in just 3 hours with your AZ-500 exam dumps and passed it in first attempt :)
Ralph Donald
I am the fully satisfied customer of passin1day.com. I have passed my exam using your Microsoft Azure Security Technologies braindumps in first attempt. You guys are the secret behind my success ;)
Lilly Solomon
I was so depressed when I get failed in my Cisco exam but thanks GOD you guys exist and helped me in passing my exams. I am nothing without you.