You have an Azure subscription that contains the users shown in the following table.Which users can enable Azure AD Privileged Identity Management (PIM)?
Answer(s): A
For Azure AD roles in PIM, only a user who is in the Privileged Role Administrator or Global Administrator role can manage assignments for other administrators.Global Administrators, Security Administrators, Global Readers, and Security Readers can also view assignments to Azure AD roles in PIM.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-deployment-plan
You have an Azure subscription.You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account.Which property of the RBAC role definition should you configure?
Answer(s): D
To 'Read a storage account', ie. list the blobs in the storage account, you need an 'Action' permission.To read the data in a storage account, ie. open a blob, you need a 'DataAction' permission.
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com.You collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. Fabrikam.com has multi-factor authentication (MFA) enabled for all users.Contoso.com has the Cross-tenant access settings configured as shown in the Cross-tenant access settings exhibit. (Click the Cross-tenant access settings tab.)Contoso.com has the External collaboration settings configured as shown in the External collaboration settings exhibit. (Click the External collaboration settings tab.)You create a Conditional Access policy that has the following settings:• Name: CAPolicy1• Assignmentso Guest or external users: B2B collaboration guest userso Target resources- Include: All cloud apps• Access controls- Grant access• Require device to be marked as compliant• Require multi-factor authentication- Enable policy: OnFor each of the following statements, select Yes if the statement is true, otherwise select No.NOTE: Each correct section is worth one point.
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have the hierarchy of Azure resources shown in the following exhibit.RG1, RG2, and RG3 are resource groups.RG2 contains a virtual machine named VM2.You assign role-based access control (RBAC) roles to the users shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You plan to implement an Azure function named Function1 that will create new storage accounts for containerized application instances.You need to grant Function1 the minimum required privileges to create the storage accounts. The solution must minimize administrative effort.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/howto-assign-access-portal
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.