You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role.You purchase a cloud app named App1 and register App1 in Azure AD.Admin1 reports that the option to enable token encryption for App1 is unavailable.You need to ensure that Admin1 can enable token encryption for App1 in the Azure portal.What should you do?
Answer(s): A
This is a tricky one because uploading a certificate is also required. However, the question states that the Token Encryption option is unavailable. This is because the app is not added as an enterprise application. When the app is added as an enterprise application, the Token Encryption option will be available.Then you can upload the certificate.
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/howto-saml-token-encryption
You plan to deploy an app that will modify the properties of Azure Active Directory (Azure AD) users by using Microsoft Graph.You need to ensure that the app can access Azure AD.What should you configure first?
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains the resources shown in the following table.You create a custom RBAC role in Subscription1 by using the following JSON file.You assign Role1 to User1 on RG1.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftcompute
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.The subscription is linked to an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.You create the groups shown in the following table.The membership rules for Group1 and Group2 are configured as shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership
You have a Microsoft 365 tenant that uses an Azure Active Directory (Azure AD) tenant. The Azure AD tenant syncs to an on-premises Active Directory domain by using an instance of Azure AD Connect.You create a new Azure subscription.You discover that the synced on-premises user accounts cannot be assigned roles in the new subscription.You need to ensure that you can assign Azure and Microsoft 365 roles to the synced Azure AD user accounts.What should you do fist?
Answer(s): C
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.