You have an Azure subscription that contains an app named App1. App1 has the app registration shown in the following table.You need to ensure that App1 can read all user calendars and create appointments. The solution must use the principle of least privilege.What should you do?
Answer(s): B
https://docs.microsoft.com/en-us/graph/permissions-reference#calendars-permissions
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.You create and enforce an Azure AD Identity Protection sign-in risk policy that has the following settings:-Assignments: Include Group1, exclude Group2-Conditions: Sign-in risk level: Low and above-Access: Allow access, Require multi-factor authenticationYou need to identify what occurs when the users sign in to Azure AD.What should you identify for each user? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access-policies/ https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-policies https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains an Azure SQL database named SQL1.You plan to deploy a web app named App1.You need to provide App1 with read and write access to SQL1. The solution must meet the following requirements:-Provide App1 with access to SQL1 without storing a password.-Use the principle of least privilege.-Minimize administrative effort.Which type of account should App1 use to access SQL1, and which database roles should you assign to App1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database?tabs=windowsclient%2Cdotnet
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure Active Directory (Azure AD) tenant that contains two users named User1 and User2 and a registered app named App1.You create an app-specific role named Role1.You need to assign Role1 to User1 and enable User2 to request access to App1.Which two settings should you modify? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Roles and administrators Here you will find Role1 and be able to assign User1 to the role.Box 2: Self Service Under Self Service, there is an option to ג€Allow users to request access to this applicationג€.
You have an Azure subscription that contains the resources shown in the following table.You plan to deploy the virtual machines shown in the following table.You need to assign managed identities to the virtual machines. The solution must meet the following requirements:-Assign each virtual machine the required roles.-Use the principle of least privilege.What is the minimum number of managed identities required?
We have two different sets of required permissions. VM1 and VM2 have the same permission requirements. VM3 and VM4 have the same permission requirements.A user-assigned managed identity can be assigned to one or many resources. By using user-assigned managed identities, we can create just two managed identities: one with the permission requirements for VM1 and VM2 and the other with the permission requirements for VM3 and VM4.
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.