Free AZ-500 Exam Braindumps
Microsoft Azure Security Technologies Questions 104–108 (page: 32)

You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM).
A user named User1 is eligible for the Billing administrator role.
You need to ensure that the role can only be used for a maximum of two hours.
What should you do?

HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains a user named User1 and a storage account named storage1. The storage1 account contains the resources shown in the following table.
User1 is assigned the following roles for storage1:
• Storage Blob Data Reader
• Storage Table Data Contributor
• Storage File Data SMB Share Reader
In storage1, you create a shared access signature (SAS) named SAS1 as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

You have an Azure subscription that contains a user named User1 and a storage account that hosts a blob container named blob1.
You need to grant User1 access to blob1. The solution must ensure that the access expires after six days.
What should you use?

You have an Azure subscription linked to an Azure AD tenant named contoso.com. Contoso.com contains a user named User1 and an Azure web app named App1.
You plan to enable User1 to perform the following tasks:
• Configure contoso.com to use Microsoft Entra Verified ID.
• Register App1 in contoso.com.
You need to identify which roles to assign to User1. The solution must use the principle of least privilege.
Which two roles should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

You have an Azure AD tenant.
You plan to implement an authentication solution to meet the following requirements:
• Require number matching.
• Display the geographical location when signing in.
Which authentication method should you include in the solution?