Free AZ-500 Exam Braindumps
Microsoft Azure Security Technologies Questions 114–118 (page: 34)

HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have a Microsoft Entra tenant that contains the users shown in the following table.
From Microsoft Entra Privileged Identity Management (PIM), you configure the settings for the Security Administrator role as shown in the following exhibit.
From PIM, you assign the Security Administrator role to the following groups:
• Group1: Active assignment type, permanently assigned
• Group2: Eligible assignment type, permanently eligible
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains an Azure web app named App1.
You plan to configure a Conditional Access policy for App1. The solution must meet the following requirements:
• Only allow access to App1 from Windows devices.
• Only allow devices that are marked as compliant to access App1.
Which Conditional Access policy settings should you configure? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
Your network contains an on-premises Active Directory domain that syncs to a Microsoft Entra tenant. The tenant contains the users shown in the following table.
The tenant contains the groups shown in the following table.
You configure a multi-factor authentication (MFA) registration policy that has the following settings:
• Assignments:
o Include: Group1
o Exclude: Group2
• Controls: Require Azure MFA registration
• Enforce Policy: On
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have a Microsoft Entra tenant named contoso.com.
You plan to collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com.
Fabrikam.com uses the following identity providers:
• Google Cloud Platform (GCP)
• Microsoft accounts
• Microsoft Entra ID
You need to configure the Cross-tenant access settings for B2B collaboration.
Which identity providers support cross-tenant access?

You have a Microsoft Entra tenant named contoso.com.
You have a partner company that has a Microsoft Entra tenant named fabrikam.com.
You need to ensure that when a user in fabrikam.com attempts to access the resources in contoso.com, the user only receives a single Microsoft Entra Multi-Factor Authentication (MFA) prompt. The solution must minimize administrative effort.
What should you do?