SIMULATION You need to configure a virtual network named VNET2 to meet the following requirements:-Administrators must be prevented from deleting VNET2 accidentally.-Administrators must be able to add subnets to VNET2 regularly.To complete this task, sign in to the Azure portal and modify the Azure resources.
Answer(s): A
Locking prevents other users in your organization from accidentally deleting or modifying critical resources, such as Azure subscription, resource group, or resource.Note: In Azure, the term resource refers to an entity managed by Azure. For example, virtual machines, virtual networks, and storage accounts are all referred to as Azure resources.1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET2. Alternatively, browse toVirtual Networks in the left navigation pane.2. In the Settings blade for virtual network VNET2, select Locks.3. To add a lock, select Add.4. For Lock type select Delete lock, and click OK
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources
You have an Azure virtual machine named VM1.From Microsoft Defender for Cloud, you get the following high-severity recommendation: `Install endpoint protection solutions on virtual machine`.You need to resolve the issue causing the high-severity recommendation.What should you do?
Answer(s): D
https://docs.microsoft.com/en-us/azure/security-center/security-center-endpoint-protection
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have a file named File1.yaml that contains the following contents.You create an Azure container instance named container1 by using File1.yaml.You need to identify where you can access the values of Variable1 and Variable2.What should you identify? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-environment-variables
You have an Azure subscription that contains a virtual network. The virtual network contains the subnets shown in the following table.The subscription contains the virtual machines shown in the following table.You enable just in time (JIT) VM access for all the virtual machines.You need to identify which virtual machines are protected by JIT.Which virtual machines should you identify?
Answer(s): C
An NSG needs to be enabled, either at the VM level or the subnet level.
https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains the virtual machines shown in the following table.Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured.You have an Azure Storage account named storageacc1 that is configured as shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Hot Area:
Box 1: Yes The public IP of VM1 is allowed through the firewall.Box 2: No The allowed virtual network list is empty so VM2 cannot access storageacc1 directly. The public IP address of VM2 is not in the allowed IP list so VM2 cannot access storageacc1 over the Internet.Box 3: No The allowed virtual network list is empty so VM3 cannot access storageacc1 directly. VM3 does not have a public IP address so it cannot access storageacc1 over the Internet.
https://docs.microsoft.com/en-gb/azure/storage/common/storage-network-security
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.