You have an Azure Active Directory (Azure AD) tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1.You discover that AKS1 cannot be accessed by using accounts from Contoso.com.You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort.What should you do first?
Answer(s): A
https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli
You have an Azure subscription that contains an Azure Container Registry named Registry1. Microsoft Defender for Cloud is enabled in the subscription.You upload several container images to Registry1.You discover that vulnerability security scans were not performed.You need to ensure that the container images are scanned for vulnerabilities when they are uploaded to Registry1.What should you do?
https://charbelnemnom.com/scan-container-images-in-azure-container-registry-with-azure-security-center/
From Azure Security Center, you create a custom alert rule.You need to configure which users will receive an email message when the alert is triggered.What should you do?
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups
You are configuring and securing a network environment.You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic.You need to ensure that all network traffic is routed through VM1.What should you configure?
Answer(s): C
Although the use of system routes facilitates traffic automatically for your deployment, there are cases in which you want to control the routing of packets through a virtual appliance. You can do so by creating user defined routes that specify the next hop for packets flowing to a specific subnet to go to your virtual appliance instead, and enabling IP forwarding for the VM running as the virtual appliance.Note: User Defined Routes For most environments you will only need the system routes already defined by Azure. However, you may need to create a route table and add one or more routes in specific cases, such as:- Force tunneling to the Internet via your on-premises network.- Use of virtual appliances in your Azure environment.- In the scenarios above, you will have to create a route table and add user defined routes to it.
https://github.com/uglide/azure-content/blob/master/articles/virtual-network/virtual-networks-udr-overview.md
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have a network security group (NSG) bound to an Azure subnet.You run Get-AzNetworkSecurityRuleConfig and receive the output shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: able to connect to East US 2The StorageEA2Allow has DestinationAddressPrefix {Storage/EastUS2}Box 2: allowed TCP Port 21 controls the FTP session. Contoso_FTP has SourceAddressPrefix {1.2.3.4/32} and DestinationAddressPrefix {10.0.0.5/32}Note:The Get-AzureRmNetworkSecurityRuleConfig cmdlet gets a network security rule configuration for an Azure network security group.Security rules in network security groups enable you to filter the type of network traffic that can flow in and out of virtual network subnets and network interfaces.
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.