You have an Azure subscription that contains the virtual networks shown in the following table.The subscription contains the virtual machines shown in the following table.On NIC1, you configure an application security group named ASG1.On which other network interfaces can you configure ASG1?
Answer(s): C
Only network interfaces in NVET1, which consists of Subnet11 and Subnet12, can be configured in ASG1, as all network interfaces assigned to an application security group have to exist in the same virtual network that the first network interface assigned to the application security group is in.
https://azure.microsoft.com/es-es/blog/applicationsecuritygroups/
You have 15 Azure virtual machines in a resource group named RG1.All the virtual machines run identical applications.You need to prevent unauthorized applications and malware from running on the virtual machines.What should you do?
Answer(s): B
Adaptive application control is an intelligent, automated end-to-end application whitelisting solution from Azure Security Center. It helps you control which applications can run on your Azure and non-Azure VMs (Windows and Linux), which, among other benefits, helps harden your VMs against malware. SecurityCenter uses machine learning to analyze the applications running on your VMs and helps you apply the specific whitelisting rules using this intelligence.
https://docs.microsoft.com/en-us/azure/security-center/security-center-adaptive-application
You have a web app hosted on an on-premises server that is accessed by using a URL of https://www.contoso.com.You plan to migrate the web app to Azure. You will continue to use https://www.contoso.com.You need to enable HTTPS for the Azure web app.What should you do first?
https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#private-certificate-requirements
You plan to deploy Azure container instances.You have a containerized application that is comprised of two containers: an application container and a validation container. The application container is monitored by the validation container. The validation container performs security checks by making requests to the application container and waiting for responses after every transaction.You need to ensure that the application container and the validation container are scheduled to be deployed together. The containers must communicate to each other only on ports that are not externally exposed.What should you include in the deployment?
Answer(s): D
Azure Container Instances supports the deployment of multiple containers onto a single host using a container group. A container group is useful when building an application sidecar for logging, monitoring, or any other configuration where a service needs a second attached process.
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You are configuring network connectivity for two Azure virtual networks named VNET1 and VNET2.You need to implement VPN gateways for the virtual networks to meet the following requirements:-VNET1 must have six site-to-site connections that use BGP.-VNET2 must have 12 site-to-site connections that use BGP.-Costs must be minimized.Which VPN gateway SKU should you use for each virtual network? To answer, drag the appropriate SKUs to the correct networks. Each SKU may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
Answer(s): A
References:https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways#gwsku
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.