You are securing access to the resources in an Azure subscription.A new company policy states that all the Azure virtual machines in the subscription must use managed disks.You need to prevent users from creating virtual machines that use unmanaged disks.What should you use?
Answer(s): B
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains a storage account named storage1 and several virtual machines. The storage account and virtual machines are in the same Azure region. The network configurations of the virtual machines are shown in the following table.The virtual network subnets have service endpoints defined as shown in the following table.You configure the following Firewall and virtual networks settings for storage1:-Allow access from: Selected networks-Virtual networks: VNET3\Subnet3Firewall `" Address range: 52.233.129.0/24For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: No VNet1 has a service endpoint configure for Azure Storage. However, the Azure storage does not allow access from VNet1 or the public IP address of VM1.Box 2: Yes VNet2 does not have a service endpoint configured. However, the Azure storage allows access from the public IP address of VM2.Box 3: No Azure storage allows access from VNet3. However, VNet3 does not have a service endpoint for Azure storage. The Azure storage also does not allow access from the public IP of VM3.
You plan to create an Azure Kubernetes Service (AKS) cluster in an Azure subscription.The manifest of the registered server application is shown in the following exhibit.You need to ensure that the AKS cluster and Azure Active Directory (Azure AD) are integrated.Which property should you modify in the manifest?
Answer(s): C
https://docs.microsoft.com/en-us/azure/aks/azure-ad-integration-cli https://www.codeproject.com/Articles/3211864/Operation-and-Maintenance-of-AKS-Applications
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have the Azure virtual networks shown in the following table.You have the Azure virtual machines shown in the following table.The firewalls on all the virtual machines allow ping traffic.NSG1 is configured as shown in the following exhibit.Inbound security rules Outbound security rules For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Yes VM1 and VM3 are on peered VNets. The firewall rules with a source of ASG1 and ASG2 allow 'any' traffic on 'any' protocol so pings are allowed between VM1 and VM3.Box 2: No VM2 and VM4 are on separate VNets and the VNets are not peered. Therefore, the pings would have to go over the Internet. VM4 does have a public IP and the firewall allows pings. However, for VM2 to be able to ping VM4, VM2 would also need a public IP address. In Azure, pings don't go out through the default gateway as they would in a physical network. For an Azure VM to ping external IPs, the VM must have a public IP address assigned to it.Box 3: Yes VM3 has a public IP address and the firewall allows traffic on port 3389.
You have multiple development teams that will create apps in Azure.You plan to create a standard development environment that will be deployed for each team.You need to recommend a solution that will enforce resource locks across the development environments and ensure that the locks are applied in a consistent manner.What should you include in the recommendation?
Answer(s): D
https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.