Free AZ-500 Exam Braindumps
Microsoft Azure Security Technologies Questions 57–61 (page: 47)

Updated On: 10-Feb-2026

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.
What should you create?

  1. a secret in Azure Key Vault
  2. a role assignment
  3. an Azure Active Directory (Azure AD) user
  4. an Azure Active Directory (Azure AD) group

Answer(s): B

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/aks/kubernetes-service-principal



You have an Azure subscription that contains two virtual machines named VM1 and VM2 that run Windows Server 2019.
You are implementing Update Management in Azure Automation.
You plan to create a new update deployment named Update1.
You need to ensure that Update1 meets the following requirements:
-Automatically applies updates to VM1 and VM2.
-Automatically adds any new Windows Server 2019 virtual machines to Update1.
What should you include in Update1?

  1. a security group that has a Membership type of Assigned
  2. a security group that has a Membership type of Dynamic Device
  3. a dynamic group query
  4. a Kusto query language query

Answer(s): C

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/automation/update-management/configure-groups



You have the Azure virtual machines shown in the following table.
For which virtual machines can you enable Update Management?

  1. VM2 and VM3 only
  2. VM2, VM3, and VM4 only
  3. VM1, VM2, and VM4 only
  4. VM1, VM2, VM3, and VM4
  5. VM1, VM2, and VM3 only

Answer(s): C

Explanation:

References:
https://docs.microsoft.com/en-us/azure/automation/automation-update-management?toc=%2Fazure%2Fautomation%2Ftoc.json


Reference:

References:
https://docs.microsoft.com/en-us/azure/automation/automation-update-management?toc=%2Fazure%2Fautomation%2Ftoc.json



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription named Sub1.
You have an Azure Active Directory (Azure AD) group named Group1 that contains all the members of your IT team.
You need to ensure that the members of Group1 can stop, start, and restart the Azure virtual machines in Sub1. The solution must use the principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



References:
https://www.petri.com/cloud-security-create-custom-rbac-role-microsoft-azure


Reference:

References:
https://www.petri.com/cloud-security-create-custom-rbac-role-microsoft-azure



DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains the following resources:
A virtual network named VNET1 that contains two subnets named Subnet1 and Subnet2.
-A virtual machine named VM1 that has only a private IP address and connects to Subnet1.
You need to ensure that Remote Desktop connections can be established to VM1 from the internet.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange then in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Viewing page 47 of 103
Viewing questions 231 - 235 out of 523 questions


Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!