HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that is linked to an Azure Active Directory (Azure AD). The tenant contains the users shown in the following table.You have an Azure key vault named Vault1 that has Purge protection set to Disable. Vault1 contains the access policies shown in the following table.You create role assignments for Vault1 as shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: No Resource Policy Contributor or Security Administrator is required.User1 is Security Administrator only with the no specific permission granted to Vault1.The Security Admin can view and update permissions for Security Center. Same permissions as the Security Reader role and can also update the security policy and dismiss alerts and recommendations.However:Box 2: Yes User2 is a Network Contributor, with Select All Key, Secret & Certificate permissions, and Key Vault Reader.The Network Contributor role lets you manage networks, but not access to them.Box 3: Yes User3 is a Key Vault Contributor and a User Access Administrator for Vault.The Key Vault Contributor role allows you to manage key vaults, but does not allow you to assign roles in Azure RBAC, and does not allow you to access secrets, keys, or certificates.
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#network-contributor https://charbelnemnom.com/enable-purge-protection-key-vault-azure-policy/
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains the virtual machines shown in the following table.VNET1, VNET2, and VNET3 are peered with each other.You perform the following actions:• Create two application security groups named ASG1 and ASG2 in the West US region.• Add the network interface of VM1 to ASG1.The network interfaces of which virtual machines can you add to ASG1 and ASG2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
You have an Azure subscription that contains an Azure key vault.You need to configure the maximum number of days for which new keys are valid. The solution must minimize administrative effort.What should you use?
Answer(s): D
You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named storage1.You deploy an Azure Synapse Analytics workspace named synapsews1 to a managed virtual network.You need to enable access from synapsews1 to storage1.What should you configure?
Answer(s): B
You have a Microsoft Entra tenant named Contoso.com and an Azure Kubernetes Service (AKS) cluster AKS1.You discover that AKS1 cannot be accessed by using accounts from Contoso.com.You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort.What should you do first?
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.