Free AZ-500 Exam Braindumps
Microsoft Azure Security Technologies Questions 1–70 (page: 49)

Updated On: 10-Feb-2026

SIMULATION
You need to ensure that the events in the NetworkSecurityGroupRuleCounter log of the VNET01-Subnet0-NSG network security group (NSG) are stored in the logs1234578 Azure Storage account.
To complete this task, sign in to the Azure portal.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.)
You plan to deploy the cluster to production. You disable HTTP application routing.
You need to implement application routing that will provide reverse proxy and TLS termination for AKS services by using a single IP address.
What should you do?

  1. Create an AKS Ingress controller.
  2. Create an Azure Standard Load Balancer.
  3. Install the container network interface (CNI) plug-in.
  4. Create an Azure Basic Load Balancer.

Answer(s): A



You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the subnets shown in the following table.
You create the virtual machines shown in the following table.
You plan to configure just-in-time (JIT) VM access for the virtual machines. The solution must minimize administrative effort.
For which virtual machines can you configure JIT VM access?

  1. VM1 only
  2. VM1 and VM2 only
  3. VM1 and VM3 only
  4. VM1, VM2, and VM3 only
  5. VM1, VM2, VM3, and VM4

Answer(s): D



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription.
You plan to deploy the virtual machines shown in the following table.
You need to identify the virtual machines and operating systems that can be deployed as confidential virtual machines?
Which Windows virtual machines and which Linux virtual machines should you identify?

  1. See Explanation section for answer.

Answer(s): A

Explanation:



You have an Azure subscription that contains an Azure SQL database named SQL1 and an Azure key vault named KeyVault1. KeyVault1 stores the keys shown in the following table.
You need to configure Transparent Data Encryption (TDE). TDE will use a customer-managed key for SQL1.
Which keys can you use?

  1. Key2 only
  2. Key1 only
  3. Key2 and Key3 only
  4. Key1, Key2, Key3, and Key4
  5. Key1 and Key2 only

Answer(s): E

Explanation:

The key must be an asymmetric, RSA or RSA HSM key. The supported key lengths are 2048-bit and 3072-bit.


Reference:

https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview



Viewing page 49 of 103
Viewing questions 241 - 245 out of 523 questions


Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!