Free AZ-500 Exam Braindumps
Microsoft Azure Security Technologies Questions 2–5 (page: 50)

Updated On: 10-Feb-2026

SIMULATION
You plan to use Azure Disk Encryption for several virtual machine disks.
You need to ensure that Azure Disk Encryption can retrieve secrets from the KeyVault12345678 Azure key vault.
To complete this task, sign in to the Azure portal and modify the Azure resources.

  1. See Explanation section for answer.

Answer(s): A

Explanation:

1. In the Azure portal, type Key Vaults in the search box, select Key Vaults from the search results then select KeyVault12345678. Alternatively, browse to Key
Vaults in the left navigation pane.
2. In the Key Vault properties, scroll down to the Settings section and select Access Policies.
3. Select the Azure Disk Encryption for volume encryption

4. Click Save to save the changes.



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains a web app named App1 and an Azure key vault named Vault1.
You need to configure App1 to store and access the secrets in Vault1.
How should you configure App1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity?tabs=dotnet



Your company has an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to create several security alerts by using Azure Monitor.
You need to prepare the Azure subscription for the alerts.
What should you create first?

  1. an Azure Storage account
  2. an Azure Log Analytics workspace
  3. an Azure event hub
  4. an Azure Automation account

Answer(s): B



HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure key vault named KeyVault1 that contains the items shown in the following table.
In KeyVault1, the following events occur in sequence:
-Item1 is deleted.
-Item2 and Policy1 are deleted.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Box1: No
Policies cannot be recovered.
Box2: Soft delete is enabled by default on all key vaults. You cannot add a new key named Item1 because an object named Item1 exists in a soft-deleted state.
Box3: Soft delete is now enabled by default on all key vaults so you can recover Item2.


Reference:

https://docs.microsoft.com/en-us/azure/key-vault/general/soft-delete-overview https://docs.microsoft.com/en-us/azure/key-vault/general/soft-delete-change



You company has an Azure subscription named Sub1. Sub1 contains an Azure web app named WebApp1 that uses Azure Application Insights. WebApp1 requires users to authenticate by using OAuth 2.0 client secrets.
Developers at the company plan to create a multi-step web test app that preforms synthetic transactions emulating user traffic to Web App1.
You need to ensure that web tests can run unattended.
What should you do first?

  1. In Microsoft Visual Studio, modify the .webtest file.
  2. Upload the .webtest file to Application Insights.
  3. Register the web test app in Azure AD.
  4. Add a plug-in to the web test app.

Answer(s): C



Viewing page 50 of 103
Viewing questions 246 - 250 out of 523 questions


Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!