You have an Azure SQL Database server named SQL1.For SQL1, you turn on Azure Defender for SQL to detect all threat detection types.Which action will Azure Defender for SQL detect as a threat?
Answer(s): B
Advanced Threat Protection can detect potential SQL injections: This alert is triggered when an active exploit happens against an identified application vulnerability to SQL injection. This means the attacker is trying to inject malicious SQL statements using the vulnerable application code or stored procedures.
https://docs.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql
You have an Azure subscription named Subscription1.You deploy a Linux virtual machine named VM1 to Subscription1.You need to monitor the metrics and the logs of VM1.What should you use?
Answer(s): C
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/diagnostics-linux
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have the Azure Information Protection labels as shown in the following table.You have the Azure Information Protection policies as shown in the following table.You need to identify how Azure Information Protection will label files.What should you identify? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Label 2 only How multiple conditions are evaluated when they apply to more than one label1. The labels are ordered for evaluation, according to their position that you specify in the policy: The label positioned first has the lowest position (least sensitive) and the label positioned last has the highest position (most sensitive).2. The most sensitive label is applied.3. The last sublabel is applied.Box 2: No Label Automatic classification applies to Word, Excel, and PowerPoint when documents are saved, and apply to Outlook when emails are sent. Automatic classification does not apply to Microsoft Notepad.
https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-classification
You onboard Azure Sentinel. You connect Azure Sentinel to Azure Security Center.You need to automate the mitigation of incidents in Azure Sentinel. The solution must minimize administrative effort.What should you create?
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook
You have an Azure Active Directory (Azure AD) tenant named contoso.com.You need to configure diagnostic settings for contoso.com. The solution must meet the following requirements:-Retain logs for two years.-Query logs by using the Kusto query language.-Minimize administrative effort.Where should you store the logs?
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.