AZ-500 Part 2

Which one of the following should not be stored in Azure Key Vault? What are the differences between these items? Select one.

• Key management

• Secret management

• Certificate management

• Identity management

Which of these statements best describes Azure Key Vault's authentication and authorization process? Select one.

• Applications authenticate to a vault with the username and password of the lead developer and have full access to all secrets in the vault.

• Applications and users authenticate to a vault with their Azure Active Directory identities and are authorized to perform actions on all secrets in the vault.

• Applications authenticate to a vault with the username and password of a user that signs in to the web app, and is granted access to secrets owned by that user.

• Applications and users authenticate to a vault with a Microsoft account and are authorized to access specific secrets

There are two types of Managed Service Identities you can create, one is System-assigned which is second type?

• Application-assigned

• Database-assigned

• VM-assigned

• User-assigned

You are configuring Secure transfer required. Your Compliance office wants to more about this feature. You provide all the following information, except? Select one.

• Requests to storage can be HTTPS or HTTP.

• Requests to storage must be SMB with encryption

• Azure storage doesn't support HTTPS for custom domain names

• By default, new storage accounts have secure transfer required enabled.

Your SQL database administrator has recently read about SQL injection attacks. They ask you what can be done to minimize the risk of this type of attack. You suggest implementing which of the following features?

• Advanced Threat Protection

• Data Discovery and Classification

• Dynamic Data Masking

• Transparent Data Encryption

You can query Log Analytics workspace with which of the following? Select one.

• Embedded SQL

• Graph API

• Kusto Query Language

• Contextual Query Language

You want to be notified when any virtual machine in the production resource group is deleted. What should you configure? Select one.

• Log alert

• Metric alert

• Activity log alert

• Application alert

Where can you create and manage custom security alerts?

• Microsoft Sentinel

• Azure Storage

• Application Security Groups

You are creating roles within your security operations team to grant appropriate access to Azure Sentinel. All the following are built-in Azure Sentinel roles, except? Select one.

• Microsoft Sentinel owner

• Microsoft Sentinel reader

• Microsoft Sentinel responder

• Microsoft Sentinel contributor

Which of following is not included in the Security Center free tier? Select one.

• Monitor non-Azure resources

• Monitor IoT hubs and resources

• Monitor network access and endpoint security

• Monitor identity and access on the key vault