AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

- Expert Veri,ed, Online, Free.

 Custom View Settings

Question #11 Topic 1

Your company has an Azure Container Registry.

You have been tasked with assigning a user a role that allows for the uploading of images to the Azure Container Registry. The role assigned
should not require more privileges than necessary.
Which of the following is the role you should assign?

A. Owner

B. Contributor

C. AcrPush Most Voted

D. AcrPull

Correct Answer: C

Community vote distribution

C (100%)

Question #12 Topic 1

Your company has an Azure Container Registry.

You have been tasked with assigning a user a role that allows for the downloading of images from the Azure Container Registry. The role assigned
should not require more privileges than necessary.
Which of the following is the role you should assign?

A. Reader

B. Contributor

C. AcrDelete

D. AcrPull Most Voted

Correct Answer: D

Community vote distribution

D (100%)

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 1 of 6
AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

Question #13 Topic 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.
Establish if the solution satis,es the requirements.
Your Company's Azure subscription includes a virtual network that has a single subnet con,gured.
You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed.
You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage
resources and Azure
SQL databases via the service endpoint.
You need to perform a task on the virtual machine prior to deploying containers.
Solution: You create an application security group.
Does the solution meet the goal?

A. Yes

B. No Most Voted

Correct Answer: B

Community vote distribution

B (100%)

Question #14 Topic 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.
Establish if the solution satis,es the requirements.
Your Company's Azure subscription includes a virtual network that has a single subnet con,gured.
You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed.
You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage
resources and Azure
SQL databases via the service endpoint.
You need to perform a task on the virtual machine prior to deploying containers.
Solution: You create an AKS Ingress controller.
Does the solution meet the goal?

A. Yes

B. No Most Voted

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 2 of 6
AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

Question #15 Topic 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.
Establish if the solution satis,es the requirements.
Your Company's Azure subscription includes a virtual network that has a single subnet con,gured.
You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed.
You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage
resources and Azure
SQL databases via the service endpoint.
You need to perform a task on the virtual machine prior to deploying containers.
Solution: You install the container network interface (CNI) plug-in.
Does the solution meet the goal?

A. Yes Most Voted

B. No

Correct Answer: A

Community vote distribution

A (100%)

Question #16 Topic 1

You make use of Azure Resource Manager templates to deploy Azure virtual machines.
You have been tasked with making sure that Windows features that are not in use, are automatically inactivated when instances of the virtual
machines are provisioned.
Which of the following actions should you take?

A. You should make use of Azure DevOps.

B. You should make use of Azure Automation State Con,guration. Most Voted

C. You should make use of network security groups (NSG).

D. You should make use of Azure Blueprints.

Correct Answer: B

Community vote distribution

B (100%)

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 3 of 6
AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

Question #17 Topic 1

Your company's Azure subscription includes Windows Server 2016 Azure virtual machines.
You are informed that every virtual machine must have a custom antimalware virtual machine extension installed. You are writing the necessary
code for a policy that will help you achieve this.
Which of the following is an effect that must be included in your code?

A. Disabled

B. Modify

C. AuditIfNotExists

D. DeployIfNotExists Most Voted

Correct Answer: D

Community vote distribution

D (100%)

Question #18 Topic 1

Your company makes use of Azure Active Directory (Azure AD) in a hybrid con,guration. All users are making use of hybrid Azure AD joined
Windows 10 computers.
You manage an Azure SQL database that allows for Azure AD authentication.
You need to make sure that database developers are able to connect to the SQL database via Microsoft SQL Server Management Studio (SSMS).
You also need to make sure the developers use their on-premises Active Directory account for authentication. Your strategy should allow for
authentication prompts to be kept to a minimum.
Which of the following is the authentication method the developers should use?

A. Azure AD token.

B. Azure Multi-Factor authentication.

C. Active Directory integrated authentication. Most Voted

Correct Answer: C

Community vote distribution

C (100%)

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 4 of 6
AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

Question #19 Topic 1

You have been tasked with enabling Advanced Threat Protection for an Azure SQL Database server.
Advanced Threat Protection must be con,gured to identify all types of threat detection.
Which of the following will happen if when a faulty SQL statement is generate in the database by an application?

A. A Potential SQL injection alert is triggered.

B. A Vulnerability to SQL injection alert is triggered. Most Voted

C. An Access from a potentially harmful application alert is triggered.

D. A Brute force SQL credentials alert is triggered.

Correct Answer: B

Community vote distribution

B (63%) A (37%)

Question #20 Topic 1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.
Establish if the solution satis,es the requirements.
You are in the process of creating an Azure Kubernetes Service (AKS) cluster. The Azure Kubernetes Service (AKS) cluster must be able to
connect to an Azure
Container Registry.
You want to make sure that Azure Kubernetes Service (AKS) cluster authenticates to the Azure Container Registry by making use of the auto-
generated service principal.
Solution: You create an Azure Active Directory (Azure AD) role assignment.
Does the solution meet the goal?

A. Yes

B. No Most Voted

Correct Answer: B

Community vote distribution

B (77%) A (23%)

 Previous Questions Next Questions 

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 5 of 6
AZ-500 Exam - Free Actual Q&As, Page 2 | ExamTopics 21/10/2024, 4:36 PM

Get IT Certi*cation
Unlock free, top-quality video courses on ExamTopics with a simple
registration. Elevate your learning journey with our expertly curated content.
Register now to access a diverse range of educational resources designed for
your success. Start learning today with ExamTopics!

Start Learning for free

https://www.examtopics.com/exams/microsoft/az-500/view/2/ Page 6 of 6