AZ-500 Practice Test practice questions, page 18 of 21, with answer review and explanations.
Question 86
You have an Azure subscription that is associated with an Azure Active Directory (Azure AD) tenant. When a developer attempts to register an app named App1 in the tenant, the developer receives the error message shown in the following exhibit. You need to ensure that the developer can register App1 in the tenant. What should you do for the tenant?
Modify the Directory properties.
Set Enable Security defaults to Yes.
Configure the Consent and permissions settings for enterprise applications.
Modify the User settings.
Question 87
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant and a user named User1. The App registrations settings for the tenant are configured as shown in the following exhibit. You plan to deploy an app named App1. You need to ensure that User1 can register App1 in Azure AD. The solution must use the principle of least privilege. Which role should you assign to User1?
App Configuration Data Owner for the subscription
Managed Application Contributor for the subscription
Cloud application administrator in Azure AD
Application developer in Azure AD
Question 88
You have the Azure virtual machines shown in the following table. Each virtual machine has a single network interface. You add the network interface of VM1 to an application security group named ASG1. You need to identify the network interfaces of which virtual machines you can add to ASG1. What should you identify?
VM2 only
VM2 and VM3 only
VM2, VM3, VM4, and VM5
VM2, VM3, and VM5 only
Question 89
SIMULATION - You need to create a new Azure Active Directory (Azure AD) directory named 12345678.onmicrosoft.com. The new directory must contain a user named user12345678 who is configured to sign in by using Azure Multi-Factor Authentication (MFA).
Question 90
You have an Azure subscription named Subcription1 that contains an Azure Active Directory (Azure AD) tenant named contoso.com and a resource group named RG1. You create a custom role named Role1 for contoso.com. Where you can use Role1 for permission delegation?