AZ-500 Practice Test

Question 91

You have an Azure subscription. You enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM). Your company's security policy for administrator accounts has the following conditions: ✑ The accounts must use multi-factor authentication (MFA). ✑ The accounts must use 20-character complex passwords. ✑ The passwords must be changed every 180 days. ✑ The accounts must be managed by using PIM. You receive multiple alerts about administrators who have not changed their password during the last 90 days. You need to minimize the number of generated alerts. Which PIM alert should you modify?

1. Roles are being assigned outside of Privileged Identity Management
2. Roles don't require multi-factor authentication for activation
3. Administrators aren't using their privileged roles
4. Potential stale accounts in a privileged role

Question 92

Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory (Azure AD). Azure AD Connect is installed on a domain member server named Server1. You need to ensure that a domain administrator for the adatum.com domain can modify the synchronization options. The solution must use the principle of least privilege. Which Azure AD role should you assign to the domain administrator?

1. Security administrator
2. Global administrator
3. User administrator

Question 93

You have an Azure subscription that contains the users shown in the following table. Which users can enable Azure AD Privileged Identity Management (PIM)?

1. User2 and User3 only
2. User1 and User2 only
3. User2 only
4. User1 only

Question 94

You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account. Which property of the RBAC role definition should you configure?

1. NotActions []
2. DataActions []
3. AssignableScopes []
4. Actions []

Question 95

You have a Microsoft Entra tenant named contoso.com. You collaborate with a partner organization that has a Microsoft Entra tenant named fabrikam.com. Fabrikam.com has multi-factor authentication (MFA) enabled for all users. Contoso.com has the Cross-tenant access settings configured as shown in the Cross-tenant access settings exhibit. (Click the Cross-tenant access settings tab.) Contoso.com has the External collaboration settings configured as shown in the External collaboration settings exhibit. (Click the External collaboration settings tab.) You create a Conditional Access policy that has the following settings: • Name: CAPolicy1 • Assignments o Guest or external users: B2B collaboration guest users o Target resources - Include: All cloud apps • Access controls - Grant access • Require device to be marked as compliant • Require multi-factor authentication - Enable policy: On For each of the following statements, select Yes if the statement is true, otherwise select No. NOTE: Each correct section is worth one point.