SC-500 Practice Test

SC-500 Practice Test practice questions, page 6 of 9, with answer review and explanations.

Question 26

You have an Azure subscription named Sub1 that contains a virtual network named VNet1. VNet1 contains multiple virtual machines, including two virtual machines named VM1 and VM2. Sub1 is linked to a Microsoft Entra tenant named contoso.com. A partner company has an Azure subscription named Sub2 that contains a virtual network named VNet2. VNet2 contains a virtual machine named VM3. Sub2 is linked to a Microsoft Entra tenant named fabrikam.com. VM1 and VM2 contain data used by an application that runs on VM3. You need to ensure that VM3 can access VM1 and VM2. The solution must deny VM3 access to any other resources in Sub1. What should you configure on each virtual network? To answer, drag the components to the correct virtual networks. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Question 27

You have an Azure subscription named Sub1 that contains a storage account named storage1. Sub1 has Microsoft Defender for Storage enabled. Defender for Storage has on-upload malware scanning enabled. The security team at your company requires that all malicious files be processed automatically by a serverless workflow for quarantine and notification. You need to ensure that the malware scan results trigger an automated response. The solution must minimize operational effort. What should you configure?

  1. an Azure Event Grid subscription
  2. diagnostic settings to send logs to a Log Analytics workspace
  3. lifecycle management policies
  4. an Azure Monitor alert rule

Question 28

You have an Azure subscription that contains the following resources: An Azure SQL Database logical server named Server1 that contains a database named DB1An Azure SQL Managed Instance named Instance1 that contains a database named DB2 You need to configure database auditing. The solution must meet the following requirements: Ensure that audit data is centrally available in a location that supports for KQL queries.Minimize ongoing administrative effort as additional databases are added. What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Question 29

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtual machine has system-assigned managed identity enabled. You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1. You need to ensure that VM1 and VM2 can access storage1. Solution: You create a user-assigned managed identity, assign the identity to each virtual machine, and then add each managed identity to a role on storage1. Does this meet the goal?

  1. Yes
  2. No

Question 30

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtual machine has system-assigned managed identity enabled. You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1. You need to ensure that VM1 and VM2 can access storage1. Solution: You add each virtual machine to a role on storage1. Does this meet the goal?

  1. Yes
  2. No