| Exam Code | AZ-500 |
| Exam Name | Microsoft Azure Security Technologies |
| Questions | 515 Questions Answers With Explanation |
| Update Date | July 16,2026 |
| Price |
Was : |
Welcome to Certsleader, your ultimate source for top-quality AZ-500 dumps tailored for Microsoft AZ-500 exam. Our comprehensive resources are designed to help you excel in your exam preparations and achieve your certification goals. Whether you are a beginner looking to start a career in Microsoft or an experienced professional seeking to advance your skills, Certsleader has the right tools to support your journey.
At Certsleader, we are committed to your success. Our practice questions answers are designed to improve your knowledge and help you pass your exams on the first attempt with high scores. In the rare event that you do not succeed, we offer a full refund, taking responsibility for your satisfaction.
Join thousands of satisfied learners who have successfully passed their certification exams with Certsleader. Explore our study materials, download your PDF files, and take the first step towards a rewarding IT career today.
You plan to implement JIT VM access. Which virtual machines will be supported?
A. VM1 and VM3 only
B. VM1. VM2. VM3, and VM4
C. VM2, VM3, and VM4 only
D. VM1 only
You need to meet the technical requirements for the finance department users.Which CAPolicy1 settings should you modify?
A. Cloud apps or actions
B. Conditions
C. Grant
D. Session
From Azure Security Center, you need to deploy SecPol1.What should you do first?
A. Enable Azure Defender.
B. Create an Azure Management group.
C. Create an initiative.
D. Configure continuous export.
You need to encrypt storage1 to meet the technical requirements. Which key vaults canyou use?
A. KeyVault1 only
B. KeyVaurt2 and KeyVault3 only
C. KeyVault1 and KeyVault3 only
D. KeyVault1 KeyVault2 and KeyVault3
You plan to configure Azure Disk Encryption for VM4 Which key vault can you use to storethe encryption key?
A. KeyVault1
B. KeyVault3
C. KeyVault2
Lab TaskTask 4You need to ensure that when administrators deploy resources by using an AzureResource Manager template, the deployment can access secrets in an Azure key vaultnamed KV31330471.
You have an Azure AD tenant.You plan to implement an authentication solution to meet the following requirements:• Require number matching.• Display the geographical location when signing in.Which authentication method should you include in the solution?
A. SMS
B. Temporary Access Pass
C. Microsoft Authenticator
D. FID02 security key
You have an Azure subscription that uses Microsoft Defender for Cloud.You have an Amazon Web Services (AWS) account.You need to ensure that when you deploy a new AWS Elastic Compute Cloud (EC2)instance, the Microsoft Defender for Servers agent installs automatically. What should you configure first?
A. the log Analytics agent
B. the Azure Monitor agent
C. the native cloud connector
D. the classic cloud connector
Lab TaskTask 5A user named Debbie has the Azure app installed on her mobile device.You need to ensure that [email protected] is alerted when a resource lock is deleted.
You have an Azure subscription that contains a storage account and an Azure web appnamed App1.App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a privateendpoint named Endpoint1. Endpoint1 has the default settings.You need to validate the name resolution to Cosmos1.Which DNS zone should you use?
A. Endpoint1. Privatelink,blob,core,windows,net
B. Endpoint1. Privatelink,database,azure,com
C. Endpoint1. Privatelink,azurewebsites,net
D. Endpoint1. Privatelink,documents,azure,com
Lab Taskuse the following login credentials as needed:To enter your username, place your cursor in the Sign in box and click on the usernamebelow.To enter your password. place your cursor in the Enter password box and click on thepassword below.Azure Username: Userl [email protected] Password: GpOAe4@lDgIf the Azure portal does not load successfully in the browser, press CTRL-K to reload theportal in a new browser tab.The following information is for technical support purposes only:Lab Instance: 28681041Task 8You need to prevent HTTP connections to the rg1lod28681041n1 Azure Storage account.
You have an Azure subscription that contains a Microsoft Defender External Attack SurfaceManagement (Defender EASM) resource named EASM1. You review the Attack SurfaceSummary dashboard. You need to identify the following insights:• Deprecated technologies that are no longer supported• Infrastructure that will soon expireWhich section of the dashboard should you review?
A. Securing the Cloud
B. Sensitive Services
C. attack surface composition
D. Attack Surface Priorities
You have an Azure subscription that contains an Azure Data Lake Storage account namedsa1.You plan to deploy an app named App1 that will access sa1 and perform operations,including Read. List, Create Directory, and Delete Directory.You need to ensure that App1 can connect securely to sa1 by using a private endpointWhat is the minimum number of private endpoints required for sa1?
A. 1
B. 2
C. 3
D. 4
E. 5
Lab TaskTask 1You need to ensure that connections from the Internet to VNET1\subnet0 are allowed onlyover TCP port 7777. The solution must use only currently deployed resources.
You are troubleshooting a security issue for an Azure Storage account You enable Azure Storage Analytics logs and archive It to a storage account. What should you use to retrievethe diagnostics logs?
A. Azure Storage Explorer
B. SQL query editor in Azure
C. Azure Monitor
D. Azure Cosmos DB explorer
You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant. From the Azure portal, you register an enterprise application.Which additional resource will be created in Azure AD?
A. a service principal
B. an X.509 certificate
C. a managed identity
D. a user account
You have an Azure subscription that uses Microsoft Sentinel. You need to create a Microsoft Sentinel notebook that will use the Guided Investigation - Anomaly Lookup template.What should you create first?
A. an analytics rule
B. a Log Analytics workspace
C. an Azure Machine Learning workspace
D. a hunting query
You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role. You purchase a cloud app named App1 and register App1 in Azure AD. Admin1 reports that the option to enable token encryption for App1 is unavailable. You need to ensure that Admin1 can enable token encryption for App1 in the Azure portal. What should you do?
A. Upload a certificate for App1.
B. Modify the API permissions of App1.
C. Add App1 as an enterprise application.
D. Assign Admin! the Cloud application administrator role.
You need to create a new Azure Active Directory (Azure AD) directory named 12345678.onmicrosoft.com. The new directory must contain a new user named [email protected]. To complete this task, sign in to the Azure portal.
You have a web app hosted on an on-premises server that is accessed by using a URL of https://www.contoso.com. You plan to migrate the web app to Azure. You will continue touse https://www.contoso.com. You need to enable HTTPS for the Azure web app. What should you do first?
A. Export the public key from the on-premises server and save the key as a P7b file.
B. Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using TripleDES.
C. Export the public key from the on-premises server and save the key as a CER file.
D. Export the private key from the on-premises server and save the key as a PFX file that is encrypted by using AES256.
