참고: DumpTOP에서 Google Drive로 공유하는 무료, 최신 AZ-500 시험 문제집이 있습니다: https://drive.google.com/open?id=15BgfYvxL-LBtfx9F3zWR-169hR3Rvbzl
Microsoft인증 AZ-500시험패스 공부방법을 찾고 있다면 제일 먼저DumpTOP를 추천해드리고 싶습니다. Microsoft인증 AZ-500시험이 많이 어렵다는것은 모두 알고 있는 것입니다. DumpTOP에서 출시한 Microsoft인증 AZ-500덤프는 실제시험을 대비하여 연구제작된 멋진 작품으로서 Microsoft인증 AZ-500시험적중율이 최고입니다. Microsoft인증 AZ-500시험패스를 원하신다면DumpTOP의 제품이 고객님의 소원을 들어줄것입니다.
마이크로소프트 AZ-500 시험은 클라우드 보안에서 경력을 쌓고자하는 IT 전문가들이 매우 갈망하는 자격증 시험입니다. 이 시험은 Azure에 경험이 있는 사람들이 보안을 전문화하고자 하는 경우 이상적입니다. AZ-500 자격증은 전 세계적으로 인정되며, 취업 시장에서 두드러지고자 하는 개인들에게 가치 있는 자산입니다. 이 자격증은 후보자가 Azure 환경을 안전하게 보호하고 민감한 데이터를 보호하기 위해 필요한 지식과 기술을 보유하고 있다는 것을 증명합니다.
이 글을 보시게 된다면Microsoft인증 AZ-500시험패스를 꿈꾸고 있는 분이라고 믿습니다. Microsoft인증 AZ-500시험공부를 아직 시작하지 않으셨다면 망설이지 마시고DumpTOP의Microsoft인증 AZ-500덤프를 마련하여 공부를 시작해 보세요. 이렇게 착한 가격에 이정도 품질의 덤프자료는 찾기 힘들것입니다. DumpTOP의Microsoft인증 AZ-500덤프는 고객님께서 Microsoft인증 AZ-500시험을 패스하는 필수품입니다.
Microsoft AZ-500 인증을 받으려면 응시자는 Microsoft Azure Security Technologies, 모범 사례 및 산업 표준에 대한 확실한 이해를 가져야합니다. 시험에 합격 한 결과 후보자는 Azure 환경을 확보하고 관리하는 데 필요한 기술과 지식이있어 Azure 플랫폼을 사용하여 모든 조직에 귀중한 자산이됩니다. 전반적으로 Microsoft AZ-500 인증은 IT 전문가가 Azure Security에 대한 전문 지식을 선보이고 현장에서 경력을 발전시키는 훌륭한 방법입니다.
질문 # 392
Your company has an Azure subscription named Subscription1 that contains the users shown in the following table.
The company is sold to a new owner.
The company needs to transfer ownership of Subscription1.
Which user can transfer the ownership and which tool should the user use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation
Box 1; User2
Billing Administrator
Select Transfer billing ownership for the subscription that you want to transfer.
Enter the email address of a user who's a billing administrator of the account that will be the new owner for the subscription.
Box 2: Azure Account Center
Azure Account Center can be used.
Reference:
https://docs.microsoft.com/en-us/azure/billing/billing-subscription-transfer#transfer-billing-ownership-of-an-azu
질문 # 393
You have a file named File1.yaml that contains the following contents.
You create an Azure container instance named container1 by using File1.yaml.
You need to identify where you can access the values of Variable1 and Variable2.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Reference:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-environment-variables
질문 # 394
You are configuring and securing a network environment.
You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic.
You need to ensure that all network traffic is routed through VM1.
What should you configure?
정답：B
설명：
Section: [none]
Explanation:
Although the use of system routes facilitates traffic automatically for your deployment, there are cases in which you want to control the routing of packets through a virtual appliance. You can do so by creating user defined routes that specify the next hop for packets flowing to a specific subnet to go to your virtual appliance instead, and enabling IP forwarding for the VM running as the virtual appliance.
Note: User Defined Routes
For most environments you will only need the system routes already defined by Azure. However, you may need to create a route table and add one or more routes in specific cases, such as:
* Force tunneling to the Internet via your on-premises network.
* Use of virtual appliances in your Azure environment.
* In the scenarios above, you will have to create a route table and add user defined routes to it.
Reference:
https://github.com/uglide/azure-content/blob/master/articles/virtual-network/virtual-networks-udr-overview.md
질문 # 395
You have an Azure virtual machines shown in the following table.
You create an Azure Log Analytics workspace named Analytics1 in RG1 in the East US region.
Which virtual machines can be enrolled in Analytics1?
정답：C
설명：
Explanation
Note: Create a workspace
* In the Azure portal, click All services. In the list of resources, type Log Analytics. As you begin typing, the list filters based on your input. Select Log Analytics.
* Click Create, and then select choices for the following items:
Provide a name for the new Log Analytics workspace, such as DefaultLAWorkspace. OMS workspaces are now referred to as Log Analytics workspaces.
Select a Subscription to link to by selecting from the drop-down list if the default selected is not appropriate.
For Resource Group, select an existing resource group that contains one or more Azure virtual machines.
Select the Location your VMs are deployed to. For additional information, see which regions Log Analytics is available in.
질문 # 396
You have an Azure subscription named Sub1 that contains the virtual machines shown in the following table.
You need to ensure that the virtual machines in RG1 have the Remote Desktop port closed until an authorized user requests access.
What should you configure?
정답：B
설명：
Just-in-time (JIT) virtual machine (VM) access can be used to lock down inbound traffic to your Azure VMs, reducing exposure to attacks while providing easy access to connect to VMs when needed.
Note: When just-in-time is enabled, Security Center locks down inbound traffic to your Azure VMs by creating an NSG rule. You select the ports on the VM to which inbound traffic will be locked down. These ports are controlled by the just-in-time solution.
When a user requests access to a VM, Security Center checks that the user has Role-Based Access Control (RBAC) permissions that permit them to successfully request access to a VM. If the request is approved, Security Center automatically configures the Network Security Groups (NSGs) and Azure Firewall to allow inbound traffic to the selected ports and requested source IP addresses or ranges, for the amount of time that was specified. After the time has expired, Security Center restores the NSGs to their previous states. Those connections that are already established are not being interrupted, however.
Reference:
https://docs.microsoft.com/en-us/azure/security-center/security-center-just-in-time Secure data and applications Testlet 1 This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Overview
Litware, Inc. is a digital media company that has 500 employees in the Chicago area and 20 employees in the San Francisco area.
Existing Environment
Litware has an Azure subscription named Sub1 that has a subscription ID of 43894a43-17c2-4a39-8cfc-
3540c2653ef4.
Sub1 is associated to an Azure Active Directory (Azure AD) tenant named litwareinc.com. The tenant contains the user objects and the device objects of all the Litware employees and their devices. Each user is assigned an Azure AD Premium P2 license. Azure AD Privileged Identity Management (PIM) is activated.
The tenant contains the groups shown in the following table.
The Azure subscription contains the objects shown in the following table.
Azure Security Center is set to the Standard tier.
Requirements
Planned Changes
Litware plans to deploy the Azure resources shown in the following table.
Identity and Access Requirements
Litware identifies the following identity and access requirements:
* All San Francisco users and their devices must be members of Group1.
* The members of Group2 must be assigned the Contributor role to RG2 by using a permanent eligible assignment.
* Users must be prevented from registering applications in Azure AD and from consenting to applications that access company information on the users' behalf.
Platform Protection Requirements
* Litware identifies the following platform protection requirements:
* Microsoft Antimalware must be installed on the virtual machines in RG1.
* The members of Group2 must be assigned the Azure Kubernetes Service Cluster Admin Role.
* Azure AD users must be able to authenticate to AKS1 by using their Azure AD credentials.
* Following the implementation of the planned changes, the IT team must be able to connect to VM0 by using JIT VM access.
* A new custom RBAC role named Role1 must be used to delegate the administration of the managed disks in RG1. Role1 must be available only for RG1.
Security Operations Requirements
Litware must be able to customize the operating system security configurations in Azure Security Center.
Data and Application Requirements
Litware identifies the following data and applications requirements:
* The users in Group2 must be able to authenticate to SQLDB1 by using their Azure AD credentials.
* WebApp1 must enforce mutual authentication.
General Requirements
Litware identifies the following general requirements:
* Whenever possible, administrative effort must be minimized.
* Whenever possible, use of automation must be maximized.
질문 # 397
......
AZ-500인증시험: https://www.dumptop.com/Microsoft/AZ-500-dump.html
그 외, DumpTOP AZ-500 시험 문제집 일부가 지금은 무료입니다: https://drive.google.com/open?id=15BgfYvxL-LBtfx9F3zWR-169hR3Rvbzl