Microsoft AZ-500시험기출문제 - AZ-500합격보장가능덤프문제

그리고 KoreaDumps AZ-500 시험 문제집의 전체 버전을 클라우드 저장소에서 다운로드할 수 있습니다: https://drive.google.com/open?id=1vj5izSOCahio4Fh8_eAosRG4afBwJ6fc

KoreaDumps에서는 Microsoft인증 AZ-500시험을 도전해보시려는 분들을 위해 퍼펙트한 Microsoft인증 AZ-500덤프를 가벼운 가격으로 제공해드립니다.덤프는Microsoft인증 AZ-500시험의 기출문제와 예상문제로 제작된것으로서 시험문제를 거의 100%커버하고 있습니다. KoreaDumps제품을 한번 믿어주시면 기적을 가져다 드릴것입니다.

Microsoft AZ-500 Exam Syllabus Topics:

SectionWeightObjectives
Manage identity and access25-30%- Manage authentication and authorization
  • 1. Role-based access control (RBAC)
    • 2. Multi-factor authentication (MFA)
      - Manage Microsoft Entra ID identities
      • 1. Privileged Identity Management (PIM)
        • 2. Conditional Access policies
          • 3. Users and groups management
            Manage security operations20-25%- Monitor security using Azure tools
            • 1. Microsoft Sentinel
              • 2. Log Analytics workspace
                - Respond to security incidents
                • 1. Threat detection and investigation
                  • 2. Alerting and incident response
                    Implement platform protection25-30%- Configure advanced security features
                    • 1. Security baselines and policies
                      • 2. Microsoft Defender for Cloud
                        - Protect Azure compute and network resources
                        • 1. DDoS Protection
                          • 2. Network Security Groups (NSG)
                            • 3. Azure Firewall
                              Secure data and applications20-25%- Secure applications
                              • 1. Secure storage and databases
                                • 2. Application security best practices
                                  - Protect data in Azure
                                  • 1. Encryption at rest and in transit
                                    • 2. Azure Key Vault

                                      >> Microsoft AZ-500시험기출문제 <<

                                      시험대비 AZ-500시험기출문제 덤프공부문제

                                      우리KoreaDumps 사이트에Microsoft AZ-500관련자료의 일부 문제와 답 등 문제들을 제공함으로 여러분은 무료로 다운받아 체험해보실 수 있습니다. 여러분은 이것이야 말로 알맞춤이고, 전면적인 여러분이 지금까지 갖고 싶었던 문제집이라는 것을 느끼게 됩니다.

                                      최신 Microsoft Azure Security Engineer Associate AZ-500 무료샘플문제 (Q15-Q20):

                                      질문 # 15
                                      You have an Azure subscription that contains the Azure virtual machines shown in the following table.

                                      You create an MDM Security Baseline profile named Profile1.
                                      You need to identify to which virtual machines Profile1 can be applied.
                                      Which virtual machines should you identify?

                                      정답:B

                                      설명:
                                      Reference:
                                      https://docs.microsoft.com/en-us/mem/intune/protect/security-baselines


                                      질문 # 16
                                      You have an Azure Subscription that is linked to an Azure Active Directory (Azure AD). The tenant contains the users shown in the following table.

                                      You have an Azure key vault named Vault1 that has Purge protection set to Disabled. Vault1 contains the access policies shown in the following table.

                                      You create role assignments for Vault1 as shown in the following table.

                                      For each of the following statements, Yes if the statement is true, Otherwise, select No.
                                      NOTE: Each correct selection is worth one point.

                                      정답:

                                      설명:

                                      Explanation:


                                      질문 # 17
                                      You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

                                      From Azure AD Privileged Identity Management (PIM), you configure the settings for the Security Administrator role as shown in the following exhibit.

                                      From PIM, you assign the Security Administrator role to the following groups:
                                      * Group1: Active assignment type, permanently assigned
                                      * Group2: Eligible assignment type, permanently eligible
                                      For each of the following statements, select Yes if the statement is true. Otherwise, select No.
                                      NOTE: Each correct selection is worth one point.

                                      정답:

                                      설명:

                                      Explanation:
                                      Box 1: Yes
                                      Eligible Type: A role assignment that requires a user to perform one or more actions to use the role. If a user has been made eligible for a role, that means they can activate the role when they need to perform privileged tasks. There's no difference in the access given to someone with a permanent versus an eligible role assignment. The only difference is that some people don't need that access all the time.
                                      You can choose from two assignment duration options for each assignment type (eligible and active) when you configure settings for a role. These options become the default maximum duration when a user is assigned to the role in Privileged Identity Management.
                                      Use the Activation maximum duration slider to set the maximum time, in hours, that a role stays active before it expires. This value can be from one to 24 hours.
                                      Box 2: Yes
                                      Active Type: A role assignment that doesn't require a user to perform any action to use the role. Users assigned as active have the privileges assigned to the role Box 3: Yes User3 is member of Group2.
                                      Reference:
                                      https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
                                      https://docs.microsoft.com/bs-cyrl-ba/azure/active-directory/privileged-identity-management/pim-resource-roles-configure-role-settings


                                      질문 # 18
                                      You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com.
                                      An administrator named Admin1 has access to the following identities:
                                      * An OpenID-enabled user account
                                      * A Hotmail account
                                      * An account in contoso.com
                                      * An account in an Azure AD tenant named fabrikam.com
                                      You plan to use Azure Account Center to transfer the ownership of Sub1 to Admin1.
                                      To which accounts can you transfer the ownership of Sub1?

                                      정답:B

                                      설명:
                                      When you transfer billing ownership of your subscription to an account in another Azure AD tenant, you can move the subscription to the new account's tenant. If you do so, all users, groups, or service principals who had role based access (RBAC) to manage subscriptions and its resources lose their access. Only the user in the new account who accepts your transfer request will have access to manage the resources.
                                      Reference:
                                      https://docs.microsoft.com/en-us/azure/billing/billing-subscription-transfer
                                      https://docs.microsoft.com/en-us/azure/billing/billing-subscription-transfer#transferring-subscription-to-anaccount-in-another-azure-ad-tenant


                                      질문 # 19
                                      You have been tasked with applying conditional access policies for your company's current Azure Active Directory (Azure AD).
                                      The process involves assessing the risk events and risk levels.
                                      Which of the following is the risk level that should be configured for users that have leaked credentials?

                                      정답:B

                                      설명:
                                      These six types of events are categorized in to 3 levels of risks - High, Medium & Low:
                                      Table Description automatically generated

                                      Reference:
                                      http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access-policies/


                                      질문 # 20
                                      ......

                                      Microsoft인증 AZ-500시험에 도전하고 싶으시다면 최강 시험패스율로 유명한KoreaDumps의 Microsoft인증 AZ-500덤프로 시험공부를 해보세요. 시간절약은 물론이고 가격도 착해서 간단한 시험패스에 딱 좋은 선택입니다. Microsoft 인증AZ-500시험출제경향을 퍼펙트하게 연구하여KoreaDumps에서는Microsoft 인증AZ-500시험대비덤프를 출시하였습니다. KoreaDumps제품은 고객님의 IT자격증 취득의 앞길을 훤히 비추어드립니다.

                                      AZ-500합격보장 가능 덤프문제: https://www.koreadumps.com/AZ-500_exam-braindumps.html

                                      KoreaDumps AZ-500 최신 PDF 버전 시험 문제집을 무료로 Google Drive에서 다운로드하세요: https://drive.google.com/open?id=1vj5izSOCahio4Fh8_eAosRG4afBwJ6fc