Home
Microsoft
AZ-500: Microsoft Azure Security Technologies Dumps

Free Microsoft AZ-500 Exam Dumps August 2026

Here you can find all the free questions related with Microsoft Azure Security Technologies (AZ-500) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Azure Security Technologies Exam. These premium versions are provided as AZ-500 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Microsoft Azure Security Technologies Exam premium files for free, Good luck with your Microsoft Azure Security Technologies Exam.

Question No: 1

MultipleChoice

You have an Azure subscription that contains an Azure API Management instance named ContosoAPI1.

You need to configure SSL 3.0 support for ContosoAPI1.

What should you do first in the Azure portal?

Options

AFrom Certificates, add a certificate.

BFrom Protocols + ciphers, select a backend protocol.

CFrom APIs, add an API tag.

DFrom Pricing tier, change the pricing tier.

Answer
B

Question No: 2

MultipleChoice

You have an Azure subscription that uses Azure Active Directory (Azure AD) Privileged Identity Management (PIM).

A PIM user that is assigned the User Access Administrator role reports receiving an authorization error when performing a role assignment or viewing the list of assignments.

You need to resolve the issue by ensuring that the PIM service principal has the correct permissions for the subscription. The solution must use the principle of least privilege.

Which role should you assign to the PIM service principle?

Options

AContributor

BUser Access Administrator

CManaged Application Operator

DResource Policy Contributor

Answer
B

Question No: 3

MultipleChoice

You have an Azure subscription that contains an Azure SQL server named sqlsrv1 and an Azure SQL database named DB1. Sqlsrv1 is configured for Microsoft Entra authentication only.

You have the Microsoft Entra identities shown in the following table.

Which users can create scoped credentials for DB1?

Options

AUser1 only

BUser1 and User2 only

CUser1, User2, and User3

Answer
C

Question No: 4

MultipleChoice

You have 10 virtual machines on a single subnet that has a single network security group (NSG).

You need to log the network traffic to an Azure Storage account.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options

AInstall the Network Performance Monitor solution.

BEnable Azure Network Watcher.

CEnable diagnostic logging for the NSG.

DEnable NSG flow logs.

ECreate an Azure Log Analytics workspace.

Answer
DExplanation

A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual

machine (VM). You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability. Steps include:

Create a VM with a network security group

Enable Network Watcher and register the Microsoft.Insights provider

Enable a traffic flow log for an NSG, using Network Watcher's NSG flow log capability

Download logged data

View logged data

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

Question No: 5

MultipleChoice

You need to implement the function apps to meet the technical requirements.

Which apps should you include in the implementation?

Options

AFa1 and Fa2 only

BFa2 and Fa3 only

CFa1 and Fa3 only

DFa1, Fa2, and Fa3

Answer
D

Question No: 6

MultipleChoice

You have a Microsoft Sentinel deployment.

You need to connect a third-party security solution to the deployment. The third-party solution will send Common Event Format (CER-formatted messages.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options

Asee the answer below in explanation

Answer
AExplanation

Answer is as image below.

Question No: 7

OrderList

You have an Azure AD Tenant and an application named App1.

You need to ensure that App1 can use Microsoft Entra Verified ID to verify credentials.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer

Question No: 8

MultipleChoice

SIMULATION

You have an Azure Active directory tenant that syncs with an Active Directory Domain Services (AD DS) domain.

You plan to create an Azure file share that will contain folders and files.

Which identity store can you use to assign permissions to the Azure file share and folders within the share? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options

AAnswer Se ethe answe rbelow at Explanation

Answer
AExplanation

Answer is as image below.

Question No: 9

Hotspot

You have an Azure subscription named Sub 1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

https://www.uhs.edu.pk/mcat/Punjabprovisionalopenmeritfinallist2020-2021.pdf

Each user is assigned an Azure AD Premium P2 license.

You plan lo onboard and configure Azure AD identity Protection.

Which users can onboard Azure AD Identity Protection, remediate users, and configure policies? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point

Answer

Question No: 10

Hotspot

You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016.

You need to implement a policy to ensure that each virtual machine has a custom antimalware virtual machine extension installed.

How should you complete the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

Question No: 11

Hotspot

Which virtual networks in Sub1 can User2 modify and delete in their current state? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Question No: 12

OrderList

You have an Azure subscription named Sub1 that contains an Azure Storage account named Contosostorage1 and an Azure key vault named Contosokeyvault1.

You plan to create an Azure Automation runbook that will rotate the keys of Contosostorage1 and store them in Contosokeyvault1.

You need to implement prerequisites to ensure that you can implement the runbook.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

}

Answer

Create an Azure Automation accountImport PowerShell modules to the Azure Automation accountCreate a connection resource in the Azure Automation account

Explanation

https://www.rahulpnath.com/blog/accessing-azure-key-vault-from-azure-runbook/

Question No: 13

Hotspot

You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016.

You need to implement a policy to ensure that each virtual machine has a custom antimalware virtual machine extension installed.

How should you complete the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

Question No: 14

MultipleChoice

You need to configure a weekly backup of an Azure SQL database named Homepage. The backup must be retained for eight weeks.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to configure the backup policy for the Azure SQL database.
In the Azure portal, type Azure SQL Database in the search box, select Azure SQL Database from the search results then select Homepage. Alternatively, browse to Azure SQL Database in the left navigation pane.
Select the server hosting the Homepage database and click on Manage backups.
Click on Configure policies.
Ensure that the Weekly Backups option is ticked.
Configure the How long would you like weekly backups to be retained option to 8 weeks.
Click Apply to save the changes.

Answer
A

Question No: 15

MultipleChoice

You need to ensure that when administrators deploy resources by using an Azure Resource Manager template, the deployment can access secrets in an Azure key vault named KV11597200.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to configure an option in the Advanced Access Policy of the key vault.
In the Azure portal, type Azure Key Vault in the search box, select Azure Key Vault from the search results then select the key vault named KV11597200. Alternatively, browse to Azure Key Vault in the left navigation pane.
In the properties of the key vault, click on Advanced Access Policies.
Tick the checkbox labelled Enable access to Azure Resource Manager for template deployment.
Click Save to save the changes.

Answer
A

Question No: 16

Hotspot

You have a hybrid Microsoft Entra tenant named contoso.com that contains a user named Used and the servers shown in the following table.

The tenant is linked to an Azure subscription that contains a storage account named storage1. The storage1 account contains a file share named share1.

User1 is assigned the Storage File Data SMB Share Contributor role for storage1.

The Security protocol settings for the file shares of storage1 are configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Answer

Question No: 17

MultipleChoice

You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to configure the Network Security Group that is associated with subnet0.
In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET1. Alternatively, browse to Virtual Networks in the left navigation pane.
In the properties of VNET1, click on Subnets. This will display the subnets in VNET1 and the Network Security Group associated to each subnet. Note the name of the Network Security Group associated to Subnet0.
Type Network Security Groups into the search box and select the Network Security Group associated with Subnet0.
In the properties of the Network Security Group, click on Inbound Security Rules.
Click the Add button to add a new rule.
In the Source field, select Service Tag.
In the Source Service Tag field, select Internet.
Leave the Source port ranges and Destination field as the default values (* and All).
In the Destination port ranges field, enter 7777.
Change the Protocol to TCP.
Leave the Action option as Allow.
Change the Priority to 100.
Change the Name from the default Port_8080 to something more descriptive such as Allow_TCP_7777_from_Internet. The name cannot contain spaces.
Click the Add button to save the new rule.

Answer
A

Question No: 18

MultipleChoice

You need to prevent administrators from performing accidental changes to the Homepage app service plan.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to configure a 'lock' for the app service plan. A read-only lock ensures that no one can make changes to the app service plan without first deleting the lock.
In the Azure portal, type App Service Plans in the search box, select App Service Plans from the search results then select Homepage. Alternatively, browse to App Service Plans in the left navigation pane.
In the properties of the app service plan, click on Locks.
Click the Add button to add a new lock.
Enter a name in the Lock name field. It doesn't matter what name you provide for the exam.
For the Lock type, select Read-only.
Click OK to save the changes.

Answer
A

Question No: 19

MultipleChoice

You need to ensure that a user named Danny11597200 can sign in to any SQL database on a Microsoft SQL server named web11597200 by using SQL Server Management Studio (SSMS) and Azure Active Directory (Azure AD) credentials.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to provision an Azure AD Admin for the SQL Server.
In the Azure portal, type SQL Server in the search box, select SQL Server from the search results then select the server named web11597200. Alternatively, browse to SQL Server in the left navigation pane.
In the SQL Server properties page, click on Active Directory Admin.
Click the Set Admin button.
In the Add Admin window, search for and select Danny11597200.
Click the Select button to add Danny11597200.
Click the Save button to save the changes.

Answer
AExplanation

https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell

Question No: 20

MultipleChoice

You need to configure a Microsoft SQL server named Web11597200 only to accept connections from the Subnet0 subnet on the VNET01 virtual network.

To complete this task, sign in to the Azure portal.

Options

AExplanation:
You need to allow access to Azure services and configure a virtual network rule for the SQL Server.
In the Azure portal, type SQL Server in the search box, select SQL Server from the search results then select the server named web11597200. Alternatively, browse to SQL Server in the left navigation pane.
In the properties of the SQL Server, click Firewalls and virtual networks.
In the Virtual networks section, click on Add existing. This will open the Create/Update virtual network rule window.
Give the rule a name such as Allow_VNET01-Subnet0 (it doesn't matter what name you enter for the exam).
In the Virtual network box, select VNET01.
In the Subnet name box, select Subnet0.
Click the OK button to save the rule.
Back in the Firewall / Virtual Networks window, set the Allow access to Azure services option to On.

Answer
A

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF