Online Access Free AZ-500 Exam Questions

I will recommend freecram to famous forums.

No.# No - this user already has the role assigned and 5 hours is how long the role can be assigned for when an eligible user activates it.
Yes - but not for the reason stated, user 2 is eligible and there are no items required for approval so it will be automatic and assigned for 5 hours
No - this user is already active in the role and will be for 1 month

No.# C. Attack Surface Priorities

No.# N-N-N

No.# Explanation:
1. DeployifNotExists
2. Scope

No.# RBAC roles only apply when connecting with AD credentials :

1. Y beacause SAS gives him File Delete permission
2. N because he has only SMB File Reader, he can't delete
3. N because SAS only gives File permission, not Table

No.# 2. VM1 is attached to RG1, and RG1 is attached to subscription 1
VM2 is attached to RG2, and RG2 is attached to subscription 1

NSGs can only be applied at the subnet or VM level.
the question is poorly posed or is missing info ?
https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

No.# . Linux server and a Syslog forwarder daemon
2. Azure Monitor agent

No.# N-Y-N

No.# Box 1: File service and Data Lake Storage only
Box 2: Storage1, Storage2 and storage 5 only
Storage1 - Blob Storage (i.e. supported)
Storage2 - Block Blob Storage (i.e. supported)
Storage3 - Storage (i.e. not supported)
Storage4 - FileStorage (i.e. not supported)
Storage5 - General Purpose v2 (i.e. supported)

https://learn.microsoft.com/en-us/azure/storage/common/azure-defender-storage-configure?tabs=enable-subscription#availability
Supported storage types:
• Blob Storage (Standard/Premium StorageV2, including Data Lake Gen2): Activity monitoring, Malware Scanning, Sensitive Data Discovery
• Azure Files (over REST API and SMB): Activity monitoring

No.# D. Microsoft Authenticator

No.# D. the Azure Connected Machine agent

No.# Y-N-N

No.# Selected: 1. Yes 2. No 3. Yes

Selected Networks for VNET1 and the exemption to allow access to the key vault, VM1 has access, VM2 doesn't. The last option, VM2 should be able to still user the ADE, the exemption only applies to the access to the key vault.

No.# A. Enable Azure Defender.

No.# D. KeyVault1, KeyVault2, and KeyVault3 Most Voted

No.# E. Key1 and key2 only

No.# N-N-N