Free Microsoft SC-500 Exam Questions
Absolute Free SC-500 Exam Practice for Comprehensive Preparation
-
Microsoft SC-500 Exam Questions
-
Provided By: Microsoft
- Exam: Implementing End-to-End Security Controls for Cloud and AI Workloads
- Certification: Microsoft Certified Associate
-
Total Questions: 68
-
Updated On: Sep 02, 2026
-
Rated: 4.9 |
-
Online Users: 136
-
Question 1
-
Note: This section contains one or more sets of questions with the same scenario and problem. Each questionpresents a unique solution to the problem. You must determine whether the solution meets the stated goals.More than one solution in the set might solve the problem. It is also possible that none of the solutions in theset solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do notappear on the Review Screen.You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtualmachine has system-assigned managed identity enabled.You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1.You need to ensure that VM1 and VM2 can access storage1.Solution: You add each virtual machine to a security group, and then add the security group to a role onstorage1.Does this meet the goal?
Answer: B
-
Note: This section contains one or more sets of questions with the same scenario and problem. Each questionpresents a unique solution to the problem. You must determine whether the solution meets the stated goals.More than one solution in the set might solve the problem. It is also possible that none of the solutions in theset solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do notappear on the Review Screen.You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtualmachine has system-assigned managed identity enabled.You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1.You need to ensure that VM1 and VM2 can access storage1.Solution: You add each virtual machine to a security group, and then add the security group to a role onstorage1.Does this meet the goal?
-
Question 2
-
You have an Azure SQL Database logical server named Server1 that contains multiple databases.The databases contain legacy SQL authentication logins that must no longer be usable for sign-in but mustNOT be removed from the databases.You need to ensure that SQL authentication is denied for connections.What should you do?
Answer: C
-
You have an Azure SQL Database logical server named Server1 that contains multiple databases.The databases contain legacy SQL authentication logins that must no longer be usable for sign-in but mustNOT be removed from the databases.You need to ensure that SQL authentication is denied for connections.What should you do?
-
Question 3
-
You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have an Amazon Web Services (AWS) account connected to Defender for Cloud that has the DefenderCloud Security Posture Management (CSPM) plan enabled.You need to identify the potential impact of security incidents that exploit multiple risks reported by DefenderCSPM.What should you use?
Answer: D
-
You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have an Amazon Web Services (AWS) account connected to Defender for Cloud that has the DefenderCloud Security Posture Management (CSPM) plan enabled.You need to identify the potential impact of security incidents that exploit multiple risks reported by DefenderCSPM.What should you use?
-
Question 4
-
You use Azure Virtual Network Manager to manage multiple virtual networks in a network group namedGroup1You discover that the virtual machines in Group1 are accessible from the internet by using TCP port 3389.You need to block inbound TCP 3389 from the internet across all the virtual networks in Group1 The solutionmust minimize administrative effort.What should you use?
Answer: B
-
You use Azure Virtual Network Manager to manage multiple virtual networks in a network group namedGroup1You discover that the virtual machines in Group1 are accessible from the internet by using TCP port 3389.You need to block inbound TCP 3389 from the internet across all the virtual networks in Group1 The solutionmust minimize administrative effort.What should you use?
-
Question 5
-
You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named
cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled,
and runtime protection is active on cluster!The developers at your company deploy pods that have elevated privileges, and the deployments are createdin cluster1You need to prevent pods with elevated privileges from being accepted by cluster!What should you do?
Answer: A
-
You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named
cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled,
and runtime protection is active on cluster!The developers at your company deploy pods that have elevated privileges, and the deployments are createdin cluster1You need to prevent pods with elevated privileges from being accepted by cluster!What should you do?