Microsoft : SC-500 Questions & Answers

First-rate products and reasonable price

As the foremost and irreplaceable SC-500 actual exam materials in the market, we remain the leading position over so many years. The reason is simple: our SC-500 guide torrent materials are excellent in quality and reasonable in price economically, which is a truth apply to educational area as many other aspects of life, so we are honored to introduce and recommend the best SC-500 study guide materials to facilitate your review. Our SC-500 actual exam materials can help you effectively get rid of the difficulties you may meet during the review and extricate you from stereotype that passing a test is as hard as climbing a mountain.

Although we are play a leading role among the peers, our SC-500 guide torrent materials has never being extravagant at all to exam candidates from different world, and we offer some discounts. The more you buying of our SC-500 study guide, the more benefits we offer to help.

It is absolutely a truth that you must have the experience like passing a test with high grade during your educational process, and the feeling is enjoyable and review process is efficient like a piece of cake. To this important Microsoft SC-500 exam you face now ahead of you, we have the useful SC-500 guide torrent materials to help you have the same experience again like when you are younger before. Let me introduce the amazing SC-500 study guide for you as follows and please get to realize it with us now.

DOWNLOAD DEMO

Useful SC-500 practice materials

There are a group of professional experts who provide the professional knowledge about the test and give you the knack of solving difficult problems of the Microsoft SC-500 exam, which vicariously reflect that the quality of the SC-500 actual exam materials are of high quality, and it is because we invited the first-rate experts involved into the compile. We can prove it by telling the passing rate: 97% to 99.7% passing rate up to now. it is a hard zenith to such a professional SC-500 guide torrent, but we make it by working diligently together, and all our fruits and achievements are compiled in the three kinds of SC-500 study guide for you reference, if you are skeptical about the content they sorted out some demos for you to have an experimentally practice at first. So the content of the SC-500 actual exam materials are written with close observation and consideration in accordance with the trend of development and the content are abundant with SC-500 guide torrent you need to remember.

The earnest services for you

We have the most earnest employees who focus on aftersales quality who also work in earnest. They are waiting to offer help 24/7 all year round with patience and sincerity. Once you have questions about our SC-500 study guide materials, they give you timely response and help.to a large extent, we are not only selling practice materials, but promote the images and reputation by introducing our SC-500 actual exam materials, so we are strict to ourselves to offer you the best SC-500 guide torrent materials as much as possible.

Besides we welcome the advices and comments of customers and improve ourselves according to their meaningful needs. If you flunk the test unluckily, which is so rare to users choosing our SC-500 study guide materials, we give back your full refund as compensation. So our company always stick to the principle that customers first principles.

Microsoft SC-500 Exam Syllabus Topics:

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloads Sample Questions:

1. Case Study 2 - Fabrikam, Inc.
Overview
Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore.
Existing Environment. Network environment
The on-premises network contains a datacenter in each office.
Existing Environment. Cloud environment
Fabrikam has two Azure subscriptions named Sub1 and Sub2 and a Microsoft 365 subscription that includes Microsoft 365 E5 licenses.
All the subscriptions are linked to a Microsoft Entra tenant named fabrikam.com that contains the identities shown in the following table.

The tenant contains the groups shown in the following table.

All devices are enrolled in Microsoft Intune.
Existing Environment. Sub1 Resources
Sub1 contains a resource group named RG1 that contains the resources shown in the following table.

SQLServer1 uses Microsoft SQL Server authentication.
Sub1 has an Azure Web Application Firewall (WAF) named WAF1 that has the following types of rule sets:
- Bot Manager 1.1
- Azure-managed Default Rule Set (DRS)
Sub1 has the following compliance standards assigned in Microsoft Defender for Cloud:
- NIST SP 800-53 Rev. 4
- Microsoft cloud security benchmark (MCSB)
- System and Organization Controls (SOC) 2 Type 2
Existing Environment. Sub2 Resources
Sub2 contains a resource group named RG2.
Planned Changes and Requirements. Planned Changes
Fabrikam plans to implement the following changes:
- Deploy the following key vaults to RG1:
AKV2 in the West Europe Azure region

AKV3 in the Central US Azure region

AKV4 in the East US Azure region

- Deploy the following key vaults to RG2:
AKV5 in the East US region

- Configure VM1 to read data from storage1.
- Create function apps that have the following hosting plans:
Fa1: Flex Consumption hosting plan

Fa2: Consumption hosting plan

Fa3: Dedicated hosting plan

- For WAF1, implement rate limiting rules based on the request
location.
- Enable the NIST SP 800-53 Rev. 5 compliance standard in Defender for
Cloud.
- Create a new storage account named storage2 that supports Azure Table storage.
- Enforce multifactor authentication (MFA) when database administrators access SQLdb1.
- Implement ExpressRoute circuits to the on-premises network as shown
in the following table.

- For RG1, create a new Privileged Identity Management (PIM) eligible role assignment that assigns the Contributor role to supported groups.
Planned Changes and Requirements. Technical Requirements
Fabrikam has the following technical requirements:
- If VM1 is deleted, the permissions for VM1 must be removed
automatically.
- The AKS1 managed identity must only be able to pull images from
Registry1.
- The ID1 managed identity must be able to push images to and pull
images from Registry1.
- All the data in the storage accounts must be encrypted by using
Fabrikam-managed keys.
- All outbound traffic from the function apps to the on-premises
network must use ExpressRoute circuits.
- ExpressRoute connectivity between the on-premises network and the
Azure environment must be encrypted by using Layer 2 or Layer 3
encryption.
You need to delegate a user to implement the planned change for Defender for Cloud. The solution must follow the principle of least privilege. Which user should you choose?

A) Admin2
B) Admin4
C) Admin3
D) Admin1

2. You have an Azure Functions app named App1 that uses an HTTP trigger, runs on an Elastic Premium plan, and uses virtual network integration.
A partner application sends requests to App1 from a public IP address of xxx.xxx.xxx.xx.
You need to ensure that the requests are accepted from only xxx.xxx.xxx.xx.
What should you do?

A) Deploy an Azure Bastion host.
B) Configure an inbound access restriction on App1.
C) Deploy an Azure NAT Gateway.
D) Apply a network security group (NSG) to a dedicated subnet for virtual network integration.
E) Create a private endpoint for App1 and disable public network access.

3. You have a Microsoft Entra tenant that contains a user named User1.
You have an Azure Arc-enabled server named SRV1 that runs Windows Server. SRV1 is configured for Microsoft Entra sign-in.
User1 reports that when they use their Microsoft Entra credentials to sign in to SRV1 over RDP, they receive the following message:
"Your account is configured to prevent you from using this device."
You need to ensure that User1 can sign in to SRV1 over RDP. The solution must follow the principle of least privilege.
What should you do?

A) Assign User1 the Virtual Machine User Login role for SRV1.
B) Assign User1 the Virtual Machine Administrator Login role for SRV1.
C) Add User to the local Remote Desktop Users group on SRV1.
D) Create a Conditional Access policy that requires multifactor authentication (MFA).

4. Case Study 2 - Fabrikam, Inc.
Overview
Fabrikam, Inc. is a consulting company. The company has a main office in New York City and branch offices in Amsterdam and Singapore.
Existing Environment. Network environment
The on-premises network contains a datacenter in each office.
Existing Environment. Cloud environment
Fabrikam has two Azure subscriptions named Sub1 and Sub2 and a Microsoft 365 subscription that includes Microsoft 365 E5 licenses.
All the subscriptions are linked to a Microsoft Entra tenant named fabrikam.com that contains the identities shown in the following table.

The tenant contains the groups shown in the following table.

All devices are enrolled in Microsoft Intune.
Existing Environment. Sub1 Resources
Sub1 contains a resource group named RG1 that contains the resources shown in the following table.

SQLServer1 uses Microsoft SQL Server authentication.
Sub1 has an Azure Web Application Firewall (WAF) named WAF1 that has the following types of rule sets:
- Bot Manager 1.1
- Azure-managed Default Rule Set (DRS)
Sub1 has the following compliance standards assigned in Microsoft Defender for Cloud:
- NIST SP 800-53 Rev. 4
- Microsoft cloud security benchmark (MCSB)
- System and Organization Controls (SOC) 2 Type 2
Existing Environment. Sub2 Resources
Sub2 contains a resource group named RG2.
Planned Changes and Requirements. Planned Changes
Fabrikam plans to implement the following changes:
- Deploy the following key vaults to RG1:
AKV2 in the West Europe Azure region

AKV3 in the Central US Azure region

AKV4 in the East US Azure region

- Deploy the following key vaults to RG2:
AKV5 in the East US region

- Configure VM1 to read data from storage1.
- Create function apps that have the following hosting plans:
Fa1: Flex Consumption hosting plan

Fa2: Consumption hosting plan

Fa3: Dedicated hosting plan

- For WAF1, implement rate limiting rules based on the request
location.
- Enable the NIST SP 800-53 Rev. 5 compliance standard in Defender for
Cloud.
- Create a new storage account named storage2 that supports Azure Table storage.
- Enforce multifactor authentication (MFA) when database administrators access SQLdb1.
- Implement ExpressRoute circuits to the on-premises network as shown
in the following table.

- For RG1, create a new Privileged Identity Management (PIM) eligible role assignment that assigns the Contributor role to supported groups.
Planned Changes and Requirements. Technical Requirements
Fabrikam has the following technical requirements:
- If VM1 is deleted, the permissions for VM1 must be removed
automatically.
- The AKS1 managed identity must only be able to pull images from
Registry1.
- The ID1 managed identity must be able to push images to and pull
images from Registry1.
- All the data in the storage accounts must be encrypted by using
Fabrikam-managed keys.
- All outbound traffic from the function apps to the on-premises
network must use ExpressRoute circuits.
- ExpressRoute connectivity between the on-premises network and the
Azure environment must be encrypted by using Layer 2 or Layer 3
encryption.
Hotspot Question
You need to implement the planned change for the PIM role assignment.
Which users can perform the planned change, and for which groups? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

5. Hotspot Question
You have an Azure subscription that contains the following servers:
- 200 virtual machines that run either Windows Server or Ubuntu Server
- 50 Azure Arc-enabled servers
You use Azure Policy to manage compliance across all the servers.
You need to enforce an organization-specific security baseline. The solution must meet the following requirements:
- Customize a built-in security baseline.
- Ensure that configuration changes to the servers are enforced
automatically after the security baseline is deployed.
- Minimize administrative effort.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solutions: