Spring Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: get65

Microsoft Updated AZ-500 Exam Questions and Answers by cian

Page: 5 / 13

Microsoft AZ-500 Exam Overview :

Exam Name: Microsoft Azure Security Technologies
Exam Code: AZ-500 Dumps
Vendor: Microsoft Certification: Azure Security Engineer Associate
Questions: 492 Q&A's Shared By: cian
Question 20

You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit.

Questions 20

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Questions 20

Options:

Discussion
Question 21

Your network contains an Active Directory forest named contoso.com. You have an Azure Directory (Azure AD) tenant named contoso.com.

You plan to configure synchronization by using the Express Settings installation option in Azure AD Connect.

You need to identify which roles and groups are required to perform the planned configurations. The solution must use the principle of least privilege.

Which two roles and groups should you identify? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

the Domain Admins group in Active Directory

B.

the Security administrator role in Azure AD

C.

the Global administrator role in Azure AD

D.

the User administrator role in Azure AD

E.

the Enterprise Admins group in Active Directory

Discussion
Question 22

You have an Azure subscription that contains an Azure Files share named share1 and a user named User1. Identity-based authentication is configured for share1.

User1 attempts to access share1 from a Windows 10 device by using SMB.

Which type of token will Azure Files use to authorize the request?

Options:

A.

OAuth 20

B.

JSON Web Token (JWT)

C.

Kerberos

D.

SAML

Discussion
Wyatt
Passed my exam… Thank you so much for your excellent Exam Dumps.
Arjun Feb 23, 2026
That sounds really useful. I'll definitely check it out.
Robin
Cramkey is highly recommended.
Jonah Feb 9, 2026
Definitely. If you're looking for a reliable and effective study resource, look no further than Cramkey Dumps. They're simply wonderful!
Ella-Rose
Amazing website with excellent Dumps. I passed my exam and secured excellent marks!!!
Alisha Feb 8, 2026
Extremely accurate. They constantly update their materials with the latest exam questions and answers, so you can be confident that what you're studying is up-to-date.
Alaya
Best Dumps among other dumps providers. I like it so much because of their authenticity.
Kaiden Feb 3, 2026
That's great. I've used other dump providers in the past and they were often outdated or had incorrect information. This time I will try it.
Question 23

You have an Azure subscription that contains the resources shown in the following table.

Questions 23

You need to configure AFW1 to only allow traffic from VM1 to storage accounts in the West US Azure region. The solution must minimize administrative effort.

What should you configure?

Options:

A.

a DNAT rule

B.

a network rule

C.

an SNAT private IP address range

D.

an application rule

Discussion
Page: 5 / 13

AZ-500
PDF

$40.25  $114.99

AZ-500 Testing Engine

$47.25  $134.99

AZ-500 PDF + Testing Engine

$61.25  $174.99