AZ-500 V5

You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing. You need to implement application routing that will provide reverse proxy and TLS termination for...

Your company has an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. The company develops an application named App1. App1 is registered in Azure AD. You need to ensure that App1 can access secrets in Azure Key Vault on behalf of...

You need to meet the technical requirements for the finance department users. Which CAPolicy1 settings should you modify?A . Cloud apps or actionsB . ConditionsC . GrantD . SessionView AnswerAnswer: D Explanation: Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime

You need to encrypt storage1 to meet the technical requirements. Which key vaults can you use?A . KeyVault1 onlyB . KeyVault2 and KeyVault3 onlyC . KeyVault1 and KeyVault3 onlyD . KeyVault1 KeyVault2 and KeyVault3View AnswerAnswer: B Explanation: The storage account and the key vault must be in the same region...

DRAG DROP You have an Azure subscription named Sub1 that contains an Azure Log Analytics workspace named LAW1. You have 500 Azure virtual machines that run Windows Server 2016 and are enrolled in LAW1. You plan to add the System Update Assessment solution to LAW1. You need to ensure that...

You plan to configure Azure Disk Encryption for VM4. Which key vault can you use to store the encryption key?A . KeyVault1B . KeyVault3C . KeyVault2View AnswerAnswer: A Explanation: The key vault needs to be in the same subscription and same region as the VM. VM4 is in West US....

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you...

HOTSPOT You have an Azure subscription named Sub1. You create a virtual network that contains one subnet. On the subnet, you provision the virtual machines shown in the following table. Currently, you have not provisioned any network security groups (NSGs). You need to implement network security to meet the following...

You plan to use Azure Resource Manager templates to perform multiple deployments of identically configured Azure virtual machines. The password for the administrator account of each deployment is stored as a secret in different Azure key vaults. You need to identify a method to dynamically construct a resource ID that...

Topic 2, Contoso This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you...