Master Microsoft AZ-500 Exam with Reliable Practice Questions
Upgrade to Premium
You have an Azure subscription that uses Microsoft Defender for Cloud. You have accounts for the following cloud services:
* Alibaba Cloud
* Amazon Web Services (AWS)
* Google Cloud Platform (GCP)
What can you add to Defender for Cloud?
Correct : D
Start a Discussions
You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. You review the Attack Surface Summary dashboard. You need to identify the following insights:
* Deprecated technologies that are no longer supported
* Infrastructure that will soon expire
Which section of the dashboard should you review?
Correct : C
Start a Discussions
You have an Azure subscription that contains the resources shown in the following table.
You plan to deploy an Azure Private Link service named APL1.
Which resource must you reference during the creation of APL1?
Correct : D
Start a Discussions
You have an Azure subscription.
You need to deploy an Azure virtual WAN to meet the following requirements:
* Create three secured virtual hubs located in the East US, West US, and North Europe Azure regions.
* Ensure that security rules sync between the regions.
What should you use?
Correct : A
Start a Discussions
Lab Task
Task 1
You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources.
Correct : A
You need to configure the Network Security Group that is associated with subnet0.
1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET1. Alternatively, browse to
Virtual Networks in the left navigation pane.
2. In the properties of VNET1, click on Subnets. This will display the subnets in VNET1 and the Network Security Group associated to each subnet. Note the name of the Network Security Group associated to Subnet0.
3. Type Network Security Groups into the search box and select the Network Security Group associated with Subnet0.
4. In the properties of the Network Security Group, click on Inbound Security Rules.
5. Click the Add button to add a new rule.
6. In the Source field, select Service Tag.
7. In the Source Service Tag field, select Internet.
8. Leave the Source port ranges and Destination field as the default values (* and All).
9. In the Destination port ranges field, enter 7777.
10.Change the Protocol to TCP.
11.Leave the Action option as Allow.
12.Change the Priority to 100.
13.Change the Name from the default Port_8080 to something more descriptive such as Allow_TCP_7777_from_Internet. The name cannot contain spaces.
14.Click the Add button to save the new rule.
Start a Discussions