Winter Sale Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big60

Microsoft Updated AZ-500 Exam Questions and Answers by cian

Page: 5 / 13

Microsoft AZ-500 Exam Overview :

Exam Name: Microsoft Azure Security Technologies
Exam Code: AZ-500 Dumps
Vendor: Microsoft Certification: Azure Security Engineer Associate
Questions: 492 Q&A's Shared By: cian
Question 20

You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit.

Questions 20

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Questions 20

Options:

Discussion
Inaya
Passed the exam. questions are valid. The customer support is top-notch. They were quick to respond to any questions I had and provided me with all the information I needed.
Cillian Jan 23, 2026
That's a big plus. I've used other dump providers in the past and the customer support was often lacking.
Hendrix
Great website with Great Exam Dumps. Just passed my exam today.
Luka Jan 14, 2026
Absolutely. Cramkey Dumps only provides the latest and most updated exam questions and answers.
Amy
I passed my exam and found your dumps 100% relevant to the actual exam.
Lacey Jan 24, 2026
Yeah, definitely. I experienced the same.
Elise
I've heard that Cramkey is one of the best websites for exam dumps. They have a high passing rate and the questions are always up-to-date. Is it true?
Cian Jan 9, 2026
Definitely. The dumps are constantly updated to reflect the latest changes in the certification exams. And I also appreciate how they provide explanations for the answers, so I could understand the reasoning behind each question.
Question 21

Your network contains an Active Directory forest named contoso.com. You have an Azure Directory (Azure AD) tenant named contoso.com.

You plan to configure synchronization by using the Express Settings installation option in Azure AD Connect.

You need to identify which roles and groups are required to perform the planned configurations. The solution must use the principle of least privilege.

Which two roles and groups should you identify? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.

the Domain Admins group in Active Directory

B.

the Security administrator role in Azure AD

C.

the Global administrator role in Azure AD

D.

the User administrator role in Azure AD

E.

the Enterprise Admins group in Active Directory

Discussion
Question 22

You have an Azure subscription that contains an Azure Files share named share1 and a user named User1. Identity-based authentication is configured for share1.

User1 attempts to access share1 from a Windows 10 device by using SMB.

Which type of token will Azure Files use to authorize the request?

Options:

A.

OAuth 20

B.

JSON Web Token (JWT)

C.

Kerberos

D.

SAML

Discussion
Question 23

You have an Azure subscription that contains the resources shown in the following table.

Questions 23

You need to configure AFW1 to only allow traffic from VM1 to storage accounts in the West US Azure region. The solution must minimize administrative effort.

What should you configure?

Options:

A.

a DNAT rule

B.

a network rule

C.

an SNAT private IP address range

D.

an application rule

Discussion
Page: 5 / 13

AZ-500
PDF

$46  $114.99

AZ-500 Testing Engine

$54  $134.99

AZ-500 PDF + Testing Engine

$70  $174.99