Free SC-500 Mock Exam – Practice Online Confidently

Note: This section contains one or more sets of questions with the same scenario and problem. Each questionpresents a unique solution to the problem. You must determine whether the solution meets the stated goals.More than one solution in the set might solve the problem. It is also possible that none of the solutions in theset solve the problem.After you answer a question in this section, you will NOT be able to return. As a result, these questions do notappear on the Review Screen.You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtualmachine has system-assigned managed identity enabled.You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1.You need to ensure that VM1 and VM2 can access storage1.Solution: You add each virtual machine to a security group, and then add the security group to a role onstorage1.Does this meet the goal?

You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have an Amazon Web Services (AWS) account connected to Defender for Cloud that has the DefenderCloud Security Posture Management (CSPM) plan enabled.You need to identify the potential impact of security incidents that exploit multiple risks reported by DefenderCSPM.What should you use?

You use Azure Virtual Network Manager to manage multiple virtual networks in a network group namedGroup1You discover that the virtual machines in Group1 are accessible from the internet by using TCP port 3389.You need to block inbound TCP 3389 from the internet across all the virtual networks in Group1 The solutionmust minimize administrative effort.What should you use?

You have an Azure subscription named Sub1 that contains multiple virtual machines.You have a Microsoft 365 E5 subscription that contains devices onboarded to Microsoft Defender forEndpoint.You have an on-premises datacenter that contains multiple servers.You plan to onboard all existing and future on-premises servers to Azure Arc.You need to ensure that the Azure Arc-enabled servers are protected by using the same security features as theMicrosoft 365 devices immediately after the servers are onboarded. The solution must minimizeadministrative effort.What should you do?

You have an Azure SQL Database logical server named Server1 that contains multiple databases.The databases contain legacy SQL authentication logins that must no longer be usable for sign-in but mustNOT be removed from the databases.You need to ensure that SQL authentication is denied for connections.What should you do?