Prep and try our SC-500 valid and latest training questions & answers

Microsoft SC-500 Exam Overview:

Microsoft SC-500 Exam Syllabus Topics:

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloads Sample Questions:

Question 1

You have an Azure key vault named KV1.
You have an Azure App Service web app named App1. App1 is integrated with a virtual network named VNet1 that is linked to an Azure Private DNS zone. App1 accesses secrets stored in KV1.
You need to configure KV1 to meet the following requirements:
- App1 must access the secrets by using a private IP address on VNet1.
- Requests from outside VNet1 must be denied.
Which two actions should you perform for KV1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create an access policy.
B. Disable public access.
C. Create a private endpoint.
D. Add the IP addresses of App1.

Question 2

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft Sentinel workspace.
You have a multi-tier Security Operations Center (SOC) team.
You need to ensure that all new security incidents are assigned immediately to the Tier 1 analysts group and flagged for triage.
Solution: You create a playbook.
Does this meet the goal?

A. Yes
B. No

Question 3

Hotspot Question
You have a Microsoft Sentinel workspace named Workspace1.
You hire a security consultant. You provide the consultant with a guest account named User1 in your Microsoft Entra tenant.
You need to enable User1 to assign incidents in Workspace1.
Which roles should you assign to User1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 4

A company stores confidential training data used by machine learning models. Administrators need to ensure that encryption keys remain under organizational control rather than being fully managed by Microsoft. Which option should be selected?

A. Customer-managed keys (CMK)
B. Platform-managed keys only
C. Anonymous encryption
D. Shared Access Signatures

Question 5

Drag and Drop Question
You have an Azure subscription named Sub1 that contains a virtual network named VNet1.
VNet1 contains multiple virtual machines, including two virtual machines named VM1 and VM2.
Sub1 is linked to a Microsoft Entra tenant named contoso.com.
A partner company has an Azure subscription named Sub2 that contains a virtual network named VNet2. VNet2 contains a virtual machine named VM3.
Sub2 is linked to a Microsoft Entra tenant named fabrikam.com.
VM1 and VM2 contain data used by an application that runs on VM3.
You need to ensure that VM3 can access VM1 and VM2. The solution must deny VM3 access to any other resources in Sub1.
What should you configure on each virtual network? To answer, drag the components to the correct virtual networks. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Solutions: