Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Microsoft Certified: Cloud and AI Security Engineer Associate Practice Questions

Question # 21

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Sentinel workspace

You have a multi-tier Security Operations Center (SOC) team.

You need to ensure that all new security incidents are assigned immediately to the Tier 1 analysts group and flagged for triage.

Solution: You create an automation rule.

Does this meet the goal?

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 22

User1 has requested to use the AI Administrator role.

Which approvers can approve the request, and how long will User1 be an AI administrator after the role is approved? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 22

Options:

Discussion 0
Question # 23

Note. This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem

After you answer a question in this section, you will NOT be able to return. As a result these questions do not appear on the Review Screen.

You have a Microsoft Sentinel workspace

You have a multi-tier Security Operations Center (SOC) team.

You need to ensure that all new security incidents are assigned immediately to the Tier 1 analysts group and flagged for triage.

Solution You create a hunting query.

Does this meet the goal?

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 24

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtual machine has system-assigned managed identity enabled.

You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1.

You need to ensure that VM1 and VM2 can access storage1.

Solution: You create a user-assigned managed identity, assign the identity to each virtual machine, and then add each managed identity to a role on storage1.

Does this meet the goal?

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 25

You need to implement the planned change for the AKS1 integration.

What should you configure for AKS1?

Options:

A.  

application scaling

B.  

a workload identity

C.  

Secrets Store CSI Driver

D.  

Kubernetes role-based access control (Kubernetes RBAC)

Discussion 0
Question # 26

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have an Azure subscription that contains two virtual machines named VM1 and VM2. Each virtual machine has system-assigned managed identity enabled.

You have an Azure Storage account named storage1. Public access from all networks is enabled for storage1.

You need to ensure that VM1 and VM2 can access storage1.

Solution: You add each virtual machine to a role on storage1.

Does this meet the goal?

Options:

A.  

Yes

B.  

No

Discussion 0
Question # 27

You need to configure the AKS1 and ID 1 managed identities to meet the technical requirements. The solution must follow the principle of least privilege.

Which role should you assign to each identity? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 27

Options:

Discussion 0
Question # 28

You need to implement the planned change for WAF1. The solution must minimize administrative effort.

What should you do?

Options:

A.  

Add a custom rule.

B.  

Modify the Azure-managed DRS.

C.  

Create an Azure policy.

D.  

Modify the Bot Manager 1.1 rule set.

Discussion 0
Question # 29

You need to recommend an encryption solution for the planned ExpressRoute implementation. The solution must meet the technical requirements.

Which ExpressRoute circuit should you recommend for each type of encryption? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 29

Options:

Discussion 0
Question # 30

You need to implement the planned change for VM1 to access storage1. The solution must meet the technical requirements.

What should you do first?

Options:

A.  

Configure a system-assigned managed identity on VM1.

B.  

Configure federated identity credentials for ID1.

C.  

Assign ID1 to VM1.

D.  

Add a role assignment condition to storage1.

E.  

Assign the Storage Blob Data Reader role to storage1.

Discussion 0

SC-500 PDF

SC-500 PDF (Printable)
$54.25
$154.99

SC-500 Testing Engine

SC-500 PDF (Printable)
$59.5
$169.99

SC-500 PDF + Testing Engine

SC-500 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions