Online Access Free SC-500 Practice Test

You have an Azure subscription that contains an Azure Database for PostgreSQL instance named 081.
You plan to protect DBI by using Microsoft Defender for Cloud.
You need to configure Defender for Cloud to detect anomalous activities and database exploitations for 061.
The solution must NOT affect any other databases.
What should you enable? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

You need to protect the applications hosted on AKS1. The solution must meet the technical requirements.
Which Defender for Cloud plan should you enable?

• A.Microsoft Defender for Storage
• B.Microsoft Defender for Resource Manager
• C.Microsoft Defender for Containers
• D.Microsoft Defender for App Service
• E.Microsoft Defender for Servers

You have an Azure Storage account named storage1 that hosts a blob container named container1.
You have an Azure Functions app named app1 that uses a managed identity.
You need to configure app1 to read, write, and delete blobs in container1. The solution must follow the principle of least privilege.
What should you do?

• A.Assign the Storage Blob Delegator role to the managed identity of app1 at the scope of container1.
• B.Assign the Storage Blob Data Contributor role to the managed identity of app1 at the scope of container1.
• C.Assign the Storage Account Contributor role to the managed identity of app1 at the scope of storage1.
• D.Assign the Owner role to the managed identity of app1 at the scope of container1.

Lab Task
use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password. place your cursor in the Enter password box and click on the password below.
Azure Username: Userl [email protected]
Azure Password: GpOAe4@lDg
If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance: 28681041
Task 7
You need to collect all the audit failure data from the security log of a virtual machine named VM1 to an Azure Storage account. To complete this task, sign in to the Azure portal.

You use Microsoft Security Copilot.
You need to update Plugin settings. the solution must meet the following requirements:
* Allow contributors to use custom plug-ins without affecting either UMTS
* Limit publishing of custom plug-ins for other users to Owners only.
Which Plugin settings option should you configure for each requirement? To answer, drag the appropriate settings lo the correct requirements. Each setting may be used once, more than once., or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation: