AZ-500: Microsoft Azure Security Technologies
Practice Test - 4 - Results
Return to review
Attempt 1
All questions
Question 1: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
User1 is trying to create a certificate in KeyVault1 from his laptop. Can User1 successfully create a
certificate?
Yes
No
(Correct)
Explanation
KeyVault1 is configured with service endpoint. So, you will be able to managed Key Vault certificates,
secrets and keys from the virtual machines in Vnet1.
, https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 2: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
User1 is trying to create a certificate in KeyVault1 from VM1. Can User1 successfully create a certificate?
Yes
(Correct)
No
Explanation
KeyVault1 is configured with service endpoint. So, you will be able to managed Key Vault certificates,
secrets and keys from the virtual machines in Vnet1.
https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 3: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
, User1 is trying to create an access policy from his laptop. Can User1 successfully create an access policy?
Yes
(Correct)
No
Explanation
You can create access policies from outside vnet1.
https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 4: Skipped
You have an Azure subscription named Subscription1. You have created Resource groups and Storage
Accounts as shown below.
Storage Account Name Resource Group Location
Storageaccount1 RG1 East US
Storageaccount2 RG2 East US
Storageaccount3 RG3 North Europe
You have created an Azure SQL database named SQLDatabase1 in the East US region.
, You are configuring SQLDatabase1 diagnostics settings to archive Timeouts, Blocks and Deadlocks. Which
storage accounts can be used as a destination?
Storageaccount1
(Correct)
Storageaccount2
(Correct)
Storageaccount3
Explanation
Storage accounts must be in same location as database server. So, Storageaccount1 and storageaccount2
can be used as destination.
Question 5: Skipped
You have an Azure subscription named Subscription1. You have created Resource groups and Storage
Accounts as shown below.
Storage Account Name Resource Group Location
Storageaccount1 RG1 East US
Storageaccount2 RG2 East US
Storageaccount3 RG3 North Europe
You have created an Azure SQL database named SQLDatabase1 in the East US region.
You are enabling auditing on SQLDatabase1. Which storage accounts can be used as audit log
destinations?
Storageaccount1
(Correct)
Practice Test - 4 - Results
Return to review
Attempt 1
All questions
Question 1: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
User1 is trying to create a certificate in KeyVault1 from his laptop. Can User1 successfully create a
certificate?
Yes
No
(Correct)
Explanation
KeyVault1 is configured with service endpoint. So, you will be able to managed Key Vault certificates,
secrets and keys from the virtual machines in Vnet1.
, https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 2: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
User1 is trying to create a certificate in KeyVault1 from VM1. Can User1 successfully create a certificate?
Yes
(Correct)
No
Explanation
KeyVault1 is configured with service endpoint. So, you will be able to managed Key Vault certificates,
secrets and keys from the virtual machines in Vnet1.
https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 3: Skipped
You have an Azure Key Vault named KeyVault1. You have configured a network service endpoint for
KeyVault1 as shown below. You have a virtual machine VM1 in vnet1. A user named User1 has Owner
access on KeyVault1.
Larger image
, User1 is trying to create an access policy from his laptop. Can User1 successfully create an access policy?
Yes
(Correct)
No
Explanation
You can create access policies from outside vnet1.
https://docs.microsoft.com/en-us/azure/key-vault/general/overview-security
Question 4: Skipped
You have an Azure subscription named Subscription1. You have created Resource groups and Storage
Accounts as shown below.
Storage Account Name Resource Group Location
Storageaccount1 RG1 East US
Storageaccount2 RG2 East US
Storageaccount3 RG3 North Europe
You have created an Azure SQL database named SQLDatabase1 in the East US region.
, You are configuring SQLDatabase1 diagnostics settings to archive Timeouts, Blocks and Deadlocks. Which
storage accounts can be used as a destination?
Storageaccount1
(Correct)
Storageaccount2
(Correct)
Storageaccount3
Explanation
Storage accounts must be in same location as database server. So, Storageaccount1 and storageaccount2
can be used as destination.
Question 5: Skipped
You have an Azure subscription named Subscription1. You have created Resource groups and Storage
Accounts as shown below.
Storage Account Name Resource Group Location
Storageaccount1 RG1 East US
Storageaccount2 RG2 East US
Storageaccount3 RG3 North Europe
You have created an Azure SQL database named SQLDatabase1 in the East US region.
You are enabling auditing on SQLDatabase1. Which storage accounts can be used as audit log
destinations?
Storageaccount1
(Correct)
