AZ-500 Exam Question 126

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry.
What should you create?
  • AZ-500 Exam Question 127

    You have a management group named Group1 that contains an Azure subscription named sub1. Sub1 has a subscription ID of 11111111-1234-1234-1234-1111111111.
    You need to create a custom Azure role-based access control (RBAC) role that will delegate permissions to manage the tags on all the objects in Group1.
    What should you include in the role definition of Role1? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    AZ-500 Exam Question 128

    You have three Azure subscriptions and a user named User1.
    You need to provide User1 with the ability to manage and view costs for the resources across all three subscriptions. The solution must use the principle of least privilege.
    Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
    NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

    AZ-500 Exam Question 129

    You have an Azure subscription named Sub1 that contains the storage accounts shown in the following table

    The storage3 storage account is encrypted by using customer-managed keys.
    YOU need to enable Microsoft Defender for storage to meet the following requirements.
    * The storage1 and storage2 account must be include in the defender for storage requirement.
    * The storage3 account must be exclude from the Defender for Storage protections.
    Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and them in the correct order.

    AZ-500 Exam Question 130

    You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.

    You create a resource group named RG1.
    Which users can modify the permissions for RG1 and which users can create virtual networks in RG1? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.