AZ-500 Exam Question 31

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.
You have been tasked with integrating Active Directory and the Azure AD tenant. You intend to deploy Azure AD Connect.
Your strategy for the integration must make sure that password policies and user logon limitations affect user accounts that are synced to the Azure AD tenant, and that the amount of necessary servers are reduced.
Solution: You recommend the use of federation with Active Directory Federation Services (AD FS).
Does the solution meet the goal?
  • AZ-500 Exam Question 32

    Your company has an Azure Active Directory (Azure AD) tenant named contoso.com.
    The company is developing an application named App1. App1 will run as a service on server that runs Windows Server 2016. App1 will authenticate to contoso.com and access Microsoft Graph to read directory data.
    You need to delegate the minimum required permissions to App1.
    Which three actions should you perform in sequence from the Azure portal? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

    AZ-500 Exam Question 33

    You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. EASM1 has discovery enabled and contains several inventory assets.
    You need to identify which inventory assets are vulnerable to the most critical web app security risks.
    Which Defender EASM dashboard should you use?
  • AZ-500 Exam Question 34

    You have an Azure subscription mat contains a resource group named RG1. RG1 contains a storage account named storage1.
    You have two custom Azure rotes named Role1 and Role2 that are scoped to RG1.
    The permissions for Role1 are shown in the following JSON code.

    AZ-500 Exam Question 35

    You are configuring an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.
    You need to use the auto-generated service principal to authenticate to the Azure Container Registry.
    What should you create?