AZ-500 Exam Question 131

You have an Azure subscription that contains the following resources:
A network virtual appliance (NVA) that runs non-Microsoft firewall software and routes all outbound traffic from the virtual machines to the internet An Azure function that contains a script to manage the firewall rules of the NVA Azure Security Center standard tier enabled for all virtual machines An Azure Sentinel workspace
30 virtual machines
You need to ensure that when a high-priority alert is generated in Security Center for a virtual machine, an incident is created in Azure Sentinel and then a script is initiated to configure a firewall rule for the NVA.
How should you configure Azure Sentinel to meet the requirements? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

AZ-500 Exam Question 132

You have Azure Resource Manager templates that you use to deploy Azure virtual machines.
You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.
What should you use?
  • AZ-500 Exam Question 133

    You need to deploy Microsoft Antimalware to meet the platform protection requirements.
    What should you do? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    AZ-500 Exam Question 134

    You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

    You have an Azure subscription named Subscription2 that contains the following resources:
    An Azure Sentinel workspace
    An Azure Event Grid instance
    You need to ingest the CEF messages from the NVAs to Azure Sentinel.
    What should you configure for each subscription? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    AZ-500 Exam Question 135

    You have an Azure subscription that contains the resources shown in the following table.

    Transparent Data Encryption (TDE) is disabled on SQL1.
    You assign polices to the resource groups as shown in the following table.

    You plan to deploy Azure SQL databases by using an Azure Resource Manager (ARM) template. The databases will be configured as shown in the following table.
    NOTE: Each correct selection is worth one point.