AZ-500 Exam Question 31

Your company uses cloud-based resources from the following platforms:
* Azure
* Amazon Web Services (AWS)
* Google Cloud Platform (GCP)
You plan to implement Microsoft Defender for Cloud.
On which platforms can you use Defender for Cloud to protect containers and storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

AZ-500 Exam Question 32

You have 10 virtual machines on a single subnet that has a single network security group (NSG).
You need to log the network traffic to an Azure Storage account.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
  • AZ-500 Exam Question 33

    You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

    In Azure AD Privileged Identity Management (PIM), the Role settings for the Contributor role are configured as shown in the exhibit. (Click the Exhibit tab.)

    You assign users the Contributor role on May 1, 2019 as shown in the following table.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.
    NOTE: Each correct selection is worth one point.

    AZ-500 Exam Question 34

    You have an Azure subscription that contains a resource group named RG1 and the network security groups (NSGs) shown in the following table.

    You create the Azure policy shown in the following exhibit.

    You assign the policy to RG1.
    What will occur if you assign the policy to NSG1 and NSG2?
  • AZ-500 Exam Question 35

    You plan to use Azure Log Analytics to collect logs from 200 servers that run Windows Server 2016.
    You need to automate the deployment of the Microsoft Monitoring Agent to all the servers by using an Azure Resource Manager template.
    How should you complete the template? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.