Online Access Free SC-500 Exam Questions

Case Study 1 - Contoso, Ltd.
Overview
Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas.
Contoso has a hybrid environment that contains on-premises servers connected to Azure, a Microsoft 365 E5 subscription, and an Azure subscription named Sub1.
Existing Environment. Microsoft Entra tenant
Contoso has a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.

Existing Environment. On-premises environment
The on-premises network contains an Active Directory Domain Services (AD DS) forest that syncs with contoso.com. The forest contains a server named Server1 that runs Windows Server.
Existing Environment. Azure subscription
Sub1 contains the storage accounts shown in the following table.

Sub1 contains the virtual networks shown in the following table.

Sub1 contains the virtual machines shown in the following table.

The network interface of VM1 is associated with an application security group named ASG1.
Sub1 contains the resources shown in the following table.

Vault1 stores the objects shown in the following table.

Existing Environment. Privileged Identity Management (PIM) configuration You manage privileged roles by using Privileged Identity Management (PIM). The PIM role settings are configured as shown in the following table.

Existing Environment. Microsoft Sentinel configuration
Contoso has a Microsoft Sentinel workspace that contains the following tables.

Requirements. Planned changes
Contoso plans to implement the following changes:
- Integrate AKS1 with Vault1.
- Enable Microsoft Entra Kerberos authentication for all supported
storage.
- Configure auditing for sql1 by using the Azure portal and store audit logs in a centralized location.
Requirements. Technical requirements
Contoso identifies the following technical requirements:
- Protect Server1 by using file integrity monitoring.
- Protect AKS1 by using Microsoft Defender for Cloud.
- Configure Microsoft Sentinel to retain data for the maximum supported duration without changing the tier.
- Store objects used for authentication and encryption in Vault1 and
ensure that Vault1 regenerates the objects every 30 days, whenever
possible.
For which storage accounts can you implement the planned changes for storage?

• A.storage1 and storage3 only
• B.storage1, storage2, storage3, and storage4
• C.storage2 and storage4 only
• D.storage2, storage3, and storage4 only
• E.storage1 only
• F.storage1, storage2, and storage4 only

You have a Microsoft Entra tenant that contains the users shown in the following table.

You have a Microsoft Security Copilot workspace.
From Microsoft Security Store, you plan to deploy a partner-built agent named Agent1 that requires access to Microsoft Intune.
When User1 selects Agent1, the Get agent option is unavailable.
You need to enable User1 to complete the agent setup. The solution must follow the principle of least privilege.
What should you do first?

• A.Assign User1 the Agent ID Administrator role in Microsoft Entra.
• B.Assign User1 the AI Administrator role in Microsoft Entra.
• C.Instruct User2 to approve the agent setup.
• D.From Security Copilot, create an agent identity for Agent1.
• E.From Security Copilot, configure the required data source for Agent1.

An organization is evaluating the security of AI-generated content before it is presented to end users. The goal is to detect harmful, unsafe, or policy-violating responses automatically. Which capability should be prioritized?

• A.Deploying additional virtual networks
• B.Adding more GPUs
• C.Increasing context window size
• D.Content filtering and safety evaluation

You have a hybrid environment that contains the following servers:
- 50 Azure virtual machines that run Windows Server 2019
- 20 physical, on-premises servers that run Windows Server 2019
All the servers use a third-party antivirus solution that must remain active during a phased security rollout.
You need to onboard all the servers to Microsoft Defender for Endpoint by using a centralized deployment method. The solution must meet the following requirements:
- Endpoint detection and response (EDR) capabilities must be enabled.
- Antivirus conflicts must be prevented during onboarding.
What should you do on the servers?

• A.Set the Microsoft Defender for Endpoint service to Disabled.
• B.Configure the ForceDefenderPassiveMode registry value.
• C.Disable Microsoft Defender Antivirus real-time protection by using Set-MpPreference.
• D.Enable EDR in block mode.

A security team wants to identify unusual prompt activity against an Azure AI application. The team needs centralized visibility and advanced threat detection capabilities. Which Microsoft solution should be used?

• A.Azure Bastion
• B.Microsoft Sentinel
• C.Azure DNS
• D.Azure ExpressRoute