SC-500 試験問題を無料オンラインアクセス

You have an Azure key vault named KV1.
You have an Azure App Service web app named App1. App1 is integrated with a virtual network named VNet1 that is linked to an Azure Private DNS zone. App1 accesses secrets stored in KV1.
You need to configure KV1 so that:
* App1 accesses the secrets by using a private IP address on VNet1.
* Requests from outside VNet1 are denied.
Which two actions should you perform? sc new

• A.Create an access policy.
• B.Disable public access.
• C.Add the IP addresses of App1.
• D.Create a private endpoint.

You need to protect the applications hosted on AKS1. The solution must meet the technical requirements.
Which Defender for Cloud plan should you enable?

• A.Microsoft Defender for App Service
• B.Microsoft Defender for Storage
• C.Microsoft Defender for Containers
• D.Microsoft Defender for Resource Manager
• E.Microsoft Defender for Servers

You have a Microsoft Entra tenant that is linked to two Azure subscriptions as shown in the following table.

In Sub2. you plan to create a virtual machine named VM1.
You need to ensure that you can enable encryption at host for VM1.
Mow should you complete the initial commands in Azure Cloud Shell? To answer, select (he appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

Explanation:

The completed commands are:
Set-AzContext -SubscriptionId " 2fefd11e-3119-4674-beae-48fd819d3718 "
Register-AzProviderFeature -FeatureName " EncryptionAtHost " -ProviderNamespace " Microsoft.Compute " The first step is Set-AzContext because encryption-at-host feature registration must occur in the Azure subscription where VM1 will be deployed. Microsoft explicitly documents that, when using Azure PowerShell in Cloud Shell, you first run Set-AzContext -SubscriptionId to select the appropriate subscription.
Microsoft Learn
The second command is Register-AzProviderFeature with EncryptionAtHost under the Microsoft.Compute resource provider. Microsoft provides the exact PowerShell syntax:
Register-AzProviderFeature -FeatureName " EncryptionAtHost " -ProviderNamespace " Microsoft.Compute " The feature registration must reach the Registered state before encryption at host can be enabled for a VM or VM scale set. Microsoft Learn Connect-AzAccount is unnecessary as the answer to the first blank because Azure Cloud Shell already operates in an authenticated Azure session; the specific task is to ensure the correct subscription context.
Connect-MgGraph and Set-MgRequestContext relate to Microsoft Graph and do not configure Azure subscription resource-provider features.
Encryption at host protects VM data end-to-end, including disk caches and temporary disks at the host layer, provided a supported VM configuration is used.

Lab Task
use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password. place your cursor in the Enter password box and click on the password below.
Azure Username: Userl [email protected]
Azure Password: GpOAe4@lDg
If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
Lab Instance: 28681041
Task 7
You need to collect all the audit failure data from the security log of a virtual machine named VM1 to an Azure Storage account. To complete this task, sign in to the Azure portal.

You have an Azure subscription that has Microsoft Defender for Servers enabled. The subscription contains a virtual machine named VM1 that runs Windows Server and is onboarded to Microsoft Defender for Endpoint.
You need to implement Microsoft Defender Vulnerability Management for VM1. The solution must meet the following requirements:
* Defender Vulnerability Management must be enabled for VM1 only.
* The solution must NOT require that VM1 be Azure Arc-enabled.
What should you do?

• A.From the Azure portal, enable agentless scanning of VM1.
• B.From Microsoft Defender for Cloud, create a new recommendation.
• C.From the Azure portal, modify the Microsoft Defender for Cloud settings for VM1.
• D.From Microsoft Defender for Cloud, create a new standard.