az-500 Free Practice Test

- (Exam Topic 4)
You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant. From the Azure portal, you register an enterprise application.
Which additional resource will be created in Azure AD?

1. A. a service principal
2. B. an X.509 certificate
3. C. a managed identity
4. D. a user account

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-how-applications-are-added

- (Exam Topic 4)
You have an Azure subscription that uses Azure AD Privileged Identity Management (PIM). A user named User1 is eligible for the Billing administrator role.
You need to ensure that the role can only be used for a maximum of two hours. What should you do?

1. A. Create a new access review.
2. B. Edit the role assignment settings.
3. C. Update the end date of the user assignment
4. D. Edit the role activation settings.

Correct Answer: B

- (Exam Topic 4)
You have an Azure subscription.
You create a new virtual network named VNet1.
You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic.
What should you do?

1. A. Create an Azure App Service Hybrid Connection.
2. B. Configure regional virtual network integration.
3. C. Create an App Service Environment
4. D. Create an Azure application gateway.

Correct Answer: D

- (Exam Topic 4)
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant and a user named User1.
The App registrations settings for the tenant are configured as shown in the following exhibit.

You plan to deploy an app named App1.
You need to ensure that User1 can register App1 in Azure AD. The solution must use the principle of least privilege.
Which role should you assign to User1?

1. A. App Configuration Data Owner for the subscription
2. B. Managed Application Contributor for the subscription
3. C. Cloud application administrator in Azure AD
4. D. Application developer in Azure AD.

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task

- (Exam Topic 4)
You have an Azure web app named WebApp1. You upload a certificate to WebApp1.
You need to make the certificate accessible to the app code of WebApp1. What should you do?

1. A. Add a user-assigned managed identity to WebApp1.
2. B. Add an app setting to the WebApp1 configuration.
3. C. Enable system-assigned managed identity for the WebApp1.
4. D. Configure the TLS/SSL binding for WebApp1.

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/app-service/configure-ssl-certificate-in-code