Get real SC-500 exam questions for better preparation

Microsoft SC-500 Exam Overview:

Microsoft SC-500 Exam Syllabus Topics:

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloads Sample Questions:

1. You have a Microsoft Sentinel workspace.
You need to collect Windows security events from 200 Azure virtual machines that run Windows Server. The solution must meet the following requirements:
- Use direct agent-based data collection from each virtual machine.
- Use a supported agent for new virtual machine deployments.
Which Microsoft Sentinel connector should you use?

A) Windows Security Events via AMA
B) Syslog via AMA
C) Azure Resource Graph
D) Security Events via Legacy Agent
E) Windows Forwarded Events

2. Drag and Drop Question
You have a Microsoft Defender External Attack Surface Management (Defender EASM) resource that discovers internet-facing assets for a company named Contoso, Ltd.
You need to classify the assets to meet the following requirements:
- Third-party infrastructure assets must be tracked separately from
assets owned by Contoso.
- Assets with unconfirmed ownership must remain outside the owned
inventory until ownership is verified.
How should you classify the assets? To answer, drag the appropriate asset states to the correct assets. Each state may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

3. You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com.
Sub1 contains a Recovery Services vault named RSVault1 that stores virtual machines backups.
Your company's security team maintains a dedicated Microsoft Entra tenant named security.contoso.com.
You need to ensure that modifying the backup settings of RSVault1 requires approval from an approver in security.contoso.com.
What should you do in contoso.com?

A) Create a private endpoint for RSVault1 on the virtual network.
B) Enable immutability for RSVault1 and lock the immutability setting.
C) Configure Privileged Identity Management (PIM) activation for the Backup Operator role.
D) Enable Multi-user authorization (MUA) for RSVault1.

4. Your organization is deploying several generative AI applications that use Azure AI services.
Security administrators want to ensure that prompts and responses containing sensitive information are identified and monitored before they leave the organization's environment. Which solution should be implemented first?

A) Azure Traffic Manager
B) Azure Firewall Premium
C) Azure Load Balancer
D) Microsoft Purview Data Loss Prevention (DLP)

5. A company wants to continuously assess cloud resources for security weaknesses and regulatory compliance issues. Which Microsoft security service provides this capability?

A) Azure Backup
B) Azure Front Door
C) Azure Container Registry
D) Microsoft Defender for Cloud

Solutions: