What is the primary purpose of Microsoft Defender Vulnerability Management for VMs?

To enforce compliance with regulatory standards

To monitor network traffic to and from VMs

To identify and remediate vulnerabilities in VM operating systems and applications

To provide real-time endpoint detection and response

What type of security threat does Microsoft Defender for Storage primarily detect?

SQL injection attacks against database tables

Distributed denial-of-service (DDoS) attacks on the storage endpoint

Phishing emails sent from a storage account

Malicious file uploads to blob containers

Your security team wants to detect vulnerabilities in VMs without installing agents, but they also need to see the vulnerabilities in the same dashboard as other security recommendations. They have enabled Defender for Servers Plan 2. What else must they configure?

Configure a vulnerability assessment solution in the Azure Security Center.

Enable agentless scanning for VMs in Defender for Cloud.

Enable Defender for Servers Plan 1 as well.

Install the Log Analytics agent on all VMs.

Which Microsoft Defender for Servers plan provides the most comprehensive protection, including file integrity monitoring, just-in-time VM access, and regulatory compliance assessments?

Defender for Servers with Defender for Endpoint only

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 3

Configure and Manage Threat Protection by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 1)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

7concepts

30–35%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of Microsoft Defender Vulnerability Management for VMs?
Select an answer first
2foundation · easy
Which of the following database services can be protected by Microsoft Defender for Databases?
Select an answer first
3foundation · easy
What type of security threat does Microsoft Defender for Storage primarily detect?
Select an answer first
4application · medium
Your security team wants to detect vulnerabilities in VMs without installing agents, but they also need to see the vulnerabilities in the same dashboard as other security recommendations. They have enabled Defender for Servers Plan 2. What else must they configure?
Select an answer first
5foundation · easy
Which Microsoft Defender for Servers plan provides the most comprehensive protection, including file integrity monitoring, just-in-time VM access, and regulatory compliance assessments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.