You have created an Azure Policy initiative that includes several policy definitions. How do you apply this initiative to a subscription?

Create a new policy definition that includes the initiative.

Create an assignment for the initiative at the subscription scope.

Assign each policy definition individually to the subscription.

Use Azure Blueprints to apply the initiative.

A company has a Key Vault that needs to be accessed by an application running in a different Azure subscription. The application uses a managed identity. The Key Vault has network restrictions that only allow access from a specific virtual network. What is the best way to allow the application to access the Key Vault?

Add the managed identity to the Key Vault access policy and allow access from all networks.

Create a private endpoint for the Key Vault in the application's virtual network and configure the Key Vault firewall to allow that private endpoint.

Assign the managed identity the 'Key Vault Reader' role and allow access from all networks.

Use a shared access signature to allow the application to access the Key Vault.

You have a certificate in Azure Key Vault that is about to expire. You need to ensure it is automatically renewed. What should you configure?

The certificate's lifetime action policy

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 1

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 2)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

15concepts

30–35%of the exam

15 Concepts in This Objective

Azure Policy Creation
Azure Policy Assignment
Azure Policy Interpretation
Azure Policy Initiatives
Key Vault Network Configuration
Key Vault Access Policies
Azure RBAC for Key Vault
Manage Key Vault Certificates
Manage Key Vault Secrets
Manage Key Vault Keys
Key Rotation Configuration
Backup Key Vault Items
Recovery of Key Vault Items
Backup Security Controls
Asset Management Security Controls

Questions 6–10

6foundation · easy
You need to store a database connection string securely in Azure. Which Key Vault object should you create?
Select an answer first
7foundation · easy
You need to create a backup of a secret stored in Azure Key Vault. Which operation should you use?
Select an answer first
8foundation · easy
You have created an Azure Policy initiative that includes several policy definitions. How do you apply this initiative to a subscription?
Select an answer first
9expert · hard
A company has a Key Vault that needs to be accessed by an application running in a different Azure subscription. The application uses a managed identity. The Key Vault has network restrictions that only allow access from a specific virtual network. What is the best way to allow the application to access the Key Vault?
Select an answer first
10foundation · easy
You have a certificate in Azure Key Vault that is about to expire. You need to ensure it is automatically renewed. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 2)

Questions 6–10

You need to store a database connection string securely in Azure. Which Key Vault object should you create?

You need to create a backup of a secret stored in Azure Key Vault. Which operation should you use?

You have created an Azure Policy initiative that includes several policy definitions. How do you apply this initiative to a subscription?

You have a certificate in Azure Key Vault that is about to expire. You need to ensure it is automatically renewed. What should you configure?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel