A company has a Key Vault that currently uses access policies. They want to migrate to Azure RBAC for Key Vault data plane access. They have a large number of users and groups. What is the best approach to minimize administrative overhead?

Create a custom RBAC role that combines all permissions and assign it to everyone.

Enable the RBAC authorization model on the Key Vault and assign roles to groups instead of individual users.

Keep using access policies and add each user individually.

Enable RBAC and assign roles to each individual user.

A secret was accidentally deleted from a Key Vault. The admin has a backup file from a previous backup operation. What should they do to restore the secret?

Use the Azure CLI command 'az keyvault secret restore' with the backup file.

Contact Microsoft support to restore the secret.

Recreate the secret manually with the same name and value.

Use the Azure portal to recover the secret from the recycle bin.

Your company uses Azure Key Vault to store TLS certificates for web applications. You need to ensure that certificates are automatically renewed before they expire. What should you configure?

Set the certificate's validity period to 1 year and manually renew it each year.

Use Azure Policy to enforce certificate rotation.

Create a new certificate every 6 months and update the application.

Configure the certificate's lifetime action to automatically renew at 80% of the validity period.

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 1

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 7)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

15concepts

30–35%of the exam

15 Concepts in This Objective

Azure Policy Creation
Azure Policy Assignment
Azure Policy Interpretation
Azure Policy Initiatives
Key Vault Network Configuration
Key Vault Access Policies
Azure RBAC for Key Vault
Manage Key Vault Certificates
Manage Key Vault Secrets
Manage Key Vault Keys
Key Rotation Configuration
Backup Key Vault Items
Recovery of Key Vault Items
Backup Security Controls
Asset Management Security Controls

Questions 31–35

31expert · hard
A company has a Key Vault that currently uses access policies. They want to migrate to Azure RBAC for Key Vault data plane access. They have a large number of users and groups. What is the best approach to minimize administrative overhead?
Select an answer first
32application · medium
A secret was accidentally deleted from a Key Vault. The admin has a backup file from a previous backup operation. What should they do to restore the secret?
Select an answer first
33foundation · easy
You need to ensure that Azure resources are tagged with the owner and cost center for governance. Which Azure feature should you use to enforce tagging?
Select an answer first
34foundation · easy
You need to grant a user permission to read secrets in an Azure Key Vault. What should you configure?
Select an answer first
35application · medium
Your company uses Azure Key Vault to store TLS certificates for web applications. You need to ensure that certificates are automatically renewed before they expire. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Implement and Manage Enforcement of Cloud Governance Policies AZ-500 Practice Questions (Page 7)

Questions 31–35

A company has a Key Vault that currently uses access policies. They want to migrate to Azure RBAC for Key Vault data plane access. They have a large number of users and groups. What is the best approach to minimize administrative overhead?

A secret was accidentally deleted from a Key Vault. The admin has a backup file from a previous backup operation. What should they do to restore the secret?

You need to ensure that Azure resources are tagged with the owner and cost center for governance. Which Azure feature should you use to enforce tagging?

You need to grant a user permission to read secrets in an Azure Key Vault. What should you configure?

Your company uses Azure Key Vault to store TLS certificates for web applications. You need to ensure that certificates are automatically renewed before they expire. What should you configure?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel