Your organization must comply with a new internal security framework that includes controls not covered by any built-in regulatory standard in Microsoft Defender for Cloud. You need to track compliance against this framework without losing the built-in standards. What should you do?

Modify the built-in Azure Security Benchmark to add your custom controls.

Use Azure Policy to assign the framework directly to resources.

Create a custom standard and assign it to the relevant subscriptions.

Disable all built-in standards and create a new custom standard.

What is the primary purpose of Microsoft Defender External Attack Surface Management (EASM)?

To manage firewall rules for your virtual network

To discover and monitor internet-facing resources that belong to your organization

To provide a VPN solution for remote workers

To monitor internal network traffic for anomalies

What is the purpose of connecting an on-premises server to Microsoft Defender for Cloud?

To migrate the on-premises server to Azure

To extend security monitoring and recommendations to the on-premises resources

To create a VPN connection between the on-premises network and Azure

To replace the on-premises firewall

Which type of asset would Microsoft Defender External Attack Surface Management (EASM) most likely monitor?

Azure SQL databases with private endpoints

On-premises Active Directory domain controllers

Publicly accessible web applications

In Microsoft Defender for Cloud, how do you manage which compliance standards are applied to a subscription?

By changing the subscription's pricing tier

By editing the Azure Active Directory settings

By modifying the resource group tags

By adding or removing standards in the Compliance page under Security policy

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 2

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 3)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

30–35%of the exam

Questions 11–15

11application · medium
Your organization must comply with a new internal security framework that includes controls not covered by any built-in regulatory standard in Microsoft Defender for Cloud. You need to track compliance against this framework without losing the built-in standards. What should you do?
Select an answer first
12foundation · easy
What is the primary purpose of Microsoft Defender External Attack Surface Management (EASM)?
Select an answer first
13foundation · easy
What is the purpose of connecting an on-premises server to Microsoft Defender for Cloud?
Select an answer first
14foundation · easy
Which type of asset would Microsoft Defender External Attack Surface Management (EASM) most likely monitor?
Select an answer first
15foundation · easy
In Microsoft Defender for Cloud, how do you manage which compliance standards are applied to a subscription?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.