Your organization runs workloads in both Azure and AWS. You want to see security recommendations and Secure Score for AWS resources in Microsoft Defender for Cloud. What should you configure?

Create a custom standard that includes AWS resources.

Deploy Azure Arc agents on all AWS EC2 instances.

Connect your AWS account to Defender for Cloud using the multi-cloud connector.

Use Azure Policy to audit AWS resources.

A security analyst sees a recommendation in Defender for Cloud that 'SQL databases should have vulnerability findings resolved'. The analyst wants to remediate the underlying vulnerabilities for a specific SQL database. What is the most efficient way to do this directly from the recommendation?

Exempt the resource from the recommendation to suppress the finding without fixing the vulnerability.

Use the Inventory feature to locate the SQL database and then apply a security policy that automatically fixes all vulnerabilities.

Open the recommendation's 'Take action' pane and follow the remediation steps, which may include applying a fix or deploying a mitigation.

Manually connect to the SQL database and run the vulnerability assessment queries to identify and fix issues.

A security team is using Microsoft Defender EASM to monitor their external attack surface. They have discovered several new subdomains that are not associated with any known Azure resources. They want to determine if these subdomains are legitimate and if they pose a risk. What should they do first?

Ignore the subdomains because EASM only discovers known assets.

Immediately block the subdomains at the DNS level to prevent potential attacks.

Review the EASM inventory to see the asset details, including the associated IP addresses and TLS certificates, to determine ownership.

Add the subdomains to a custom compliance standard to track them.

Your company has a public-facing web application. You have enabled Microsoft Defender External Attack Surface Management (EASM) and discovered several exposed services that are not managed by your team. You need to reduce the attack surface and integrate findings into your security monitoring. What should you do?

Use EASM to identify the owner of the exposed services and take remediation action, then connect EASM to Microsoft Sentinel for continuous monitoring.

Immediately block all discovered IP addresses at the firewall.

Ignore the findings because they are not in your Azure subscription.

Create a custom standard that includes EASM findings.

What is the primary benefit of integrating an AWS account with Microsoft Defender for Cloud?

To migrate AWS resources to Azure

To replace AWS security services

To create a VPN between AWS and Azure

To view security recommendations for AWS resources in the Defender for Cloud portal

Microsoft Certified:Azure Security Engineer Associate

Domain 4Objective 2

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 4)

Part of the Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel domain, which accounts for 30–35% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

9concepts

30–35%of the exam

Questions 16–20

16application · medium
Your organization runs workloads in both Azure and AWS. You want to see security recommendations and Secure Score for AWS resources in Microsoft Defender for Cloud. What should you configure?
Select an answer first
17application · medium
A security analyst sees a recommendation in Defender for Cloud that 'SQL databases should have vulnerability findings resolved'. The analyst wants to remediate the underlying vulnerabilities for a specific SQL database. What is the most efficient way to do this directly from the recommendation?
Select an answer first
18expert · hard
A security team is using Microsoft Defender EASM to monitor their external attack surface. They have discovered several new subdomains that are not associated with any known Azure resources. They want to determine if these subdomains are legitimate and if they pose a risk. What should they do first?
Select an answer first
19expert · hard
Your company has a public-facing web application. You have enabled Microsoft Defender External Attack Surface Management (EASM) and discovered several exposed services that are not managed by your team. You need to reduce the attack surface and integrate findings into your security monitoring. What should you do?
Select an answer first
20foundation · easy
What is the primary benefit of integrating an AWS account with Microsoft Defender for Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Manage Security Posture by Using Microsoft Defender for Cloud AZ-500 Practice Questions (Page 4)

Questions 16–20

Your organization runs workloads in both Azure and AWS. You want to see security recommendations and Secure Score for AWS resources in Microsoft Defender for Cloud. What should you configure?

A security analyst sees a recommendation in Defender for Cloud that 'SQL databases should have vulnerability findings resolved'. The analyst wants to remediate the underlying vulnerabilities for a specific SQL database. What is the most efficient way to do this directly from the recommendation?

What is the primary benefit of integrating an AWS account with Microsoft Defender for Cloud?

Keep studying — Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel