Your company has a virtual machine that hosts a custom application. The application writes temporary files to the OS disk. You need to encrypt the OS disk and the temp files at rest, and you want to use a customer-managed key stored in Azure Key Vault. The VM is running Windows. What should you do?

Enable Azure Disk Encryption on the VM and specify a Key Vault key as the encryption key.

Use confidential disk encryption with a confidential VM.

Create a custom script extension that runs BitLocker on the VM.

Enable encryption at host on the VM's disk.

Your team uses Azure Container Registry (ACR) to store images for Azure Container Instances. You need to ensure that only the CI/CD pipeline's service principal can push images, while developers can only pull images. You also want to block all public network access to the registry. What should you configure?

Create a repository-scoped token for the pipeline and allow all Azure services to access the registry

Assign AcrPush role to the service principal, AcrPull to developers, and enable the registry's public network access to be disabled

Use admin credentials for the CI/CD pipeline and assign AcrPull to developers

Enable Azure AD authentication and configure a private endpoint for the registry

What is the main security benefit of enabling just-in-time (JIT) VM access for Azure virtual machines?

It blocks all outbound internet traffic from the VM

It provides a VPN connection for remote users

It encrypts all data stored on the VM's disks

It reduces the attack surface by keeping management ports closed until access is requested

Microsoft Certified:Azure Security Engineer Associate

Domain 3Objective 1

Plan and Implement Advanced Security for Compute AZ-500 Practice Questions (Page 8)

Part of the Secure compute, storage, and databases domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

20–25%of the exam

Questions 36–39

36foundation · easy
Which Azure Security Center / Microsoft Defender for Cloud feature allows you to temporarily open specific ports on a VM for a limited time when a user requests access?
Select an answer first
37application · medium
Your company has a virtual machine that hosts a custom application. The application writes temporary files to the OS disk. You need to encrypt the OS disk and the temp files at rest, and you want to use a customer-managed key stored in Azure Key Vault. The VM is running Windows. What should you do?
Select an answer first
38application · medium
Your team uses Azure Container Registry (ACR) to store images for Azure Container Instances. You need to ensure that only the CI/CD pipeline's service principal can push images, while developers can only pull images. You also want to block all public network access to the registry. What should you configure?
Select an answer first
39foundation · easy
What is the main security benefit of enabling just-in-time (JIT) VM access for Azure virtual machines?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Plan and Implement Advanced Security for Compute AZ-500 Practice Questions (Page 8)

Questions 36–39

Which Azure Security Center / Microsoft Defender for Cloud feature allows you to temporarily open specific ports on a VM for a limited time when a user requests access?

Your company has a virtual machine that hosts a custom application. The application writes temporary files to the OS disk. You need to encrypt the OS disk and the temp files at rest, and you want to use a customer-managed key stored in Azure Key Vault. The VM is running Windows. What should you do?

What is the main security benefit of enabling just-in-time (JIT) VM access for Azure virtual machines?

Keep studying — Secure compute, storage, and databases