What is the primary function of an Azure Private Endpoint?

To assign a private IP address from a virtual network to an Azure service, enabling private connectivity

To route traffic to an Azure service through the internet

To create a VPN connection between two virtual networks

To provide a public IP address for an Azure service

What is a key network security feature of Azure SQL Managed Instance?

It is always deployed into a virtual network and uses private IP addresses

It can be accessed publicly by default

It does not support network security groups

It uses a public endpoint for all connections

A company wants to expose an internal API hosted on Azure VMs to a partner organization. The partner will connect from their own Azure virtual network. The company wants to avoid exposing the API to the public internet. What should they configure?

Establish VNet peering between the two virtual networks.

Create a Private Link service in the company's virtual network and have the partner create a private endpoint in their virtual network.

Assign a public IP to the API and configure NSG rules to allow only the partner's IP range.

Use a VPN gateway to connect the partner's virtual network to the company's virtual network.

Which of the following can be used to control inbound traffic to an Azure SQL Managed Instance?

Network security groups applied to the subnet

Azure Firewall policies applied directly to the instance

Application security groups on the instance

What is an App Service Environment (ASE)?

A virtual network that hosts virtual machines

A shared environment for running App Service apps with other customers

A fully isolated and dedicated environment for running App Service apps at scale

A service that only runs Azure Functions

Microsoft Certified:Azure Security Engineer Associate

Domain 2Objective 2

Plan and Implement Security for Private Access to Azure Resources AZ-500 Practice Questions (Page 2)

Part of the Secure networking domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

6concepts

20–25%of the exam

Questions 6–10

6foundation · easy
What is the primary function of an Azure Private Endpoint?
Select an answer first
7foundation · easy
What is a key network security feature of Azure SQL Managed Instance?
Select an answer first
8application · medium
A company wants to expose an internal API hosted on Azure VMs to a partner organization. The partner will connect from their own Azure virtual network. The company wants to avoid exposing the API to the public internet. What should they configure?
Select an answer first
9foundation · easy
Which of the following can be used to control inbound traffic to an Azure SQL Managed Instance?
Select an answer first
10foundation · easy
What is an App Service Environment (ASE)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.