Free Microsoft AZ-500 Exam Questions

Become Microsoft Certified with updated AZ-500 exam questions and correct answers

Page: 1 / 99

Total 495 Questions | Updated On: Mar 24, 2026

Add To Cart

Question 1

You have a web app named WebApp1.

You create a web application firewall (WAF) policy named WAF1.

You need to protect WebApp1 by using WAF1.

What should you do first?

A : Deploy an Azure Front Door.

B : Add an extension to WebApp1.

C : Deploy Azure Firewall.

Answer: A

Question 2

You are configuring and securing a network environment. You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic. You need to ensure that all network traffic is routed through VM1. What should you configure?

A : a system route

B : a network security group (NSG)

C : a user-defined route

Answer: C

Question 3

You have an Azure subscription that contains an Azure key vault. You need to configure maximum number of days for Which new keys are valid. The solution must minimize administrative effort. What should you use?

A : Key Vault properties

B : Azure Policy

C : Azure Purview

D : Azure Blueprints

Answer: B

Question 4

You have an Azure subscription that contains the virtual machines shown in the following table.

All the virtual networks are peered.

You deploy Azure Bastion to VNET2.

Which virtual machines can be protected by the bastion host?

A : VM1, VM2, VM3, and VM4

B : VM1, VM2, and VM3 only

C : VM2 and VM4 only

Answer: A

Question 5

You are tasked with assigning permissions to an Azure resource group. Which of the following is the most appropriate method to assign these permissions?

A : Assign a built-in role in Microsoft Entra ID

B : Configure Conditional Access policies

C : Azure role-based access control (Azure RBAC)

D : Implement Microsoft Entra Permissions Management

Answer: C

Page: 1 / 99

Total 495 Questions | Updated On: Mar 24, 2026

Add To Cart