Free Microsoft SC-500 Exam Questions

Question 1

You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have an Amazon Web Services (AWS) account connected to Defender for Cloud that has the DefenderCloud Security Posture Management (CSPM) plan enabled.You need to identify the potential impact of security incidents that exploit multiple risks reported by DefenderCSPM.What should you use?

A : Regulatory compliance

B : Cloud security explorer

C : Security recommendations

D : Attack path analysis

Answer: D

Question 2

You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled, and runtime protection is active on cluster!The developers at your company deploy pods that have elevated privileges, and the deployments are createdin cluster1You need to prevent pods with elevated privileges from being accepted by cluster!What should you do?

A : Create an Azure Policy for cluster1.

B : Enable agentless discovery for Kubernetes in Defender for Containers.

C : Configure runtime threat protection alerts for privileged container activity.

D : Enable vulnerability assessment for images in ACR1.

Answer: A

Question 3

You have an Azure SQL Database logical server named Server1 that contains multiple databases.The databases contain legacy SQL authentication logins that must no longer be usable for sign-in but mustNOT be removed from the databases.You need to ensure that SQL authentication is denied for connections.What should you do?

A : Run CREATE USER ... FROM EXTERNAL PROVIDER on each database.

B : Create a Conditional Access policy.

C : Enable Microsoft Entra-only authentication for Server1.

D : Assign the SQL Server Contributor role to Server1.

Answer: C

Question 4

You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled, and runtime protection is active on cluster!The developers at your company deploy pods that have elevated privileges, and the deployments are createdin cluster1You need to prevent pods with elevated privileges from being accepted by cluster!What should you do?

A : Create an Azure Policy for cluster1.

B : Enable agentless discovery for Kubernetes in Defender for Containers.

C : Configure runtime threat protection alerts for privileged container activity.

D : Enable vulnerability assessment for images in ACR1.

Answer: A

Question 5

You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled, and runtime protection is active on cluster!The developers at your company deploy pods that have elevated privileges, and the deployments are createdin cluster1You need to prevent pods with elevated privileges from being accepted by cluster!What should you do?

A : Create an Azure Policy for cluster1.

B : Enable agentless discovery for Kubernetes in Defender for Containers.

C : Configure runtime threat protection alerts for privileged container activity.

D : Enable vulnerability assessment for images in ACR1.

Answer: A