Microsoft SC-500 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Secure compute | 20–25% | - Secure application and workload identities
|
| Secure storage, databases, and networking | 25–30% | - Secure storage and data services
|
| Manage identity, access, and governance | 20–25% | - Implement secure authentication and authorization
|
| Manage and monitor security posture | 20–25% | - Monitor, assess, and improve security posture
|
Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloads Sample Questions:
1. Hotspot Question
You need to deploy the Phishing Triage Agent in Microsoft Security Copilot to manage phishing incidents in Microsoft Defender XDR.
The solution must meet the following requirements:
- Manage the phishing incidents.
- Enable the Phishing Triage Agent.
- Follow the principle of least privilege.
Which roles should you assign? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
2. You have a Microsoft Entra tenant that contains the users shown in the following table.
You have a Microsoft Security Copilot workspace.
From Microsoft Security Store, you plan to deploy a partner-built agent named Agent1 that requires access to Microsoft Intune.
When User1 selects Agent1, the Get agent option is unavailable.
You need to enable User1 to complete the agent setup. The solution must follow the principle of least privilege.
What should you do first?
A) From Security Copilot, create an agent identity for Agent1.
B) Assign User1 the AI Administrator role in Microsoft Entra.
C) Instruct User2 to approve the agent setup.
D) Assign User1 the Agent ID Administrator role in Microsoft Entra.
E) From Security Copilot, configure the required data source for Agent1.
3. Hotspot Question
You have an Azure subscription.
You need to create and deploy an Azure policy that meets the following requirements:
- When a new virtual machine is deployed, automatically install a
custom security extension.
- Trigger an autogenerated remediation task for non-compliant virtual
machines to install the extension.
What should you include in the policy? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
4. Drag and Drop Question
You have three internet-facing Azure App Service web apps named App1, App2, and App3. Each app uses built-in authentication. App2 hosts a backend API.
Some corporate users can sign in to App2, even though they should NOT be able to use the API.
You need to restrict App2 access to assigned Microsoft Entra users and groups.
What should you configure for App2? To answer, drag the appropriate configurations to the correct methods. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
5. You have two management groups named MG1 and MG2 that contain multiple Azure subscriptions. The subscriptions are linked to a Microsoft Entra tenant.
You have a user named User1 and a global administrator named Admin1.
You are informed that User1 created an Azure subscription named Sub1 under the MG2 management group and is the only owner of the subscription.
You need to ensure that Admin1 can remove the Owner role from User1 for Sub1.
What should you do first?
A) Move Sub1 to MG1.
B) Assign Admin1 the User Access Administrator role for Sub1.
C) Instruct Admin1 to use Privileged Identity Management (PIM) to request the Security Administrator role.
D) Instruct Admin1 to enable Access management for Azure resources.
Solutions:
| Question # 1 Answer: Only visible for members | Question # 2 Answer: C | Question # 3 Answer: Only visible for members | Question # 4 Answer: Only visible for members | Question # 5 Answer: D |
1109 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
