You have the Azure virtual machines shown in the following table.
https://www.fast2test.com/AZ-500-practice-test.html 38
Valid Fast2test AZ-500 Exam PDF Dumps - New AZ-500 Real Exam Questions

For which virtual machine can you enable Update Management?

• A.VM2 and VM3 only
• B.VM2, VM3, and VM4 only
• C.VM1, VM2, and VM4 only
• D.VM1, VM2, VM3, and VM4
• E.VM1, VM2, and VM3 only

Comment: *

Name: *

Email: *

Verification: *

You are implementing conditional access policies.
You must evaluate the existing Azure Active Directory (Azure AD) risk events and risk levels to configure and implement the policies.
You need to identify the risk level of the following risk events:
* Users with leaked credentials
* Impossible travel to atypical locations
* Sign ins from IP addresses with suspicious activity
Which level should you identify for each risk event? To answer, drag the appropriate levels to the correct risk events. Each level may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Azure AD Identity protection can detect six types of suspicious sign-in activities:
* Users with leaked credentials
* Sign-ins from anonymous IP addresses
* Impossible travel to atypical locations
* Sign-ins from infected devices
* Sign-ins from IP addresses with suspicious activity
* Sign-ins from unfamiliar locations
These six types of events are categorized in to 3 levels of risks - High, Medium & Low:

References:
http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access-policies/

Comment: *

Name: *

Email: *

Verification: *

You create a new Azure subscription that is associated to a new Azure Active Directory (Azure AD) tenant.
You create one active conditional access policy named Portal Policy. Portal Policy is used to provide access to the Microsoft Azure Management cloud app.
The Conditions settings for Portal Policy are configured as shown in the Conditions exhibit. (Click the Conditions tab.)

The Grant settings for Portal Policy are configured as shown in the Grant exhibit. (Click the Grant tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1: No
The Contoso location is excluded
Box 2: NO
Box 3: NO
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

Comment: *

Name: *

Email: *

Verification: *

You have Azure virtual machines that have Update Management enabled. The virtual machines are configured as shown in the following table.

You schedule two update deployments named Update1 and Update2. Update1 updates VM3. Update2 updates VM6.
Which additional virtual machines can be updated by using Update1 and Update2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Update1: VM1 and VM2 only
VM3: Windows Server 2016 West US RG2
Update2: VM4 and VM5 only
VM6: CentOS 7.5 East US RG1
For Linux, the machine must have access to an update repository. The update repository can be private or public.
References:
https://docs.microsoft.com/en-us/azure/automation/automation-update-management

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Azure Username: [email protected]
Azure Password: Ag1Bh9!#Bd
The following information is for technical support purposes only:
Lab Instance: 10598168




You need to configure Azure to allow RDP connections from the Internet to a virtual machine named VM1. The solution must minimize the attack surface of VM1.
To complete this task, sign in to the Azure portal.

• A.To enable the RDP port in an NSG, follow these steps:
  * Sign in to the Azure portal.
  * In Virtual Machines, select VM1
  * In Settings, select Networking.
  * In Inbound port rules, check whether the port for RDP is set correctly. The following is an example of the configuration:
  Priority: 300
  Name: Port_3389
  Port(Destination): 3389
  Protocol: TCP
  Source: Any
  Destinations: Any
  Action: Allow
• B.To enable the RDP port in an NSG, follow these steps:
  * Sign in to the Azure portal.
  * In Virtual Machines, select VM1
  * In Settings, select Networking.
  * In Inbound port rules, check whether the port for RDP is set correctly. The following is an example of the configuration:
  Priority: 300
  Name: Port_3889
  Port(Destination): 3388
  Protocol: TCP
  Source: Any
  Destinations: Any
  Action: Allow

Comment: *

Name: *

Email: *

Verification: *