Free Microsoft SC-500 Exam Dumps Questions & Answers

You have a Microsoft Foundry project that contains a model deployment named Deployment1.
Deployment1 contains an agent named Agent1 that uses an existing default guardrail configuration.
You discover that Agent1 generates tool calls that contain harmful language.
You need to ensure that Agent1 responses containing harmful content are prevented from running. The solution must prevent changes to the configuration of Deployment1.
What should you do?

• A.Fine-tune the model of Deployment1.
• B.Create a red teaming run for Agent1.
• C.Create a custom guardrail and assign it directly to Agent1.
• D.Create an automatic evaluation of the dataset of Agent1.

You have a Microsoft Security Copilot workspace named Workspace1 that is used by Security Operations Center (SOC) analysts and security administrators.
The SOC analysts use only the Security Copilot standalone experience, and the security administrators access Security Copilot from the Microsoft Defender portal.
A new Security Copilot workspace named Workspace2 is created for the security administrators.
Workspace2 is assigned a capacity of five security compute units.
You need to ensure that Security Copilot usage for the SOC analysts is allocated to Workspace1 and Security Copilot usage for the security administrators is allocated to Workspace2.
What should you do?

• A.Increase the capacity of Workspace2.
• B.Configure Workspace1 for embedded agent traffic.
• C.Configure Workspace2 for embedded agent traffic.
• D.Assign the Workspace1 capacity to Workspace2.

Drag and Drop Question
You have two Azure subscriptions named Sub1 and Sub2.
You have two groups named Group1 and Group2. Group1 only has access to Sub1 and Group2 only has access to Sub2.
Sub1 contains a Recovery Services vault named RSVault1 that stores virtual machine backups.
RSVault1 is managed by using Group1.
You need to ensure that modifying the backup settings of RSVault1 requires approval from an approver in Group2.
What should you configure for each subscription? To answer, drag the appropriate features to the correct subscriptions. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Multi-User Authorization (MUA)
Sub1 (where Group1 and the Vault reside):
Enable Multi-User Authorization (MUA) on the Recovery Services vault.
Associate the vault with the Resource Guard located in Sub2.
Box 2: Resource Guard
Sub2 (where Group2 has access):
Deploy the Azure Resource Guard here.
Assign the Resource Guard Reader and Resource Guard Contributor (or a custom role with authorize actions) roles to Group2 over this Resource Guard.
Reference:
https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization

You have two management groups named MG1 and MG2 that contain multiple Azure subscriptions. The subscriptions are linked to a Microsoft Entra tenant.
You have a user named User1 and a global administrator named Admin1.
You are informed that User1 created an Azure subscription named Sub1 under the MG2 management group and is the only owner of the subscription.
You need to ensure that Admin1 can remove the Owner role from User1 for Sub1.
What should you do first?

• A.Move Sub1 to MG1.
• B.Instruct Admin1 to use Privileged Identity Management (PIM) to request the Security Administrator role.
• C.Instruct Admin1 to enable Access management for Azure resources.
• D.Assign Admin1 the User Access Administrator role for Sub1.

You have an Azure Functions app named App1 that uses an HTTP trigger, runs on an Elastic Premium plan, and uses virtual network integration.
A partner application sends requests to App1 from a public IP address of xxx.xxx.xxx.xx.
You need to ensure that the requests are accepted from only xxx.xxx.xxx.xx.
What should you do?

• A.Deploy an Azure Bastion host.
• B.Configure an inbound access restriction on App1.
• C.Apply a network security group (NSG) to a dedicated subnet for virtual network integration.
• D.Deploy an Azure NAT Gateway.
• E.Create a private endpoint for App1 and disable public network access.