Practice Free AZ-500 Exam Online Questions
You have an Azure Active directory tenant that syncs with an Active Directory Domain Services (AD DS) domain.
You plan to create an Azure file share that will contain folders and files.
Which identity store can you use to assign permissions to the Azure file share and folders within the share? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the Azure Log Analytics workspaces shown in the following table.
You create the virtual machines shown in the following table.
You plan to use Azure Sentinel to monitor Windows Defender Firewall on the virtual machines.
Which virtual machines you can connect to Azure Sentinel?
- A . VM1 and VM3 only
- B . VM1 Only
- C . VM1 and VM2 only
- D . VM1, VM2, VM3 and VM4
D
Explanation:
Reference: https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-firewall
Your company recently created an Azure subscription.
You have been tasked with making sure that a specified user is able to implement Azure AD Privileged Identity Management (PIM).
Which of the following is the role you should assign to the user?
- A . The Global administrator role.
- B . The Security administrator role.
- C . The Password administrator role.
- D . The Compliance administrator role.
A
Explanation:
To start using PIM in your directory, you must first enable PIM.
Your on-premises network contains a Hyper-V virtual machine named VM1. You need to use Azure Arc to onboard VM1 to Microsoft Defender for Cloud.
What should you install first?
- A . the Azure Monitor agent
- B . the Azure Connected Machine agent
- C . the Log Analytics agent
- D . the guest configuration agent