AZ-500 Exam Preparation Material | Microsoft Azure Security Technologies

Prepare for the AZ-500 with reliable study materials, practice questions, and key exam insights.

Prepare for the AZ-500 Microsoft Azure Security Technologies exam with CertQueen's independently developed study resources. Review important concepts, practice scenario-based questions, and use clear explanations to identify areas that require further study.

Question#1

HOTSPOT
You have an Azure subscription that contains the resources shown in the following table.



User1 is a member of Group1. Group1 and User2 are assigned the Key Vault Contributor role for Vault1.
On January 1, 2019, you create a secret in Vault1.
The secret is configured as shown in the exhibit. (Click the Exhibit tab.)



User2 is assigned an access policy to Vault1.
The policy has the following configurations:
✑ Key Management Operations: Get, List, and Restore
✑ Cryptographic Operations: Decrypt and Unwrap Key
✑ Secret Management Operations: Get, List, and Restore
Group1 is assigned an access to Vault1.
The policy has the following configurations:
✑ Key Management Operations: Get and Recover
✑ Secret Management Operations: List, Backup, and Recover
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

A. 

Question#2

You have a Microsoft Entra tenant.
You need to prevent nonprivileged Microsoft Entra users from creating service principals in Microsoft Entra ID.

A. From the Properties blade, set Enable Security defaults to Yes.
B. From the Properties blade, set Access management for Azure resources to No.
C. From the User settings blade, set Restrict access to Microsoft Entra ID administration portal to Yes.
D. From the User settings blade, set Users can register applications to No.

Question#3

You have an Azure Container Registry named ContReg1 that contains a container image named image1.
You enable content trust for ContReg1.
After content trust is enabled, you push two images to ContReg1 as shown in the following table.



Which images are trusted images?

A. image1 and image2 only
B. image2 only
C. image1, image2, and image3

Explanation:
Azure Container Registry implements Docker's content trust model, enabling pushing and pulling of signed images.
To push a trusted image tag to your container registry, enable content trust and push the image with docker push.
To work with trusted images, both image publishers and consumers need to enable content trust for their Docker clients. As a publisher, you can sign the images you push to a content trust-enabled registry.
Reference: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust

Question#4

HOTSPOT
You have the Azure virtual networks shown in the following table.



You have the Azure virtual machines shown in the following table.



The firewalls on all the virtual machines allow ping traffic.
NSG1 is configured as shown in the following exhibit.
Inbound security rules



Outbound security rules



For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.


A. 

Explanation:
Box 1: Yes
VM1 and VM3 are on peered VNets. The firewall rules with a source of ASG1 and ASG2 allow ‘any’ traffic on ‘any’ protocol so pings are allowed between VM1 and VM3.
Box 2: No
VM2 and VM4 are on separate VNets and the VNets are not peered. Therefore, the pings would have to go over the Internet. VM4 does have a public IP and the firewall allows pings. However, for VM2 to be able to ping VM4, VM2 would also need a public IP address. In Azure, pings don’t go out through the default gateway as they would in a physical network. For an Azure VM to ping external IPs, the VM must have a public IP address assigned to it.
Box 3: Yes
VM3 has a public IP address and the firewall allows traffic on port 3389.

Question#5

HOTSPOT
You have an Azure Sentinel workspace that has the following data connectors:
- Azure Active Directory Identity Protection
- Common Event Format (CEF)
- Azure Firewall
You need to ensure that data is being ingested from each connector.
From the Logs query window, which table should you query for each connector? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


A. 

Explanation:
Graphical user interface, application, table Description automatically generated

Exam Code: AZ-500
Q & A: 520 Q&As         Updated:  Sep 22,2026

 

 Access Complete AZ-500 Preparation Material

What This AZ-500 Study Resource Helps You Do

Review Key Concepts

Review the technologies, products, processes, and practical skills covered by the current AZ-500 exam objectives.

Practice Scenario-Based Questions

Work through independently developed questions designed to strengthen your understanding of technical scenarios and decision-making.

Identify Knowledge Gaps

Use your results and the provided explanations to find weaker areas and focus your study more effectively.

How to Use This AZ-500 Preparation Material

Review the Exam Scope

Start by reviewing the topics covered by the AZ-500 exam. Compare them with the official exam objectives to understand the required technologies, operational tasks, and practical skills, then identify the areas that deserve the most attention.

Practice Independently

Complete a focused set of practice questions for each topic. On your first attempt, avoid referring to notes, answers, or other study resources so that you can evaluate your current understanding more accurately.

Study the Explanations

Review the answers and explanations after completing each practice session. Understand why the correct option is appropriate for the given scenario and why the other options may be incorrect or less suitable.

Close Knowledge Gaps

Keep track of incorrect answers, unfamiliar concepts, and weaker knowledge areas. Review these topics using official documentation and practical experience, then answer the related questions again to reinforce your understanding and monitor your progress.

Independent AZ-500 Preparation Resource

CertQueen independently develops its certification study materials for educational purposes. The practice questions are not copied from, recalled from, or presented as live or official exam questions.

CertQueen is not affiliated with, endorsed by, sponsored by, or authorized by any certification provider. Certification names, exam codes, product names, and related trademarks are the property of their respective owners and are referenced only for identification and educational purposes.

Exam Code: AZ-500
Q & A: 520 Q&As
Updated:  Sep 22,2026

 

 Access Complete AZ-500 Preparation Material