免费获取AZ-500考试真题及Azure AD PIM角色设置详解

版权申诉

AZ-500

165 浏览量更新于2024-06-28 收藏 55MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

资源详情

资源推荐

upvoted 1 times
   
awfnewf1q243
 
1month, 2weeks ago
Selected Answer: C
C. Medium
Note: It is very unlikely the Microsoft will require the memorization of speciﬁc risk levels given that they have changed the documentation.
Previously the risk levels were very well deﬁned, however they now provide this very vague paragraph:
"Microsoft doesn't provide speciﬁc details about how risk is calculated. Each level of risk brings higher conﬁdence that the user or sign-in is
compromised. For example, something like one instance of unfamiliar sign-in properties for a user might not be as threatening as leaked
credentials for another user."
Modern Documentation: https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection#investigate-
risk
Legacy Documentation: https://web.archive.org/web/20190419234045/https://docs.microsoft.com/en-us/azure/active-directory/reports-
monitoring/concept-risk-events
upvoted 2 times
   
ThatDowntownSmell
 
1month, 3weeks ago
Keeping in mind that high risk translates to password change required and medium risk triggers MFA, "Medium" is the logical choice here.
upvoted 2 times
   
promto
 
1month, 3weeks ago
Selected Answer: C
think its C, medium
upvoted 1 times
   
ylfr
 
1month, 3weeks ago
Selected Answer: B
I agree with UCY
upvoted 1 times
   
Pasapugazh
 
2months, 1week ago
The provided reference link is deprecated and the author has published a new blog where he has removed the events severity. Github toddkita
readme ﬁle referenced by most of the users was last updated in 2016, many things has changed in azure since then but still we are referencing it.
The following az-500 study material is also not providing the event types based on severity.
https://learn.microsoft.com/en-gb/training/modules/azure-ad-identity-protection/3-risk-events
Have gone through many of the Microsoft docs but couldn't ﬁnd any doc which is providing the event severity order. Not really sure what has to
be answered if this question appears in the exam. There are some other questions as well based on the risk event severity.
upvoted 1 times
   
LadyinIT
 
2months, 2weeks ago
https://github.com/toddkitta/azure-content/blob/master/articles/active-directory/active-directory-identityprotection-risk-events-types.md#sign-
ins-from-ip-addresses-with-suspicious-activity
Ans: MEDIUM
upvoted 2 times
   
Lutu
 
2months, 3weeks ago
Azure documentation or skill pipe materials doesnot say anything
upvoted 1 times
   
BlackZeros
 
3months ago
Selected Answer: B
It is B
upvoted 1 times
   
kazaki
 
8months, 3weeks ago
Selected Answer: C
The risk level for this event type is “Medium” because several devices may be behind the same IP address, while only some may be responsible
for the suspicious activity.
upvoted 2 times

Topic 1
Question #8
You have been tasked with conguring an access review, which you plan to assigned to a new collection of reviews. You also have to make sure
that the reviews can be reviewed by resource owners.
You start by creating an access review program and an access review control.
You now need to congure the Reviewers.
Which of the following should you set Reviewers to?
A. Selected users.
B. Members (Self).
C. Group Owners.
D. Anyone.
Correct Answer: 
C
In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their
own access. If the resource is a group, you can ask the group owners to review.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review https://docs.microsoft.com/en-us/azure/active-
directory/governance/manage-programs-controls
   
ssidlabs
  Highly Voted   
1year, 2months ago
"You also have to make sure that the reviews can be reviewed by resource owners.". If you see here it's talking about "resource owners" and it no
where in the question says that Access Review needs to be created for evaluation of groups. Hence the Answer C should be incorrect. Correct
answer should be A, because diﬀerent resources may have diﬀerent owners, hence you can select accordingly as reviewer.
upvoted 12 times
   
mung
 
1week, 6days ago
I would deﬁnitely go with A.
upvoted 1 times
   
theOldOne
 
1year, 1month ago
I was thinking the same thing.
upvoted 2 times
   
arseyam
 
8months, 1week ago
Because it's mentioned in the question "you start by creating an access review program" then it can't be used with ARM access reviews as
programs are used to review group memberships and application access only. Therefore the correct answer is "group owners"
upvoted 1 times
   
orallony
  Highly Voted   
1year, 2months ago
# IN EXAM - 29/9/2021 - Pass!
upvoted 8 times
   
examinee22
 
10months, 3weeks ago
What was the correct answer then?
upvoted 3 times
   
WMG
 
8months ago
He doesn't know, because you don't get feedback on which answers were correct and false. Every post about "on exam and I passed by
answering B" is useless, as the answer here could be wrong but the exam never tells you.
upvoted 6 times
   
blazefather
  Most Recent   
1month ago
In Exam 31/10/2022
upvoted 1 times
   
koreshio
 
1month, 4weeks ago
Community vote distribution
C (100%)

bit confused about this one. there is an 'Access Reviews' option under PIM (Privileged Identity Management) and the options there for reviewers
are:
Selected Users, Members (self), Manager
see (step 14) below:
https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review
upvoted 1 times
   
koreshio
 
1month, 4weeks ago
therefore should'nt this be B - Members (self) , based on above doco?
upvoted 1 times
   
koreshio
 
1month, 4weeks ago
actually bit more digging below and this answers my question. so I agree it should be 'C - Group Owners'
Diﬀerence between Access Review in Identity Governance and Privileged Identity Management:
"Kind of the same thing, but not exactly. It's the same engine, but covers diﬀerent objects. Access reviews under Identity Governance cover
Groups/Teams and application access, whereas Access reviews for admin roles is what PIM does. Refer to this article for comparison"
ref:
https://learn.microsoft.com/en-us/answers/questions/1036421/diﬀerence-between-access-review-in-identity-gover.html
upvoted 2 times
   
God2029
 
1week, 2days ago
Koreshio's explanation is correct. C is the answer
upvoted 1 times
   
Eltooth
 
9months ago
Selected Answer: C
C is correct answer.
upvoted 2 times
   
Chun
 
9months, 1week ago
Selected Answer: C
Correct
upvoted 2 times
   
B0
 
10months, 1week ago
C group owner
upvoted 1 times
   
paulb2b
 
10months, 3weeks ago
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review
upvoted 1 times
   
saran_gk
 
11months, 2weeks ago
Correct Answer
upvoted 1 times
   
licna
 
11months, 2weeks ago
I am not really sure about the answer. The question says "the reviews can be reviewed by resource owners" and there is not mentioned that those
resources to be reviewed are user groups.
See this link:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review
- Group owner(s): This option is only available when you do a review on a team or group.
I think the question is poorly phrased, I hope it won't be in exam worded like this.
upvoted 2 times
   
BinuHaneef
 
12months ago
Correct answer
upvoted 1 times
   
rohitmedi
 
1year ago
correct answer
upvoted 2 times
   
IRINI
 
1year, 5months ago
The reference shows the Answer is D
upvoted 2 times
   
Jacquesvz
 
1year, 5months ago
The question states "You also have to make sure that the reviews can be reviewed by resource owners." so C = Group Owners, is the correct
answer here.
upvoted 15 times
   
IRINI
 
1year, 4months ago
Yes, I was wrong, Thanks for correct me, Answer should be C.
upvoted 5 times

Topic 1
Question #9
Your company recently created an Azure subscription. You have, subsequently, been tasked with making sure that you are able to secure Azure AD
roles by making use of Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
Which of the following actions should you take FIRST?
A. You should sign up Azure Active Directory (Azure AD) Privileged Identity Management (PIM) for Azure AD roles.
B. You should consent to Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
C. You should discover privileged roles.
D. You should discover resources.
Correct Answer: 
B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-getting-started
   
Rume
  Highly Voted   
1year, 5months ago
"Consent to PIM" is deprecated. No more required.
So now only priv users needs to access/ visits PIM (Premium P2 is enabled") - Access will be provided automatically.
"When a user who is active in a privileged role in an Azure AD organization with a Premium P2 license goes to Roles and administrators in Azure
AD and selects a role (or even just visits Privileged Identity Management):
We automatically enable PIM for the organization
Their experience is now that they can either assign a "regular" role assignment or an eligible role assignment"
upvoted 23 times
   
Bjarki2330
 
1year, 4months ago
Yeah this question in particular is outdated.
upvoted 4 times
   
salmantarik
  Most Recent   
6days, 16hours ago
Correct Answer
PIM sign in steps:
- Sign UP PIM for AD roles
- Consent to PIM
- Discover Resources
upvoted 1 times
   
stf_
 
1month, 1week ago
I think is actually D - You should discover resources
As per Microsoft docs:
Prepare PIM for Azure roles
Here are the tasks we recommend for you to prepare Privileged Identity Management to manage Azure roles for a subscription:
Discover Azure resources
Conﬁgure Azure role settings.
Give eligible assignments.
Allow eligible users to activate their Azure roles just-in-time.
https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-getting-started#prepare-pim-for-azure-roles
upvoted 2 times
   
stf_
 
1month, 1week ago
My mistake, there are two sections: Prepare PIM for Azure roles and Prepare PIM for Azure AD roles, Question is about Azure AD roles, not
Azure roles.
upvoted 1 times
   
jayek
 
3months, 1week ago
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-deployment-plan
upvoted 2 times
   
Eltooth
 
9months ago
Selected Answer: B
Agree - B was the correct answer. This is no longer a valid question.
upvoted 3 times
Community vote distribution
B (100%)