Pass exam with SC-500 Top Exam Collection for sure one-shot

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals.
More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft Sentinel workspace
You have a multi-tier Security Operations Center (SOC) team.
You need to ensure that all new security incidents are assigned immediately to the Tier 1 analysts group and flagged for triage.
Solution: You create a playbook
Does this meet the goal?

• A. Yes
• B. No

You have an Azure subscription that contains an Azure SQL Database logical server named SQL1 and an Azure virtual machine named VM1. VM1 uses a private IP address only. The Firewall and virtual networks settings for SQL1 are shown in the following exhibit.

You need to ensure that VM1 can connect to SQL1. The solution must use the principle of least privilege.
What should you do on the SQL1 Firewall and virtual network settings?

• A. Add an existing virtual network.
• B. Set Connection Policy to Proxy.
• C. Set Allow Azure services and resources to access this server to Yes.
• D. Create a new firewall rule.

You have a hybrid environment that contains the following servers:
*50 Azure virtual machines that run Windows Server 2019
*20 physical, on premises servers that run Windows Server 2019
All the servers use a third-party antivirus solution that must remain active during a phased security rollout You need to onboard all the servers to Microsoft Defender for Endpoint by using a centralized deployment method. The solution must meet the following requirements:
*Endpoint detection and response (EDR) capabilities must be enabled.
*Antivirus conflicts must be prevented during onboarding.
What should you do on the servers?

• A. Disable Microsoft Defender Antivirus real-time protection by using Set-MpPreference.
• B. Set the Microsoft Defender for Endpoint service to Disabled.
• C. Enable EDR in block mode.
• D. Configure the ForceDefenderPassiveMode registry value.

You have an Azure subscription that is linked to a Microsoft Entra tenant the tenant contains the groups shown in the following table.

The tenant contains the users shown in the following table.

The subscription contains the Azure SOL servers shown in the following table.

The servers are configured for Microsoft Entra-only authentication.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

You have an Azure subscription named Sub1 that contains an Azure Kubernetes Service (AKS) cluster named cluster1 and an Azure container registry named ACR1 Sub1 has Microsoft Defender for Containers enabled, and runtime protection is active on cluster!
The developers at your company deploy pods that have elevated privileges, and the deployments are created in cluster1 You need to prevent pods with elevated privileges from being accepted by cluster!
What should you do?

• A. Enable agentless discovery for Kubernetes in Defender for Containers.
• B. Configure runtime threat protection alerts for privileged container activity.
• C. Enable vulnerability assessment for images in ACR1.
• D. Create an Azure Policy for cluster1.