Azure Security Engineer AZ-500 Practice

Q: How many questions are in this practice set?

This practice set contains 60 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for Azure Security Engineer Associate, including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Practice 60 original Azure Security Engineer AZ-500 questions covering identity, platform protection, data protection, network security, security operations and governance, with detailed explanations.

Level: Azure Security Engineer Associate Difficulty: advanced 60 questions 60 min

Choose a practice mode, answer each Azure Security Engineer AZ-500 question, then review the explanation. Wrong answers are saved locally for review.

Practice mode Difficulty Topic Question type Search questions

Day streak: 0 days Saved only on this device

Question 1

What is Microsoft Entra ID?

Select an answer A DNS serviceA cloud identity and access management serviceA firewallA storage service

Question 2

What is multi-factor authentication?

Select an answer Requiring two or more verification factorsUsing one password onlyDisabling loginsStoring files

Question 3

What is Conditional Access?

Select an answer A storage policyA DNS recordPolicies that evaluate signals before granting accessA firewall rule

Question 4

What is Azure RBAC?

Select an answer A virtual networkA databaseA CDNRole-based access control for Azure resources

Question 5

What is a managed identity?

Select an answer A user accountA DNS recordA firewallAn automatic Azure identity for a resource

Question 6

What is a service principal?

Select an answer An identity used by an applicationA virtual machineA storage accountA network security group

Question 7

What is a custom role?

Select an answer A firewall ruleA user-defined set of permissionsA built-in role onlyA DNS record

Question 8

What is Privileged Identity Management?

Select an answer A storage policyA load balancerTime-bound access for privileged rolesA firewall

Question 9

What is a guest user?

Select an answer A virtual machineA service principalAn external collaborator in your directoryAn administrator

Question 10

Match each identity concept to its purpose.

Entra IDMFAConditional AccessRBAC

Question 11

What is Microsoft Defender for Cloud?

Select an answer A DNS serviceA storage serviceA CDNSecurity posture management and workload protection

Question 12

What is Azure Firewall?

Select an answer A load balancerA managed network firewall serviceA databaseA DNS zone

Question 13

What is Azure DDoS Protection?

Select an answer Protection against distributed denial-of-service attacksA backup serviceA DNS serviceA monitoring alarm

Question 14

What is Azure WAF?

Select an answer A storage accountA databaseA web application firewallA virtual machine

Question 15

What is a security baseline?

Select an answer A storage containerA recommended configuration for securityA firewall ruleA DNS record

Question 16

What is secure score?

Select an answer A network routeA databaseA backupA measure of security posture

Question 17

What is just-in-time VM access?

Select an answer Always open portsDisabling VMsCreating DNS recordsTemporarily opening required ports for a limited time

Question 18

What is adaptive application control?

Select an answer A load balancerAn allowlist of applications that can run on VMsA firewallA DNS service

Question 19

What is a vulnerability assessment?

Select an answer Scanning systems for weaknessesStoring dataResolving DNSLoad balancing traffic

Question 20

Match each platform protection concept to its purpose.

Defender for CloudAzure FirewallDDoS ProtectionWAF

Question 21

What is Azure Key Vault?

Select an answer A DNS serviceA CDNA secure store for secrets, keys, and certificatesA database

Question 22

What is a secret in Key Vault?

Select an answer A modelA firewall ruleA network routeA sensitive value such as a password or connection string

Question 23

What is transparent data encryption?

Select an answer Encrypting database files at restEncrypting network packetsCreating backupsFiltering traffic

Question 24

What is encryption at rest?

Select an answer A firewallEncrypting stored dataEncrypting data in transitA DNS record

Question 25

What is encryption in transit?

Select an answer Filtering trafficEncrypting data while it moves between systemsEncrypting stored filesCreating backups

Question 26

What is a certificate used for?

Select an answer Establishing trust for TLS and authenticationStoring filesFiltering trafficCreating reports

Question 27

What is a customer-managed key?

Select an answer A Microsoft-managed key onlyA DNS recordA firewall ruleAn encryption key you control in Key Vault

Question 28

What is data masking?

Select an answer Deleting dataCreating backupsHiding sensitive data in query resultsEncrypting all data

Question 29

What is Defender for Storage?

Select an answer Threat detection for Azure StorageA DNS serviceA load balancerA backup

Question 30

Match each data protection concept to its purpose.

Key VaultSecretTDECustomer-managed key

Question 31

What is a network security group?

Select an answer A databaseA DNS zoneA load balancerRules that filter traffic to and from resources

Question 32

What is a private endpoint?

Select an answer A DNS recordA firewallPrivate access to an Azure service from your VNetA public website

Question 33

What is Azure VPN Gateway?

Select an answer A CDNAn encrypted tunnel between networksA databaseA storage service

Question 34

What is ExpressRoute?

Select an answer A private connection to AzureA public internet routeA DNS recordA load balancer

Question 35

What is network segmentation?

Select an answer Deleting firewallsCreating DNS recordsIsolating workloads into separate networksMerging all networks

Question 36

What is a service tag?

Select an answer A VM nameA databaseA storage accountA group of IP prefixes for an Azure service

Question 37

What is an application security group?

Select an answer A load balancerGroups VMs by application for security rulesA DNS recordA firewall

Question 38

What is Azure Bastion?

Select an answer Managed RDP and SSH access without public IPsA public websiteA databaseA storage service

Question 39

What is a private DNS zone?

Select an answer A public DNS recordA firewallA load balancerDNS resolution within a virtual network

Question 40

Match each network security concept to its purpose.

NSGPrivate endpointVPN GatewayBastion

Question 41

What is Microsoft Sentinel?

Select an answer A cloud SIEM and SOAR serviceA DNS serviceA storage serviceA CDN

Question 42

What is a detection rule in Sentinel?

Select an answer A DNS recordA load balancerA rule that triggers alerts from dataA firewall rule

Question 43

What is an incident in Sentinel?

Select an answer A VMA storage accountA group of related alertsA single log

Question 44

What is an automation rule?

Select an answer A load balancerAutomates incident response tasksA firewallA DNS record

Question 45

What is a workbook in Sentinel?

Select an answer A databaseA firewallA DNS zoneInteractive visualizations of security data

Question 46

What is a data connector?

Select an answer Connects data sources to SentinelA network cableA storage accountA DNS record

Question 47

What is a playbook?

Select an answer A firewallAn automated response workflow using Logic AppsA reportA dashboard

Question 48

What is Azure Monitor?

Select an answer A DNS serviceA CDNA storage serviceCollects logs and metrics from Azure resources

Question 49

What is KQL?

Select an answer A firewallA DNS protocolA query language for Azure logsA programming framework

Question 50

Match each security operations concept to its purpose.

SentinelDetection rulePlaybookWorkbook

Question 51

What is Azure Policy?

Select an answer A load balancerRules that enforce compliance on resourcesA databaseA DNS service

Question 52

What is an initiative?

Select an answer A single policyA storage accountA DNS zoneA group of related Azure policies

Question 53

What is Azure Blueprints?

Select an answer Packages of governance artifacts for environmentsA firewallA databaseA CDN

Question 54

What is a compliance standard?

Select an answer A DNS recordA storage containerA regulatory framework that resources must meetA firewall rule

Question 55

What is Microsoft Purview?

Select an answer A load balancerA CDNData governance and compliance solutionsA DNS service

Question 56

What is a resource tag?

Select an answer A databaseA metadata label for organization and billingA firewall ruleA DNS record

Question 57

What is a management group?

Select an answer A virtual machineA storage accountA DNS zoneA hierarchy for applying policies and governance

Question 58

What is an audit policy?

Select an answer A policy that monitors and logs complianceA policy that blocks resourcesA firewallA load balancer

Question 59

What is a deny policy?

Select an answer A storage containerA policy that blocks noncompliant resource creationA policy that only logsA DNS record

Question 60

Match each governance concept to its purpose.

Azure PolicyInitiativeBlueprintPurview