Azure Security Engineer Associate

AZURE_AZ_500
AssociateVersion AZ-500Official exam guide โ†—

Ready to test yourself?

A timed, blueprint-proportional exam drawn fresh from this bank โ€” with a per-domain score report.

๐Ÿ”’ Unlock the simulation โ†’

๐Ÿ”“ Free preview: showing 10 of 60 questions. Unlock the full bank โ€” every question, explanation, and reference.

Unlock all 60 questions โ†’

10 questions across 5 topics. Choose an answer for each question, then check it to see the correct answer and explanation.

Filter by topic

All 10 questions

IDENTITY_ACCESS

Manage Identity and Access

10 questions in topic

Microsoft Entra ID, Azure RBAC, Conditional Access, PIM, and managed identities.

1
Single choice~60s

What is Microsoft Entra ID?

2
Single choice~80s

At which scopes can an Azure RBAC role assignment be applied?

3
Single choice~85s

What does a Conditional Access policy do?

4
Single choice~80s

What capability does Privileged Identity Management (PIM) provide?

5
Single choice~100s

What is the key difference between a system-assigned and user-assigned managed identity?

6
Single choice~85s

What does Microsoft Entra ID Identity Protection do?

7
Single choice~80s

What is the purpose of access reviews in Entra ID?

8
Single choice~85s

Which hybrid identity method synchronizes password hashes from on-premises AD to Entra ID?

9
Single choice~100s

What is a deny assignment used for in Azure RBAC?

10
Single choice~100s

A team lead needs to manage VMs in one resource group only, without seeing resources elsewhere in the subscription. Which approach follows least privilege?