Skip to content

Microsoft SC-500

Implementing End-to-End Security Controls for Cloud and AI Workloads

Verified practice questions with detailed answers, clear explanations, and community discussion.

  • 121

    questions

  • 10 days ago

    last updated

  • 4.8/5

    overall rating

Question 1 of 121

HOTSPOT -

Overview -
Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas.
Contoso has a hybrid environment that contains on-premises servers connected to Azure, a Microsoft 365 E5 subscription, and an Azure subscription named Sub1.
Existing Environment. Microsoft Entra tenant
Contoso has a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.
Exam SC-500: Image 1
Existing Environment. On-premises environment
The on-premises network contains an Active Directory Domain Services (AD DS) forest that syncs with contoso.com. The forest contains a server named Server1 that runs Windows Server.
Existing Environment. Azure subscription
Sub1 contains the storage accounts shown in the following table.
Exam SC-500: Image 2
Sub1 contains the virtual networks shown in the following table.
Exam SC-500: Image 3
Sub1 contains the virtual machines shown in the following table.
Exam SC-500: Image 4
The network interface of VM1 is associated with an application security group named ASG1.
Sub1 contains the resources shown in the following table.
Exam SC-500: Image 5
Vault1 stores the objects shown in the following table.
Exam SC-500: Image 6
Existing Environment. Privileged Identity Management (PIM) configuration
You manage privileged roles by using Privileged Identity Management (PIM). The PIM role settings are configured as shown in the following table.
Exam SC-500: Image 7
Existing Environment. Microsoft Sentinel configuration
Contoso has a Microsoft Sentinel workspace that contains the following tables.
Exam SC-500: Image 8

Requirements. Planned changes -
Contoso plans to implement the following changes:
Integrate AKS1 with Vault1.
Enable Microsoft Entra Kerberos authentication for all supported storage.
Configure auditing for sql1 by using the Azure portal and store audit logs in a centralized location.
Requirements. Technical requirements
Contoso identifies the following technical requirements:
Protect Server1 by using file integrity monitoring.
Protect AKS1 by using Microsoft Defender for Cloud.
Configure Microsoft Sentinel to retain data for the maximum supported duration without changing the tier.
Store objects used for authentication and encryption in Vault1 and ensure that Vault1 regenerates the objects every 30 days, whenever possible.
User1 has requested to use the AI Administrator role.
Which approvers can approve the request, and how long will User1 be an AI administrator after the role is approved? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Exam SC-500: Image 9
Show answer

Suggested answer

Admin1 and Admin3; 1 day. Admin1 is a Global Administrator and Admin3 is a Privileged Role Administrator, both of which can approve role activation requests when no specific approvers are configured. The AI Administrator role requires approval, and its activation maximum duration is configured as 1 day.

Question 2 of 121

HOTSPOT -

Overview -
Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas.
Contoso has a hybrid environment that contains on-premises servers connected to Azure, a Microsoft 365 E5 subscription, and an Azure subscription named Sub1.
Existing Environment. Microsoft Entra tenant
Contoso has a Microsoft Entra tenant named contoso.com that contains the users shown in the following table.

Exam SC-500: Image 1
Existing Environment. On-premises environment
The on-premises network contains an Active Directory Domain Services (AD DS) forest that syncs with contoso.com. The forest contains a server named Server1 that runs Windows Server.
Existing Environment. Azure subscription
Sub1 contains the storage accounts shown in the following table.
Exam SC-500: Image 2
Sub1 contains the virtual networks shown in the following table.
Exam SC-500: Image 3
Sub1 contains the virtual machines shown in the following table.
Exam SC-500: Image 4
The network interface of VM1 is associated with an application security group named ASG1.
Sub1 contains the resources shown in the following table.
Exam SC-500: Image 5
Vault1 stores the objects shown in the following table.
Exam SC-500: Image 6
Existing Environment. Privileged Identity Management (PIM) configuration
You manage privileged roles by using Privileged Identity Management (PIM). The PIM role settings are configured as shown in the following table.
Exam SC-500: Image 7
Existing Environment. Microsoft Sentinel configuration
Contoso has a Microsoft Sentinel workspace that contains the following tables.
Exam SC-500: Image 8

Requirements. Planned changes -

Contoso plans to implement the following changes:
Integrate AKS1 with Vault1.
Enable Microsoft Entra Kerberos authentication for all supported storage.
Configure auditing for sql1 by using the Azure portal and store audit logs in a centralized location.
Requirements. Technical requirements
Contoso identifies the following technical requirements:
Protect Server1 by using file integrity monitoring.
Protect AKS1 by using Microsoft Defender for Cloud.
Configure Microsoft Sentinel to retain data for the maximum supported duration without changing the tier.
Store objects used for authentication and encryption in Vault1 and ensure that Vault1 regenerates the objects every 30 days, whenever possible.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Exam SC-500: Image 9
Show answer

Suggested answer

Yes; No; Yes. Microsoft Entra Kerberos authentication is supported for Azure Files, so the premium file shares account supports the configuration. Azure Blob and page blob accounts do not support Microsoft Entra Kerberos authentication. Microsoft Sentinel Analytics-tier table data can be retained for the maximum supported duration without changing the table tier.

Question 3 of 121

You have an Azure SQL Database logical server named Server1 that contains a database named DB1.
You need to configure authentication for Server1 to meet the following requirements:
SQL authentication cannot be used for any databases on Server1.
The solution must be enforced centrally at the server level.
What should you do?
Answer choices
Show answer

Correct answer: C

Microsoft Entra-only authentication disables SQL authentication for the entire Azure SQL logical server. It enforces that all database connections use Microsoft Entra identities, including users, groups, service principals, or managed identities. Because the setting applies at the server level, it centrally protects every database hosted on Server1. Configuring an Entra administrator alone does not prevent SQL logins from being used.

Community votes

2 votes

CSuggested

100%

Question 4 of 121

You have a Microsoft Entra tenant that has the following configurations:
User consent for applications is disabled.
Only administrators can grant permissions to applications.
You register an application named App1 that uses delegated Microsoft Graph permissions.
You need to configure App1 to meet the following requirements:
Enable user sign-ins without interactive consent prompts.
Enable App1 to access Microsoft Graph on behalf of the signed-in user.
What should you do?
Answer choices
Show answer

Correct answer: D

Granting admin consent for the required delegated Microsoft Graph permissions pre-approves those permissions for the tenant. Users can then sign in to App1 without being prompted to provide consent, while the app still receives delegated access on behalf of the signed-in user. Application permissions would provide app-only access rather than user-delegated access, and user consent is unavailable under the tenant’s current settings.

Community votes

3 votes

DSuggested

100%

Question 5 of 121

You have a Microsoft Entra tenant that uses Privileged Identity Management (PIM).
You need to modify the AI Administrator role settings to meet the following requirements:
Elevated access must be evaluated by another administrator before it is granted.
Privileged access must be removed automatically after a fixed period.
Which two settings should you configure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer choices
Show answer

Correct answers: B, E

Require approval to activate ensures that an eligible user’s request for the AI Administrator role is reviewed and approved by another administrator before elevated access is granted. Activation maximum duration sets the fixed length of time that the activated role remains active, after which PIM automatically removes the privileged access. Justification records the reason for activation but does not require review, while assignment expiration settings apply to the assignment lifecycle rather than the duration of an activation.

Community votes

2 votes

BESuggested

100%

116 questions still locked

Your preview covered the first 5 questions. Unlock the rest to see every explanation and discussion thread, updated weekly

View plans

Choose your plan

Single payment · No subscription · No hidden fees

Standard

For a focused sprint before your exam date

$25USD

30 days of access, single payment

  • All 121 questions unlocked
  • Detailed answer explanations
  • Community discussions and votes
  • Weekly question updates
  • Printable PDF download
  • 100% refund if you do not pass

Premium

Extra runway, the PDF, and the refund guarantee

$35$60USD

90 days of access, single payment

Printable PDF download

Save every question as a PDF for offline study or printing.

  • All 121 questions unlocked
  • Detailed answer explanations
  • Community discussions and votes
  • Weekly question updates

Full refund if you do not pass

Send us your exam result and we refund the purchase.

Stories from the certified

Charles Sirois
Canada
As this was my first certification exam, I was understandably nervous about what to expect. These study materials made the preparation process much easier, and many of the questions closely reflected those on the actual exam.
Lance Chambers
United States
Wasted about a month going through the free dump sites scattered all over reddit, half the answers were wrong and the other half were for a version of the exam that doesn't even exist anymore. Eventually gave in and paid the small fee here, and the difference was night and day.
Alisha Kelly
Italy
Honestly, I had already gone through the official documentation quite thoroughly, but still didn't feel fully confident going in. This helped things finally click for me. I realized I knew the material, but just hadn't connected all the pieces yet.
Casper Claassen
Netherlands
Used this along with Microsoft Learn and the combo worked really well. The practice questions made the stuff I'd read actually stick. Passed first attempt, no complaints from me.
Gabriele Ghesla
Italy
The content is accurate and clearly presented, and it's more affordable than competitors. The team has been incredibly responsive whenever I've had an issue, and they've been open to small changes that improve the platform.
Charles Sirois
Canada
As this was my first certification exam, I was understandably nervous about what to expect. These study materials made the preparation process much easier, and many of the questions closely reflected those on the actual exam.
Lance Chambers
United States
Wasted about a month going through the free dump sites scattered all over reddit, half the answers were wrong and the other half were for a version of the exam that doesn't even exist anymore. Eventually gave in and paid the small fee here, and the difference was night and day.
Alisha Kelly
Italy
Honestly, I had already gone through the official documentation quite thoroughly, but still didn't feel fully confident going in. This helped things finally click for me. I realized I knew the material, but just hadn't connected all the pieces yet.
Casper Claassen
Netherlands
Used this along with Microsoft Learn and the combo worked really well. The practice questions made the stuff I'd read actually stick. Passed first attempt, no complaints from me.
Gabriele Ghesla
Italy
The content is accurate and clearly presented, and it's more affordable than competitors. The team has been incredibly responsive whenever I've had an issue, and they've been open to small changes that improve the platform.
Morgan Farmer
United Kingdom
I don't usually leave reviews, but this one felt worth sharing. The questions were quite close to what actually appeared on the exam, more than I expected. I spent about a week going through the material before my test, and it helped me feel more prepared.
Remi Nuyts
United States
Passed ITIL 4 Foundation with 87%. Material was enough by itself.
Archie Hopkins
United States
I had a smooth experience from start to finish. Access was available right away, no technical issues, which made it easy to get started. The content felt relevant and aligned well with what I was looking for.
Nancy Mcbride
United States
Does what it says it does. Content felt solid, nothing confusing to navigate and I didn't run into any weird issues. I been putting off scheduling the exam for a while and going through this gave me enough confidence to finally book it and pass.
Neil Savage
United States
A very quick response was received via email when a link issue occurred. The study materials provided were high quality and extremely helpful. I was able to complete the test successfully. Many thanks for the excellent support.
Morgan Farmer
United Kingdom
I don't usually leave reviews, but this one felt worth sharing. The questions were quite close to what actually appeared on the exam, more than I expected. I spent about a week going through the material before my test, and it helped me feel more prepared.
Remi Nuyts
United States
Passed ITIL 4 Foundation with 87%. Material was enough by itself.
Archie Hopkins
United States
I had a smooth experience from start to finish. Access was available right away, no technical issues, which made it easy to get started. The content felt relevant and aligned well with what I was looking for.
Nancy Mcbride
United States
Does what it says it does. Content felt solid, nothing confusing to navigate and I didn't run into any weird issues. I been putting off scheduling the exam for a while and going through this gave me enough confidence to finally book it and pass.
Neil Savage
United States
A very quick response was received via email when a link issue occurred. The study materials provided were high quality and extremely helpful. I was able to complete the test successfully. Many thanks for the excellent support.

Before you buy

Answers about access, updates, payments, and the refund policy.

01Are these real exam questions?

Our Microsoft SC-500 questions are based on real exam experiences and are regularly updated to match the current exam format. Most candidates who study with us report passing on their first attempt, based on a self reported post exam survey.

02What happens if I don't pass the exam?

With our Premium package, you get a 100% money back guarantee. If you don't pass your exam after studying with our materials, simply contact us with your exam results and we'll refund your purchase.

03How often are the questions updated?

Our question bank is updated regularly based on feedback from recent exam takers. We typically review and update our content every week with reports about new questions or changes to the exam format.

04What does Premium add on the exam page?

Both plans open the full question bank, the explanations, and the discussions. Premium also includes the printable PDF and advanced study tools, giving you full control over how many questions you see per page, quick navigation to any page, and the ability to resume exactly where you left off.

05Is this a single payment or a subscription?

This is a single payment with no recurring charges. Once you purchase, you get full access to all exam questions for the duration of your package (30 days for Standard, 90 days for Premium). No hidden fees or automatic renewals.

06How many questions are included?

You get access to all 121 questions in our database for the Microsoft SC-500 exam. This includes detailed explanations and answer justifications to help you understand the concepts thoroughly.

07Do you offer technical support?

Yes. Email us at hello@examice.com for help with access, billing, or the platform. We read every message and typically reply within 24 hours on business days.

08Is my payment secure?

Absolutely! We use industry standard SSL encryption and process all payments through Stripe, a trusted payment processor used by millions of businesses worldwide. Your payment and personal information are completely secure.

Ready to unlock the rest

All 121 questions from $25, single payment, instant access.

Back to plans