Disagreement ranking

AZ-500 — most debated topics

Community-voted ranking of 21 topics, sorted by disagreement level. A higher dispute score means more test-takers disagree on the answer.

Full ranking

21 topics · highest disagreement first

  1. Entra Permissions Management Highly Privileged Roles

    S-grade Dispute: 50% 11 comments

  2. Restricting AKS API server access to specific networks is done with authorized IP address ranges

    S-grade Dispute: 43% 7 comments

  3. Cross-tenant access settings for B2B collaboration apply only to Microsoft Entra ID tenants, not to Google or Microsoft accounts

    S-grade Dispute: 41% 14 comments

  4. Creating an allow list of a partner's cloud apps for your users is configured via Outbound access settings in Cross-tenant access settings

    S-grade Dispute: 25% 7 comments

  5. Azure Defender for Servers Adaptive Application Controls Support

    S-grade Dispute: 25% 4 comments

  6. Configuring the 'Allow updates to status bar via script' Intranet Zone policy enables Microsoft Entra Seamless SSO via GPO

    S-grade Dispute: 20% 8 comments

  7. Azure DDoS Protection Plan Resource Eligibility

    S-grade Dispute: 15% 9 comments

  8. After creating a Microsoft Defender EASM instance, the next step is to import your organization's seeds to begin asset discovery

    S-grade Dispute: 12% 6 comments

  9. Blocking passwords that contain a variation of an organization-specific word uses Microsoft Entra Password Protection custom banned lists

    A-grade Dispute: 0% 4 comments

  10. To give partner users a single MFA prompt when accessing your tenant, enable 'Trust MFA from other Microsoft Entra tenants' in your inbound access default settings

    A-grade Dispute: 0% 6 comments

  11. Which Microsoft Entra Password Protection Resets Fail?

    A-grade Dispute: 0% 4 comments

  12. AKS Azure AD authentication can only be enabled at cluster creation, so you must recreate the cluster to enable Microsoft Entra account access

    A-grade Dispute: 0% 3 comments

  13. Rotating a Key Vault key on a schedule starts with creating a key rotation policy

    A-grade Dispute: 0% 3 comments

  14. A custom Microsoft Defender for Cloud recommendation is created from an Azure Policy definition that emits the recommendation with a custom severity

    A-grade Dispute: 0% 5 comments

  15. Preparing a subscription for Azure Monitor security alerts starts with creating a Log Analytics workspace as the data store

    A-grade Dispute: 0% 3 comments

  16. Which Azure App Service Apps Can Use an Uploaded Private Certificate?

    A-grade Dispute: 0% 5 comments

  17. Onboarding an AWS account to Microsoft Defender for Cloud starts in Defender for Cloud > Environment settings > Add environment > Amazon Web Services

    A-grade Dispute: 0% 3 comments

  18. Defender for Cloud Protected Resources

    A-grade Dispute: 0% 3 comments

  19. Azure Functions VNET Integration and NSG Control

    A-grade Dispute: 0% 5 comments

  20. To let VM1 reach a new Azure SQL Managed Instance, create a dedicated delegated subnet, associate an NSG, and attach a route table

    A-grade Dispute: 0% 4 comments

  21. For a Site-to-Site VPN needing 1 Gbps at lowest cost, recommend the VpnGw2 SKU because VpnGw1 tops out at about 650 Mbps

    A-grade Dispute: 0% 3 comments

← Back to AZ-500 Azure Security Technologies Study Guide