AZ-500 — Most Debated Topics

Community-voted ranking of 21 topics, sorted by disagreement level. Higher dispute = more test-takers disagree on the answer.

#1
Entra Permissions Management Highly Privileged Roles
S-Grade Dispute: 50% 11 comments
#2
Restricting AKS API server access to specific networks is done with authorized IP address ranges
S-Grade Dispute: 43% 7 comments
#3
Cross-tenant access settings for B2B collaboration apply only to Microsoft Entra ID tenants, not to Google or Microsoft accounts
S-Grade Dispute: 41% 14 comments
#4
Creating an allow list of a partner's cloud apps for your users is configured via Outbound access settings in Cross-tenant access settings
S-Grade Dispute: 25% 7 comments
#5
Azure Defender for Servers Adaptive Application Controls Support
S-Grade Dispute: 25% 4 comments
#6
Configuring the 'Allow updates to status bar via script' Intranet Zone policy enables Microsoft Entra Seamless SSO via GPO
S-Grade Dispute: 20% 8 comments
#7
Azure DDoS Protection Plan Resource Eligibility
S-Grade Dispute: 15% 9 comments
#8
After creating a Microsoft Defender EASM instance, the next step is to import your organization's seeds to begin asset discovery
S-Grade Dispute: 12% 6 comments
#9
Blocking passwords that contain a variation of an organization-specific word uses Microsoft Entra Password Protection custom banned lists
A-Grade Dispute: 0% 4 comments
#10
To give partner users a single MFA prompt when accessing your tenant, enable 'Trust MFA from other Microsoft Entra tenants' in your inbound access default settings
A-Grade Dispute: 0% 6 comments
#11
Which Microsoft Entra Password Protection Resets Fail?
A-Grade Dispute: 0% 4 comments
#12
AKS Azure AD authentication can only be enabled at cluster creation, so you must recreate the cluster to enable Microsoft Entra account access
A-Grade Dispute: 0% 3 comments
#13
Rotating a Key Vault key on a schedule starts with creating a key rotation policy
A-Grade Dispute: 0% 3 comments
#14
A custom Microsoft Defender for Cloud recommendation is created from an Azure Policy definition that emits the recommendation with a custom severity
A-Grade Dispute: 0% 5 comments
#15
Preparing a subscription for Azure Monitor security alerts starts with creating a Log Analytics workspace as the data store
A-Grade Dispute: 0% 3 comments
#16
Which Azure App Service Apps Can Use an Uploaded Private Certificate?
A-Grade Dispute: 0% 5 comments
#17
Onboarding an AWS account to Microsoft Defender for Cloud starts in Defender for Cloud > Environment settings > Add environment > Amazon Web Services
A-Grade Dispute: 0% 3 comments
#18
Defender for Cloud Protected Resources
A-Grade Dispute: 0% 3 comments
#19
Azure Functions VNET Integration and NSG Control
A-Grade Dispute: 0% 5 comments
#20
To let VM1 reach a new Azure SQL Managed Instance, create a dedicated delegated subnet, associate an NSG, and attach a route table
A-Grade Dispute: 0% 4 comments
#21
For a Site-to-Site VPN needing 1 Gbps at lowest cost, recommend the VpnGw2 SKU because VpnGw1 tops out at about 650 Mbps
A-Grade Dispute: 0% 3 comments

← Back to AZ-500 Azure Security Technologies Study Guide