Secure access to resources by using Microsoft Entra ID
15 practice questions under this official exam objective (SC-500), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
15 total · page 1 of 1How Should App1 Access Azure Files Without Storage Account Keys?
Azure Files data-plane access for a managed identity is granted through an Azure RBAC role assignment, not by disabling shared key access. The page co
Does adding VM1 and VM2 to a storage1 role meet the goal?
This SC-500 scenario tests whether adding VM1 and VM2 directly to a role on storage1 grants access through their system-assigned managed identities. I
Can Agent ID Developer PIM Settings Be Shortened to Two Days?
This SC-500 hotspot tests Microsoft Entra Privileged Identity Management role settings for the Agent ID Developer role, including approver requirement
Which Key Vault RBAC role grants get, list, wrap, and unwrap?
This SC-500 question maps Key Vault access-policy key permissions (Get, List, Wrap, Unwrap) to the least-privileged Azure RBAC role for a managed iden
Can VM Security Group Membership Grant Storage Access?
The scenario tests whether Azure VM objects can be added to a security group to grant their system-assigned managed identities access to storage1. It
How Do You Enforce Microsoft Entra-only Authentication on Azure SQL Server1?
This SC-500 question tests how to centrally disable SQL authentication for an Azure SQL logical server. The correct setting is Microsoft Entra-only au
Assigning Role Assignment Permissions in Azure Management Groups
To allow users to assign roles without managing resources, the User Access Administrator role is required. Assigning this at the management group scop
Who Can Create RG1 PIM Eligible Contributor Assignment?
This SC-500 hotspot tests who can create a PIM eligible Contributor role assignment for resource group RG1 and which groups can receive it. It establi
Can a shared user-assigned identity let VM1 and VM2 access storage1?
This SC-500 scenario asks whether assigning a shared user-assigned managed identity to VM1 and VM2, then granting that identity an RBAC role on storag
Azure SQL Entra Admin Nested Group Access Rules
Determines access rights for Azure SQL servers configured with Microsoft Entra Admin groups, highlighting that nested group membership does not grant
Azure Enterprise App Registration Creates Service Principal
Registering an enterprise application in Microsoft Entra ID automatically provisions a service principal. This resource allows the application to auth
Enabling Entra Auth for Storage via Security Group RBAC
This SC-500 question tests whether you can correctly use Microsoft Entra security groups to assign Storage Blob Data Contributor roles to system-assig
Microsoft Entra PIM Role Activation Requirements
This scenario evaluates the conditions for role activation in Microsoft Entra Privileged Identity Management (PIM), focusing on MFA requirements and t
Microsoft Entra ID Admin Consent Roles for Enterprise Applications
Determines which users can grant admin consent for enterprise applications in Microsoft Entra ID based on assigned privileged roles. Establishes that
How Do You Grant a Functions Managed Identity Blob Read/Write/Delete Access?
Granting an Azure Functions managed identity read, write, and delete access to container1 requires a data-plane Azure RBAC role scoped to the containe