本番の時間配分に不安がある場合は、SC-500の模擬試験形式で解答ペースを確認する練習が役立ちます。Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloadsに対応したFast2testの136問の問題集なら、知識の定着と時間管理をあわせて鍛えられます。

SC-500試験対策に選べる3つの学習形式

• PDF版：印刷して持ち運べる形式で、専門家が作成した内容をすぐにダウンロードして確認できます。学習場所を選ばず、365日間の無料更新と無料PDFサンプルに対応しています。
• Desktop Test Engine：インストールして使用するソフトウェアで、実際の試験環境を再現した2つの練習モードを利用できます。オフライン学習に対応し、Windowsで動作します。
• Online Test Engine：ブラウザーからすぐにアクセスでき、学習履歴と成績を確認できます。Windows、Mac、Android、iOSで利用できます。

Fast2testの安心な購入・利用サポート

• McAfeeのセキュリティサービスにより、お客様の情報を安全に取り扱います。
• ご購入後365日間は無料で更新版をご利用いただけます。更新期間の終了後も、50%割引で継続更新が可能です。
• ご入金確認後はすぐにダウンロードでき、通常1分以内にメールでもお届けします。2時間経っても届かない場合は、カスタマーサポートへご連絡ください。
• インストール可能なパソコン台数に制限はありません。

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloadsの試験情報

Microsoft SC-500 試験概要:

SC-500試験の出題範囲

Microsoft SC-500 試験シラバストピック:

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloadsに関する受験前Q&A

Microsoft Implementing End-to-End Security Controls for Cloud and AI Workloads 認定 SC-500 試験問題：

問題 #1

You have an Azure Functions app named App1 that uses an HTTP trigger, runs on an Elastic Premium plan, and uses virtual network integration.
A partner application sends requests to App1 from a public IP address of xxx.xxx.xxx.xx.
You need to ensure that the requests are accepted from only xxx.xxx.xxx.xx.
What should you do?

A. Apply a network security group (NSG) to a dedicated subnet for virtual network integration.
B. Configure an inbound access restriction on App1.
C. Deploy an Azure NAT Gateway.
D. Deploy an Azure Bastion host.
E. Create a private endpoint for App1 and disable public network access.

問題 #2

Drag and Drop Question
You have three internet-facing Azure App Service web apps named App1, App2, and App3. Each app uses built-in authentication. App2 hosts a backend API.
Some corporate users can sign in to App2, even though they should NOT be able to use the API.
You need to restrict App2 access to assigned Microsoft Entra users and groups.
What should you configure for App2? To answer, drag the appropriate configurations to the correct methods. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

問題 #3

Hotspot Question
You are implementing security controls for an Azure Storage account by using infrastructure as code (IaC).
You deploy the following Bicep code.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

問題 #4

An organization is evaluating the security of AI-generated content before it is presented to end users. The goal is to detect harmful, unsafe, or policy-violating responses automatically. Which capability should be prioritized?

A. Deploying additional virtual networks
B. Content filtering and safety evaluation
C. Adding more GPUs
D. Increasing context window size

問題 #5

You have an Azure subscription named Sub1 that contains multiple virtual machines and an Azure key vault named KV1.
Each virtual machine has a system-assigned managed identity. Sub1 has Microsoft Defender for Servers enabled. Defender for Servers has agentless scanning enabled.
Some virtual machines use managed disks that are encrypted by using customer-managed keys stored in KV1.
You discover that the affected virtual machines fail to return agentless scanning results in Microsoft Defender for Cloud.
You need to ensure that agentless scanning can analyze the virtual machines.
What should you do?

A. Assign each virtual machine managed identity the Key Vault Reader role for KV1.
B. Enable just-in-time (JIT) VM access for the affected virtual machines.
C. Enable Microsoft Defender for Key Vault for Sub1.
D. Assign the scanning service the Key Vault Crypto Service Encryption User role for KV1.
E. Assign the scanning service the Key Vault Secrets User role for KV1.

解説：