Microsoft AZ-500 Azure Security Engineer
UPDATED SCRIPT 2026 PRACTICE
SOLUTIONS GRADED A+
● Suppose Sandra works as a scientist in a defense company. The
password is managed on-premises. Which of the following conditions
should hold true for her to be able to use self-service password reset
(SSPR)?
a. MFA is enabled
b. Passwords are managed using Enforce Cloud
c. Two-gate policy is enforced
d. Password writeback is configured. Answer: Correct: d.
d. Password writeback is required to use SSPR for on-premises accounts
,● You work as an Azure security engineer in a government department.
The user accounts are synchronized from an on-premises AD DS
environment using Azure AD Connect. You have not enabled Enforce
Cloud password policy.
Which password policy will apply to the users?
a. Cloud password policy
b. On-premises password policy
c. Azure AD Password Policy
d. Azure AD and cloud password policy. Answer: Correct: b.
b. Users can enable Enforce Cloud password policy for password-synced
users' properties.
● You work as an Azure security engineer in a retail organization.
Below are some users in your organization:
James: Global Administrator
, Tom: B2C User Flow Attribute Administrator
Jessica: Application Administrator
Sarah: Authentication Administrator
For which of the users will the two-gate policy be enforced?
a. Jessica and Sarah only
b. James only
c. James, Jessica, and Sarah
d. James and Tom only. Answer: Correct: c.
c. Two-gate policy can be applied to Global Administrator, Application
Administrator, Authentication Administrator, and other Azure AD admin
roles.
● You are working as a Security Engineer Associate for an airline that
has employees across the globe. The airline uses Azure Active Directory.
UPDATED SCRIPT 2026 PRACTICE
SOLUTIONS GRADED A+
● Suppose Sandra works as a scientist in a defense company. The
password is managed on-premises. Which of the following conditions
should hold true for her to be able to use self-service password reset
(SSPR)?
a. MFA is enabled
b. Passwords are managed using Enforce Cloud
c. Two-gate policy is enforced
d. Password writeback is configured. Answer: Correct: d.
d. Password writeback is required to use SSPR for on-premises accounts
,● You work as an Azure security engineer in a government department.
The user accounts are synchronized from an on-premises AD DS
environment using Azure AD Connect. You have not enabled Enforce
Cloud password policy.
Which password policy will apply to the users?
a. Cloud password policy
b. On-premises password policy
c. Azure AD Password Policy
d. Azure AD and cloud password policy. Answer: Correct: b.
b. Users can enable Enforce Cloud password policy for password-synced
users' properties.
● You work as an Azure security engineer in a retail organization.
Below are some users in your organization:
James: Global Administrator
, Tom: B2C User Flow Attribute Administrator
Jessica: Application Administrator
Sarah: Authentication Administrator
For which of the users will the two-gate policy be enforced?
a. Jessica and Sarah only
b. James only
c. James, Jessica, and Sarah
d. James and Tom only. Answer: Correct: c.
c. Two-gate policy can be applied to Global Administrator, Application
Administrator, Authentication Administrator, and other Azure AD admin
roles.
● You are working as a Security Engineer Associate for an airline that
has employees across the globe. The airline uses Azure Active Directory.
