Microsoft AZ-500 Azure Security Engineer
PREPARATION TEST 2026 QUESTIONS AND
CORRECT ANSWERS GRADED A+
● What is the smallest supported subnet? Answer: /29
● T/F: Azure AD Tenant is a central identity source that can be used for
O365 and Azure Resource Subscriptions Answer: T
● T/F: It is possible to have more than one Azure Resource Subscription
Answer: T
● Name some Azure Resource Subscriptions Answer: 1. User
Acceptance Testing (UAT)
2. Production (PRD)
3. Development (DEV)
● In the Free and Basic tiers, how many SSO apps per user are allowed?
Answer: 10
● T/F: Both P1 and P2 include
1) MDM
2) unlimited SSO apps per user
, 3) AD Connect Health
4) Conditional Access (ex: MFA)
5) Password Protection Answer: T
● T/F: Both P1 and P2 include
1) Identity Protection
2) PIM Answer: F: Only P2
● Which of the following does Azure AD include?
1) Device Registration (Win 10 & Mobiles)
2) Custom Domain Names
3) Domain join virtual machines (VM)
4) LDAP (directory services access) and Kerberos (computer network
authentication) protocols
5) Group Policy Answer: 1-3
● How can you domain join an Azure VM and apply group policy?
Answer: Options:
1) Extend on-prem AD to the cloud
2) Self-managed AD Domain Services on IaaS VMs
3) Azure AD Domain Services (Microsoft-managed AD DS on IaaS)
PREPARATION TEST 2026 QUESTIONS AND
CORRECT ANSWERS GRADED A+
● What is the smallest supported subnet? Answer: /29
● T/F: Azure AD Tenant is a central identity source that can be used for
O365 and Azure Resource Subscriptions Answer: T
● T/F: It is possible to have more than one Azure Resource Subscription
Answer: T
● Name some Azure Resource Subscriptions Answer: 1. User
Acceptance Testing (UAT)
2. Production (PRD)
3. Development (DEV)
● In the Free and Basic tiers, how many SSO apps per user are allowed?
Answer: 10
● T/F: Both P1 and P2 include
1) MDM
2) unlimited SSO apps per user
, 3) AD Connect Health
4) Conditional Access (ex: MFA)
5) Password Protection Answer: T
● T/F: Both P1 and P2 include
1) Identity Protection
2) PIM Answer: F: Only P2
● Which of the following does Azure AD include?
1) Device Registration (Win 10 & Mobiles)
2) Custom Domain Names
3) Domain join virtual machines (VM)
4) LDAP (directory services access) and Kerberos (computer network
authentication) protocols
5) Group Policy Answer: 1-3
● How can you domain join an Azure VM and apply group policy?
Answer: Options:
1) Extend on-prem AD to the cloud
2) Self-managed AD Domain Services on IaaS VMs
3) Azure AD Domain Services (Microsoft-managed AD DS on IaaS)