Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

SC-500 Implementing End-to-End Security Controls for Cloud and AI Workloads

  • Microsoft
  • 141 practice questions
  • Updated Sep 2026
  • 3 free sample questions

About this exam

SC-500 is the Microsoft exam Implementing End-to-End Security Controls for Cloud and AI Workloads. Practice material is available as a PDF, an interactive practice test or a bundle of both.

Exam code
SC-500
Vendor
Microsoft
Practice questions
141
Questions with an explanation
50 of 141
Free sample questions
3
Question bank last updated
26 Sep 2026

Try 2 sample questions

Taken from the free sample set for SC-500.

Question 1

You are securing an Azure OpenAI deployment. The security team requires that traffic to the AI service must not traverse the public internet. What should you configure? 

  1. Option A:
    Azure Front Door only
  2. Option B:
    Public network access
  3. Option C:
    Private endpoint
  4. Option D:
    Anonymous endpoint access
Show answer and explanation

Correct answer: C

A private endpoint allows the Azure OpenAI resource to be accessed through a private IP address from within an Azure virtual network. This prevents traffic from traversing the public internet and supports network-level isolation. Public network access should be disabled when private connectivity is required. Azure Front Door is useful for global application delivery but does not by itself make the Azure OpenAI service private. Anonymous endpoint access is not appropriate for secure AI workloads.

Question 2

You are configuring identity access for an AI workload. The application must access Azure Key Vault without storing client secrets in application code. Which authentication method should you use?

  1. Option A:
    Managed identity
  2. Option B:
    Shared access signature
  3. Option C:
    Local administrator credentials
  4. Option D:
    Storage account access key
Show answer and explanation

Correct answer: A

Managed identity allows Azure resources to authenticate to other Azure services without storing credentials in application code or configuration files. For an AI workload that needs to access Azure Key Vault, managed identity is the recommended approach because it reduces secret exposure and supports role-based access control. Shared access signatures and access keys are harder to govern and rotate securely. Local administrator credentials should not be used for cloud service authentication
See all 3 free sample questions