Microsoft Azure Security Technologies

• #241

  You have an Azure subscription. You plan to create a custom role-based access control (RBAC) role that will provide permission to read the Azure Storage account. Which property of the RBAC role definition should you configure?

  • ANotActions [].
  • BDataActions [].
  • CAssignableScopes [].
  • DActions [].
  उत्तर दिखाएँ
• #242

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You create and enforce an Azure AD Identity Protection sign-in risk policy that has the following settings: Assignments: Include Group1, exclude Group2. Conditions: Sign-in risk level: Medium and above. Access: Allow access, Require multi-factor authentication. You need to identify what occurs when the users sign in to Azure AD. What should you identify for each user? When User3 signs in from an infceted device, the user will:

  • ABe blocked.
  • BBe prompted for MFA.
  • CSign in by using a username and password only.
  उत्तर दिखाएँ
• #243

  You have a file named File1.yaml that contains the following contents. You create an Azure container instance named container1 by using File1.yaml. You need to identify where you can access the values of Variable1 and Variable2. What should you identify?

  • AVariable1: Cannot be accessed. Variable2: Cannot be accessed.
  • BVariable1: Can be accessed from inside container1 only. Variable2: Cannot be accessed.
  • CVariable1: Can be accessed from inside container1 and the Azure portal. Variable2: Can be accessed from inside container1 only.
  • DVariable1: Can be accessed from inside container1 and the Azure portal. Variable2: Cannot be accessed.
  उत्तर दिखाएँ
• #244

  You have an Azure Subscription named Sub1. You have an Azure Storage account named Sa1 in a resource group named RG1. Users and applications access the blob service and the file service in Sa1 by using several shared access signatures (SASs) and stored access policies. You discover that unauthorized users accessed both the file service and the blob service. You need to revoke all access to Sa1. Solution: You create a new stored access policy. Does this meet the goal?

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #2452 चुनें

  You have an Azure subscription. You configure the subscription to use a different Azure Active Directory (Azure AD) tenant. What are two possible effects of the change?

  • ARole assignments at the subscription level are lost.
  • BVirtual machine managed identities are lost.
  • CVirtual machine disk snapshots are lost.
  • DExisting Azure resources are deleted.
  उत्तर दिखाएँ
• #246

  You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant. From the Azure portal, you register an enterprise application. Which additional resource will be created in Azure AD?

  • AService principal.
  • B509 certificate.
  • CManaged identity.
  • DUser account.
  उत्तर दिखाएँ
• #247

  You have an Azure subscription named Sub1. In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1. You need to modify WF1 to send email messages to a distribution group named Alerts. What should you use to modify WF1?

  • AAzure Application Insights.
  • BAzure Monitor.
  • CAzure Logic Apps Designer.
  • DAzure DevOps.
  उत्तर दिखाएँ
• #248

  Your network contains an on-premises Active Directory domain named adatum.com that syncs to Azure Active Directory (Azure AD). The Azure AD tenant contains the users shown in the following table. You configure the Authentication methods Password Protection settings for adatum.com as shown in the following exhibit. User2 can change the password to @d@tum_C0mpleX123.

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #249

  Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York. The company hosts its entire server infrastructure in Azure. Contoso has two Azure subscriptions named Sub1 and Sub2. Both subscriptions are associated to an Azure Active Directory (Azure AD) tenant named contoso.com. Contoso identifies the following technical requirements: Deploy Azure Firewall to VNetwork1 in Sub2. Register an application named App2 in contoso.com. Whenever possible, use the principle of least privilege. Enable Azure AD Privileged Identity Management (PIM) for contoso.com. Contoso.com contains the users shown in the following table. Contoso.com contains the security groups shown in the following table. Sub1 contains six resource groups named RG1, RG2, RG3, RG4, RG5, and RG6. User9 creates the virtual networks shown in the following table. Sub1 contains the locks shown in the following table. Sub1 contains the Azure policies shown in the following table. Sub2 contains the virtual networks shown in the following table. Sub2 contains the virtual machines shown in the following table. All virtual machines have the public IP addresses and the Web Server (IIS) role installed. The firewalls for each virtual machine allow ping requests and web requests. Sub2 contains the network security groups (NSGs) shown in the following table. NSG1 has the inbound security rules shown in the following table. NSG2 has the inbound security rules shown in the following table. NSG3 has the inbound security rules shown in the following table. NSG4 has the inbound security rules shown in the following table. NSG1, NSG2, NSG3, and NSG4 have the outbound security rules shown in the following table. You are evaluating the security of VM1, VM2, and VM3 in Sub2. From the Internet, you can connect to the web server on VM1 by using HTTP.

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #250

  You create resources in an Azure subscription as shown in the following table. VNET1 contains two subnets named Subnet1 and Subnet2. Subnet1 has a network ID of 10.0.0.0/24. Subnet2 has a network ID of 10.1.1.0/24. Contoso1901 is configured as shown in the exhibit. An Azure virtual machine on Subnet2 can access data in Cantoso1901.

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #251

  You have an Azure subscription named Sub1. In Azure Security Center, you have a security playbook named Play1. Play1 is configured to send an email message to a user named User1. You need to modify Play1 to send email messages to a distribution group named Alerts. What should you use to modify Play1?

  • AAzure DevOps.
  • BAzure Application Insights.
  • CAzure Monitor.
  • DAzure Logic Apps Designer.
  उत्तर दिखाएँ
• #252

  You have five Azure subscriptions linked to a single Azure Active Directory (Azure AD) tenant. You create an Azure Policy initiative named SecurityPolicyInitiative1. You identify which standard role assignments must be configured on all new resource groups. You need to enforce SecurityPolicyInitiative1 and the role assignments when a new resource group is created. Which three actions should you perform in sequence?

  • ABox 1: Publish an Azure Blueprints version. Box 2: Create a policy assignment. Box 3: Create a dedicated management subscription.
  • BBox 1: Create an Azure Blueprints definition. Box 2: Publish an Azure Blueprints version. Box 3: Create an initiative assignment.
  • CBox 1: Create an Azure Blueprints definition. Box 2: Publish an Azure Blueprints version. Box 3: Assign an Azure blueprint.
  • DBox 1: Publish an Azure Blueprints version. Box 2: Create a custom role-based access control (RBAC) role. Box 3: Create a dedicated management solution.
  उत्तर दिखाएँ
• #253

  You plan to create an Azure Kubernetes Service (AKS) cluster in an Azure subscription. The manifest of the registered server application is shown in the following exhibit. You need to ensure that the AKS cluster and Azure Active Directory (Azure AD) are integrated. Which property should you modify in the manifest?

  • AaccessTokenAcceptedVersion.
  • BkeyCredentials.
  • CgroupMembershipClaims.
  • DacceptMappedClaims.
  उत्तर दिखाएँ
• #254

  Your company has an Azure Container Registry. You have been tasked with assigning a user a role that allows for the uploading of images to the Azure Container Registry. The role assigned should not require more privileges than necessary. Which of the following is the role you should assign?

  • AOwner.
  • BContributor.
  • CAcrPush.
  • DAcrPull.
  उत्तर दिखाएँ
• #255

  Your Company's Azure subscription includes a virtual network that has a single subnet configured. You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed. You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage resources and Azure SQL databases via the service endpoint. You need to perform a task on the virtual machine prior to deploying containers. Solution: You create an application security group. Does the solution meet the goal?

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #256

  You have the Azure virtual networks shown in the following table. You have the Azure virtual machines shown in the following table. The firewalls on all the virtual machines allow ping traffic. NSG1 is configured as shown in the following exhibit. Inbound security rules. Outbound security rules. VM3 can be accessed by using Remote Desktop from the internet.

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #257

  Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York. The company hosts its entire server infrastructure in Azure. Contoso has two Azure subscriptions named Sub1 and Sub2. Both subscriptions are associated to an Azure Active Directory (Azure AD) tenant named contoso.com. Contoso identifies the following technical requirements: Deploy Azure Firewall to VNetwork1 in Sub2. Register an application named App2 in contoso.com. Whenever possible, use the principle of least privilege. Enable Azure AD Privileged Identity Management (PIM) for contoso.com. Contoso.com contains the users shown in the following table. Contoso.com contains the security groups shown in the following table. Sub1 contains six resource groups named RG1, RG2, RG3, RG4, RG5, and RG6. User9 creates the virtual networks shown in the following table. Sub1 contains the locks shown in the following table. Sub1 contains the Azure policies shown in the following table. Sub2 contains the virtual networks shown in the following table. Sub2 contains the virtual machines shown in the following table. All virtual machines have the public IP addresses and the Web Server (IIS) role installed. The firewalls for each virtual machine allow ping requests and web requests. Sub2 contains the network security groups (NSGs) shown in the following table. NSG1 has the inbound security rules shown in the following table. NSG2 has the inbound security rules shown in the following table. NSG3 has the inbound security rules shown in the following table. NSG4 has the inbound security rules shown in the following table. NSG1, NSG2, NSG3, and NSG4 have the outbound security rules shown in the following table. You are evaluating the security of the network communication between the virtual machines in Sub2. From VM1, you can successfully ping the public IP address of VM3.

  • AYes.
  • BNo.
  उत्तर दिखाएँ
• #258

  You have an Azure subscription that contains 100 virtual machines. Azure Diagnostics is enabled on all the virtual machines. You are planning the monitoring of Azure services in the subscription. You need to retrieve the following details: Identify the user who deleted a virtual machine three weeks ago. Query the security events of a virtual machine that runs Windows Server 2016. What should you use in Azure Monitor?

  • AIdentify the user who deleted a virtual machine three weeks ago: Metrics. Query the security events of a virtual machine that runs Windows Server 2016: Activity log.
  • BIdentify the user who deleted a virtual machine three weeks ago: Activity log. Query the security events of a virtual machine that runs Windows Server 2016: Logs.
  • CIdentify the user who deleted a virtual machine three weeks ago: Logs. Query the security events of a virtual machine that runs Windows Server 2016: Logs.
  • DIdentify the user who deleted a virtual machine three weeks ago: Service Health. Query the security events of a virtual machine that runs Windows Server 2016: Metrics.
  उत्तर दिखाएँ
• #259

  You have an Azure Active Directory (Azure AD) tenant named Contoso.com and an Azure Service (AKS) cluster AKS1. You discover that AKS1 cannot be accessed by using accounts from Contoso.com. You need to ensure AKS1 can be accessed by using accounts from Contoso.com. The solution must minimize administrative effort. What should you do first?

  • AFrom Azure recreate AKS1.
  • BFrom AKS1, upgrade the version of Kubermetes.
  • CFrom Azure AD, implement Azure AD Premium P2.
  • DFrom Azure AD, configure the User settings.
  उत्तर दिखाएँ
• #260

  You have 15 Azure virtual machines in a resource group named RG1. All virtual machines run identical applications. You need to prevent unauthorized applications and malware from running on the virtual machines. What should you do?

  • AApply an Azure policy to RG1.
  • BFrom Azure Security Center, configure adaptive application controls.
  • CConfigure Azure Active Directory (Azure AD) Identity Protection.
  • DApply a resource lock to RG1.
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ