Microsoft Azure Security Technologies

• #81

  You have an Azure SQL Database server named SQL1. For SQL1, you turn on Azure Defender for SQL to detect all threat detection types. Which action will Azure Defender for SQL detect as a threat?

  • AUser updates more than 50 percent of the records in a table.
  • BUser attempts to sign as SELECT FROM table1.
  • CUser is added to the db_owner database role.
  • DUser deletes more than 100 records from the same table.
  Tampilkan jawaban
• #82

  You have an Azure subscription that contains a user named Admin1 and a resource group named RG1. In Azure Monitor, you create the alert rules shown in the following table. Admin1 performs the following actions on RG1: Adds a virtual network named VNET1. Adds a Delete lock named Lock1. Which rules will trigger an alert as a result of the actions of Admin1?

  • AAdding VNET1: Rule2 only. Adding Lock1: Rule1, Rule2, Rule3, and Rule 4 Box 2.
  • BAdding VNET1: Rule4 only. Adding Lock1: Rule3 and Rule 4 only Box 2.
  • CAdding VNET1: Rule2 and Rule 4 only. Adding Lock1: Rule2 and Rule 4 only.
  • DAdding VNET1: Rule3 and Rule 4 only. Adding Lock1: Rule4 only.
  Tampilkan jawaban
• #83

  Your company has the offices shown in the following table. The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.Users connect to a Windows Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.Contoso.com has a conditional access policy that has the following settings: Name: Policy1. Assignments: Users and groups: User1. Cloud apps or actions: Windows Virtual Desktop. Access controls: Grant: Grant access, Require multi-factor authentication. Enable policy: On. If User1 connects to Windows Virtual Desktop from the office in Boston, User1 is prompted for multi-factor authentication (MFA).

  • AYes.
  • BNo.
  Tampilkan jawaban
• #84

  You have an Azure subscription that contains the resources shown in the following table. VM1 and VM2 are stopped. You create an alert rule that has the following settings: Resource: RG1. Condition: All Administrative operations. Actions: Action groups configured for this alert rule: ActionGroup1. Alert rule name: Alert1. You create an action rule that has the following settings: Scope: VM1. Filter criteria: Resource Type = 'Virtual Machines'. Define on this scope: Suppression. Suppression config: From now (always). Name: ActionRule1. If you add a tag to RG1, an alert is triggered.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #85

  You have an Azure subscription that contains the resources shown in the following table. The subscription is linked to an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You create the groups shown in the following table. The membership rules for Group1 and Group2 are configured as shown in the following exhibit. Managed1 is a member of Group1 and Group2.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #86

  You have a hybrid configuration of Azure Active Directory (Azure AD). You have an Azure HDInsight cluster on a virtual network. You plan to allow users to authenticate to the cluster by using their on-premises Active Directory credentials. You need to configure the environment to support the planned authentication. Solution: You deploy Azure Active Directory Domain Services (Azure AD DS) to the Azure subscription. Does this meet the goal?

  • AYes.
  • BNo.
  Tampilkan jawaban
• #87

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. From Azure AD Privileged Identity Management (PIM), you configure the settings for the Security Administrator role as shown in the following exhibit. From PIM, you assign the Security Administrator role to the following groups: Group1: Active assignment type, permanently assigned. Group2: Eligible assignment type, permanently eligible. If User2 activates the security Administrator role, the user will be assigned the role immediately.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #88

  You have an Azure subscription named Sub1 that contains the Azure Key Vaults shown in the following table. In Sub1, you create a virtual machine that has the following configurations: Name: VM1. Size: DS2v2. Resource group: RG1. Region: West Europe. Operating system: Windows Server 2016. You plan to enable Azure Disk Encryption on VM1. In which key vaults can you store the encryption key for VM1?

  • AVault1 or Vault3 only.
  • BVault1, Vault2, Vault3, or Vault4.
  • CVault1 only.
  • DVault1 or Vault2 only.
  Tampilkan jawaban
• #89

  Your network contains an on-premises Active Directory domain named corp.contoso.com. You have an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com. You sync all on-premises identities to Azure AD. You need to prevent users who have a givenName attribute that starts with TEST from being synced to Azure AD. The solution must minimize administrative effort. What should you use?

  • ASynchronization Rules Editor.
  • BWeb Service Configuration Tool.
  • CAzure AD Connect wizard.
  • DActive Directory Users and Computers.
  Tampilkan jawaban
• #90

  You have Azure virtual machines that have Update Management enabled. The virtual machines are configured as shown in the following table. You need to ensure that all critical and security updates are applied to each virtual machine every month. What is the minimum number of update deployments you should create?

  • A4.
  • B6.
  • C2.
  • D1.
  Tampilkan jawaban
• #91

  Your company has an Active Directory forest with a single domain, named weylandindustries.com. They also have an Azure Active Directory (Azure AD) tenant with the same name.You have been tasked with integrating Active Directory and the Azure AD tenant. You intend to deploy Azure AD Connect. Your strategy for the integration must make sure that password policies and user logon limitations affect user accounts that are synced to the Azure AD tenant, and that the amount of necessary servers are reduced. Solution: You recommend the use of pass-through authentication and seamless SSO with password hash synchronization. Does the solution meet the goal?

  • AYes.
  • BNo.
  Tampilkan jawaban
• #92

  Your Company's Azure subscription includes a virtual network that has a single subnet configured. You have created a service endpoint for the subnet, which includes an Azure virtual machine that has Ubuntu Server 18.04 installed. You are preparing to deploy Docker containers to the virtual machine. You need to make sure that the containers can access Azure Storage resources and Azure SQL databases via the service endpoint. You need to perform a task on the virtual machine prior to deploying containers. Solution: You create an AKS Ingress controller. Does the solution meet the goal?

  • AYes.
  • BNo.
  Tampilkan jawaban
• #93

  You have an Azure subscription named Subscription1. You need to view which security settings are assigned to Subscription1 by default. Which Azure policy or initiative definition should you review?

  • AAudit diagnostic setting policy definition.
  • BEnable Monitoring in Azure Security Center (Microsfot Defender for cloud) initiative definition.
  • CEnable Azure Monitor for VMs initiative definition.
  • DAzure Monitor solution 'Security and Audit' must be deployed policy definition.
  Tampilkan jawaban
• #94

  You have an Azure Subscription named Sub1. You have an Azure Storage account named Sa1 in a resource group named RG1. Users and applications access the blob service and the file service in Sa1 by using several shared access signatures (SASs) and stored access policies. You discover that unauthorized users accessed both the file service and the blob service. You need to revoke all access to Sa1. Solution: You regenerate the access keys. Does this meet the goal?

  • AYes.
  • BNo.
  Tampilkan jawaban
• #95

  You need to delegate the creation of RG2 and the management of permissions for RG1. Which users can perform each task?

  • ACreate RG2: Admin3 only. Manage RG1 permissions: Admin4 only.
  • BCreate RG2: Admin3 only. Manage RG1 permissions: Admin1 and Admin4 only.
  • CCreate RG2: Admin2, Admin3, and Admin4 only. Manage RG1 permissions: Admin1, Admin2, and Admin4 only.
  • DCreate RG2: Admin1, Admin2, Admin3, and Admin4. Manage RG1 permissions: Admin1, Admin2, Admin3, and Admin4.
  Tampilkan jawaban
• #96

  You have an Azure subscription that contains the storage accounts shown in the following table. You need to configure authorization access. Which authorization types can you use for each storage account?

  • Astorage1: Shared Key only. storage2: Shared access signature (SAS) only. storage3: Azure Active Directory (Azure AD) only.
  • Bstorage1: Shared Key, shared access signature (SAS), and Azure Active Directory (Azure AD). storage2: Shared Key only. storage3: Shared Key, shared access signature (SAS), and Azure Active Directory (Azure AD).
  • Cstorage1: Azure Active Directory (Azure AD) only. storage2: Shared Key only. storage3: Shared Key, shared access signature (SAS), and Azure Active Directory (Azure AD).
  • Dstorage1: Shared Key, shared access signature (SAS), and Azure Active Directory (Azure AD). storage2: Shared Key only. storage3: Shared Key only.
  Tampilkan jawaban
• #97

  You work at a company named Contoso, Ltd. that has the offices shown in the following table. Contoso has an Azure Active Directory (Azure AD) tenant named contoso.com. All contoso.com users have Azure Multi-Factor Authentication (MFA) enabled. The tenant contains the users shown in the following table. The multi-factor settings for contoso.com are configured as shown in the following exhibit. When User1 signs in to to a new device from the Seattle office on June 7, the user will be prompted for MFA.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #98

  Fabrikam, Inc. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York. Fabrikam has IT, human resources (HR), and finance departments. Fabrikam has a Microsoft 365 subscription and an Azure subscription named subscription1. The network contains an on-premises Active Directory domain named Fabrikam.com. The domain contains two organizational units (OUs) named OU1 and OU2. Azure AD Connect cloud sync syncs only OU1. The Azure resources hierarchy is shown in the following exhibit. The Azure Active Directory (Azure AD) tenant contains the users shown in the following table. Azure AD contains the resources shown in the following table. Subscription1 contains the virtual networks shown in the following table. Subscription1 contains the network security groups (NSGs) shown in the following table. Subscription1 contains the virtual machines shown in the following table. Subscription1 contains the Azure Key Vaults shown in the following table. Subscription1 contains a storage account named storage1 in the West US Azure region. Fabrikam plans to implement the following changes: Create two application security groups as shown in the following table. Associate the network interface of VM1 to ASG1. Deploy SecPol1 by using Azure Security Center. Deploy a third-party app named App1. A version of App1 exists for all available operating systems. Create a resource group named RG2. Sync OU2 to Azure AD. Add User1 to Group1. Fabrikam identifies the following technical requirements: The finance department users must reauthenticate after three hours when they access SharePoint Online. Storage1 must be encrypted by using customer-managed keys and automatic key rotation. From Sentinel1, you must ensure that the following notebooks can be launched: Entity Explorer – Account. Entity Explorer – Windows Host. Guided Investigation Process Alerts. VM1, VM2, and VM3 must be encrypted by using Azure Disk Encryption. Just in time (JIT) VM access for VM1, VM2, and VM3 must be enabled. App1 must use a secure connection string stored in KeyVault1. KeyVault1 traffic must NOT travel over the internet. You plan to configure Azure Disk Encryption for VM4. Which key vault can you use to store the encryption key?

  • AKeyVault1.
  • BKeyVault3.
  • CKeyVault2.
  Tampilkan jawaban
• #99

  You have an Azure subscription named Sub1 that contains an Azure Log Analytics workspace named LAW1. You have 500 Azure virtual machines that run Windows Server 2016 and are enrolled in LAW1. You plan to add the System Update Assessment solution to LAW1. You need to ensure that System Update Assessment-related logs are uploaded to LAW1 from 100 of the virtual machines only. Which three actions should you perform in sequence?

  • ABox 1: Create a new workspace. Box 2: Create a computer group. Box 3: Apply the scope configuration to the solution.
  • BBox 1: Create a data source. Box 2: Create a scope configuration. Box 3: Apply the scope configuration to the solution.
  • CBox 1: Create a computer group. Box 2: Create a new workspace. Box 3: Apply the scope configuration to the solution.
  • DBox 1: Create a computer group. Box 2: Create a scope configuration. Box 3: Apply the scope configuration to the solution.
  Tampilkan jawaban
• #100

  Your company has the offices shown in the following table. The company has an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named User1.Users connect to a Windows Virtual Desktop deployment named WVD1. WVD1 contains session hosts that have public IP addresses from the 52.166.253.0/24 subnet.Contoso.com has a conditional access policy that has the following settings: Name: Policy1. Assignments: Users and groups: User1. Cloud apps or actions: Windows Virtual Desktop. Access controls: Grant: Grant access, Require multi-factor authentication. Enable policy: On. If User1 connects to Microsoft Exchange Online from a Windows Virtual Desktop session, User1 is prompted for multi-factor authentication (MFA).

  • AYes.
  • BNo.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis