Microsoft Azure Security Technologies

• #161

  You have the Azure Key Vaults shown in the following table. KV1 stores a secret named Secret1 and a key for a managed storage account named Key1. You back up Secret1 and Key1. To which key vaults can you restore each backup?

  • AYou can restore the Secret1 backup to: KV1 only. You can restore the Key1 backup to: KV1, KV2, KV3, KV4, and KV5.
  • BYou can restore the Secret1 backup to: KV1 and KV2 only. You can restore the Key1 backup to: KV1, KV2 and KV4 only Box.
  • CYou can restore the Secret1 backup to: KV1, KV2 and KV3 only. You can restore the Key1 backup to: KV1, KV2 and KV3 only.
  • DYou can restore the Secret1 backup to: KV1, KV2 and KV4 only. You can restore the Key1 backup to: KV1 and KV2 only Box.
  Tampilkan jawaban
• #162

  You have an Azure Sentinel workspace that contains an Azure Active Directory (Azure AD) connector, an Azure Log Analytics query named Query1 and a playbook named Playbook1. Query1 returns a subset of security events generated by Azure AD. You plan to create an Azure Sentinel analytic rule based on Query1 that will trigger Playbook1. You need to ensure that you can add Playbook1 to the new rule. What should you do?

  • ACreate the rule and set the type to: Fusion. Configure the playbook to include: A managed connector.
  • BCreate the rule and set the type to: Scheduled. Configure the playbook to include: A trigger.
  • CCreate the rule and set the type to: Microsoft Security incident creation. Configure the playbook to include: A system-assigned managed identity.
  • DCreate the rule and set the type to: Fusion. Configure the playbook to include: Diagnostic settings.
  Tampilkan jawaban
• #163

  You have an Azure subscription that contains an Azure Key Vault named Vault1. In Vault1, you create a secret named Secret1. An application developer registers an application in Azure Active Directory (Azure AD). You need to ensure that the application can use Secret1. What should you do?

  • AIn Azure AD, create a role.
  • BIn Azure Key Vault, create a key.
  • CIn Azure Key Vault, create an access policy.
  • DIn Azure AD, enable Azure AD Application Proxy.
  Tampilkan jawaban
• #164

  Contoso, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York. The company hosts its entire server infrastructure in Azure. Contoso has two Azure subscriptions named Sub1 and Sub2. Both subscriptions are associated to an Azure Active Directory (Azure AD) tenant named contoso.com. Contoso identifies the following technical requirements: Deploy Azure Firewall to VNetwork1 in Sub2. Register an application named App2 in contoso.com. Whenever possible, use the principle of least privilege. Enable Azure AD Privileged Identity Management (PIM) for contoso.com. Contoso.com contains the users shown in the following table. Contoso.com contains the security groups shown in the following table. Sub1 contains six resource groups named RG1, RG2, RG3, RG4, RG5, and RG6. User9 creates the virtual networks shown in the following table. Sub1 contains the locks shown in the following table. Sub1 contains the Azure policies shown in the following table. Sub2 contains the virtual networks shown in the following table. Sub2 contains the virtual machines shown in the following table. All virtual machines have the public IP addresses and the Web Server (IIS) role installed. The firewalls for each virtual machine allow ping requests and web requests. Sub2 contains the network security groups (NSGs) shown in the following table. NSG1 has the inbound security rules shown in the following table. NSG2 has the inbound security rules shown in the following table. NSG3 has the inbound security rules shown in the following table. NSG4 has the inbound security rules shown in the following table. NSG1, NSG2, NSG3, and NSG4 have the outbound security rules shown in the following table. You are evaluating the security of the network communication between the virtual machines in Sub2. From VM1, you can successfully ping the private IP address of VM5.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #165

  You have the Azure virtual machines shown in the following table. For which virtual machine can you enable Update Management?

  • AVM2 and VM3 only.
  • BVM2, VM3, and VM4 only.
  • CVM1, VM2, and VM4 only.
  • DVM1, VM2, VM3, and VM4.
  • EVM1, VM2, and VM3 only.
  Tampilkan jawaban
• #166

  You have an azure active Directory (Azure AD) tenant that contains the resources shown in the following table. User2 is the owner of Group2. The user and group settings for App1 are configured as shown in the following exhibit. You enable self-service application access for App1 as shown in the following exhibit. User3 is configured to approve access to App1. After you enable self-service application access for App1, who will be configured as the Group2 owner and who will be configured as the App1 users?

  • AGroup2 owners: User2 and User3 only. App1 users: Group1 members only.
  • BGroup2 owners: User2 only. App1 users: Group1 and Group2 members only.
  • CGroup2 owners: User1, User2, and User3. App1 users: Group1 and Group2 members and User1 only.
  • DGroup2 owners: User1 and User2 only. App1 users: Group1 and Group2 members only.
  Tampilkan jawaban
• #167

  You have an Azure subscription that contains the virtual machines shown in the following table. Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured. You have an Azure Storage account named storageacc1 that is configured as shown in the following exhibit. From VM3, you can upload a blob to storageacc1.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #168

  You plan to implement JIT VM access. Which virtual machines will be supported?

  • AVM2, VM3, and VM4 only.
  • BVM1, VM2, VM3, and VM4.
  • CVM1 and VM3 only.
  • DVM1 only.
  Tampilkan jawaban
• #169

  You have an Azure subscription that contains the following resources: A virtual network named VNET1 that contains two subnets named Subnet1 and Subnet2. A virtual machine named VM1 that has only a private IP address and connects to Subnet1. You need to ensure that Remote Desktop connections can be established to VM1 from the internet. Which three actions should you perform in sequence?

  • ABox 1: Create a new subnet. Box 2: Create a NAT rule collection. Box 3: Deploy Azure Firewall.
  • BBox 1: Deploy Azure Application Gateway. Box 2: Create a network rule collection. Box 3: Deploy Azure Firewall.
  • CBox 1: Deploy Azure Application Gateway. Box 2: Create a NAT rule collection. Box 3: Create a network rule collection.
  • DBox 1: Create a new subnet. Box 2: Deploy Azure Firewall. Box 3: Create a NAT rule collection.
  Tampilkan jawaban
• #170

  You have the Azure virtual networks shown in the following table. You have the Azure virtual machines shown in the following table. The firewalls on all the virtual machines allow ping traffic. NSG1 is configured as shown in the following exhibit. Inbound security rules. Outbound security rules. VM2 can ping VM4 successfully.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #171

  You need to deploy Microsoft Antimalware to meet the platform protection requirements. What should you do?

  • ACreate a custom policy definition that has effect set to: Append. Create a policy assignment and modify: The exclusion settings.
  • BCreate a custom policy definition that has effect set to: Deny. Create a policy assignment and modify: The Create a Managed Identity setting.
  • CCreate a custom policy definition that has effect set to: DeployIfNotExists. Create a policy assignment and modify: The scope.
  • DCreate a custom policy definition that has effect set to: DeployIfNotExists. Create a policy assignment and modify: The exclusion settings.
  Tampilkan jawaban
• #172

  You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1. An external partner has a Microsoft account that uses the sign in. Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: 'Unable to invite user Generic authorization exception.' You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant. What should you do? What should you do?

  • AFrom the Roles and administrators blade, assign the Security administrator role to Admin1.
  • BFrom the Organizational relationships blade, add an identity provider..
  • CFrom the Custom domain names blade, add a custom domain.
  • DFrom the Users settings blade, modify the External collaboration settings.
  Tampilkan jawaban
• #173

  You plan to use Azure Log Analytics to collect logs from 200 servers that run Windows Server 2016. You need to automate the deployment of the Microsoft Monitoring Agent to all the servers by using an Azure Resource Manager template. How should you complete the template?

  • ABox 1: "WorkspaceID". Box 2: "WorkspaceKey".
  • BBox 1: "AzureADApplicationID". Box 2: "WorkspaceID".
  • CBox 1: "WorkspaceName". Box 2: "StorageAccountKey".
  • DBox 1: "AzureADApplicationSecret". Box 2: "WorkspaceURL".
  Tampilkan jawaban
• #174

  From the Azure portal, you are configuring an Azure policy. You plan to assign policies that use the DeployIfNotExist, AuditIfNotExist, Append, and Deny effects. Which effect requires a managed identity for the assignment?

  • AAuditIfNotExist.
  • BAppend.
  • CDeployIfNotExist.
  • DDeny.
  Tampilkan jawaban
• #175

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table. You create and enforce an Azure AD Identity Protection user risk policy that has the following settings: Assignment: Include Group1, Exclude Group2. Conditions: Sign-in risk of Medium and above. Access: Allow access, Require password change. If User1 signs in from an unfamiliar location, he must change his password.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #176

  You have an Azure subscription that contains an Azure Key Vault named Vault1. On January 1, 2019, Vault1 stores the following secrets. When can each secret be used by an application?

  • APassword1: Never. Password2: Only between March 1, 2019 and May 1, 2019.
  • BPassword1: Always. Password2: Never.
  • CPassword1: Only after May 1, 2019. Password2: Always.
  • DPassword1: Only after May 1, 2019. Password2: Only between March 1, 2019 and May 1, 2019.
  Tampilkan jawaban
• #177

  You have an Azure subscription that contains the virtual machines shown in the following table. Subnet1 and Subnet2 have a Microsoft.Storage service endpoint configured. You have an Azure Storage account named storageacc1 that is configured as shown in the following exhibit. From VM2, you can upload a blob to storageacc1.

  • AYes.
  • BNo.
  Tampilkan jawaban
• #178

  You have an Azure subscription named Subcription1 that contains an Azure Active Directory (Azure AD) tenant named contosos.com and a resource group named RG1. You create a custom role named Role1 for contoso.com. You need to identify where you can use Role1 for permission delegation. What should you identify?

  • Acontoso.com only.
  • Bcontoso.com and RGT only.
  • Ccontoso.com and Subscription1 only.
  • Dcontoso.com, RG1, and Subcription1
  Tampilkan jawaban
• #179

  You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. You create and enforce an Azure AD Identity Protection sign-in risk policy that has the following settings: Assignments: Include Group1, exclude Group2. Conditions: Sign-in risk level: Medium and above. Access: Allow access, Require multi-factor authentication. You need to identify what occurs when the users sign in to Azure AD. What should you identify for each user? When User1 signs in from an anonymous IP address, the user will:

  • ABe blocked.
  • BBe prompted for MFA.
  • CSign in by using a username and password only.
  Tampilkan jawaban
• #180

  You have the Azure Information Protection conditions shown in the following table. You have the Azure Information Protection policies as shown in the following table. You need to identify how Azure Information Protection will label files. What should you identify?

  • AIf User1 creates a Microsoft Word file that includes the text 'Black and White', the file will be assigned: Label2 only. If User1 creates a Microsoft Notepad file that includes the text 'Black or white', the file will be assigned: No label.
  • BIf User1 creates a Microsoft Word file that includes the text 'Black and White', the file will be assigned: No label. If User1 creates a Microsoft Notepad file that includes the text 'Black or white', the file will be assigned: Label1 only.
  • CIf User1 creates a Microsoft Word file that includes the text 'Black and White', the file will be assigned: Label1 only. If User1 creates a Microsoft Notepad file that includes the text 'Black or white', the file will be assigned: Label and Label2 only.
  • DIf User1 creates a Microsoft Word file that includes the text 'Black and White', the file will be assigned: Label1 and Label2 only. If User1 creates a Microsoft Notepad file that includes the text 'Black or white', the file will be assigned: Label2 only.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis