Practice Quiz

QUESTION 1 OF 10

Many Azure services include built-in security features however Azure also has specific tools to assist with securing your environment. Which of the following would be the simplest way to monitor your resources and perform automatic security assessments to identify potential vulnerabilities?

Azure Security CenterCorrect Answer

Azure Key Vault

Azure Sentinel

QUESTION 2 OF 10

Your company has migrated to Azure Cloud services. Management wants to implement security that will limit the applications that can run on certain virtual machines. Which of the following approaches provide such a solution?

Administrators periodically review what applications are running on each VMs by creating and running PowerShell scripts.

Implement an application control rule in Azure Security Center.Correct Answer

Connect the virtual machines to Azure Sentinel.

QUESTION 3 OF 10

Your company has recently migrated to Azure cloud services. Azure has various reporting and monitoring tools built in. What is the simplest tool to use to create a single report that will show all security information to be collected from all the monitoring tools?

Secure Score

Azure SentinelCorrect Answer

Azure Key Vault

QUESTION 4 OF 10

Your company had recently migrated to Azure cloud services and management are concerned that sensitive information such as passwords, encryption keys, and certificates will not be as secure as they were when operating an on-premises environment. What solution can you implement to allay these concerns?

Implement Azure Sentinel.

Configure a secure VM and store the Passwords and certificates in a shared folder.

Implement Azure Key Vault.Correct Answer

QUESTION 5 OF 10

Your company is planning to migrate to Azure cloud services however because of their type of business they are obliged to follow regulatory compliance that requires them to be the only customer using the physical machine that will host their virtual machines in the cloud. How can your company migrate to the cloud while still remaining compliant?

Configure the VM’s to run on Azure Dedicated HostCorrect Answer

Configure the network so that the company’s VMs are isolated from other VM’s running on the same host in the datacenters.

They cannot, these specific systems will need to remain and operate on-premises only.

QUESTION 6 OF 10

Malicious attackers can try to overwhelm the resources of a network by sending large volumes of packets to a targeted host on the network. Which of the following Azure offerings would be most suitable in detecting this form of attack?

Network security groups

Azure Firewall

Azure DDoS ProtectionCorrect Answer

QUESTION 7 OF 10

True or False

TrueCorrect Answer

False

QUESTION 8 OF 10

What service tiers are available to DDoS Protection?

BasicCorrect Answer

Enhanced

StandardCorrect Answer

QUESTION 9 OF 10

Having recently migrated to Azure cloud services you need to implement a solution that will allow the filtering of network traffic to and from Azure resources within an Azure Virtual Network. Which of the following services would be most suitable to solve this problem?

DDoS protection

Azure Firewall

Network Security GroupsCorrect Answer

QUESTION 10 OF 10

What is the simplest way for a company to implement a policy that will restrict VMs from being able to communicate with each other?

Limit access by implementing DDoS protection.

Use Network Security Groups to create a rule that prevents access from another VM on the same network.Correct Answer

Place each VM on a separate virtual network.

Ready to test your recall?

Many Azure services include built-in security features however Azure also has specific tools to assist with securing your environment. Which of the following would be the simplest way to monitor your resources and perform automatic security assessments to identify potential vulnerabilities?

Azure Security Center

Azure Key Vault

Azure Sentinel

How confident are you in this answer?