AZ-900_Modulo_4

What's the easiest way for Tailwind Traders to combine security data from all of its monitoring tools into a single report that it can take action on?

• Collect security data in Azure Sentinel.

• Build a custom tool that collects security data, and displays a report through a web application.

• Look through each security log daily and email a summary to your team.

Which is the best way for Tailwind Traders to safely store its certificates so that they're accessible to cloud VMs?

• Place the certificates on a network share.

• Store them on a VM that's protected by a password.

• Store the certificates in Azure Key Vault.

How can Tailwind Traders ensure that certain VM workloads are physically isolated from workloads being run by other Azure customers?

• Configure the network to ensure that VMs on the same physical host are isolated.

• This is not possible. These workloads need to be run on-premises.

• Run the VMs on Azure Dedicated Host.

An attacker can bring down your website by sending a large volume of network traffic to your servers. Which Azure service can help Tailwind Traders protect its App Service instance from this kind of attack?

• Azure Firewall

• Network security groups

• Azure DDoS Protection

What's the best way for Tailwind Traders to limit all outbound traffic from VMs to known hosts?

• Configure Azure DDoS Protection to limit network access to trusted ports and hosts.

• Create application rules in Azure Firewall.

• Ensure that all running applications communicate with only trusted ports and hosts.

How can Tailwind Traders most easily implement a deny by default policy so that VMs can't connect to each other?

• Allocate each VM on its own virtual network.

• Create a network security group rule that prevents access from another VM on the same network.

• Configure Azure DDoS Protection to limit network access within the virtual network.

What type of data is actively moving from one location to another, such as across the internet or through a private network? Select the correct option.

• Immutable

• In transit

• At rest

• In the cloud

What Azure service would you for use to run your virtual machines in an environment that ensures they are isolated from other virtual machines? Select the correct option.

• Availability Zone

• Availability Set

• Azure Dedicated Hosts

• Azure Reserved VM Instances

What strategy employs a series of mechanisms to slow the advance of an attack aimed at acquiring unauthorized access to data? Select the correct option.

• Ciphertext

• Blob security

• Network security layers

• Defense-in-depth

What type of attack attempts to overwhelm and exhaust an application's resources, making the application slow or unresponsive to legitimate users? Select the correct option.

• Distributed Denial of Service (DDoS)

• Resource request attack RRA

• Man in the Middle Attack

• Firewall Bypass