You need to identify the content of product images to automatically create alt tags for images formatted properly. Which production option is the best candidate?

• Azure Machine Learning

• Azure Cognitive Services

• Azure Bot Service

Which service could help you manage the VMs that your developers and testers need to ensure that your new app works across various operating systems?

• Azure DevTest Labs

• Azure Test Labs

• Azure Repos

Which service is a platform that powers Application Insights, monitoring for VMs, containers, and Kubernetes?

• Azure Advisor

• Azure Monitor

• Azure Service Health

What is the best infrastructure-as-code option for quickly and reliably setting up your entire cloud infrastructure declaratively?

• ARM templates

• Azure PowerShell

• The Azure portal

• The Azure CLI

Your team has limited experience with writing custom code, but it sees tremendous value in automating several important business processes. Which of the following options is your team's best option?

• Azure Functions

• Azure Logic Apps

What's the easiest way for your company to combine security data from all of its monitoring tools into a single report that it can take action on?

• Collect security data in Microsoft Sentinel.

• Create an application control rule in Microsoft Defender for Cloud.

• Look through each security log daily and email a summary to your team.

How can your company ensure that certain VM workloads are physically isolated from workloads being run by other Azure customers?

• Configure the network to ensure that VMs on the same physical host are isolated.

• This is not possible. These workloads need to be run on-premises.

• Run the VMs on Azure Dedicated Host.

An attacker can bring down your website by sending a large volume of network traffic to your servers. Which Azure service can help companies protect its App Service instance from this kind of attack?

• Azure Firewall

• Network security groups

• Azure DDoS Protection

What's the best way for companies to limit all outbound traffic from VMs to known hosts?

• Configure Azure DDoS Protection to limit network access to trusted ports and hosts.

• Create application rules in Azure Firewall.

• Ensure that all running applications communicate with only trusted ports and hosts.

How can companies most easily implement a deny by default policy so that VMs can't connect to each other?

• Allocate each VM on its own virtual network.

• Create a network security group rule that prevents access from another VM on the same network.

• Configure Azure DDoS Protection to limit network access within the virtual network.