AZ-900T0x_Module 05: Identity, governance, privacy, and complain

How can the IT department ensure that employees at the company's retail stores can access company applications only from approved tablet devices?

• SSO

• Conditional Access

• Multifactor authentication

Answer explanation

Conditional Access enables you to require users to access your applications only from approved, or managed, devices.

Multifactor authentication

How can the IT department use biometric properties, such as facial recognition, to enable delivery drivers to prove their identities?

• SSO

• Conditional Access

• Multifactor authentication

Answer explanation

Authenticating through multifactor authentication can include something the user knows, something the user has, and something the user is.

How can the IT department reduce the number of times users must authenticate to access multiple applications?

• SSO

• Conditional Access

• Multifactor authentication

Answer explanation

SSO enables a user to remember only one ID and one password to access multiple applications.

How can Tailwind Traders allow some users to control the virtual machines in each environment but prevent them from modifying networking and other resources in the same resource group or Azure subscription?

• Create a role assignment through Azure role-based access control (Azure RBAC).

• Create a policy in Azure Policy that audits resource usage.

• Split the environment into separate resource groups.

Answer explanation

That's correct. Azure RBAC enables you to create roles that define access permissions. You might create one role that limits access only to virtual machines and a second role that provides administrators with access to everything.

Which is the best way for Tailwind Traders to ensure that the team deploys only cost-effective virtual machine SKU sizes?

• Create a policy in Azure Policy that specifies the allowed SKU sizes.

• Periodically inspect the deployment manually to see which SKU sizes are used.

• Create an Azure RBAC role that defines the allowed virtual machine SKU sizes.

Answer explanation

That's correct. After you enable this policy, that policy is applied when you create new virtual machines or resize existing ones. Azure Policy also evaluates any current virtual machines in your environment.

Which is likely the best way for Tailwind Traders to identify which billing department each Azure resource belongs to?

• Track resource usage in a spreadsheet.

• Split the deployment into separate Azure subscriptions, where each subscription belongs to its own billing department.

• Apply a tag to each resource that includes the associated billing department.

Answer explanation

That's correct. Tags provide extra information, or metadata, about your resources. The team might create a tag that's named BillingDept whose value would be the name of the billing department. You can use Azure Policy to ensure that the proper tags are assigned when resources are provisioned.

Where can the team access details about the personal data Microsoft processes and how the company processes it, including for Cortana?

• Microsoft Privacy Statement

• The Azure compliance documentation

• Microsoft compliance offerings

Answer explanation

That's correct. The Microsoft Privacy Statement provides information that's relevant to specific services, including Cortana.

Where can the legal team access information around how the Microsoft cloud helps them secure sensitive data and comply with applicable laws and regulations?

• Microsoft Privacy Statement

• Trust Center

• Online Services Terms

Answer explanation

That's correct. The Trust Center is a great resource for people in your organization who might play a role in security, privacy, and compliance..

Where can the IT department find reference blueprints that it can apply directly to its Azure subscriptions?

• Online Services Terms

• Azure compliance documentation

• Microsoft Privacy Statement

Answer explanation

That's correct. The compliance documentation provides reference blueprints, or policy definitions, for common standards that you can apply to your Azure subscription.