AZ900-05

Which of the following are some of the layers of Defense In Depth

• Physical Security
• Identify Access
• Perimeter Security
• Network Security
• Firewall

This is the rules for who and what can access a resource

• Network Security Group
• Application Security Group
• Service Endpoints
• Private Endpoint

Network security group rules are applied where

• at the resource
• at the subscription
• at the user
• at the application

With this, you can group VMs and networks into policies

• Application Security Group
• Network Security Group
• Service Endpoints
• Private Endpoint

This is used to connect a private VNET to an Azure service

• Service Endpoint
• Private Endpoint
• Application Security Group
• Network Security Group

When creating a resource and setting the service endpoints, the options for Public Network Access are

• Enable from all networks
• Disabled
• Enabled from select vNET and IP Address
• Enable from Load Balancers

With this, you can share a connection across a VPN

• Private Endpoint
• Service Endpoint
• Application Security Group
• Network Security Group

You have a home office and must access Azure SQL privately AND disable public internet exposure

• Private Endpoint
• Service Endpoint
• Application Security Group
• Network Security Group

Microsoft Defender for Cloud was previously known as

• Azure Security Center
• Azure Sentinel
• Azure Monitor
• Azure Service HEalth
• Azure Compliance Manager

With Microsoft Defender for Cloud you CAN/CAN NOT monitor onprem

• Can with agents
• Can without agents
• Can Not