03 AZ-500: Secure your data and applications

An SQL database administrator has recently read about SQL injection attacks. They ask what can be done to minimize the risk of this type of attack. Implementing which of the following features will help protect the database?

• Advanced Threat Protection
• Cross-premises network connectivity
• Traffic Manager

An organization provides a Help Desk for its customers. Service representatives need to identify callers using the last four numbers of their credit card. There is a need to ensure the complete credit card number isn't fully exposed to the service representatives. Which of the following features should be implemented?

• Dynamic Data Masking
• Destination inbound rules
• NAT rules

Auditors need to be assured that sensitive database data always remains encrypted at rest, in transit, and in use. To assure the auditors this is being done, which of the below features is configured?

• Always Encrypted
• Load Balancer
• Azure Web Application Firewall

An App Service web application uses an SQL database. Users need to authenticate to the database with their Azure AD credentials. Which of the following configuration tasks would enable this?

• Create users in each database
• Add an Azure Firewall
• Add a Web Application Firewall

What type of firewall rules can be configured for an Azure SQL database?

• Server-level firewall rules
• Install Azure Firewall
• Install a load balancer

When configuring Secure transfer, the Compliance office wants to understand how connections are secured when REST API operational calls are made to an Azure Storage account. What information would be provided?

• By default, new storage accounts have secure transfer required enabled.
• Vulnerability assessments
• Authentication

Which statements are factual when configuring an Azure file share for a business group?

• Azure Files can authenticate to Azure Active Directory Domain Services.
• Allow Azure load balancer inbound
• Allow all virtual networks inbound and outbound

A company is being audited. It is not known how long the audit will take, but during that time files must not be changed or removed. It is okay to read or create new files. What should be done to set this up

• Add legal hold retention policy to the blob container. Also, identify a tag for the items that are being protected.
• Azure Application Gateway
• Custom routing

A company has both a development and production environment. The development environment needs time-limited access to storage. The production environment needs unrestricted access to storage resources. To configure storage access to meet the requirements, what configuration choices should be done?

• Use shared access signatures for the development apps. And use access keys for the production apps.
• Configure a Guest configuration on the virtual machine
• Create a custom script extension

A manager wants to know more about software-protected keys and hardware-protected keys. Pick the correct topic you could explain to your manager?

• Software-protected cryptographic operations are performed in software and Hardware-protected cryptographic operations are performed within the HSM.
• FileVault
• BitLocker